N.J. Admin. Code § 13:69E-1.28H - Requirements for alterable media

(a) When required by Division rules, critical game code which resides in alterable media shall be designed to perform self authentication upon power-up.

(b) Software that resides in alterable media shall implement a methodology that produces an output digest of critical game code with a 128-bit complexity at a minimum. The output digest shall be encrypted using an asymmetrical encryption algorithm with a 512-bit key, or other secure method approved by the Division.

(c) The process used to encrypt the output digest mentioned above shall be secure and prevent unauthorized access to the asymmetrical encryption algorithm's private key.

(d) Critical game code shall be authenticated using a public key via software contained in a separate and verifiable one time programmable device such as an erasable programmable read-only memory (EPROM), or on a secure medium approved by the Division. If authentication fails, the gaming device shall enter a hard tilt.

(e) Slot machines shall perform a background check on critical game code at least once every hour during game operation. If a failure is detected, the gaming device shall enter a hard tilt which requires employee intervention to clear. Once cleared, the game shall reset and perform a complete self authentication.

Notes

N.J. Admin. Code § 13:69E-1.28H