This standard is formulated under the jurisdiction of the National Technical Committee for Elevator Standardization of China, and is applicable to the safety design, production, inspection and operation and maintenance of information transmission systems, intelligent control systems, and IoT monitoring systems for passenger lifts, goods lifts, escalators and moving walks. The core contents of the standard include: first, clarifying the overall architecture of elevator information transmission and control security, dividing a four-level security protection system including equipment layer, control layer, network layer and application layer according to the dual protection principles of functional safety and network security, and clarifying the core security requirements of each level; second, refining the elevator data security specifications, clarifying the whole-process security requirements for the collection, transmission, storage and use of elevator operation data, user data and maintenance data, and formulating technical standards for data encryption, desensitization, backup and destruction, adapting to the data compliance requirements of different countries and regions around the world; third, formulating the network security protection standards for elevator control systems, clarifying the core technical indicators of identity authentication, access control, intrusion detection and firewall configuration, to prevent security risks such as remote illegal intrusion and malicious control; fourth, standardizing the access security requirements of elevator IoT devices, and clarifying the security access standards and firmware upgrade security specifications for edge computing devices, sensors and remote monitoring terminals; fifth, establishing an elevator information security risk assessment system and emergency disposal mechanism, and clarifying the whole-process management requirements for security vulnerability detection, risk classification, emergency response and vulnerability repair. The implementation of this standard will comprehensively standardize the network security and information security management of smart elevators in China, promote the standardized development of elevator intelligent technology, and also provide compliance technical support for the global export of China's smart elevators and IoT systems, adapting to the industrial network security access requirements of the global market.