In a value dispensing system, a system and method for securely loading and
executing software in a secure device that does not include any
non-volatile programmable memory is provided. A non-secure portion of the
value dispensing system stores software for loading into the secure
portion when needed. Commands being sent to the secure printer are
monitored to determine if the secure has the necessary software to
execute the command. If the secure device currently does not have the
necessary software to execute the command, the command is delayed and the
proper software is loaded from the non-secure portion to the RAM of the
secure device. A signature associated with the software is verified to
ensure the authenticity of the software. If the signature is verified,
the command is passed to the secure device, and, utilizing the software
in the RAM, the command is executed by the secure device.