Manufacturing specifications - Credit ticket voucher redemption kiosk

1. A credit ticket voucher redemption kiosk must be used in conjunction with a manufacturer's electronic pull-tab device operating system and must be approved by the attorney general. A manufacturer of a kiosk must have the kiosk and electronic pull-tab operating system tested by an approved independent testing laboratory as required in section 99-01.3-16-10. All electrical and mechanical parts and design principles of the redemption kiosk may not subject a player to any physical hazards and proof of underwriters laboratories or equivalent certification is required. A credit ticket voucher redemption kiosk must accept only a credit ticket voucher from a manufacturer's own electronic pull-tab device. It may not accept any coin, currency, token, or any item other than a credit ticket voucher. A credit ticket voucher redemption kiosk may only dispense United States currency or a credit ticket voucher. A credit ticket voucher redemption kiosk must: a. Reject a credit ticket voucher that is not from the kiosk manufacturer's device at the site; b. Reject a credit ticket voucher that is not redeemed on the same business day as printed; c. Reject any reproduction of a credit ticket voucher; d. When a credit ticket voucher is inserted into the manufacturer's kiosk, immediately dispense the currency for the dollar value on the credit ticket voucher. For any balance remaining after the currency is dispensed, the kiosk must reissue a credit ticket voucher to the player which may be inserted into the manufacturer's electronic pull-tab device for credit or cashed in by the player and must have the option to be a charitable donation to the organization. The kiosk must display the donation request to the player with the option to confirm or deny. For any donation to the organization selected by the player, the kiosk may not require a minimum amount and must accept any amount of the balance remaining from the credit ticket voucher redemption. For a reissued credit ticket voucher, the voucher must clearly state the words "Redemption Kiosk" or similar approved language on its face. The printed words must be a minimum font size of twenty point; e. Have the option for part of the balance of a redeemed credit ticket voucher to be a charitable donation to the organization, and the kiosk must display the request to the player with the option to confirm or deny; f. Reject an invalid credit ticket voucher and provide a message regarding "invalid credit ticket voucher" or a similar phrase visible to a player; and g. Account for and provide accounting information for three years from the end of the quarter in which the activity occurred. In addition to the information required by subdivision a of subsection 22 of section 99-01.3-16-09.6, each manufacturer's kiosk activity must be included on the interim period electronic pull-tab activity report. An interim period is the accounting period for electronic pull-tab and kiosk activity since the last time activity was accounted for. In addition to the required information on an interim period electronic pull-tab activity report under subsection 22 of section 99-01.3-16-09.6, the report must separately account for each kiosk at the site and include: (1) Device identification or serial number; (2) Site name; (3) Name of manufacturer; (4) Beginning and ending date and time of the interim period; (5) Date and time the report is generated by the organization. This must be the same as the ending date and time of the interim period; (6) Total number of credit ticket vouchers in; (7) Total dollar value of redeemed credit ticket vouchers in kiosk; (8) Total number of credit ticket vouchers reissued from kiosk; (9) Total dollar value of charity donations, if applicable; and (10) Total dollar value of currency dispensed from kiosk. 2. A kiosk system must be capable of identifying the beginning date and time of an interim period, which must be the ending date and time of the previous interim period credit ticket voucher report that was generated for the kiosk. 3. A kiosk system may not allow for the overlap of reporting between two or more interim periods. 4. A redemption kiosk must have an identification tag affixed to the exterior of the kiosk by the manufacturer, which is not removable without leaving evidence of tampering, and this tag must include the following information: a. The manufacturer; b. A unique serial number; and c. The model number. 5. An on/off switch that controls the electrical current supplied to the redemption kiosk shall be located in a secured area of the redemption kiosk. The on/off positions of the switch shall be clearly labeled. 6. Touch screen displays must be accurate, and if required by their design, must support a calibration method to maintain that accuracy; alternatively, the display hardware may support automatic self-calibration. 7. Each printed circuit board must be clearly identifiable by an alphanumeric identification and, when applicable, a revision number. If track cuts, patch wires, or other circuit alterations are introduced to the printed circuit board, then a new revision number must be assigned. 8. The credit ticket voucher redemption kiosk must be constructed of metal and be robust enough to resist forced entry into any secured doors, areas, or compartments. In the event that extreme force is applied to the cabinet materials causing a potential breach in kiosk security, evidence of tampering must be conspicuous. Secured areas or secured compartments shall include, as applicable, the external doors such as the main door, currency compartment doors such as a drop box door or stacker door, and other sensitive access areas of the credit ticket voucher redemption kiosk. The following apply to all credit ticket voucher redemption kiosk compartments and doors: a. External doors must be manufactured of materials that are suitable for allowing only legitimate access to the inside of a credit ticket voucher redemption kiosk. The key must be keyed separately from any other manufacturer's credit ticket voucher redemption kiosk. b. External doors and their associated hinges must be capable of withstanding determined and unauthorized efforts to gain access to the interior of the credit ticket voucher redemption kiosk and must leave conspicuous evidence of tampering if such an attempt is made; c. The seal between the credit ticket voucher redemption kiosk and the external door must be designed to resist the entry of objects. It must be impossible to insert an object into the credit ticket voucher redemption kiosk that disables a door open sensor when the credit ticket voucher redemption kiosk door is fully closed, without leaving conspicuous evidence of tampering; and d. All external doors must be secure and support the installation of locks. 9. Any doors that provide access to secure areas of the credit ticket voucher redemption kiosk shall be monitored by door access detection software. The detection software must register a door as being open when the door is moved from its fully closed and locked position, provided power is supplied to the credit ticket voucher redemption kiosk and when any door that provides access to a secured area or secured compartment registers as open, the credit ticket voucher redemption kiosk must cease operation and display an appropriate error message. This error condition must be communicated to the back-office platform when such functionality is supported. 10. The credit ticket redemption kiosk software shall contain sufficient information to identify the software revision level. The credit ticket voucher redemption kiosk or electronic pull-tab central system must have the ability to authenticate that all regulated critical components contained in any credit ticket voucher redemption kiosk software are valid each time the software is loaded for use and, where supported by the system, on demand. Critical components may include elements that control credit ticket voucher redemption kiosk communications, peripheral device firmware, or other components that affect regulated operations of the credit ticket voucher redemption kiosk. a. The authentication must employ a hash algorithm which produces a message digest of at least one hundred twenty-eight bits. Other test methodologies shall be reviewed on a case-by-case basis. b. In the event of a failed authentication, the credit ticket voucher redemption kiosk must cease operation and display an appropriate error message. 11. It must be possible to perform an independent integrity check of the credit ticket voucher redemption kiosk software from an outside source. This verification is required for all control programs that affect the integrity of the credit ticket voucher redemption kiosk. The verification must be accomplished by being authenticated by a third-party application run from the credit ticket voucher redemption kiosk by allowing a third-party device to authenticate the media. 12. Critical nonvolatile memory must be used to store all data elements that are considered vital to the continued operation of the credit ticket voucher redemption kiosk software. Critical nonvolatile memory may be maintained by the credit ticket voucher redemption kiosk. 13. If operation relies on locally stored critical nonvolatile memory, the credit ticket voucher redemption kiosk must have a backup or archive capability, which allows the recovery of critical nonvolatile memory should a failure occur. 14. Critical nonvolatile memory storage must be maintained by a methodology that enables errors to be identified. This methodology may involve signatures, checksums, redundant copies, database error checks, and other methods. 15. Comprehensive checks of critical nonvolatile memory data elements must be made upon power up and program resumption. 16. An unrecoverable corruption of critical nonvolatile memory must result in an error. Upon detection, the credit ticket voucher redemption kiosk software shall cease operation and display an appropriate error message. Additionally, the critical nonvolatile memory error shall cause any communication external to the kiosk to cease. 17. A credit ticket voucher redemption kiosk player interface must: a. Clearly indicate the functions of all buttons, touch, or click points within the area of the button, touch point, or click point, and within the help menu. There may not be functionality available through any buttons, touch points, or click points on the player interface that are hidden or undocumented. b. Map any resizing or overlay of the player interface accurately to reflect the revised display, touch points, or click points. c. Clearly communicate player interface instructions, as well as information on the functions and services provided by the credit ticket voucher redemption kiosk, to the player and not be misleading or inaccurate. d. Adapt the display of this information to the player interface. 18. The credit ticket voucher redemption kiosk software may not be adversely affected by the simultaneous or sequential activation of the various inputs and outputs which might, whether intentionally or not, cause malfunctions or invalid results. 19. Changes to any configuration settings for the regulated operations of the kiosk may be only performed by a secure means. 20. If the credit ticket voucher redemption kiosk is unable to redeem the full amount of the original credit ticket voucher, the voucher must be returned or the kiosk must reissue a credit ticket voucher in the amount of the remaining balance. 21. When a credit ticket voucher redemption kiosk is being accessed to test or audit, the following rules apply: a. Entry to test or audit mode must be possible only using a secure means. b. If the kiosk is in a test or audit mode: (1) The redemption kiosk must indicate clearly that it is in this mode; and (2) Any test or audit that incorporates funds entering or leaving the kiosk must be completed prior to the resumption of normal kiosk operation. c. The test or audit mode may not affect live transaction data or meter values. 22. The credit ticket voucher redemption kiosk software must be designed or programmed such that it may only communicate with authorized electronic pull-tab system components through secure communications. After a program interruption, any communications to an external device must not begin until the program resumption routine, including any self-test, is completed successfully. If communication between the redemption kiosk and the electronic pull-tab system is lost, the redemption kiosk software must cease operations related to that communication and display an appropriate error message. It is permissible for the redemption kiosk software to detect this error when the redemption kiosk tries to communicate with the electronic pull-tab system. 23. Any credit ticket voucher redemption kiosk which is capable of bidirectional communication with internal or external associated equipment, or other equipment, must utilize a communication protocol which ensures that erroneous data or signals do not adversely affect the integrity or operation of the redemption kiosk. 24. A credit ticket voucher redemption kiosk must maintain an internal clock that is able to accurately reflect the current time and date and synchronize its clock to that of the central system. 25. Electronic accounting meters must be at least ten digits in length. Eight digits must be used for the dollar amount and two digits used for the cents amount. The meter must automatically roll over to zero once its maximum logical value has been reached. Meters must be labeled so they can be clearly understood in accordance with their function. The required electronic accounting meters are as follows: a. Handpay. The credit ticket voucher redemption kiosk software must have a meter that accumulates the total value of payments made by an attendant when the kiosk is incapable of making the proper payment. b. Voucher in. The kiosk software must have a meter that accumulates the total value of all credit ticket vouchers accepted by the redemption kiosk. c. Voucher out. The kiosk software must have a meter that accumulates the total value of all credit ticket vouchers issued by the redemption kiosk. 26. Occurrence meters must be at least eight digits in length; however, they are not required to automatically roll over. Meters must be labeled so they can be clearly understood in accordance with their function. The required electronic occurrence meters are as follows: a. External doors. The credit ticket voucher redemption kiosk software must have meters that accumulate the number of times any external door has been opened since the last nonvolatile memory clear, provided power is supplied to the kiosk. b. Stacker door. The redemption kiosk software must have a meter that accumulates the number of times the stacker door has been opened since the last nonvolatile memory clear, provided power is supplied to the kiosk. c. Credit ticket vouchers in. d. Credit ticket vouchers out. 27. There must be the capacity to display a complete transaction log for the previous thirty-five transactions that incremented any of the meters related to currency issued, credit ticket vouchers received, and credit ticket vouchers out. The following information must be displayed: a. The transaction value in local monetary units in numerical form; b. The time of day of the transaction, in twenty-four-hour format showing hours and minutes; c. The date of the transaction, in any recognized format, indicating the day, month, and year; and d. For credit ticket voucher transactions, only the last four digits may be displayed. 28. The last one hundred significant events for credit ticket voucher redemption kiosks must be stored with an appropriate timestamp in one or more secure logs that are not accessible to the player and which at minimum include the following events, as applicable: a. Software verification errors or critical nonvolatile memory errors, if technically possible to log these events based on the nature and severity of the error; b. Changes made to redemption kiosk configurations; c. Redemption kiosk communication failures, if supported; d. Power resets; e. Handpay conditions; f. Access to secured areas or secured compartments; and g. Peripheral errors, if supported.