Bridging Domestic and International Security Standards: Understanding the Relationship Between GB, ONVIF, CE, and FCC

What Is the Security Standards Framework

The security standards framework refers to the technical specifications and certification mechanisms established in video surveillance, access control, intrusion detection, and other physical security domains to ensure device interoperability, product quality, and market access compliance. Different regions adopt different standard systems, creating the current global security market landscape.

The Four-Layer Structure of Security Standards

When Chinese security equipment enters the global market, understanding the distinct functions and interrelationships of these four standard categories is essential. They are not mutually exclusive alternatives but rather complementary requirements that together form the complete set of conditions for compliant device deployment.

Layer One: GB Standards — The Foundation for Domestic Market Access

GB standards are mandatory national standards published by China's Standardization Administration, serving as the fundamental technical basis for selling and using security equipment within mainland China. These standards carry强制性 (mandatory) characteristics—equipment manufactured or sold domestically must meet the relevant requirements.

From a technical content perspective, GB standards cover core dimensions including video encoding formats, transmission protocols, and security requirements. For example, in video encoding, GB/T 25724 (Technical Requirements for Digital Audio and Video Coding in Public Security Video Surveillance) defines the SVAC (Surveillance Video and Audio Coding) standard with independent intellectual property rights, creating differentiated positioning compared to globally-oriented H.265/H.266 standards.

For export-oriented enterprises, it is important to recognize that GB standards primarily address the question of "whether equipment can be sold in China." GB test reports and certification certificates themselves do not constitute entry permits for overseas markets. However, the technical performance indicators verified through GB testing—such as resolution, low-light performance, and network adaptability—hold reference value and can support other certification applications as technical documentation.

Layer Two: ONVIF and PSIA — Bridges for Interoperability

ONVIF (Open Network Video Interface Forum) and PSIA (Physical Security Interoperability Alliance) are the two primary organizations developing interoperability standards for security devices. Their protocol specifications address the question of "whether devices from different brands can work together"—a fundamentally different concern from what GB, CE, or FCC standards address.

ONVIF, established in 2008, counts Hikvision, Dahua, Axis, Bosch, and other major manufacturers among its members. Core specifications include Profile S (video streaming and configuration), Profile C (access control systems), Profile G (recording and storage), and Profile T (advanced video coding). Devices achieving ONVIF compliance certification follow unified interface specifications and can integrate with platforms, NVRs, and decoders that also support ONVIF.

PSIA, also established in 2008, was initiated by companies including Honeywell and Sony, developing similar interoperability specifications. Due to broader industry support, ONVIF currently enjoys higher market coverage.

For export devices, ONVIF compliance is recommended as a standard configuration. Its value lies in reducing integrator integration costs, expanding device applicability in large overseas projects, and meeting explicit interoperability requirements in some international tender documents. Taking Hikvision network cameras as an example, their mainstream product lines all support ONVIF Profile S/G/T protocols, enabling seamless integration with major domestic and international platforms.

Layer Three: CE Certification — The Gateway to EU Markets

The CE marking is a mandatory compliance indicator for products entering the European Economic Area (EEA) market. CE is not a quality certification but rather a legal declaration by manufacturers that products meet the essential requirements of applicable EU directives.

For security equipment entering the EU market, the primary directives include:

• Low Voltage Directive (LVD): Applicable to equipment operating at AC 50-1000V or DC 75-1500V, covering electrical safety requirements
• Electromagnetic Compatibility Directive (EMC): Requiring equipment to neither emit excessive electromagnetic interference nor be unduly susceptible to it
• Radio Equipment Directive (RED): Applicable to equipment with wireless communication functions (such as WiFi cameras, wireless alarm systems)
• RoHS Directive: Restricting hazardous substances in electrical and electronic equipment
• WEEE Directive: Addressing waste electrical and electronic equipment recycling requirements

The core CE certification process includes: identifying applicable EU directives → assessing product conformity → compiling technical documentation → drafting the Declaration of Conformity → affixing the CE marking on the product. For most security equipment, CE certification can be completed through self-declaration without third-party laboratory involvement. However, equipment involving radio functions requires participation from a Notified Body in testing.

Layer Four: FCC Certification — The Entry Ticket for North American Markets

FCC (Federal Communications Commission) certification is a mandatory requirement for equipment entering the US market. The FCC focuses on radio frequency (RF) emission characteristics, ensuring electronic products do not cause harmful interference to radio communications.

The main FCC certification types for security equipment include:

• FCC SDoC (Supplier's Declaration of Conformity): Applicable to most ordinary electronic products without wireless transmission functions, including wired network cameras, NVRs, and monitors. Manufacturers self-test or commission laboratory testing and retain test reports to complete the declaration
• FCC Certification: Required for products with wireless transmission functions (such as WiFi cameras, Bluetooth devices, 4G cameras), requiring review and certificate issuance by an FCC-recognized Telecommunications Certification Body (TCB)

FCC certification testing primarily focuses on RF emissions, including conducted emissions and radiated emissions as two core test items. Test frequency ranges typically span 30 MHz to 1 GHz (Class B limits apply to residential environments).

Comparative Analysis of the Four Standard Categories

The Certification Combination Logic: "One Product, Multiple Certifications"

After understanding the relationships among the four standard categories, certification planning for export equipment follows a clear framework. The core logic is: GB addresses "can it function," ONVIF addresses "can it integrate easily," and CE/FCC address "can it be sold." These address different concerns, and combining them covers the complete requirements for export compliance.

Combination Strategy One: Southeast Asian Markets

Most Southeast Asian countries do not have mandatory market access certifications similar to CE or FCC. However, large-scale projects typically require equipment to have certain international standard endorsements. The recommended combination is: GB standard test reports + ONVIF compliance certification.

GB test reports demonstrate that product technical performance meets specification requirements; ONVIF compliance ensures integration with internationally mainstream platforms commonly used in Southeast Asia (such as Milestone, Nexstream). Projects in some Southeast Asian countries (such as Singapore and Malaysia) may additionally require ISO 9001 quality management system certification or local standard conformity documentation.

Combination Strategy Two: EU Markets

For entering the EU market, CE certification is the legal threshold. The complete combination is: GB standard test reports + ONVIF compliance certification + CE certification.

During execution, it is recommended to first complete GB testing to obtain baseline performance data, then use data from GB test reports to support CE technical documentation compilation. EMC testing and LVD testing within CE certification overlap with some GB test items. Using a laboratory with both CNAS and CMA accreditation to issue both GB and CE reports simultaneously improves efficiency.

Combination Strategy Three: US Markets

The combination logic for the US market is similar to the EU approach, but with different emphases: GB standard test reports + ONVIF compliance certification + FCC certification.

A special note: RF testing within FCC certification has unique characteristics and largely does not overlap with GB test items. For security equipment with WiFi, Bluetooth, or cellular network functions, FCC certification is an indispensable step. Wired equipment such as wired network cameras that do not generate RF emissions can simplify the process through FCC SDoC.

Combination Strategy Four: Entering Both EU and US Markets Simultaneously

For equipment planned for entry into both EU and US markets, a "one-stop" certification approach can be considered. The core strategy is finding a laboratory with testing capabilities for GB/CE/FCC simultaneously, generating multiple reports from a single round of testing.

Taking a common network camera product as an example, a complete certification combination typically includes: GB/T 28281 performance test report (domestic security standard testing), ONVIF conformity test report, CE-EMC test report + LVD test report + RoHS test report, and FCC test report (conducted/radiated emissions). If the device supports PoE power supply, LVD testing within CE certification must cover PoE port safety requirements.

Practical Recommendations: Implementation Steps for Certification Planning

Step One: Clarify Target Market Access Requirements

During the product development phase or before planning exports, the first step is confirming specific requirements for target markets. Information can be obtained through the following channels: official regulatory websites of target markets, industry associations or chambers of commerce in target markets, and organizations providing export certification services.

For Southeast Asian markets, attention can be paid to requirements from national communications commissions or standardization bodies; for Middle Eastern markets, SASO certification requirements; for the Indian market, BIS certification requirements. Global SecurityExport can provide target market access requirement analysis and compliance pathway planning services.

Step Two: Select Laboratories with Multi-Accreditation Capabilities

Certification testing is a cost-intensive phase, and selecting the appropriate laboratory can significantly improve efficiency. An ideal laboratory should possess the following accreditation combination:

• CNAS Accreditation: Accreditation from the China National Accreditation Service for Conformity Assessment, demonstrating testing capabilities meet international standards
• CMA Certification: Metrology certification qualification, giving test reports legal validity
• FCC-recognized Laboratory: Laboratories listed on the FCC website with recognized accreditation, capable of issuing FCC test reports
• CE Testing Capabilities: Having Notified Body qualification or cooperative channels with Notified Bodies

It is recommended to establish contact with laboratories during the product definition phase to obtain test item checklists and cost estimates tailored to product characteristics, avoiding repeated testing due to design changes later.

Step Three: Establish Certification Document Management Mechanisms

Certification certificates and test reports require proper management. Establishing the following documentation system is recommended:

• Product Certification Matrix: Recording certification status, certificate numbers, validity periods, and next review dates for each product model
• Technical File Archives: Including design drawings, key component lists, BOM tables, test reports, and design change records
• Electronic Certificate Storage: Establishing dual backups (cloud and local) to ensure certificates remain traceable long-term

For enterprises with multiple product lines and markets, configuring dedicated or part-time compliance management personnel to track certification status and regulatory changes is recommended.

Step Four: Plan Certification Timeline and Budget

Certification costs vary considerably based on product type, target market, and number of test items. The following are common cost considerations:

• Base Testing Fees: Including individual tests for EMC, safety, and RF—individual item fees typically range in the tens of thousands of RMB
• Differential Testing Fees: The same product may require supplemental testing due to software version or hardware version differences
• Certificate and Annual Fees: Some certifications (such as FCC) require annual maintenance fees
• Translation and Notarization Fees: Export documents may require official language versions of target markets

Reasonable timeline planning reduces costs. Prioritizing GB testing first, then using GB data as a foundation to simultaneously advance CE/FCC certification is recommended; for products sold in multiple markets, consider the "one test, multiple reports" approach.

Step Five: Continuously Track Standard Updates

Standard systems are not static. EU CE directives undergo regular revisions (such as RoHS 2.0 upgrading to RoHS 3.0), US FCC rules update with technological development, and Chinese GB standards continue to evolve.

The following methods are recommended for tracking standard developments: monitoring announcements from target market regulatory authorities, subscribing to industry standards information services, participating in security industry exhibitions and seminars, and maintaining regular communication with certification service providers.

FAQ

Q1: Is ONVIF certification mandatory?

ONVIF certification is not a mandatory market access requirement in any country or region. Its essence is an interoperability standard developed by an industry organization, adopted voluntarily by manufacturers. However, in medium and large security projects, tender documents typically explicitly require devices to support ONVIF protocols to reduce system integration risks. Therefore, for export equipment targeting mid-to-high-end markets, ONVIF compliance is recommended as a standard configuration.

Q2: Can GB test reports be used directly for CE or FCC certification?

They cannot directly replace each other but can serve as technical references. GB testing and CE/FCC certification have different testing standards, methods, and limit requirements. For example, in EMC testing, while GB and EN standards have similar test items, limits and test setup details differ. It is recommended to conduct testing at a single multi-accredited laboratory, where one round of testing can generate reports conforming to both GB and CE/FCC requirements.

Q3: Is CE or FCC certification required for Southeast Asian export?

Most Southeast Asian countries do not have mandatory certifications similar to CE or FCC. However, note that: customs authorities in some Southeast Asian countries may require originating country certifications as reference for clearance; large project owners may set their own certification requirements; equipment with wireless functions may require type approval from local communications regulators in certain countries. Before entering a new market, it is recommended to engage professional organizations to verify specific requirements.

Q4: Can certification certificates be shared for the same product sold in multiple markets?

Certification certificates themselves cannot be directly shared because each certification targets a specific market jurisdiction. However, test data and test reports can be reused—provided the testing laboratory has the necessary accreditations and test items cover target market requirements. For example, after completing testing at a laboratory with both CNAS and FCC recognition, a single device can generate both GB and FCC reports, but CE certification may require additional LVD or RED testing.

Q5: How to determine if a product requires FCC certification?

The determination is based on whether the product has RF transmission functions. Common security equipment requiring FCC certification includes: network cameras supporting WiFi, wireless alarm systems using Bluetooth or ZigBee, mobile surveillance devices with built-in 4G/LTE modules, wireless doorbells, and smart locks. Wired equipment without any RF transmission functions (such as traditional analog cameras, wired NVRs) typically only requires FCC SDoC declaration, without TCB certification.

Conclusion and Outlook

This article systematically analyzes the positioning and relationships of four major standard categories—GB, ONVIF, CE, and FCC—in security equipment export. The core conclusions are as follows:

Different standard natures require combined application to cover compliance requirements. GB standards address domestic market access, ONVIF/PSIA addresses device interoperability, and CE/FCC addresses legal market access for target export destinations. These address different concerns and do not replace one another.

Certification planning should be positioned before the product definition phase. Clarifying target markets during the R&D phase while simultaneously planning certification pathways avoids repeated testing and cost waste caused by design changes later.

Selecting laboratories with multi-accreditation capabilities is key to improving efficiency. The "one test, multiple reports" model significantly reduces certification costs and timelines.

Standard systems continue to evolve, requiring ongoing compliance management and tracking. Standard regulations in the EU, US, and China undergo regular updates. Export enterprises should establish standard tracking mechanisms to respond to changes promptly.

For Chinese security enterprises, overseas compliance is not an obstacle but an opportunity to enhance product competitiveness. Through systematic certification planning, combining GB performance advantages, ONVIF interoperability convenience, and target market access requirements, enterprises can establish a stronger competitive position in Southeast Asia and global markets. For detailed target market access requirements or certification planning support, contact the Global SecurityExport professional team for customized solutions.