Kentucky Administrative Regulations › Title 820 - PUBLIC PROTECTION CABINET - DEPARTMENT OF CHARITABLE GAMING › Chapter 1 - Charitable Gaming › Section 820 KAR 1:050 - Raffles

Current through Register Vol. 51, No. 1, July 1, 2024
RELATES TO: KRS 238.545, 238.550
NECESSITY, FUNCTION, AND CONFORMITY: KRS 238.515 authorizes the
				Department of Charitable Gaming to establish and enforce reasonable standards
				for the conduct of charitable gaming and to promulgate administrative
				regulations necessary to implement KRS Chapter 238. This administrative
				regulation establishes standards for the conduct of raffles.
Section 1. Definitions.
(1) "Access control" means the restriction of
			 access to a place or other resource. Locks and login credentials are two (2)
			 mechanisms of access control.
(2)
			 "Address Resolution Protocol (ARP)" is the protocol used to translate IP
			 addresses into MAC addresses to support communication on a LAN (Local Area
			 Network). The Address Resolution Protocol is a request and reply protocol and
			 it is communicated within the boundaries of a single network, never routed
			 across internetwork nodes (connection points, either a redistribution point or
			 an end point for data transmissions).
(3) "Algorithm" means a finite set of
			 unambiguous instructions performed in a prescribed sequence to achieve a goal,
			 especially a mathematical rule or procedure used to compute a desired result.
			 Algorithms are the basis for most computer programming.
(4) "Authentication" means a security measure
			 designed to protect a communications system against acceptance of a fraudulent
			 transmission or simulation by establishing the validity of a transmission,
			 message, or originator.
(5) "Bearer
			 ticket" means an electronic or paper ticket that contains one (1) or more draw
			 numbers purchased.
(6)
			 "Bi-Directional" means the ability to move, transfer, or transmit in both
			 directions.
(7) "Counterfoil" means
			 an electronic record or paper ticket stub, also known as a barrel ticket, which
			 shall be drawn to determine a winner and contains a player's draw number
			 matching the bearer ticket purchased and may, depending on the type of raffle,
			 contain the name, address, or telephone number of the player.
(8) Critical memory means memory that is used
			 to store all data that is considered vital to the continued operation of the
			 RSU.
(9) "Crypto-analytic" means an
			 attack against the encryption key (refer to definition of encryption
			 key).
(10) "Cryptographic" means
			 anything written in a secret code or cipher.
(11) "Distributed Denial of Service (DDoS)"
			 means a type of Denial of Service (DoS) attack where multiple compromised
			 systems, usually infected with a destructive software program, are used to
			 target a single system causing a Denial of Service (DoS) attack. Victims of a
			 DDoS attack consist of both the end targeted system and all systems maliciously
			 used and controlled by the hacker in the distributed attack.
(12) "Domain" is a term used to identify one
			 (1) or more IP addresses. A domain name is used in a Uniform Resource Locator
			 (URL) to identify particular Web pages.
(13) "Draw number" means a uniquely
			 identifiable number that is provided to the purchaser for each chance purchased
			 and may be selected as the winning number for the raffle.
(14) "Electronic raffle system" means
			 computer software and related equipment used by raffle licensees to sell
			 tickets, account for sales, and facilitate the drawing of tickets to determine
			 the winners.
(15) "Encryption"
			 means the reversible transformation of data from the original (the plaintext)
			 to a difficult-to-interpret format (the cipher text) as a mechanism for
			 protecting its confidentiality, integrity, or its authenticity.
(16) "Encryption key" means a sequence of
			 numbers used to encrypt or decrypt (to decode/decipher) data.
(17) "Firewall" means any number of security
			 schemes that prevent unauthorized users from gaining access to a computer
			 network or that monitor transfers of information to and from the
			 network.
(18) "Geolocation" means
			 identifying the real-world geographic location of an Internet connected
			 computer, mobile device, or website visitor.
(19) "Host" means a computer system that is
			 accessed by a user working at a remote location. Typically, the term is used
			 when there are two (2) computer systems connected by modems and telephone
			 lines. The system that contains the data is called the host, while the computer
			 at which the user sits is called the remote terminal. A computer that is
			 connected to a TCP/IP network, including the Internet. Each host has a unique
			 IP address.
(20) "Hypertext
			 Transfer Protocol (HTTP)" means the underlying protocol used by the World Wide
			 Web. HTTP defines how messages are formatted and transmitted, and what actions
			 Web servers and browsers shall take in response to various commands.
(21) "Internet" means an interconnected
			 system of networks that connects computers around the world via the TCP/IP
			 protocol. TCP/IP protocol is short for Transmission Control Protocol/Internet
			 Protocol, the suite of communications protocols used to connect hosts on the
			 Internet.
(22) "Intrusion Detection
			 System (IDS)" or "Intrusion Prevention System (IPS)" means a system that
			 inspects all inbound and outbound network activity and identifies suspicious
			 patterns that may indicate a network or system attack from someone attempting
			 to break into or compromise a system. Used in computer security, intrusion
			 detection refers to the process of monitoring computer and network activities
			 and analyzing those events to look for signs of intrusion in a
			 system.
(23) "Internet Protocol
			 (IP)" means an identifier for a computer or device on a TCP/IP
			 network.
(24) "Media Access Control
			 (MAC)" means a hardware address that uniquely identifies each node, such as the
			 computer or printer, of a network.
(25) "Man-in-the-Middle (MITM)" means an
			 active Internet attack where the person attacking attempts to intercept, read,
			 or alter information moving between two (2) computers.
(26) "Message authentication" means a
			 security measure designed to establish the authenticity of a message by means
			 of an authenticator within the transmission derived from certain predetermined
			 elements of the message itself.
(27) "Online" means being connected to the
			 Internet.
(28) "Online Purchasing
			 Platform" means the raffle system hardware and software that drives the
			 features common to all raffles offered, and which forms the primary interface
			 to the Raffle System for both the patron and the operator. The online
			 purchasing platform provides the patron with the means to register an account,
			 log in to or out of their account, modify their account information, make
			 ticket purchases, request account activity statement or reports, and close
			 their account. In addition, any web pages displayed to the patron that relate
			 to ticket purchasing offered on the raffle system. The online purchasing
			 platform provides the operator with the means to review patron accounts, enable
			 or disable raffles, generate various financial transaction and account reports,
			 input raffle outcomes, enable or disable patron accounts, and set any
			 configurable parameters.
(29)
			 "Protocol" means a set of formal rules describing how to transmit or exchange
			 data, especially across a network. TCP/IP is the standard communications
			 protocol of the Internet and most internal networks.
(30) "Raffle sales unit (RSU)" means a
			 portable or wireless device, a remote hardwired connected device, or a
			 standalone cashier station that is used as a point of sale for bearer
			 tickets.
(31) "Remote access" means
			 any access from outside the system or system network including any access from
			 other networks within the same establishment.
(32) "Shellcode" means a small piece of code
			 used as the payload (cargo of data transmission) in the exploitation of
			 computer security. Shellcode exploits a vulnerability and allows an attacker
			 the ability to reduce a computer system's information assurance.
(33) "Security certificate" means
			 information, often stored as a text file, which is used by the Secure Socket
			 Layers (SSL) protocol to establish a secure connection. A security certificate
			 contains information about whom it belongs to, who it was issued by, valid
			 dates, and a unique serial number or other unique identification that may be
			 used to verify the contents of the certificate. In order for an SSL connection
			 to be created, both sides are required to have a valid security certificate,
			 which is also called a digital ID.
(34) "Stateful firewall" means a firewall
			 that keeps track of the state of network connections traveling across it. The
			 firewall is programmed to distinguish legitimate packets for different types of
			 connections. Only packets matching a known active connection shall be allowed
			 by the firewall; others shall be rejected. Stateful inspection, also referred
			 to as Dynamic Packet Filtering, is a security feature often included in
			 business networks,
(35) "Stateless"
			 means a communications protocol that treats each request as an independent
			 transaction that is unrelated to any previous request so that the communication
			 consists of independent pairs of requests and responses. A stateless protocol
			 does not require the server to retain session information or status about each
			 communications partner for the duration of multiple requests. In contrast, a
			 protocol that requires the keeping of internal state is known as a stateful
			 protocol. Examples of stateless protocols include Internet Protocol (IP) and
			 the Hypertext Transfer Protocol (HTTP).
(36) "Validation number" means a unique
			 number that may represent one (1) or more draw numbers that shall be used to
			 validate the winning number for the raffle.