The US Cyber Trust Mark would require smart products to meet certain thresholds, including ongoing software security support, to qualify for the program.