1、 Collection of SANS standards in electronic format (PDF) 1. Copyright This standard is available to staff members of companies that have subscribed to the complete collection of SANS standards in accordance with a formal copyright agreement. This document may reside on a CENTRAL FILE SERVER or INTRA
2、NET SYSTEM only. Unless specific permission has been granted, this document MAY NOT be sent or given to staff members from other companies or organizations. Doing so would constitute a VIOLATION of SABS copyright rules. 2. Indemnity The South African Bureau of Standards accepts no liability for any
3、damage whatsoever than may result from the use of this material or the information contain therein, irrespective of the cause and quantum thereof. ISBN 978-0-626-21383-1 SANS 1718-4:2008Edition 2SOUTH AFRICAN NATIONAL STANDARDGaming equipment Part 4: Wagering record-keeping software Published by Sta
4、ndards South Africa 1 dr lategan road groenkloof private bag x191 pretoria 0001 tel: 012 428 7911 fax: 012 344 1568 international code + 27 12 www.stansa.co.za Standards South Africa SANS 1718-4:2008 Edition 2 Table of changes Change No. Date Scope Foreword This South African standard was approved b
5、y National Committee StanSA SC 71G, Information technology Gaming, in accordance with procedures of Standards South Africa, in compliance with annex 3 of the WTO/TBT agreement. In South Africa all matters relating to casinos, racing, gambling and wagering are controlled through the following Nationa
6、l and Provincial Acts: Eastern Cape Gambling and Betting Act, 1997 (Act No. 5 of 1997) Free State Gambling and Racing Act, 1996 (Act No. 6 of 1996) Gauteng Gambling Act, 1995 (Act No. 4 of 1995) KwaZulu-Natal Gambling Act, 1996 (Act No. 10 of 1996) Mpumalanga Gambling Act, 1995 (Act No. 5 of 1995) N
7、ational Gambling Act, 2004 (Act No. 7 of 2004) Northern Cape Gambling and Racing Act, 1996 (Act No. 5 of 1996) Northern Province Casino and Gaming Act, 1996 (Act No. 4 of 1996) Regulation of racing and betting ordinance (No. 28 of 1957) The North West Gambling Act, 2001 (Act No. 2 of 2001) Western C
8、ape Gambling and Racing Act, 1996 (Act No. 4 of 1996) The requirements of these Acts and any Regulations promulgated in terms of these Acts, as amended from time to time, take precedence over the requirements of this document. Any reference to “legislation”, “national legislation” or “national and p
9、rovincial legislation“ in this document means reference to the applicable provisions or requirements in the above-mentioned Acts or in their Regulations. This document was published in July 2008. This document supersedes SANS 1718-4:2002 (SABS 1718-4:2002) (edition 1). SANS 1718 consists of the foll
10、owing parts, under the general title Gaming equipment: Part 1: Casino equipment. Part 2: Limited payout gaming equipment. Part 3: Monitoring and control systems for gaming equipment. Part 4: Wagering record-keeping software. Part 5: Local area and wide area jackpot and progressive jackpot equipment.
11、 (In course of preparation.) Part 6: Not used. Part 7: Tokens. Part 8: Roulette wheels. Part 9: Central monitoring system for limited payout machines. In Annex A (r), reference is made to national legislation regarding the control of financial institutions. In South Africa, this means Financial Inst
12、itutions Control Act, 2007 (Act No. 28 of 2007). SANS 1718-4:2008 Edition 2 1 Introduction The requirements in this part of SANS 1718 are supplementary to and do not replace any of the requirements of relevant Acts (see foreword) or supporting Regulations of the provincial licensing authorities (PLA
13、) in South Africa. The intention of this part of SANS 1718 is to place sufficient controls on software and operations to ensure that wagering is fair, safe, secure, reliable, and auditable. It is not the intention of this part of SANS 1718 to unreasonably a) mandate a single solution or method of re
14、alizing an objective, b) limit technology application of software, c) limit creativity and variety of choice, d) limit marketability, or e) advantage any supplier or manufacturer of software. Alternative implementations to the requirements contained in this part of SANS 1718 will be considered on a
15、case-by-case basis by the provincial licensing authority (PLA). Situations or considerations that arise from evaluation of systems, which have not been addressed in this document (e.g. owing to omissions or the use of new technology), will be resolved at the sole discretion of the PLA as part of the
16、 approval process. SANS 1718-4:2008 Edition 2 2 Contents Page 1 Scope 3 2 Normative references 3 3 Definitions and abbreviations 4 3.1 Definitions 4 3.2 Abbreviations . 5 4 General requirements 5 4.1 Function of the WRS 5 4.2 Wagering software documentation 6 4.3 Wagering transactions . 6 5 Operatio
17、nal requirements 7 6 Software requirements 7 6.1 General 7 6.2 Verification of source compilation 8 6.3 Control and upgrade 8 6.4 Validity checks . 8 6.5 Control of the WRS 9 6.6 Backups and recovery . 9 6.7 Encryption of stored data. 9 6.8 Generation of reports and tax returns 9 6.9 Software securi
18、ty requirements . 11 6.10 Ticket and voucher printing 11 6.11 Security of the significant event data . 12 6.12 Storage of the significant event data . 12 6.13 Transaction logging 12 6.14 Clock 12 6.15 Prescribed formats for date and time display or printing . 13 6.16 Personal identification numbers
19、(PINs) and passwords 13 7 Significant events 13 7.1 General 13 7.2 Logging of significant events 13 7.3 Recovery of significant events log . 14 7.4 Definition of significant events . 14 7.5 Generic events. 14 Annex A (normative) PLA reports . 17 Annex B (normative) Additional requirements for system
20、s that include extended communications 22 Annex C (normative) Change control and upgrade management . 33 SANS 1718-4:2008 Edition 2 3 Gaming equipment Part 4: Wagering record-keeping software 1 Scope This part of SANS 1718 specifies the general hardware and software requirements and the list of sign
21、ificant events required by the South African Provincial Regulator Licensing Authorities (PLA), for recordkeeping software for the acceptance by licensed operators of wagers on events permitted by the PLA. NOTE 1 There are additional requirements in legislation (see foreword) for on-line and internet
22、 wagering. NOTE 2 This part of SANS 1718 does not include requirements for internet-based communication. 2 Normative references The following standards contain provisions which, through reference in this text, constitute provisions of this part of SANS 1718. All standards are subject to revision and
23、, since any reference to a standard is deemed to be a reference to the latest edition of that standard, parties to agreements based on this part of SANS 1718 are encouraged to take steps to ensure the use of the most recent editions of the standards indicated below. Information on currently valid na
24、tional and international standards can be obtained from Standards South Africa. SANS 222/CISPR 22, Information technology equipment Radio disturbance characteristics Limits and methods of measurement. SANS 61000-4-2/IEC 61000-4-2, Electromagnetic compatibility (EMC) Part 4-2: Testing and measurement
25、 techniques Electrostatic discharge immunity test. SANS 61000-4-3/IEC 61000-4-3, Electromagnetic compatibility (EMC) Part 4-3:Testing and measurement techniques Radiated, radio-frequency, electromagnetic field immunity test. SANS 61000-4-4/IEC 61000-4-4, Electromagnetic compatibility (EMC) Part 4-4:
26、 Testing and measurement techniques Electrical fast transient/burst immunity test. SANS 61000-4-5/IEC 61000-4-5, Electromagnetic compatibility (EMC) Part 4-5: Testing and measurement techniques Surge immunity test. SANS 61000-4-8/IEC 61000-4-8, Electromagnetic compatibility (EMC) Part 4-8: Testing a
27、nd measurement techniques Power frequency magnetic field immunity test. SANS 61000-4-9/IEC 61000-4-9, Electromagnetic compatibility (EMC) Part 4-9: Testing and measurement techniques Pulse magnetic field immunity test. SANS 1718-4:2008 Edition 2 4 3 Definitions and abbreviations 3.1 Definitions 3.1.
28、1 approved approved by the PLA 3.1.2 bet proposal and acceptance of a wager between two parties NOTE See legislation in foreword for legal definitions. 3.1.3 certification authority authority appointed in terms of section 25.2 of the National Gambling Act (Act No. 7 of 2004) to certify all gaming de
29、vices, both hardware and software 3.1.4 error event set of operational conditions for wagering record-keeping software that constitutes a deviation from the normal conditions or the conditions specified during a wagering transaction, during idle mode or during data interchange with other wagering re
30、cord-keeping software 3.1.5 late bet bet placed after the official carded time of the event 3.1.6 legislation national or provincial Act (see foreword) that deals with gambling, gaming, wagering, betting or horse-racing and any regulation or rule made in terms of such Act 3.1.7 liability a present c
31、ontractual or legal obligation from a past event, the settlement of which is expected to result in an outflow of funds from the betting operators resources NOTE For the purposes of take-back betting, operators might take back or cover the whole or any portion of their liability in respect of any bet
32、s laid. Any covering in excess of the determined liability is not permitted as a deductible expense with respect to betting tax and is deemed to be a bet, as in the normal course of betting. 3.1.8 provincial licensing authority legal body responsible for approving and controlling wagering record-kee
33、ping software in terms of the relevant legislation (see foreword) 3.1.9 multi-level security software security that has more than one user authorization or privilege level where each user has an individual user identity for access control and for identification of responsibility for data entry or tr
34、ansactions SANS 1718-4:2008 Edition 2 5 3.1.10 significant event set of operational conditions that are deemed to be significant and that are to be recorded by the WRS 3.1.11 test laboratory laboratory whose test results are accepted by the CA 3.1.12 ticket printed slip or electronic message confirm
35、ing the acceptance of a bet 3.1.13 voucher printed slip or electronic message that is redeemable for cash or credit on presentation 3.1.14 wagering device hardware device that forms part of a system that is used for the purposes of maintaining records of wagering transactions 3.1.15 wagering record-
36、keeping software totality of all equipment, software and procedures, manual or otherwise, involved in ensuring that the activity in a wagering venue or group of venues licensed by an PLA, is correctly recorded, that these records are correctly maintained and that the taxation levies can be correctly
37、 calculated and collected 3.1.16 wagering transaction sequence of actions and outputs initiated by the user/operator of the WRS, through the recording of a wager, by entering into the WRS the full particulars of the wager 3.2 Abbreviations CA certification authority CRC cyclic redundancy check FICA
38、Financial Intelligence Centres Act I/O input/output PLA provincial licensing authority TL test laboratory WORM write-once read-many WRS wagering record-keeping software 4 General requirements 4.1 Function of the WRS 4.1.1 The WRS shall: a) maintain accounting records of wagering transactions receive
39、d by the venue(s) for taxation revenue, statistical and audit purposes, as required by the PLA, b) detect, identify and act upon significant events, as required by the PLA, c) record all system transactions, as required by the PLA, and SANS 1718-4:2008 Edition 2 6 d) provide interrogation facilities
40、 for PLA inspectors and reports, as required by the PLA. 4.1.2 The WRS shall make provision for the recording of the following information as an absolute minimum in respect of customer account, failing which the WRS must reject the creation of customer account until all the mandatory fields are comp
41、leted: a) full name (i.e. given name(s) and family name); b) ID/passport number; c) physical address; and d) telephone contact numbers. 4.2 Wagering software documentation 4.2.1 The WRS shall have pertinent user manuals that shall: a) accurately depict the use of the software in its operating enviro
42、nment, b) provide sufficient detail and be sufficiently clear in the wording and diagrams to enable a user/operator to understand their meaning with minimal guidance, and c) address at least the following topics (as well as any other topics that the PLA may from time to time include in their legisla
43、tion, see foreword): 1) rectification of malfunctions, 2) procedures for ticket and voucher processing and redemption, 3) audit mode facilities, 4) financial reconciliation procedures, including event-end, day-end, week-end, month-end and tax return, 5) procedures for running back-ups and recoveries
44、, 6) procedures for loading upgrades or modifications to the WRS software, 7) daily operational procedures. 4.2.2 The method of implementation of all wager types and the documentation of the rules that pertain to their derivation shall be submitted to the PLA for approval before being implemented in
45、 the WRS and submitted to the TL or CA. 4.2.3 The requirements in annex B shall apply if: a) the systems has communications that extend outside of a single venue; or b) the equipment is available for use by the public. NOTE There are compulsory requirements for the safety of electronic equipment and
46、 for limiting interference from radio frequency emissions. 4.3 Wagering transactions 4.3.1 Full particulars of the wager shall be entered into the WRS. This information shall include the following: a) the wager type, or the wager name, or the nature of the wager, b) the stake amount in Rands and cen
47、ts, c) the odds applicable to the wager, if applicable, d) the potential win amount in Rands and cents, if applicable, e) the venue(s) at which the event(s) that is/are being wagered upon will take place, SANS 1718-4:2008 Edition 2 7 f) the date and time at which the event(s) that is/are being wager
48、ed upon are scheduled to take place, g) the date and time that the wager was entered, and h) the selection of the wager. 4.3.2 The wagering transaction sequence of actions and outputs shall be finalized by the action of the user/operator entering into the WRS the result(s) that determined whether th
49、e wager was won or lost. This action of entering the results programatically initiates a further sequence of actions and outputs, including but not limited to: a) the calculation, in Rands and cents, of the amount of the win in respect of any winning bets; b) the calculation, in Rands and cents, of the amount of the tax payable, and c) the updating of the database. NOTE 1 The WRS may programmatically “capture“ certain particulars of the wager, such as the date or time that the wager was entered, or the relevant odds, and therefore these particulars need not ne
