Amazon Alexa Voice Service Alexa Built-in Devices Testing

Testing Amazon Alexa Voice Service Device

The Alexa Voice Service (AVS) enables device makers to integrate Alexa into a variety of products, from smartphones and smart speakers to home appliances and wearables. With the introduction of new voice-forward products, device makers need to consider how to secure their cloud-connected devices.
Amazon has defined two (2) main programs to test and certify devices or applications integrating Alexa Voice Services in order to ensure they meet their quality and security standards in addition to ensure products have good end to end user experience.
DEKRA is the first laboratory in the world authorized for both device testing and security assessment programs to meet the Alexa Built-in requirements and provides these services at several locations worldwide.
What is the Alexa Voice Service?
The Alexa Voice Service (AVS) enables device makers to integrate Amazon Alexa functionality into a variety of products, from smartphones and smart speakers to home appliances and wearables.
For more information about Alexa Voice Service (AVS), visit the official Amazon Alexa website​.
What is an Alexa Built-in Product?

WHY DEKRA?

    DEKRA offers a security evaluation (baseline), adapted to be evaluated according to amazon security best practice. In addition to the baseline evaluation, DEKRA offers two other evaluation levels to ensure the security in the device as well as its ecosystem. The security assessment is available from the DEKRA locations in Malaga (Spain), Yokohama (Japan), Seoul (South Korea), Hongkong (Greater China), Guangzhou (Mainland China), Suzhou (Mainland China) and Shenzhen (Mainland China).
    Authorized Security Lab for Alexa Voice Service
    DEKRA is an Authorized Security Lab for Alexa and offers three device evaluation programs for Original Equipment Manufacturers (OEMs), Original Design Manufacturers (ODMs), and System Integrators (SI).
    • Baseline Evaluation: An evaluation is performed of more than 20 test cases to ensure that security best practices are implemented focused on device itself.
    • Advanced Evaluation: In addition to baseline evaluation, it includes 10 additional test cases evaluating privacy issues, and more advanced analysis of hardware and firmware. In addition to this, an evaluation of the mobile application is included (if it exists).
    • Full Evaluation: In addition to everything included in the Advanced Evaluation, Full Evaluation includes a dynamic analysis of the Firmware as well as an evaluation of the cloud services.
    These test plans show the risks associated with an attack. To identify risks, vulnerabilities and security flaws based on the probability of exploitation in the products. It requires a comprehensive understanding of the full ecosystem– how everything works together. During the security evaluation, we may test the hardware, firmware, communications, mobile application, and web and cloud services.
    In the following table, you can find a summary of the services as well as the evaluation times:
    Security Requirements for Bluetooth or BLE Requirements for AMA
    The Alexa Developer Services Agreement requires that developers implement all reasonable security measures when developing AVS-enabled devices. Your device must meet the following minimum requirements for AMA integration.
    The devices’ Bluetooth set must meet the following requirements to support AMA:
    • Bluetooth v4.2 dual mode + LE compliance (with DLE support)
    • Standard pairing, authentication, link key, and encryption operation
    • BT Protocols support for SPP/A2DP/HFP /SDP/RFCOMM/SCO
    • Accessories that implement mSBC must be MFi Certified
    The Alexa Developer Services Agreement requires that developers implement all reasonable security measures when developing AVS-enabled devices. The devices shall meet the minimum requirements for AMA integration, you can check the requirements here .
    Remark: DEKRA could test all of the features and for some of them, DEKRA could also check if the feature is properly claimed at the Bluetooth Qualification (checking the ICS, aka Implementation Conformance Statement)
    Authorized Test Lab for Alexa Built-in tests