Self-authenticating file system in an embedded gaming device

• US 20080009337A1
• Filed: 07/06/2007
• Published: 01/10/2008
• Est. Priority Date: 07/08/2006
• Status: Abandoned Application

• Current Assignee: MTD Gaming, Inc. (Novomatic AG)
• Original Assignee: MTD Gaming, Inc. (Novomatic AG)
• Inventors: Williams, Alan D., Jackson, Mark D.
• Application Number:
  US11/825,595
• Publication Number:
  US 20080009337A1
• Time in Patent Office: Days
• US Class Current: 463/16
• CPC Class Codes: A63F 13/12 involving interaction between a plurality of game devices, e.g. transmisison or distribution systems protocols for networked virtual reality, networked games H04L29/06034
• CPC Class Codes: A63F 13/30 Interconnection arrangements between game servers and game devices; Interconnection arrangements between game devices; Interconnection arrangements between game servers
• CPC Class Codes: A63F 13/71 using secure communication between game devices and game servers, e.g. by encrypting game data or authenticating players
• CPC Class Codes: A63F 2300/401 Secure communication, e.g. using encryption or authentication
• CPC Class Codes: G06F 21/64 Protecting data integrity, e.g. using checksums, certificates or signatures
• CPC Class Codes: G06F 2221/2109 Game systems
• CPC Class Codes: G07F 17/32 for games, toys, sports, or amusements

Abstract

A method and apparatus for pre-load authentication suitable for use with an operating system in an embedded gaming device. A user-space file system that can automatically authenticate its contents is disclosed. The user-space file system can be deployed on a standalone system or using a client-server model such that a remote system server can coordinate with a local client to perform authentication. By moving the authentication into the file system functional block there is additional assurance that any game code or data stored in the file system cannot be accessed without first performing the required authentication.

Claims

1. A file system on an embedded gaming device, wherein access permissions to a directory or file on the file system are determined from the result of performing a cryptographic authentication sequence on at least one directory or file using at least one public key stored on the gaming device and metadata associated with the at least one directory or file.

2. The file system of claim 1, wherein said metadata consists of at least an encrypted hash value.

3. The file system of claim 1, wherein said metadata consists of at least a series of challenge/response pairs.

4. A computerized wagering game apparatus, comprising:

a computerized game controller having a processor, memory, random number generator, nonvolatile storage and at least one stored game data set;

an authentication program;

wherein the authentication program can verify a zero knowledge proof sequence consisting of a series of challenge/response pairs;

wherein the authentication program accesses at least one stored game data set in order to authenticate it;

wherein prior to loading the game data set into random access memory a bit stream based on at least one zero knowledge response is compared to a bit stream based on at least one zero knowledge challenge;

wherein verification comprises verifying that the zero knowledge proof sequence has been completed correctly.

5. A method for determining access permissions to a directory or file on an embedded gaming device comprising the steps of:

a. Setting up the protocol, which further consists of the steps of,

i. generating a random number X to be used as the private key,

ii. generating a public key PUB using the formula X² mod M where M is a product of prime numbers selected for the protocol,

iii. selecting N random numbers Q₁ through Q_N,

iv. generating challenges from these random numbers using the formula C_n=Q_n² mod M for each file to be authenticated,

v. hashing the collection of N challenges and the file to be signed to obtain an abbreviated bit stream H,

vi. generating responses for the first N bits of H for each challenge using alternate formulas;

if bit n=0, generate response R_n=Q_n, or if bit n=1, generates response R_n=X·

Q_n mod M,

vii. establishing the challenges and responses collectively as the signature of the file; and

b. Authenticating access to the file or folder by use of the protocol to verify that the originator of the signature of the file had knowledge of the private key which further consists of the steps of,

i. hashing the collection of N challenges and the file to be authenticated to obtain an abbreviated bit stream H′

,

ii. verifying that for the first N bits in H′

the challenges and the responses are correct using alternate formulas;

if bit n=0, verifying challenge C_n=R_n² mod M, or if bit n=1, verifying response R_n² mod M=C_n·

PUB mod M, where PUB is the public key and M is the product of prime numbers.

6. The method of claim 5 wherein the step of setting up the protocol is performed by a game manufacturer.

7. The method of claim 5 wherein the step of setting up the protocol is performed by a gaming regulatory authority.

8. The method of claim 5 wherein the step of setting up the protocol is performed by an authorized third party.

9. The method of claim 5 wherein the step of authenticating access to the file or folder is performed in a gaming device.

10. The method of claim 5 wherein the step of authenticating access to the file or folder is performed at a remote site connected to the gaming device over a network.