Security for Retail Motor-Fuel Devices (RMFD)
The National Conference on Weights and Measures concluded its 105th annual meeting virtually on January 15, 2021. One of the voting items on the agenda that was approved and is scheduled to be published in the 2022 Edition of NIST Handbook 44, in the Liquid Measuring Devices Code (3.30), is (User Requirement) UR.4.2. Security for Retail Motor-Fuel Devices (RMFD). This requirement is applicable to RMFD that are capable of conducting customer initiated electronic financial transactions, i.e. capable of accepting credit or debit cards. The requirement states that these RMFD’s must be secured to substantially restrict the ability of unauthorized persons to manipulate the RMFD to obtain payment information that could be used to commit fraud, i.e. install a skimming device.
There are four ways of meeting this requirement. 1) A physical lock, locking device, or securing device that will restrict access to the financial transaction compartment of the RMFD. This device shall not be manipulated with commonly available tools or a universal key. 2) Electronic alarming or disabling of the equipment if unauthorized access is attempted. 3) Advanced payment acceptance technologies that increase protections against the theft of payment information itself or do not allow access to such information in a form that may be used to commit fraud. 4) Another security solution that has been approved by the local or state weights and measures jurisdiction with authority (OPS). Of note in Colorado, though this requirement will be published in the 2022 edition of Handbook 44, the Division will have to go through the rulemaking process in order to make it enforceable. This rulemaking process would start sometime in early to mid 2022 with stakeholder input.
Please contact Scott Simmons at 303-378-1103, or scott.simmons@state.co.us with any questions.
