New UL Cryptographic and Security Testing Laboratory Accredited

Transcription

1 New Cryptographic and Security Testing Laboratory Accredited accredited to conduct FIPS validation testing by Kenneth Modesta and Michael Alexander s new Cryptographic and Security Testing Laboratory in Northbrook, IL., recently received accreditation (NVLAP Lab Code ) for conformance testing under the Cryptographic Module Validation Program and Cryptographic Algorithm Validation Program. The new laboratory and its recent accreditation expands s security services for government requirements and enables to more effectively serve customers expanding needs for compliance and performance evaluation. s Cryptographic and Security Testing Laboratory is accredited to test products through a National Voluntary Laboratory Accreditation Program created jointly by the U.S. and Canadian governments for cryptographic and security testing. Today, is testing to Federal Information Processing Standard (FIPS) Security Levels 1 through 3 and is additionally accredited to test FIPS-approved (continued on page 4) In this issue: 2 What s Hot 3 Helps Bridge the International Gap 3 Questions & Answers 5 s Total Vehicle Assessment 6 Canadian Corner: C Celebrates 90 Years of Getting Safer Products to Market 8 Calender of Events

2 02 What s Hot Solar ABCs and partner to investigate PV effects on fire class ratings In August of this year, the Solar America Board for Codes and Standards (Solar ABCs) released an interim report developed in partnership with Underwriters Laboratories investigating how the presence of stand-off mounted photovoltaic arrays affects fire class ratings of common roof covering materials. The report shared the results of tests conducted at s Northbrook, IL., facility by staff assisted by representatives of Solar ABCs. The tests were conducted in response to questions from stakeholders about information in the Guide Card stating that photovoltaic modules may reduce the fire class rating of roof coverings when modules with a lower rating are installed above a roof covering with a higher rating. As the number of rooftop photovoltaic systems increases, addressing questions and concerns about fire safety of PV systems have never been more vital. Code officials and the solar industry need to understand how a rooftop photovoltaic system affects the fire class rating of a roof. This Solar ABCs/ interim report details tests conducted to date and recommendations for future research. Solar ABCs,, the solar industry and fire officials will continue to collaborate on additional research aimed at understanding the impact of photovoltaic modules on building safety. Based on the current round of testing, reviews and comments by the PV flammability working group, and the steering committee of the Solar ABCs recommends: Quantify the potential risk Today, field experience and thorough review of fire incident data do not indicate an immediate need to revise current code requirements. A major task in the next round of research will be to quantify the potential risk identified by the test results. Consider additional testing Further investigation is required to refine the pass/fail criteria for a fire performance test for systems that includes roofing materials as well as a photovoltaic array. Additional tests are needed to identify an effective means of mitigating fire spread. A recommended set of tests is presented in the Solar ABCs/ Interim report. Share the test results broadly Fire safety authorities, the solar industry and other interested stakeholders must have access to the photovoltaic test results to determine future test requirements. Address the impact on Standards for Safety The results of these tests and any subsequent stakeholder meetings will be communicated to the 1703 Flat-Plate Photovoltaic Modules and Panels Standards Technical Panel to consider how they may impact the Standard. The Solar ABCs technical panel and will continue to collaborate on additional testing that will be conducted. For more information, please contact Larry Sherwood, Solar ABCs project administrator at or larry@sherwoodassociates.com, or Bob Backstrom at Robert.G.Backstrom@us.ul.com Solar America Board for Codes and Standards Connect Regulatory Support Goes Mobile! Regulatory Services is proud to present Connect for the iphone and ipod touch Online delivering Certification instant Directoryaccess to: Online Certification Directory Code Regulatory Correlation Support Database Re Ac Online Certification Directory Code Correlation Regulatory Database Support Pocket Access guide to.com to Inspections On Code Correlation Database Pocket Access guide to to Inspections.com One-Touch Access

3 Bridges the International Gap Helping to raise awareness about the universal challenges faced by the global fire service community and the mission to protect life and property. On June 4, Zhang Gaochao, Commissar of the Beijing Fire Department led a six person delegation to visit s Northbrook, Illinois offices. 03 They met to discuss this common mission, and share thoughts/ideas centered around the common set of problems facing all global fire service personnel daily. Challenges surrounding protecting firefighters on the fire ground, proper functionality of in-use firefighting equipment and extinguishing fires that involve new building materials such as photovoltaic panels were also discussed. Commissar Zhang got to see firsthand how actively works with the fire service community to create awareness about global challenges and global solutions to common safety issues. The Beijing Fire Department delegation was impressed with s expertise in fire safety, commitment to fire research advancements and its state-of-the-art test facilities. After their facility visit and tour, the Beijing delegation, accompanied by staff, visited the Countryside, IL Fire Department for an exchange of ideas and best practices with Chief Jeff Steingart and the Countryside firefighters. For more information, contact David Wu at David.Wu@cn.ul.com or (Left to right) David Wu, Wang Xijun, Kevin Faltin, Tom Hillenbrand, Wang Wenjie, Bob Backstrom, Rob Tockarshewsky, Zhang Gaochao, Pan Lizhe, Ma Wanlin, Tie Weipu Questions & Answers How does help to get new or innovative products to the market? Sometimes, customers seek certification of a product that has uses or features not addressed by existing product safety standards. When this happens, asks a comprehensive set of questions to assess how a product may be tested and certified. These questions often include: Is the product covered by an existing standard? Does the product have features not found in products of similar types? Does the product use differ from uses of similar products? Does the product pose a danger to users? Are other similar products already on the market, and are they certified by? If s technical experts determine that a product has a new or innovative design, uses or unusual features, a team of staff determines whether additional requirements must be developed to test and certify a product. Once decides to move forward with developing necessary requirements for a new or innovative product, the first step in the process is a preliminary investigation. This preliminary investigation covers the development of any new technical requirements needed to test the product thoroughly. Once a preliminary investigation is complete and any new requirements established, customers can then decide if they want to proceed with a full certification program. In some cases, may make a business decision to forego developing requirements or evaluating a product for certification. For more information, please contact your local customer service team who can be found at pages/corporate/contactus/

4 04 New Cryptographic and Security Testing Laboratory (continued from cover) algorithms against their associated standards, e.g., FIPS 197 Advanced Encryption Standard. The creation of the National Voluntary Laboratory Accreditation Program and s accreditation reflect the increasing value of the infrastructure that stores and transmits information in today s environment. Presently, products such as burglary protection units, network routers and smartphones, to name a few, constantly store and transmit vital information for consumers, businesses and government agencies. Information breaches can significantly affect a company s brand and value, or divulge important government know-how. To secure information, a variety of security mechanisms can be used. The most common is cryptography the ability to convert signals to unrecognizable data to prevent meaningful interception of information. Most networked products s Accreditation is accredited to test the following types of cryptographic modules (software or hardware): Fire, access and burglary protection control panels Access control readers Smart cards/chips Cryptographic algorithm libraries/dlls Two-way radios and Voice over IP (VoIP) Flash drives, storage devices and network printers Virtual private networks (VPN) Encryptors Encryption key generators Wired/wireless access points Routers, switches, firewalls and intrusion prevention systems Smartphones Postal devices Encryption library software Information breaches can significantly affect a company s brand and value, or divulge important government know-how. today implement some form of cryptography to secure communications. The voluntary program accredits laboratories to perform cryptographic and security testing, and to submit test reports to the National Institute of Standards and Technology (NIST) and the Communication Security Establishment of Canada (CSEC). These federal agencies analyze the test reports and issue a validation certificate if the cryptographic algorithms and modules meet compliance criteria. A validation certificate is required for any company seeking to have its products used by the U.S. and Canadian governments and any regulated industries that collect, store, transfer, share and/or disseminate sensitive, but unclassified, information. Determining whether a product should be evaluated for cryptographic testing is fairly straightforward. In general, if a product transmits, stores, or otherwise uses encrypted data, passwords or cryptographic keys, and the product will be sold to the U.S. or Canadian federal governments, validation to FIPS requirements is a must. The evaluation process The evaluation involves an extensive review and assessment of product documentation to verify that a given module or algorithm satisfies all the applicable security requirements detailed in FIPS or appropriate cryptographic algorithm standard. In turn, the product itself will be reviewed and assessed to confirm that the documentation provided correlates exactly to product design and implementation. s engineers can assist customers in determining the appropriate documentation, which can include product manuals, design specifications and firmware/software source code. With this new test capability, can further assist our customers by conducting electrical, fire and shock safety, and/ or performance evaluations in parallel with FIPS investigations to bring products to market faster. For more information, please contact either s customer service team at HELPS ext or the Cryptographic and Security Testing Lab directly at CST-LAB@us.ul.com.

5 A New Name for a Vital Program s total vehicle assessment program gets an update 05 To more accurately mirror the program scope, has renamed its Total Vehicle Assessment (TVA) program to Vehicle Inspection Program (VIP). s Vehicle Inspection Program is a multi-part inspection program that assesses new fire apparatus for compliance with NFPA 1901, the Standard for Automotive Fire Apparatus. The inspection description and steps of the Vehicle Inspection Program has not changed from the Total Vehicle Assessment program other than to more clearly state that does not independently verify supplier claims regarding installed components. The steps involve include: 1. Reviewing manufacturing processes for construction and testing required to be performed by the manufacturer. This includes reviewing test and equipment calibration records, including, but not limited to, measurement of GVW, weight distribution, road tests, braking tests, low-voltage tests, foam tests, water tank capacity 2. Reviewing fire apparatus manufacturer s process for requesting and receiving a component supplier s documentation to demonstrate compliance of components with NFPA does not independently verify supplier claims regarding installed components. 3. Visually inspecting apparatus for compliance with NFPA 1901 construction requirements. This, includes inspection of the chassis, driving and crew areas, body, compartments, warning devices, lighting, pump operator s panel, linevoltage equipment, and foam systems. 4. Witnessing or performing NFPA 1901 required third-party testing of pump systems, aerial devices and fixed linevoltage generators, if equipped, for each inspected apparatus and issuing separate certificates of inspection for each test. An example where does not independently verify supplier claims is with reflective stripping. NFPA 1901 requires reflective stripping having a minimum width of 4 inches to be affixed to at least 50 percent of the cab and body length that meets ASTM D 4956, Standard Specification for Retroreflectivity Sheeting for Traffic Control. verifies that each vehicle meets the width and length requirements but does not independently verify the component (stripping) manufacturer s claim that the material meets ASTM D reviews the fire apparatus manufacturer s process for requesting and assessing documentation from the component supplier demonstrating compliance with reflectivity requirements of the ASTM Standard. s certificate of inspection is the only method provided by to identify fire apparatus covered by s Vehicle Inspection Program. Apparatus inspected by may bear the following label: Inspected Fire Apparatus in accordance with requirements of NFPA 1901, 2009 Edition, as specified in Certificate No. For more information, please contact the customer service team at or visit

6 Canadian Corner Did You Know 1893 William Henry Merrill sent to Chicago by New England insurance interests to systematically study the hazards of electrical lighting equipment Merrill outfitted an electrical testing laboratory in a small room on the second floor of a fire patrol station in downtown Chicago Testing, inspection and labeling of devices by was taking place at several Canadian factories Inspection centers established in Montreal, Toronto, Winnipeg and other major Canadian cities With the growth of Canadian industry and demand for our services Underwriters Laboratories of Canada was incorporated under a federal charter granted by the secretary of state of Canada. In 1910, the first seeds were first sown and Underwriters Laboratories began testing, inspecting and labeling at several Canadian factories. From that humble beginning, inspection centers were established later that same year in Montreal, Toronto and Winnipeg. A short decade later, Underwriters Laboratories of Canada was incorporated in 1920 under a federal charter granted by the Secretary of State of Canada. Today, C has grown both the scope of its businesses and its office locations across Canada. Some of the more significant milestones include 1949 when sponsorship of C was transferred from the National Board of Fire Underwriters (New York) to the Dominion Board of Insurance Underwriters and the head office and testing laboratory opened at 340 Richmond Street West in Toronto. A few years later, C took possession of a new building at 7 Underwriters Road in Scarborough, where it remains to this day. C invested in a 06 C Celebrates 90 Years of Getting Safer Products to Market major refurbishment and expansion of that facility in In 1950 C published its first directory with 300 certifications. Today, C s directories contain more than 5,000 certifications and are available in both hard copy and an updated daily online version. In September 1952, C held its very first Fire Council meeting. In 2002 C recognized its expanding business by renaming the Fire Council to the C Advisory Council, bringing on board regulators and senior enforcement authorities from other disciplines such as electrical as well as representatives from national and federal bodies. The council, which meets on an annual basis, provides advice and guidance to C on many issues. These include matters concerning standards as well as recommendations for the establishment of requirements concerning end products, components and systems certification. The council is also an excellent forum for 1950 s Head office, 340 Richmond Street West, Toronto Underwriters Laboratories headquarters, Canada on 7 Underwriters Road in Scarborough

7 07 sharing knowledge and field experience as they pertain to the mission and activities of C. In 2011, the Council will be celebrating its 60th anniversary, another significant achievement. In 1954 when C moved into its present location, it published 15 Standards for Safety. Today, C Standards, an independent, not-for-profit standards development organization, publishes and maintains nearly 300 Canadian Standards for Safety and other related documents. These important documents continue to play an important part in improving public safety in Canada. First C labeled truck, July 1968 Orangeville, Ontario The 1950s and 1960s saw C installing some major testing apparatus: The first Steiner tunnel in Canada was commissioned in January 1956 The first floor furnace was constructed in 1957; a second floor furnace was put into operation in 1960 Today The hydraulics laboratory was completed in 1963; the extinguisher building was built two years later Today, C is a key architect of the Canadian National Safety System, administered by the Standards Council of Canada (SCC). C s time-tested system supports governmental product safety regulations, and it complements federal, provincial and municipal public safety initiatives. C also works with other governments and international safety systems to help further trade with adherence to local and international safety requirements. C s safety certification services include testing, evaluation and factory surveillance of products to Canadian and international standards for safety. These certifications enhance the safety of products as well as the public s confidence in their compliance. Today, consumers, retailers, insurers, distributors and regulators recognize our familiar Marks as trusted symbols of safety. C has come a long way since For more information on C s 90th anniversary please contact Kevin Wu at , ext , or Kevin.Wu@ca.ul.com. Underwriters Laboratories headquarters, Canada on 7 Underwriters Road in Scarborough

8 Non-Profit Org. U.S. Postage PA I D 333 Pfingsten Road Northbrook, IL United States of America Permit No Northbrook, IL The Fire & Security Authority 08 Calendar of Events October 5 8 Security Essen Essen, Germany October ASIS, International Security Show Dallas, TX October China Fire 2010 Beijing, China October China Roofing and Waterproofing Beijing, China October Security Canada Central Toronto, Canada November 2 4 Campus Fire Forum Indianapolis, IN November 3 4 International Security Conference (ISC) East New York, NY November Greenbuild Expo Chicago, IL November IFSEC/FIREX India Mumbai, India December 1 3 TPE Build & Deco Taipei, Taiwan If you would like The Fire & Security Authority to consider publishing your upcoming events, contact Darlene Knauss, editor, in Northbrook, IL, by at Darlene.Knauss@us.ul.com. Please type Calendar in the subject line. October China International Architectural Expo Beijing, China November 2 5 Security China Expo Beijing, China December 1 3 Construct Canada Toronto, Canada The Fire & Security Authority Published by the Regulatory Services Department and the Building Materials/Life Safety and Security Industries of Underwriters Laboratories Inc. A Nationally Recognized Testing Laboratory (NRTL) Managing Editor Darlene Knauss T:: E:: Darlene.Knauss@us.ul.com Address changes and additions T:: F:: E:: Diane.E.Fonzino@us.ul.com All rights reserved. BDI