Covers the whole chain of elevator control systems, IoT terminals and cloud platforms:

① Secure development lifecycle: requires embedding security mechanisms in the whole process from design, R&D, testing to operation and maintenance;

② Communication security: mandatory TLS 1.3 encrypted transmission, device identity authentication, communication protocol whitelist;

③ Data security: hierarchical encryption of operation data, fault data and video data, prohibiting plaintext storage;

④ Access control: graded remote operation and maintenance permissions, full audit of operation logs, automatic logout after timeout;

⑤ Protection capability: resists DDoS attacks, virus intrusion, illegal firmware tampering, vulnerability response ≤24 hours.


Applicable to all new and renovated elevators with networking functions, unqualified cybersecurity will result in suspension of use registration, building a secure foundation for elevator intelligence.