Skip to content

UWB and FiRa Consortium certification

Guide, UWB and FiRa Consortium

Ultra-Wideband (UWB) has shifted in a few years from a niche short-range positioning technology to a mainstream radio used for secure car keys, phone-based access control, real-time location systems and proximity sensing. The standardisation stack reflects this shift. At the physical layer, IEEE 802.15.4z (2020) added the HRP PHY with secure ranging primitives. Above the PHY, the FiRa Consortium, founded in 2019 by Bosch, NXP, Samsung, Sony and ASSA ABLOY among others, defines the MAC profile, the service layer and the interoperability test plan. In parallel, regional radio regimes apply: ETSI EN 302 065-1 (2016) and CEPT/ECC Decision (06)04 in the EU, FCC Part 15 Subpart F (2002 plus amendments) in the US, ARIB STD-T91 (2008) in Japan and KCC notices in Korea. This page maps the certification stack for a UWB-enabled device: radio compliance, FiRa profiles, secure ranging, AoA test plans and the recurring integration pitfalls.

A UWB device sits at the intersection of three normative layers that engineering teams routinely conflate during the planning phase.

LayerSubjectReference
Radio regulationSpectrum allocation, emission limits, in-band and out-of-band masks, duty cycle, indoor or handheld restrictionsEN 302 065-1, FCC Part 15 Subpart F, ARIB STD-T91, KCC notices
Physical and MAC layerModulation, pulse shape, ranging frame structure, secure timestamp primitivesIEEE 802.15.4z
Application and interoperabilityService layer, ranging session management, profiles (Access, Mobile, RTLS, Smart Home), interop test plansFiRa Consortium PHY/MAC/Interop Test Specifications, CCC Digital Key 3.0

The implication for project planning is direct. Radio compliance is mandatory in every target market. PHY/MAC conformance and FiRa profile certification are commercial requirements imposed by the ecosystem: a UWB chip that fails FiRa interop will not interwork with phones, cars or access readers, regardless of how clean its spectrum is.

IEEE 802.15.4z (2020), the HRP PHY for secure ranging

Section titled “IEEE 802.15.4z (2020), the HRP PHY for secure ranging”

The 802.15.4z amendment, ratified in 2020, adds two PHYs to IEEE 802.15.4: an enhanced HRP (High Rate Pulse) PHY and a new LRP (Low Rate Pulse) PHY. The HRP variant is the one used by FiRa, CCC and by the consumer UWB ecosystem in general.

ChannelCentre frequencyBandwidthBand group
Channel 56489.6 MHz499.2 MHzLow band (6 to 7 GHz)
Channel 66988.8 MHz499.2 MHzLow band
Channel 87488.0 MHz499.2 MHzHigh band (7 to 8.5 GHz)
Channel 97987.2 MHz499.2 MHzHigh band
Channel 108486.4 MHz499.2 MHzHigh band

Channels 5 and 9 are the workhorses of the FiRa ecosystem because they sit safely inside the EU, US, Japan and Korea authorised regions and avoid most national sub-band restrictions. Channels 6, 8 and 10 are useful for multi-channel coordination but require per-region analysis: channel 8, for example, is in the heart of the US Part 15 Subpart F authorisation but partially restricted in Japan under ARIB STD-T91 (2008).

The headline addition of 802.15.4z is the STS (Scrambled Timestamp Sequence) field. STS is a cryptographically generated pulse sequence inserted in the ranging frame. The receiver correlates against this expected sequence to validate the leading-edge timestamp on which the time-of-flight measurement is based.

In practical terms, STS:

  • relies on AES-128 key material shared between the two ranging parties, generally derived from a session key established through an out-of-band channel (BLE pairing, NFC tap, manufacturing provisioning),
  • inserts a per-session, per-frame pulse pattern that an attacker cannot predict,
  • bounds the distance reported by the ranging exchange, making distance enlargement and reduction attacks significantly harder than against legacy 802.15.4a HRP.

The combination of STS and the FiRa profile that mandates its use is what allows an automotive OEM to rely on UWB for vehicle access without exposing the door to relay attacks that have plagued passive entry over RKE and BLE.

FiRa Consortium, profiles and certification

Section titled “FiRa Consortium, profiles and certification”

The FiRa Consortium was founded in 2019 to define an interoperable application stack on top of 802.15.4z. Founding members included Bosch, NXP, Samsung, Sony and ASSA ABLOY; the membership has since expanded substantially. FiRa publishes specifications for the MAC profile, the service layer (FiRa Application Service Layer), the secure ranging session model and the test plan, and runs a certification programme that launched in 2023.

FiRa organises its certification by profile: a profile is a subset of mandatory features and parameters tied to a use case.

ProfileUse caseKey features
Access ControlBuilding entry, secure perimeter, door lockSTS mandatory, short ranging cycle, fixed anchors
Mobile (CCC alignment)Phone-as-a-key, vehicle access, smartphone-based keyBLE handshake, STS, AoA for direction, integration with CCC Digital Key 3.0 (2021)
RTLSIndustrial asset tracking, indoor positioning, hospital trackingMulti-anchor, 2D and 3D positioning, AoA, long battery life
Smart HomeDevice-to-device proximity, occupancy, presenceSTS optional, low-power profile, integration with home hub

A FiRa Certified product is certified against one or more profiles, not in the abstract. The same chip can be FiRa Certified for Mobile but not yet for RTLS, depending on which test campaigns the manufacturer ran.

A FiRa certification campaign runs through a FiRa-authorised test laboratory. The submission bundles:

  1. PHY conformance against the FiRa PHY Test Specification, built on the 802.15.4z HRP PHY.
  2. MAC conformance against the FiRa MAC Test Specification.
  3. Interoperability against the FiRa Interop test plan, run with reference devices.
  4. Profile-specific tests for each declared profile (Access Control, Mobile, RTLS, Smart Home).

Once the lab issues the reports and FiRa Consortium accepts them, the product receives the FiRa Certified mark and is listed on the FiRa product directory.

In the EU, UWB radio compliance is established through CE marking under the RED, with harmonised standards in the ETSI EN 302 065 series. The series is split by application:

StandardScope
EN 302 065-1 (2016)Generic UWB requirements, applicable to any UWB short-range device
EN 302 065-2UWB for location tracking
EN 302 065-3UWB for transport and traffic applications
EN 302 065-4UWB for indoor location
EN 302 065-5UWB for sensing and presence (PAR) applications

The radio framework is harmonised by CEPT/ECC Decision (06)04, which sets average EIRP at -41.3 dBm/MHz mainly across 6 to 8.5 GHz, with sub-band restrictions and a duty cycle constraint (typically 0.5 percent below 4 GHz). A UWB device targeting the EU market needs to demonstrate conformity to the applicable -x sub-standard, not just to -1, and to declare the duty cycle and indoor or outdoor use accordingly. For the broader EU radio framework, see RED.

FCC Part 15 Subpart F, sections 15.503 to 15.525, governs UWB emission in the US. The framework was adopted in 2002 and has been amended several times. Key features:

  • average EIRP of -41.3 dBm/MHz across 3.1 to 10.6 GHz,
  • different limits for handheld, indoor, vehicular and through-wall imaging classes,
  • a handheld restriction that requires the device to be hand-held and switched off when no transmission is occurring,
  • an indoor-only restriction for certain device classes, which has direct consequences for product positioning (a handheld phone falls under one regime, an industrial anchor under another).

A UWB product going to the US needs to map itself precisely onto one of the Part 15 Subpart F device classes; misclassification leads to outright authorisation refusal or to a market-segmentation constraint. For the FCC framework overall, see FCC.

Japan authorises UWB under ARIB STD-T91 (2008), with limits similar in spirit to ETSI but narrower in band: the 7.25 to 10.25 GHz region is mostly open at -41.3 dBm/MHz, while the 3.4 to 4.8 GHz region is more restricted and subject to mitigation techniques. Channel 9 of 802.15.4z is the natural choice for a product targeting Japan in addition to EU and US.

Korea authorised UWB through KCC Notice 2014-49, and subsequent Korean Standards (KS-N series) define implementation details. Limits broadly align with the global -41.3 dBm/MHz average EIRP but the national allocation table must be checked, especially for channels 6 and 8.

RegionAuthorising textAverage EIRPNotable restrictions
EUEN 302 065-1 + CEPT/ECC (06)04-41.3 dBm/MHz, 6 to 8.5 GHzDuty cycle below 4 GHz, application-specific sub-standards
USFCC Part 15 Subpart F (15.503 to 15.525)-41.3 dBm/MHz, 3.1 to 10.6 GHzIndoor-only or handheld classes
JapanARIB STD-T91 (2008)-41.3 dBm/MHz, 7.25 to 10.25 GHzMore restricted at 3.4 to 4.8 GHz
KoreaKCC Notice 2014-49, KS-N-41.3 dBm/MHz aligned globallyNational table to verify per channel

CCC Digital Key 3.0 and the automotive layer

Section titled “CCC Digital Key 3.0 and the automotive layer”

Car Connectivity Consortium Digital Key 3.0 (2021) added UWB to the digital car key specification. Releases 1 and 2 relied on NFC and BLE; Release 3 layers UWB on top of BLE for secure distance bound checking. The result is a passive entry experience: the phone communicates with the vehicle over BLE, the UWB layer measures the actual distance between phone and door, and the door unlocks only if the measured distance falls inside an authorised envelope.

For the engineering team, CCC Digital Key 3.0:

  • requires integration with the BLE pairing of the digital key envelope,
  • relies on STS-based ranging as defined in 802.15.4z, with cryptographic material derived from the digital key session,
  • imposes latency and false-acceptance budgets specific to the automotive context, much tighter than generic FiRa Access Control,
  • usually drives both a CCC certification and a FiRa Mobile profile certification.

The two certifications are aligned but not identical: CCC adds automotive constraints on top of the FiRa profile, and an OEM typically requires both before a chip is accepted on a vehicle programme. For the BLE pairing side that complements the UWB ranging, see Bluetooth SIG qualification.

Antennas and AoA, where most failures happen

Section titled “Antennas and AoA, where most failures happen”

UWB Angle of Arrival relies on the phase difference between two or three antennas spaced a known distance apart, typically half a wavelength at the channel centre frequency (around 1.9 cm at channel 9). The reported angle is recovered from the relative timestamp and phase between antennas.

The dominant failure mode observed during certification is antenna phase imbalance:

  • difference in cable length or PCB trace length between antennas,
  • asymmetric ground plane around the antenna array,
  • inconsistent matching network between the two or three RF front ends,
  • mechanical placement that puts one antenna closer to a metal bezel than the other.

Any of these factors introduces a phase offset that translates directly into reported angle error. A few degrees of imbalance per GHz, undetectable in a conventional link budget, yields several degrees of AoA error, enough to fail the FiRa AoA accuracy test plan.

Mitigation is mechanical and antenna design discipline:

  1. symmetric layout of the antenna array, with identical trace lengths and matching networks,
  2. phase calibration at end of line, with calibration data stored in non-volatile memory,
  3. temperature compensation of the phase calibration, because antenna and front-end phase drift with temperature,
  4. mechanical fixtures that hold the array in a controlled position relative to the device chassis.

High-frequency PCB design that supports such layouts requires controlled-impedance routing of the differential antenna feed and careful return-path management around the 6-8 GHz fundamental.

FiRa and CCC test plans both include active attacker scenarios. The lab does not just verify that two compliant devices range correctly; it verifies that a rogue device cannot manipulate the reported distance.

Typical secure ranging tests:

  • distance enlargement attack with a malicious repeater between the two devices,
  • distance reduction attack with predicted preamble injection,
  • STS key confusion by feeding the device a frame with mismatched STS keying,
  • out-of-session ranging to verify that no ranging completes outside the negotiated session.

A frequent finding is that a chip passes PHY conformance, MAC conformance and interop, but fails secure ranging because STS was not enabled at the application layer, or because the session key derivation was misconfigured. The fix is at the integration layer, not at the chip layer: the system designer needs to ensure that STS is mandatory in the FiRa profile configuration and that the session key derivation follows the FiRa Application Service Layer specification.

For a UWB product approaching market for the first time, the practical sequence:

  1. Freeze the use case and target markets (Access Control, Mobile/CCC, RTLS, Smart Home; EU, US, Japan, Korea).
  2. Select chip and module based on declared FiRa Certified status, 802.15.4z compliance and target channel coverage (5 and 9 minimum, additional channels as needed).
  3. Design the antenna array for AoA if required, with mechanical and matching network symmetry, and plan phase calibration at end of line.
  4. Develop and freeze the application layer with FiRa profile configuration, STS enabled, session key derivation aligned with the FiRa Application Service Layer.
  5. Pre-compliance radio testing: spectral mask against EN 302 065-1 (2016) and FCC Part 15 Subpart F (2002 plus amendments), with margin for the production variability.
  6. PHY and MAC conformance at a FiRa-authorised lab.
  7. FiRa interoperability and profile testing with reference devices.
  8. CCC certification in addition for automotive products.
  9. CE marking under the RED with the EN 302 065 series; FCC authorisation under Part 15 Subpart F; ARIB and KCC filings for Japan and Korea.
  10. Production rollout with phase calibration at end of line, regulatory marking, FiRa Certified mark.
  11. Maintenance: track FiRa profile updates, monitor security advisories on STS implementations, manage CCC release alignment for automotive products.

For typical end-to-end durations of each phase, see certification timeline.

PitfallConsequence
Spectral mask exceeded after the PA, even with a compliant chip outputEN 302 065-1 or FCC Part 15 Subpart F non-conformity at the notified body or TCB stage
AoA error above 5 degrees due to antenna phase imbalanceFiRa AoA accuracy test failure, mechanical rework required
Secure ranging defeated by an off-the-shelf rogue toolSTS not enabled or session key derivation misconfigured, profile certification refused
EU duty cycle below 4 GHz miscountedEN 302 065-1 non-conformity, CE marking blocked
FCC indoor-only restriction ignored on a handheld productUS authorisation refused or restricted, redesign or market segmentation needed
CCC profile not aligned with FiRa Mobile profilePhone-to-car interop failure, OEM rejection
Phase calibration skipped at end of lineAoA drift across production run, field complaints
Single channel (only channel 5 or only channel 9) supportedCo-existence and regional flexibility lost
FiRa Certified mark used before formal certification issuedTrademark misuse, FiRa enforcement action
  • RED: EU radio framework that anchors EN 302 065 series compliance
  • FCC: US framework, reference for Part 15 Subpart F
  • Bluetooth SIG qualification: complements UWB on phone-as-a-key pairing
  • Certification timeline: cross-cutting orders of magnitude per phase
  • Glossary: definitions of UWB, HRP, STS, AoA, FiRa, CCC, RTLS

Sources & references

  1. IEEE 802.15.4z-2020, Enhanced Ultra Wideband Physical Layers , IEEE standards.ieee.org/ieee/802.15.4z/7460/
  2. FiRa Consortium, certification program , FiRa Consortium www.firaconsortium.org/discover/certification
  3. ETSI EN 302 065-1, Short Range Devices using UWB, generic requirements , ETSI www.etsi.org/deliver/etsi_en/302000_302099/30206501/
  4. FCC Part 15 Subpart F, Ultra-Wideband Operation , FCC www.ecfr.gov/current/title-47/chapter-I/subchapter-A/part-15/subpart-F
  5. CEPT/ECC Decision (06)04 on UWB harmonised conditions , CEPT/ECC docdb.cept.org/document/734
  6. Car Connectivity Consortium, Digital Key Release 3 , Car Connectivity Consortium carconnectivity.org/digital-key/
  7. ARIB STD-T91, Ultra-Wideband Radio Systems , ARIB www.arib.or.jp/english/std_tr/telecommunications/desc/std-t91.html