ISO 8102-20:2022 电梯、自动扶梯和自动人行道的电气要求 第20部分：网络安全

标准编号：ISO 8102-20:2022

中文名称：电梯、自动扶梯和自动人行道的电气要求 第20部分：网络安全

英文名称：Electrical requirements for lifts, escalators and moving walks — Part 20: Cybersecurity

发布日期：2022-08

标准范围

本文件规定了根据ISO8100系列。它也适用于规定类似要求的其他电梯、自动扶梯和自动人行道标准，以及与EUC相连的其他电梯相关设备。本文件规定了以下生命周期步骤中与网络安全威胁相关的产品和系统要求:—？产品开发（过程和产品要求）；—？制造业—？安装—？操作和维护；—？退役。本文件阐述了IEC62443-4-1:2018，图2，对于EUC。本文件未涉及IEC62443-4-1:2018，图2，但规定了EUC产品供应商和系统集成商建立文件的要求，使资产所有者（本文件中称为“EUC所有者”）能够实现和维护EUC的安全。本文件规定了以下最低网络安全要求:—？基本功能；—？安全功能；—？报警功能。本文档适用于能够连接到外部系统（如构建网络、云服务或服务工具）的EUC。连接能力可以通过现场永久可用的设备，或在安装、操作和维护或停运步骤期间临时带到现场的设备来实现。EUC与外部系统和服务的接口在本文件的范围内。此类外部系统和服务不在本文件的范围内。本文档不适用于在发布日期之前安装的EUC。

This document specifies cybersecurity requirements for new lifts, escalators and moving walks, referred to in this document as “equipment under control (EUC)”, designed in accordance with the ISO 8100 series. It is also applicable with other lift, escalator and moving walk standards that specify similar requirements, and to other lift-related equipment connected to the EUC.This document specifies product and system requirements related to cybersecurity threats in the following lifecycle steps:—    product development (process and product requirements);—    manufacturing;—    installation;—    operation and maintenance;—    decommissioning.This document addresses the roles of product supplier and system integrator as shown in IEC 62443-4-1:2018, Figure 2, for the EUC.This document does not address the role of asset owner as shown in IEC 62443-4-1:2018, Figure 2, but defines requirements for the product supplier and system integrator of the EUC to establish documentation allowing the asset owner, referred to as the “EUC owner” in this document, to achieve and maintain the security of the EUC.This document specifies the minimum cybersecurity requirements for:—    essential functions;—    safety functions;—    alarm functions.This document is applicable to EUCs that are capable of connectivity to external systems such as building networks, cloud services, or service tools. The capability to connectivity can exist through equipment permanently available on site, or equipment temporarily brought to the location during the installation, operation and maintenance, or decommissioning steps.EUC interfaces to external systems and services are in the scope of this document. External systems and services as such are out of the scope of this document.This document does not apply to EUC that are installed before the date of its publication.

标准预览图