N.Y. Comp. Codes R. & Regs. tit. 9 § 5316.11

Current through Register Vol. 46, No. 45, November 2, 2024

Section 5316.11 - Contents of critical memory

(a) Critical memory. Critical memory is used to store all data that is considered vital to the continued operation of the kiosk, including, without limitation:

(1) all electronic meters required in section 5316.17 of this Part; including last-bill data and door-open metering;

(2) voucher-redeemed log, provided such log is not stored on printed paper within the device; and

(3) software state (the last normal state, last status or tilt status the kiosk software was in before interruption).

(b) Function of NV memory reset. Following the initiation of a NV-memory-reset procedure (using a certified NV-memory-clear method) the kiosk software shall execute a routine that initializes all bits in critical NV memory to the default state. All memory locations intended to be cleared as per the NV-memory-clear process shall be reset fully in all cases. For kiosks that allow for partial NV-memory clears, the methodology in doing so shall be accurate.

(c) Maintenance of critical memory. Critical memory storage shall be maintained by a methodology that enables errors to be identified. Such methodology may involve signatures, checksums, partial checksums, multiple copies, timestamps and/or effective use of validity codes. This subdivision is not intended to preclude the use of alternate storage media types, such as hard disk drives, for the retention of critical data. Such alternate storage media shall maintain critical data integrity in a manner consistent with the requirements in this section, as applicable to the specific storage technology implemented.

(d) Data alteration. A kiosk shall not permit the alteration of any meter or error-condition log information without supervised access controls. In the event meter or error-condition log data is changed, an audit log shall be capable of being produced to document:

(1) data element altered;

(2) data element value prior to alteration;

(3) data element value after alteration;

(4) time and date of alteration; and

(5) personnel that performed alteration (user login).

N.Y. Comp. Codes R. & Regs. Tit. 9 § 5316.11

Adopted New York State Register November 16, 2016/Volume XXXVIII, Issue 46, eff. 11/16/2016