网络安全 — 物联网安全与隐私 — 消费物联网网络安全标签框架

[中文适用范围]： 本文件定义了一个针对消费者物联网（IoT）产品网络安全标签计划的开发与实施的框架。文件提供了以下方面的要求和指导：— 消费者IoT产品相关的风险和威胁；— 相关方、角色和职责；— 相关标准和指导文件；— 符合性评估；— 标签的发放与维护；— 互认。本文件仅适用于以下类型的消费者IoT产品：— 多个设备可连接的IoT网关、基站和集线器；智能摄像头、电视机和音响；— 可穿戴设备；— 连接式烟雾探测器、门锁和窗户传感器；— 连接式家庭自动化和报警系统；— 连接式家电，如洗衣机和冰箱；— 智能家居助手；— 连接式儿童玩具和婴儿监视器。本文件不适用于非消费用途的产品。被排除的产品示例包括主要用于制造、医疗及其他工业用途的设备。本文件适用于消费者、开发者、网络安全标签发放机构及符合性评估机构。 [外文原描述]： This document defines a cybersecurity labelling framework for the development and implementation of cybersecurity labelling programmes for consumer Internet of things (IoT) products. It provides requirements and guidance on the following topics: — risks and threats associated with consumer IoT products; — stakeholders, roles and responsibilities; — relevant standards and guidance documents; — conformity assessment; — labelling issuance and maintenance; — mutual recognition. This document is limited to consumer IoT products, such as: — IoT gateways, base stations and hubs to which multiple devices connect; smart cameras, televisions, and speakers; — wearable devices; — connected smoke detectors, door locks and window sensors; — connected home automation and alarm systems; — connected appliances, such as washing machines and fridges; — smart home assistants; and — connected children’s toys and baby monitors. Products that are not intended for consumer use are excluded from this document. Examples of excluded devices are those that are primarily intended for manufacturing, healthcare and other industrial purposes. This document is applicable to consumers, developers, issuing bodies of cybersecurity labels and conformity assessment bodies.