On August 29, 2025, the State Administration for Market Regulation and the Standardization Administration of China officially issued the national standard GB/T 46151-2025 Electrical requirements for lifts, escalators and moving walks—Information transmission and control security, which will be officially implemented on March 1, 2026. It is applicable to newly installed elevators, escalators and moving walks equipped with network communication functions from the date of implementation of the standard. The core contents of this standard include: First, clarify the scope of application of the standard, covering the electrical control systems of all elevators, escalators and moving walks that can be connected to external systems (such as building networks, cloud services, service tools), applicable to the information transmission and control security management of the whole life cycle of equipment installation, use, maintenance and decommissioning. Second, establish an elevator information transmission and control security system, and formulate comprehensive security protection technical requirements from five dimensions: physical security, network communication security, equipment security, application security and data security. Third, refine the requirements for identity authentication and access control, clarify the mandatory requirements for the identity authentication mechanism, hierarchical management of access rights, and the principle of minimum authority for communication between the elevator control system and external systems, and standardize the security guidelines for user accounts and key management. Fourth, standardize the requirements for information transmission security, formulate special technical standards for data encryption, integrity verification, tamper prevention, and replay attack prevention for information transmission between the elevator control system and external systems, and clarify the security requirements for communication protocols. Fifth, strengthen the control security requirements, formulate mandatory security guidelines for operation authorization, instruction verification, operation audit, and emergency rollback for elevator remote control, remote debugging, and remote software update scenarios, to ensure the safety and reliability of remote control operations. Sixth, standardize the requirements for data security and privacy protection, clarify the security guidelines for the collection, storage, transmission, use and destruction of elevator operation data, maintenance data and personal information, and prohibit illegal collection, leakage and abuse of user personal information. Seventh, add the requirements for security audit and event traceability, clarifying that the elevator control system must have a security audit function, and fully record all key operations such as remote operations, system login, parameter modification, and software update. The retention period of audit records is not less than 1 year to ensure that security events can be traced. Eighth, standardize the requirements for security testing and verification, formulate the testing methods, risk assessment process and qualification criteria for elevator information transmission and control security, and clarify the security verification requirements before the product is launched. The release of this standard fills the gap of national standards for elevator information transmission and control security in China's elevator industry, provides a unified technical basis for the network security protection of smart elevators, and comprehensively improves the information security protection level of smart elevators in China.