GLI-19: - Gaming Laboratories International

GLI Standard #19 – Standards for Interactive Gaming Systems (Suppliers) Version 1.0
Final
security domain shall be synchronized with an agreed accurate time source.
7.3.11 Communications Security Management. This section refers to communications between
the host Gaming Platform and an end player device, but it also applies to communications
between other components or equipment of the Gaming Platform.
a) Message authentication must be used with critical message types, such as jackpot wins
and password/PIN transmissions, in order to verify the correct receipt of the message by
the end player device, host or related equipment. A protocol that doesn’t correct errors or
re-send erroneous packets (e.g. UDP) may be used as long as no critical game data or
information is sent in this manner. For example, if UDP is being used to stream video or
sound then it would not be acceptable to have the game instructions or paytable in this
format only.
b) The game server must be able to validate all of the information received from the client to
ensure no additional data (such as a worm) has been sent.
c) If it has been detected that additional data (such as a worm) has attached itself to the
received data, the game server must not allow the extraneous byte code to pass through to
the Gaming Platform.
d) All protocols must use communication techniques which have proper error detection
and/or recovery mechanisms and meet the following rules:
i. The high level protocol must employ techniques (e.g. end to end
acknowledgment) such that it will not lose messages – even when one end or the
ii.
other restarts;
These techniques must not cause either the Gaming Platform or any end player
device to completely halt all processes while waiting for this acknowledgement.
e) The higher level protocol must employ techniques (e.g. transmission numbers) such that
repeated messages are identified and discarded – even when one end or the other restarts;
f) These requirements do not apply to unsecured messages such as broadcast messages;
g) All functions of the protocol must be clearly specified in its documentation;
h) The following rules apply to the timestamps in a high level protocol:
i. It must include a provision for the transmitting system (i.e. Gaming Platform or
end player device) to insert a local timestamp in every message it sends. This
timestamp will assist in claims of equipment malfunction involving run away
Chapter Seven: Information Systems Security (ISS) Requirements Page 59
Copyright © 2011 Gaming Laboratories International, LLC
All Rights Reserved.