电梯、自动扶梯和自动人行道的电气要求.第20部分:网络安全

[中文适用范围]： 本文件规定了按照类似要求设计的新型电梯、自动扶梯和自动人行道（在本文中称为“受控设备 (EUC)”）以及连接到 EUC 的其他电梯相关设备的网络安全要求。本文件规定了以下生命周期步骤中与网络安全威胁相关的产品和系统要求： — 产品开发（流程和产品要求）； — 制造； — 安装； — 操作和维护； — 退役。本文件涉及 IEC 62443-4-1:2018 图 2 中所示的 EUC 产品供应商和系统集成商的角色。本文件未涉及 IEC 62443-4-1:2018 图 2 中所示的资产所有者的角色，但定义了 EUC 的产品供应商和系统集成商的要求，以建立文档，允许资产所有者（在本文件中称为“EUC 所有者”）实现和维护 EUC 的安全。本文件规定了以下方面的最低网络安全要求： — 基本功能； — 安全功能； — 报警功能。本文件适用于能够连接到外部系统（如楼宇网络、云服务或服务工具）的 EUC。连接能力可以通过现场永久可用的设备或在安装、运行和维护或退役步骤期间临时带到该位置的设备实现。EUC 与外部系统和服务的接口属于本文件的范围。外部系统和服务本身不在本文件的范围内。本文件不适用于在其发布日期之前安装的 EUC。1 [外文原描述]： This document specifies cybersecurity requirements for new lifts, escalators and moving walks, referred to in this document as “equipment under control (EUC)”, designed in accordance with the ISO 8100 series. It is also applicable with other lift, escalator and moving walk standards that specify similar requirements, and to other lift-related equipment connected to the EUC. This document specifies product and system requirements related to cybersecurity threats in the following lifecycle steps: — product development (process and product requirements); — manufacturing; — installation; — operation and maintenance; — decommissioning. This document addresses the roles of product supplier and system integrator as shown in IEC 62443-4-1:2018, Figure 2, for the EUC. This document does not address the role of asset owner as shown in IEC 62443-4-1:2018, Figure 2, but defines requirements for the product supplier and system integrator of the EUC to establish documentation allowing the asset owner, referred to as the “EUC owner” in this document, to achieve and maintain the security of the EUC. This document specifies the minimum cybersecurity requirements for: — essential functions; — safety functions; — alarm functions. This document is applicable to EUCs that are capable of connectivity to external systems such as building networks, cloud services, or service tools. The capability to connectivity can exist through equipment permanently available on site, or equipment temporarily brought to the location during the installation, operation and maintenance, or decommissioning steps. EUC interfaces to external systems and services are in the scope of this document. External systems and services as such are out of the scope of this document. This document does not apply to EUC that are installed before the date of its publication.