The Outline of Proposed Amendment to Ministerial Ordinance 
 
1.  Item 
Ministerial Ordinance for Partial Revision of Ordinance Concerning 
Terminal Facilities Etc. 
 
2.  Amendment to ministerial ordinance: 
Ordinance Concerning Terminal Facilities Etc. 
 
3.  Reasons for amendment 
In recent years, there has been an increasing number of cases where IoT 
devices were hijacked and abused for DDoS attacks and other cyberattacks to 
cause problems on the Internet. Accordingly, minimum security measures 
shall be added to the technical standards of terminal equipment including IoT 
devices in order to ensure the safety and reliability of information and 
communications networks. 
 
4.  Outline of the amendment 
  Functions equal to or higher than those specified in following conditions (1) 
to (4) shall apply as security measures to terminal equipment that uses the 
Internet Protocol and is connected to digital data transmission equipment, 
provided that settings for telecommunications functions (limited to those 
related to transmission and reception) incorporated by the terminal equipment 
can be changed through telecommunications line equipment to be connected. 
(1) Terminal equipment shall incorporate an access control function to allow 
setting changes in the telecommunications functions of the terminal 
equipment. 
(2) An identification code shall be provided for the access control function 
specified in (1). The identification code shall incorporate a function or a 
feature to prompt the user to make a change to the code if it has been 
present in the terminal equipment. Otherwise, terminal equipment shall be 
provided with a unique identification code or a similar effective means 
shall be taken to terminal equipment. 
(3) Terminal equipment shall accept the updating of software related to the 
telecommunications function of the terminal device. 
(4) Terminal equipment shall maintain settings for the access control function 
specified in (1) and the software updated by the function specified in (3) 
even if power supply to the terminal equipment fails. 
However, the above security measures shall not apply to particular types of 
terminal equipment (e.g., PCs or smartphones) if they incorporate functions 
equal to or higher than those of (1) to (4) and can use any kinds of software to 
be made changes in the functions by users at any time and with ease. 
Terminal equipment that has acquired security certification (CC 
certification) based on international standard ISO/IEC 15408 shall be deemed to have functions equal to or higher than those of (1) to (4). 
The above conditions may not apply to terminal equipment if it has 
obtained technical standards conformity approval in accordance with 
Paragraph 1, Article 53 of the Telecommunications Business Act or 
certification of type in accordance with Paragraph 1, Article 56 of the same 
Act or it has passed an inspection of connection in accordance with Paragraph 
1, Article 69 and Paragraph 2, Article 70 of the same Act, or otherwise the 
self-confirmation of technical standards conformity has been made in 
accordance with Paragraph 3, Article 63 of the same Act before the revision of 
the Ordinance. 
 
5.  Proposed date of entry into force 
April 2020