SHARP CORPORATION SOFTWARE SECURITY REQUIREMENTS FOR U-NII DEVICES Date: September 11, 2023ATTN: FCC Subject: Attestation Letter regarding UNII devices FCC ID: APYBSC0004APYBSC0005, Software security questions and answers per KDB 594280 D02 v01r03:
General Description Describehowanysoftware/firmwareupdatesforelementsthancanaffectthedevicesRF parameters will be obtained, downloaded, validated and installed. For software that is accessedthroughmanufacturerswebsiteordevicesmanagementsystem,describethe different levels of security asappropriate. There is no downloadable software provided by the manufacturer that can modify critical radiotransmitterparameters.AllcriticalparametersareprogrammedinC hipmemoryatthe factory and cannot be modified or overridden by third parties. DescribetheRFparametersthataremodifiedbyanysoftware/firmwarewithoutany hardwarechanges.Aretheseparametersinsomewaylimitedsuchthatanyother software/firmware changes will not allow the device to exceed the authorized RF characteristics?
TherearenoRFparametersthatcanbemodified.AllRFparametersareprogrammedin Chipmemoryatthefactoryandcannotbemodifiedoroverriddenbythirdparties. Describeindetailtheauthenticationprotocolsthatareinplacetoensurethatthesourceof theRF-relatedsoftware/firmwareisvalid.DescribeindetailhowtheRF-relatedsoftwareis protected againstmodification. The answer is same with question 2 DescribeindetailanyencryptionmethodsusedtosupporttheuseoflegitimateRF -related software/firmware. Thefirmwareinthefactoryhasbeenfixedinchip,can'tbechanged,thereisnoneedfor validation.Driverisinbinaryform,itisownclosure,noneedforverification. Foradevicethatcanbeconfiguredasamasterandclient(withactiveorpassivescanning), explainhowthedeviceensurescomplianceforeachmode?Inparticularifthedeviceactsas masterinsomebandofoperationandclientinanother;howiscomplianceensuredineach band ofoperation?
Notapplicable,thisdeviceonlysupportsclientwithoutradardetection.TheRFparameters hasbeenfixedinthewifimodulefirmwareandcannotbealtered,sotheuserhasnowayto break the compliance on the device. Third-Party Access Control ExplainifanythirdpartieshavethecapabilitytooperateaU.S.-solddeviceonanyother regulatorydomain,frequencies,orinanymannerthatmayallowthedevicetooperatein violationofthedevicesauthorizationifactivatedintheU.S. Thirdpartiesdonothavethecapabilitytooperateinanymannerthatisviolationofthe certification in theU.S 1 2 3 4 5 1 V1.0 SHARP CORPORATION Describe,ifthedevicepermitsthird-partysoftwareorfirmwareinstallation,whatmechanisms areprovidedbythemanufacturertopermitintegrationofsuchfunctionswhileensuringthat theRFparametersofthedevicecannotbeoperatedoutsideitsauthorizationforoperationin the U.S. In the description include what controls and/or agreements are in place with providers of third-party functionality to ensure the devices underlying RF parameters are unchanged and how the manufacturer verifies thefunctionality. RFparametersareprogrammedintoChipmemoryatthefactoryandcannotbe reprogrammed or re-flashed by thirdparties. For Certified Transmitter modular devices, describe how the module grantee ensures that hostmanufacturersfullycomplywiththesesoftwaresecurityrequirementsforU-NIIdevices. If the module is controlled through driver software loaded in the host, describe how the driversarecontrolledandmanagedsuchthatthemodulartransmitterRFparametersarenot modified outside the grant ofauthorization. TherearenoRFparametersthatcanbemodified.AllRFparametersareprogrammedin Chip memory at the factory and cannot be modified or overridden by third parties. The moduleisnotcontrolledbydriversoftwareonthehostandcannotoverridecriticalRF parameters stored in module Chip memory. USER CONFIGURATION GUIDE DescribetheuserconfigurationspermittedthroughtheUI.Ifdifferentlevelsofaccessare permitted for professional installers, system integrators or end-users, describe the differences. No UI provided. a)Whatparametersareviewableandconfigurablebydifferentparties?
RF ON/OFF Search WiFi Access point Connect WiFi access point b)Whatparametersareaccessibleormodifiablebytheprofessionalinstallerorsystem integrators?
All parameters described in a are accessible and modifiable by the professional installer 1)Aretheparametersinsomewaylimited,sothattheinstallerswillnotenterparametersthat exceed thoseauthorized?
Themodulemicro-codereadstheparametersfromthemoduleChipmemory.These parameterscannotbemodifiedoroverriddenbySWdrivers. 2)Whatcontrolsexistthattheusercannotoperatethedeviceoutsideitsauthorizationinthe U.S.?
All parameters described in a, user can not operate the device outside its authorization in the us. c) What parameters are accessible or modifiable by the end-user?
None 1) Are the parameters in some way limited, so that the installers will not enter parameters that exceed those authorized?
Themodulemicro-codereadstheparametersfromthemoduleChipmemory.These parameterscannotbemodifiedoroverriddenbySWdrivers. 2)Whatcontrolsexistsothattheusercannotoperatethedeviceoutsideitsauthorizationin theU.S.?
All parameters described in a, user can not operate the device outside its authorization in the us. d) Is the country code factory set? Can it be changed in the UI?
Default country code is set in the factory and no UI is provided for modification. 1)Ifitcanbechanged,whatcontrolsexisttoensurethatthedevicecanonlyoperatewithin its authorization in theU.S.?
ProgrammedfordefaultmodewhichisalwaysFCCcompliant.Alwayssetfordefaultforall start-
ups,resets,timeoutsorotherhostornetworkevents. 2 3 1 V1.0 SHARP CORPORATION 2 3 4 e)Whatarethedefaultparameterswhenthedeviceisrestarted?
Always FCCcompliant Cantheradiobeconfiguredinbridgeormeshmode?Ifyes,anattestationmayberequired. FurtherinformationisavailableinKDBPublication905462D02. No, it can't work in the bridge or the mesh mode Foradevicethatcanbeconfiguredasamasterandclient(withactiveorpassivescanning), ifthisisuserconfigurable,describewhatcontrolsexist,withintheUI,toensurecompliance foreachmode.Ifthedeviceactsasamasterinsomebandsandclientinothers,howisthis configured to ensurecompliance?
It can only work in client mode, and cannot be configured. Foradevicethatcanbeconfiguredasdifferenttypesofaccesspoints,suchaspoint -to-point or point-to-multipoint, and use different types of antennas, describe what controls exist to ensure compliance with applicable limits and the proper antenna is used for each mode of operation. (See Section15.407(a)) Thisdeviceisnotanaccesspoint. Signature:
Printed Name:Sunny Lu Position: Manager Company Name: Audix Technology (Shenzhen) Co., Ltd. V1.0