Security expert report for gaming machines for PTB type approval
You need a security expert report for the type approval of your gaming machine? Our BSI-recognised evaluation facility assesses the agreed security measures using methods from Common Criteria evaluation.
BSI-recognised Common Criteria evaluation facility
Our own checklist for security expert reports
Security expert reports for gaming machines: prepared for PTB type approval.
Your situation
You need a security expert report from a BSI-recognised evaluation facility for the type approval of your gaming machine?
Gaming machines with prize money (Geldspielgeräte) require a type approval (Bauartzulassung) from the Physikalisch-Technische Bundesanstalt (PTB). The PTB's Technical Guideline for gaming machines requires a security expert report. It must come from an evaluation facility recognised by the BSI (Federal Office for Information Security) under Common Criteria or ITSEC. The report addresses the threats listed in Annex 4 of the Technical Guideline and is accepted by the PTB.
Manufacturers then face practical questions: Which documents does the evaluation facility need, how does the assessment work, and how long does it take until the report is ready for acceptance?
Our evaluation facility has been recognised by the BSI since 1992 and is authorised to carry out evaluations under Common Criteria and ITSEC/ITSEM. For gaming machines, we have developed our own specific checklist based on the methods of Common Criteria certification. This allows efficient processing with an assessment period of a few weeks.
Services & results
Security expert report using Common Criteria methodology
You receive the security expert report required by the Technical Guideline for gaming machines for type approval, from an evaluation facility recognised by the BSI since 1992. The assessment follows our own checklist covering the threats listed in Annex 4, based on the Common Criteria methodology, and takes a few weeks. The Physikalisch-Technische Bundesanstalt (PTB) accepts the report and decides on the approval.
The security expert report addresses the threats specified for type approval. Our machine-specific checklist and methods from Common Criteria evaluation structure the assessment of the security measures.
01
Preliminary discussion and subject of assessment
In a preliminary discussion without obligation, we define the machine to be assessed and clarify which documents we need for the assessment. The version of the Technical Guideline applicable to your procedure is decisive.
02
Assessment based on our checklist
We assess the machine against the threats listed in Annex 4 of the Technical Guideline. The basis is our checklist for gaming machines, which follows the methods of Common Criteria certifications.
03
Security expert report for acceptance by the PTB
We document the results in the security expert report. The PTB accepts the report and decides on the type approval.
Your security expert report
A report from an evaluation facility recognised by the BSI under Common Criteria and ITSEC for the PTB type approval procedure.
Our expertise
secuvera's evaluation facility was recognised by the BSI in 1992 as a “Trustworthy Systems” evaluation facility in accordance with DIN EN ISO/IEC 17025 and is authorised to carry out evaluations under Common Criteria and ITSEC/ITSEM. It is the oldest evaluation facility in Germany and thus meets the Technical Guideline's requirement for the assessing body.
For gaming machines, we apply the methods from Common Criteria certifications to a specific checklist developed for this purpose.
Getting started
Record machine type, security concept and procedure status
Describe machine architecture and procedure status
For the preliminary discussion, a description of the machine, the intended security concept and the current status of the type approval are helpful. We clarify which documents are needed for the assessment.
Agree on scope and schedule
On this basis, we agree on the scope and timeframe of the assessment. Existing evidence and the maturity of the product are taken into account.
Machine type and security concept recorded thoroughly.
The PTB decides on type approval
The report is prepared for the agreed procedure. The PTB assesses it and decides on the type approval.
Questions about the security expert report for gaming machines
What is secuvera's role in type approval?
secuvera prepares the agreed security expert report. The PTB assesses the documents and decides on the type approval. The assessment by our evaluation facility is one contribution to this procedure.
Which methodology is used to assess gaming machines?
We use methods from Common Criteria evaluations and a checklist developed specifically for gaming machines. It structures how the required security questions are addressed. The relevant version of the Technical Guideline is taken into account for the assignment.
Which documents are needed before the assessment?
Machine architecture, security concept and existing evidence help to define the subject of assessment. The status of the type approval and the relevant threats determine the manufacturer contributions required. The specific list of documents is agreed during preparation.
Does the security expert report also involve CC certification?
No. Here, Common Criteria serves as the methodological basis for the assessment. The result is the security expert report for the agreed PTB procedure, not automatically a separate Common Criteria certificate.
How long does it take to prepare the security expert report?
Thanks to our checklist for gaming machines, the assessment period is a few weeks. Detailed planning depends on the machine and the documents provided; we clarify both in the preliminary discussion.