N.Y. Comp. Codes R. & Regs. tit. 9 § 5316.9

Current through Register Vol. 46, No. 45, November 2, 2024
Section 5316.9 - Kiosk terminal requirements
(a) Kiosk terminal security. The main door, which shall be locked, shall be manufactured of materials that are suitable for allowing only legitimate access to the inside of the kiosk terminal (i.e., locks, doors and their associated hinges) shall be capable of withstanding determined and unauthorized efforts to gain access to the inside of the kiosk and shall leave evidence of tampering if such an entry is made.
(b) Kiosk terminal wiring. A kiosk shall be designed so that power and data cables into and out of the kiosk can be routed so that such cables are not accessible to the general public. This requirement is for kiosk integrity reasons only, not for health and safety. Security-related wires and cables that are routed into a logic area shall be fastened securely within the interior of the kiosk terminal.
(c) On/off switch. An on/off switch that controls the electrical current shall be located in a place that is readily accessible within the interior of a kiosk so that power cannot be disconnected from outside of the kiosk using the on/off switch. The on/off positions of the switch shall be labeled.
(d) Switches and jumpers. If a kiosk contains switches and/or jumpers, all switches or jumpers shall be documented fully for evaluation by a licensed independent testing laboratory.
(e) Kiosk terminal identification. A kiosk shall have an identification badge affixed to the exterior of the cabinet by the manufacturer. Such badge shall not be removable without leaving evidence of tampering and shall include the following information:
(1) the manufacturer;
(2) a unique serial number;
(3) a kiosk model number; and
(4) the date of manufacture.
(f) Patron safety. Electrical and mechanical parts and design principals of a kiosk terminal shall not subject a patron to any physical hazards. The manufacturer of the devices or those that purchase the devices shall be responsible for safety and electromagnetic compatibility testing.
(g) Kiosk integrity. The licensed independent testing laboratory shall perform certain tests to determine whether or not outside influences affect performance or create cheating opportunities. This certification applies exclusively to tests conducted using current and retrospective methodology. During the course of testing, the laboratory shall inspect for marks or symbols indicating that a device has undergone product safety compliance testing. The laboratory shall also perform, where possible, a cursory review of submissions and information contained therein related to electromagnetic interference, radio frequency interference, magnetic interference, liquid spills, power fluctuations and environmental conditions. Electrostatic discharge testing is intended only to simulate techniques observed in the field being used to attempt to disrupt the integrity of the kiosk. A kiosk shall be able to withstand the following tests, resuming operation without operator intervention:
(1) electro-static interference. Protection against static discharges requires that the kiosk's conductive cabinets be grounded in such a way that static discharge energy shall not damage permanently or inhibit permanently the normal operation of the electronics or other components within the kiosk. Kiosks may exhibit temporary disruption when subjected to a significant electro-static discharge greater than human body discharge, but they shall exhibit the capacity to recover and complete any interrupted function without loss or corruption of any control or critical data information associated with the kiosk. The tests shall be conducted with a severity level of a maximum of 27 kilovolts air discharge; and
(2) state of kiosk. For commercial components involved in functions covered by this standard that are affected (e.g., a personal computer monitor), there shall be a method to determine the state the kiosk was in if any of the components fail from static discharge.
(h) Tower light. A kiosk involved in functions covered by this Part shall have a light located conspicuously on its top, that automatically illuminates when an error condition has occurred or a call attendant (if applicable) has been initiated by the patron. This requirement may be substituted for an alternate means that alerts gaming facility staff of error conditions and patron seeking assistance occurrences. Alternative means to alert staff may be considered on a case-by-case basis.
(i) Requirements for external doors/external compartments. The interior of the kiosk cabinet shall not be accessible when all doors are closed and locked. Doors shall be manufactured of materials that are suitable for allowing only legitimate access to the inside of the kiosk cabinet (i.e., locks, doors and their associated hinges). Doors shall be capable of withstanding determined and unauthorized efforts to gain access to the inside of the kiosk cabinet and shall leave evidence of tampering if such an entry is made.
(j) Kiosk logic door and logic area. A kiosk shall use a logic area that is a separately locked cabinet area (with its own locked door) that houses electronic components that have the potential to significantly influence the operation of the kiosk. There may be more than one such logic area in a kiosk.
(k) Electronic components. Electronic components that are recommended to be housed in one or more logic areas are:
(1) a central processing unit and any program storage device that contains software that may affect the integrity of the kiosk, including, without limitation, accounting, system communication and peripheral firmware devices involved in, or that significantly influence the intended operation of a kiosk or accounting, revenue or security. Any exceptions shall be evaluated on a case-by-case basis;
(2) communication-controller electronics and components housing the communication program storage device. Any exceptions shall be evaluated on a case-by-case basis; and
(3) the non-volatile (NV) memory back-up device, if applicable, shall be kept within a locked logic area.
(l) Coin/token and currency compartments. Coin or token and currency compartments shall be locked separately or similarly secured as approved by the commission in writing from the main kiosk cabinet area. Access to the currency storage area shall be secured via separate key locks and the kiosk shall be fitted with sensors that indicate door open/close or stacker receptacle removed, provided power is supplied to the kiosk. If the kiosk is interfaced with a monitoring system, these alerts shall be sent to the system when possible.
(m) Video monitors/touch screens. Video monitor touch screens shall meet the following criteria:
(1) A touch screen, if applicable, shall be accurate and once calibrated shall maintain that accuracy for at least the manufacturer's recommended maintenance period.
(2) A touch screen, if applicable, shall be able to be re-calibrated without access to the kiosk cabinet other than opening the main door.
(3) There shall be no hidden or undocumented buttons/touch points, if applicable, anywhere on the screen that affect negatively or impact the proper operation of the kiosk, except as provided for by the instructions for patron kiosk usage.
(n) Back-up of memory. A kiosk shall have the ability to retain data for all critical memory and shall be capable of maintaining the accuracy of all information required for 30 days after power is discontinued from the kiosk.

N.Y. Comp. Codes R. & Regs. Tit. 9 § 5316.9

Adopted New York State Register November 16, 2016/Volume XXXVIII, Issue 46, eff. 11/16/2016