Core security requirements:

first, security classification system, dividing elevator cybersecurity into four levels SL1-SL4, elevators in public transport, hospitals, airports must reach SL3-SL4 high-level security, residential elevators SL2 and above, clarifying protection measures, security testing, risk assessment requirements for each level;

second, full life cycle protection, covering whole process of design, development, production, operation, scrapping:

①Design: security architecture, encryption algorithm, access control;

②Development: secure coding, vulnerability scanning, penetration testing;

③Production: secure firmware, digital signature, anti-tampering;

④Operation: real-time monitoring, intrusion detection, emergency response;

⑤Scrapping: data erasure, secure destruction;

third, core protection technology, mandating configuration of seven security modules: data encryption (AES-256), identity authentication (multi-factor), firewall, intrusion prevention, malicious code detection, security audit, vulnerability repair, elevator remote interface, IoT module, APP control must undergo security reinforcement, penetration testing, certification and authorization;

fourth, data security protection, elevator operation data, fault data, passenger information, video data must be encrypted storage, transmission encryption, access authorization, retention audit, complying with GDPR, personal information protection law, strictly prohibiting data leakage, illegal collection, abuse;

fifth, emergency response mechanism, establishing security event monitoring, early warning, disposal, traceability, reporting system, cyber attack response time ≤1 minute, emergency disposal ≤30 minutes, security vulnerability repair within 72 hours;

sixth, testing and certification requirements, elevator products must pass IEC 62443 cybersecurity certification, penetration testing, vulnerability scanning, obtain security certification certificate before marketing, imported elevators need to provide international cybersecurity certification. After implementation, it will completely prevent elevator cybersecurity risks, providing security guarantee for global intelligent elevator and IoT elevator development.