1. 2007 NAGRA Annual Conference June 10-13, 2007 Electronic Bingo Card-minding Devices

2. Goals Goals Terms & Abbreviations Terms & Abbreviations Presentation Scope Presentation Scope Electronic Bingo Card-minding Devices

3. To have systems that account for all sales & voids To have systems that account for all sales & voids To verify only legitimate winners To verify only legitimate winners To provide the players, auditors & investigators with as much information as possible To provide the players, auditors & investigators with as much information as possible To identify areas in the ECM systems that are open to manipulation To identify areas in the ECM systems that are open to manipulation Goals

4. Electronic Card-minder or Electronic Card-minder or Electronic Card-minding ECM Point of Sale station POS Point of Sale station POS Caller/Verifier station Verifier or Caller/Verifier station Verifier or Caller stand Terms & Abbreviations

5. ECM Site System ECM Site System The computers & software, located at the bingo hall that connects with & controls or defines the operation of the card-minding devices. It includes the point of sale station, a caller station verifier, printers, & proprietary software. Terms & Abbreviations

6. ECM Device ECM Device Portable or fixed-base electronic devices, that are used by a bingo player to daub bingo card faces stored in the device. A portable is a hand-held, custom-built device. A fixed-base card-minding device is a stationary computer usually with a touch screen monitor. Terms & Abbreviations

7. Presentation Scope Security & Accuracy Security & Accuracy Audits & Investigations Audits & Investigations Testing Testing

8. Keys to Security and Accuracy of ECM Components Point of Sale Point of Sale Verifier Verifier Player Units Player Units Database/Server Database/Server Security Security

9. Point of Sale Transaction numbers should be consecutively numbered without gaps. Transaction numbers should be consecutively numbered without gaps.

10. Point of Sale Gaps in transaction numbers might be accounted for on an end of session report. Gaps in transaction numbers might be accounted for on an end of session report.

11. Point of Sale The transaction counter should not be re-settable. The transaction counter should not be re-settable. The server/POS should not repeat card faces within the same game and if possible not within the same session.* The server/POS should not repeat card faces within the same game and if possible not within the same session.* The POS should provide an end of session report. The POS should provide an end of session report. A listing of all sales of electronic devices, including the unit number and number of cards sold. A listing of all sales of electronic devices, including the unit number and number of cards sold. No changes can be made to the sales or voids once the end of session report has been run. No changes can be made to the sales or voids once the end of session report has been run.

12. The Michigan End of Session Report Missing As in Michigan the report should be the same for all manufacturers.* As in Michigan the report should be the same for all manufacturers.* The end of session reports or "Z" reports should be stored in non- volatile format on the system.* The end of session reports or "Z" reports should be stored in non- volatile format on the system.*

13. Other POS Reports

14. Detail Transaction Report

15. Verifier End of Session Report

16. Paper Only Summary Sales Report

17. Summary Report

18. Void Report

19. POS Player Receipts

20. Verifier The verifier should read the sales database before it determines an electronic card face to be a winner. The verifier should read the sales database before it determines an electronic card face to be a winner. The printed card face should show the winning pattern. The printed card face should show the winning pattern. The printed winning card faces must clearly state it is a winner. The printed winning card faces must clearly state it is a winner.

21. Verifier If possible the verifier should only print winning card faces. If possible the verifier should only print winning card faces. The printed winning electronic card face should include the sales receipts information.* The printed winning electronic card face should include the sales receipts information.*

22. Verifier The printed winning card face should include called ball information. The printed winning card face should include called ball information.

23. Verifier Display monitors and all fixed base screens, should display card faces presented as winners and identify them as winners or non-winners.* A printed non-winning card faces should clearly state that it is not a winner.

24. The verifier should provide an end of session Verifiers report with the winning card faces and the balls called by game.* The verifier should provide an end of session Verifiers report with the winning card faces and the balls called by game.* The end of session winners report should be accessible by modem.* The end of session winners report should be accessible by modem.* Verifier

25. Player Units Card face limits should be hard coded in the player software.* Card face limits should be hard coded in the player software.* Software versions should display on player units.* Software versions should display on player units.*

26. Player Units The receipt information should be viewable on the player screen.* The receipt information should be viewable on the player screen.* The player unit should turn off after the last game.* The player unit should turn off after the last game.*

27. Database/Server

28. Limited access Limited access The database should have report generation software The database should have report generation software The database and hard drive should be able to maintain one years activity The database and hard drive should be able to maintain one years activity Database/Server

29. Database/Server The server should be available for a connection via a modem dial-up

30. Security

31. Security Access to Windows desktop, Windows explorer, Windows menu should be blocked. Access to Windows desktop, Windows explorer, Windows menu should be blocked. Digital signatures of software versions. Digital signatures of software versions. Access levels for different job titles should be employed.* Access levels for different job titles should be employed.* Access to serial and USB ports should be restricted.* Access to serial and USB ports should be restricted.* Access to the CD player and disk driver should be restricted.* Access to the CD player and disk driver should be restricted.* Ask the Manufacturer if a Source Control software is used. Ask the Manufacturer if a Source Control software is used.

32. Security The laws and rules should prohibit the addition of non-approved software to the system site computers. The laws and rules should prohibit the addition of non-approved software to the system site computers. The system should have dial-in capabilities that allow verification of the digital signatures and approved software settings. The system should have dial-in capabilities that allow verification of the digital signatures and approved software settings. The system should log and time stamp all users granted access.* The system should log and time stamp all users granted access.* Screens for verifier and pos should be touch screens.* Screens for verifier and pos should be touch screens.* The server/pos/verifier case should be secure from tampering.* The server/pos/verifier case should be secure from tampering.*

33. Audits and Investigations Investigations or audits of conductors Investigations or audits of conductors Investigations or audits of manufacturers Investigations or audits of manufacturers Investigations of complaints Investigations of complaints

34. TESTING

35. Overview of ECM Testing Testing Criteria Testing Criteria Submission Requirements Submission Requirements Testing In Texas Testing In Texas

36. Testing Criteria Criteria are the standards or administrative rules used to perform the test. The criteria must be established in law and rules. The criteria are needed to determine whether a card-minding device as presented will be approved for use in a jurisdiction.

37. Submission Requirements Submission Requirements are guidelines that the test lab sets up to establish a level test base for all submissions and inform the manufacturers what will be expected during the submission and testing.

38. Testing in Texas

39. Digital signatures are made of critical.dll, ext,.bin files. Digital signatures are made of critical.dll, ext,.bin files. Crucial software settings are mapped and identified. Crucial software settings are mapped and identified.

40. Testing in Texas A letter of approval or denial is sent to the manufacture which includes a detail of findings, a listing of digital signatures, and approved settings. A letter of approval or denial is sent to the manufacture which includes a detail of findings, a listing of digital signatures, and approved settings.

41. Items Found in ECM Testing   A hand held was able to be loaded with games and cards manually, without using the site system POS to download cards.   A verifier that would print on both winning and non- winning card faces the words “Winning Receipt.”

42. Items Found in ECM Testing  An ECM system that uses cartridges to load session game schedules and card faces on to hand helds, had a button on the POS to re-charge the cartridges. When this recharge occurred no additional sale was recorded. This recharged cartridge when reinstalled, allowed the hand held to be used in subsequent sessions that used the same game schedule.

43. More Items  A POS that would fail to record the sales properly if more than a 1000 units of pull tabs were sold on one key in a single transaction.  A verifier that was printing the winning card faces with the numbers printed horizontal to the word BINGO on top.

44. More Items  A system allowed an account number, for card packs sold to be used on two fixed base units simultaneously during the same session.

45. More Items A system had a special key to transfer card packs from one hand held to another. It was found by pushing this transfer key a card pack would download to the next available hand held without a receipt being printed.

46. More Items  A system allowed voided Hand Held units to continue to play bingo and win as the verifier could not recognize voided card faces.  A system allowed sales to be changed on the database after the session was closed.