Four ETSI standards cover the smart home category: virtual assistants (EN 304 631), security-functional devices (EN 304 632), connected toys (EN 304 633), and personal wearables (EN 304 634). All are Important Class I. Building products that comply requires security infrastructure from the ground up.
Common Infrastructure Across All Smart Home Products
Device Identity and Authentication
Every device needs a unique identity from manufacturing. Infrastructure for: hardware root of trust (secure element or TPM), device certificate provisioning at scale, mutual TLS authentication to cloud services, device lifecycle management (provisioning → operation → decommissioning).
Secure Cloud Backend
Smart home devices are only as secure as their cloud infrastructure:
- Zero-trust API architecture — every device request authenticated and authorized
- Data encryption at rest and in transit
- Multi-tenant isolation (for platform providers serving multiple brands)
- GDPR-compliant data processing (especially for voice assistants and wearables)
OTA Update Platform
CRA mandates automatic security updates. For IoT products at scale, this means: update management platform supporting millions of devices, bandwidth-efficient delta updates, staged rollouts with health monitoring, offline/disconnected device handling.
Category-Specific Considerations
- Virtual assistants (631) — Voice data processing privacy, always-on microphone security, command authentication for sensitive actions
- Security devices (632) — Tamper detection, fail-secure modes, integration security with alarm monitoring services
- Connected toys (633) — Child data protection (GDPR-K), content filtering, parental control infrastructure
- Wearables (634) — Health data encryption, Bluetooth/BLE pairing security, biometric data handling
Kubernetes Recipes
Practical guide for container orchestration and deployment — hands-on patterns you can use today.
View on Amazon →
Luca Berton