METHODS AND SYSTEMS FOR CONTROLLING ACCESS TO RESOURCES IN A GAMING NETWORK

• US 20080155665A1
• Filed: 11/09/2007
• Published: 06/26/2008
• Est. Priority Date: 11/10/2006
• Status: Active Grant

• Current Assignee: LNW Gaming Incorporated
• Original Assignee: Bally Gaming Incorporated (Scientific Games Corporation)
• Inventors: Deng, Haiyang, Ruppert, Ryan
• Granted Patent: US 8,191,121 B2
• Time in Patent Office: Days
• US Class Current: 726/5
• CPC Class Codes: G07F 17/32 for games, toys, sports, or amusements

Abstract

A Web authorization service facilitates the control of access to resources in a casino gaming network system.

Claims

1. A method of controlling access to resources in a casino gaming network system, the method comprising:

receiving login information associated with a user accessing a client computer at an authorization Web service executed on a server;

sending data indicative of the login information from the authorization Web service to a database for verification;

receiving verification of the login information from the database;

creating a security session for the user; and

storing data associated with the security session on the server.

2. The method of claim 1, wherein receiving the login information further comprises:

receiving a user name and a pass phrase of the user.

3. The method of claim 2, wherein receiving the login information further comprises:

receiving the user name and the pass phrase via a user interface application executed on the client computer.

4. The method of claim 1, wherein the login information is received from the client computer in a Service Oriented Architecture Protocol (“

SOAP”

) message.

5. The method of claim 1, wherein sending the data indicative of the login information further comprises:

sending the data indicative of the login information from the authorization Web service to the database via a directory service.

6. The method of claim 5, wherein the directory service is Active Directory.

7. The method of claim 1, wherein receiving the verification of the login information further comprises:

receiving a set of permissions associated with the user.

8. The method of claim 7, wherein storing the security session data further comprises storing the set of permissions on the server.

9. The method of claim 7, wherein the set of permissions comprises role-based access policies.

10. The method of claim 1, wherein storing the security session data further comprises:

leasing memory on the server to store the security session data.

11. The method of claim 10, wherein the security session ends when the memory lease expires.

12. The method of claim 11, further comprising:

when the memory lease expires, sending the data indicative of the login information from the authorization Web service to the database for verification;

receiving verification of the login information from the database;

creating a new security session for the user on the server; and

leasing the memory on the server.

13. The method of claim 10, wherein the security session data comprises a user identifier, and a set of permissions associated with the user.

14. The method of claim 1, further comprising:

receiving a request to authorize the user from a gaming-related Web service at the authorization Web service, the user authorization request including a user identifier associated with the user;

determining a set of permissions associated with the user based at least in part on the user identifier; and

sending data indicative of the set of permissions to the gaming-related Web service.

15. The method of claim 14, wherein the stored security session data includes the set of permissions.

16. The method of claim 14, wherein determining the set of permissions further comprises:

sending data indicative of the login information to the database; and

receiving data indicative of the set of permissions at the authorization Web service from the database.

17. The method of claim 14, wherein the user identifier included in the user authorization request is extracted from a SOAP header.

18. The method of claim 1, further comprising:

sending a user identifier associated with the security session to the client computer.

19. A method of accessing resources in a casino gaming network system, the method comprising:

receiving user input at a client computer indicative of login information associated with a user;

sending the login information from the client computer to an authorization Web service executed on a server;

receiving a user identifier from the authorization Web service;

sending the user identifier in a Service Oriented Architecture Protocol (“

SOAP”

) header to a gaming-related Web service;

sending a request to the gaming-related Web service to access a resource; and

receiving access to the resource without further user input indicative of the login information.

20. The method of claim 19, wherein the user identifier and the resource request are sent together in a SOAP message.

21. The method of claim 19, wherein receiving the user input further comprises:

receiving the user input indicative of the login information through a user interface application executed on the client computer; and

storing the login information on the client computer via the user interface application.

22. A computer-readable medium that stores instructions that cause a server to control access to resources in a casino gaming network system, by:

receiving login information associated with a user accessing a client computer at an authorization Web service executed on the server;

sending data indicative of the login information from the authorization Web service to a database for verification;

receiving verification of the login information from the database;

creating a security session for the user; and

storing data associated with the security session on the server.

23. The computer-readable medium of claim 22, wherein receiving the login information further comprises:

receiving a user name and a pass phrase of the user.

24. The computer-readable medium of claim 23, wherein receiving the login information further comprises:

receiving the user name and the pass phrase via a user interface application executed on the client computer.

25. The computer-readable medium of claim 22, wherein the login information is received from the client computer in a Service Oriented Architecture Protocol (“

SOAP”

) message.

26. The computer-readable medium of claim 22, wherein sending the data indicative of the login information further comprises:

sending the data indicative of the login information from the authorization Web service to the database via a directory service.

27. The computer-readable medium of claim 26, wherein the directory service is Active Directory.

28. The computer-readable medium of claim 22, wherein receiving the verification of the login information further comprises:

receiving a set of permissions associated with the user.

29. The computer-readable medium of claim 28, wherein storing the security session data further comprises storing the set of permissions on the server.

30. The computer-readable medium of claim 28, wherein the set of permissions comprises role-based access policies.

31. The computer-readable medium of claim 22, wherein storing the security session data further comprises:

leasing memory on the server to store the security session data.

32. The computer-readable medium of claim 31, wherein the security session ends when the memory lease expires.

33. The computer-readable medium of claim 32, wherein the instructions cause the server to control access to resources in the casino gaming network system, further by:

when the memory lease expires, sending the data indicative of the login information from the authorization Web service to the database for verification;

receiving verification of the login information from the database;

creating a new security session for the user on the server; and

leasing the memory on the server.

34. The computer-readable medium of claim 31, wherein the security session data comprises a user identifier, and a set of permissions associated with the user.

35. The computer-readable medium of claim 22, wherein the instructions cause the server to control access to resources in the casino gaming network system, further by:

receiving a request to authorize the user from a gaming-related Web service at the authorization Web service, the user authorization request including a user identifier associated with the user;

determining a set of permissions associated with the user based at least in part on the user identifier; and

sending data indicative of the set of permissions to the gaming-related Web service.

36. The computer-readable medium of claim 35, wherein the stored security session data includes the set of permissions.

37. The computer-readable medium of claim 35, wherein determining the set of permissions further comprises:

sending data indicative of the login information to the database; and

receiving data indicative of the set of permissions at the authorization Web service from the database.

38. The computer-readable medium of claim 35, wherein the user identifier included in the user authorization request is extracted from a SOAP header.

39. The computer-readable medium of claim 22, wherein the instructions cause the server to control access to resources in the casino gaming network system, further by:

sending a user identifier associated with the security session to the client computer.

40. A computer-readable medium that stores instructions that cause a client computer to access resources in a casino gaming network system, by:

receiving user input at the client computer indicative of login information associated with a user;

sending the login information from the client computer to an authorization Web service executed on a server;

receiving a user identifier from the authorization Web service;

sending the user identifier in a Service Oriented Architecture Protocol (“

SOAP”

) header to a gaming-related Web service;

sending a request to the gaming-related Web service to access a resource; and

receiving access to the resource without further user input indicative of the login information.

41. The computer-readable medium of claim 40, wherein the user identifier and the resource request are sent together in a SOAP message.

42. The computer-readable medium of claim 40, wherein receiving the user input further comprises:

receiving the user input indicative of the login information through a user interface application executed on the client computer; and

storing the login information on the client computer via the user interface application.

43. A method of controlling access to a resource in a casino gaming network system, the method comprising:

receiving a request from a user to access a resource at a gaming-related Web service;

receiving a user identifier from the user in a Service Oriented Architecture Protocol (“

SOAP”

) header;

sending data indicative of the user identifier from the gaming-related Web service to an authorization Web service;

receiving a set of permissions associated with the user from the authorization Web service; and

granting access to the resource based at least in part on the received set of permissions.

44. A computer-readable medium that stores instructions that cause a server to control access to a resource in a casino gaming network system, by:

receiving a request from a user to access a resource at a gaming-related Web service;

receiving a user identifier from the user in a Service Oriented Architecture Protocol (“

SOAP”

) header;

sending data indicative of the user identifier from the gaming-related Web service to an authorization Web service;

receiving a set of permissions associated with the user from the authorization Web service; and

granting access to the resource based at least in part on the received set of permissions.