Cheater detection in a multi-player gaming environment

• US 7,288,027 B2
• Filed: 05/28/2003
• Issued: 10/30/2007
• Est. Priority Date: 05/28/2003
• Status: Expired due to Fees

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Overton, Adam J.
• Primary Examiner(s): Laneau; Ronald
• Assistant Examiner(s): Williams; Ross A.
• Application Number:
  US10/447,483
• Publication Number:
  US 20040242321A1
• Time in Patent Office: 1,616 Days
• Field of Search: 463/29, 463 40- 42, 463/1
• US Class Current: 463/42
• CPC Class Codes: A63F 13/75 Enforcing rules, e.g. detecting foul play or generating lists of cheating players
• CPC Class Codes: G06F 21/128 involving web programs, i.e. using technology especially used in internet, generally interacting with a web browser, e.g. hypertext markup language [HTML], applets, java
• CPC Class Codes: G06F 2221/2109 Game systems

Abstract

A first instance of a game application is executed on a first computing system. The first computing system is coupled to communicate with a second computing system executing a second instance of the game application. Execution of the second instance of the game application is monitored to identify suspected cheating by the second instance of the game application.

Claims

1. A method for preventing a computing system which generates false suspected cheating reports from participating in an online gaming service, the method comprising:

executing a first instance of a game application on a first computing system, wherein the first computing system is coupled to communicate with a second computing system executing a second instance of the game application;

monitoring execution of the second instance of the game application from the first computing system to identify suspected cheating by the second instance of the game application;

identifying suspected cheating by the second instance of the game application, wherein the identifying is performed by the first instance of the game application executing on the first computing system;

reporting from the first computing system the suspected cheating committed by the second instance of the game application executing on the second computing system;

determining a rate of suspected cheating reports generated by the first computing system;

determining a typical rate of suspected cheating reports generated by a computing system executing the game application by monitoring suspected cheating reports made by computing systems executing the game application during an initial period of time following release of the game application when cheating is unlikely to occur; and

preventing the first computing system from participating in the online gaming service for a duration of time when the first computing system generates suspected cheating reports at a rate significantly greater than the typical rate.

2. A method as recited in claim 1 further comprising:

monitoring execution of the first instance of the game application; and

identifying suspected cheating by the first instance of the game application.

3. A method as recited in claim 1 wherein identifying suspected cheating by the second instance of the game application includes reporting the suspected cheating to the online gaming service.

4. A method as recited in claim 1 wherein identifying suspected cheating by the second instance of the game application includes reporting the suspected cheating to a cheater repository.

5. A method as recited in claim 1 further comprising:

monitoring execution of a third instance of the game application on a third computing system, wherein the third computing system is coupled to communicate with the first computing system; and

identifying suspected cheating by the third instance of the game application.

6. A method as recited in claim 1 wherein identifying suspected cheating includes detecting activities beyond the capability of the game application.

7. A method as recited in claim 1 wherein the first computing system is a game console.

8. A method as recited in claim 1 wherein the first computing system is a personal computer.

9. A method as recited in claim 1 wherein the first computing system is a set top box.

10. One or more computer-readable memories containing a computer program that is executable by a processor to perform the method recited in claim 1.

11. A method for preventing a computing system which generates false suspected cheating reports from participating in an online gaming service, the method comprising:

executing a first instance of a game application on a first computing system, wherein the first computing system is coupled to communicate with a second computing system executing a second instance of the game application;

the first computing system monitoring execution of the second instance of the game application and identifying suspected cheating by the second instance of the game application;

the second computing system monitoring execution of the first instance of the game application and identifying suspected cheating by the first instance of the game application;

reporting the suspected cheating identified by the first computing system;

determining a rate of suspected cheating reports generated by the first computing system;

determining a typical rate of suspected cheating reports generated by a computing system executing the game application by monitoring suspected cheating reports made by computing systems executing the game application during an initial period of time following release of the game application when cheating is unlikely to occur; and

preventing the first computing system from participating in an the online gaming service for a duration of time when the first computing system generates suspected cheating reports at a rate significantly greater than the typical rate.

12. A method as recited in claim 11 further comprising the first computing system reporting suspected cheating to a cheating analyzer.

13. A method as recited in claim 11 further comprising the second computing system reporting suspected cheating to a cheating analyzer.

14. A method as recited in claim 11 further comprising the first computing system and the second computing system reporting suspected cheating to a cheater repository.

15. A method as recited in claim 11 wherein the first computing system and the second computing system are game consoles.

16. A method as recited in claim 11 wherein identifying suspected cheating includes detecting actions beyond the capability of the game application.

17. A method as recited in claim 11 wherein monitoring execution of the second instance of the game application and identifying suspected cheating by the second instance of the game application is performed without user interaction.

18. A method as recited in claim 11 wherein monitoring execution of the first instance of the game application and identifying suspected cheating by the first instance of the game application is performed without user interaction.

19. One or more computer-readable memories containing a computer program that is executable by a processor to perform the method recited in claim 11.

20. A method for preventing a game console which generates false suspected cheating reports from participating in an online gaming service, the method comprising:

executing a first instance of a game application on a first game console, wherein the first game console is coupled to communicate with a second game console executing a second instance of the game application;

the first instance of the game application monitoring execution of the second instance of the game application to identify suspected cheating by the second instance of the game application;

the first instance of the game application identifying suspected cheating by the second instance of the game application and reporting the suspected cheating of the second game console;

determining a rate of suspected cheating reports generated by the first instance of the game application;

determining a typical rate of suspected cheating reports generated by an instance of the game application when executed on a game console by monitoring suspected cheating reports made by instances of the game application executing on game consoles during an initial period of time following release of the game application when cheating is unlikely to occur; and

preventing the first game console from participating in the online gaming service for a duration of time when the first instance of the game application generates suspected cheating reports at a rate significantly greater than the typical rate.

21. A method as recited in claim 20 wherein the first instance of the game application is further monitoring execution of a third instance of the game application on a third game console and identifying suspected cheating by the second game console.

22. A method as recited in claim 20 further comprising:

the second instance of the game application monitoring execution of the first instance of the game application; and

the second instance of the game application identifying suspected cheating by the first game console and reporting the suspected cheating by the first game console.

23. A method as recited in claim 20 wherein identifying suspected cheating includes detecting activities beyond the capability of the game application.

24. A method as recited in claim 20 wherein identifying suspected cheating includes detecting movement of objects at a faster rate than permitted by the game application.

25. A method as recited in claim 20 wherein identifying suspected cheating includes detecting actions inconsistent with a typical performance of the game application.

26. One or more computer-readable memories containing a computer program that is executable by a processor to perform the method recited in claim 20.

27. A method for preventing a gaming system which generates false suspected cheating reports from participating in an online gaming service, the method comprising:

executing a game application on a plurality of gaming systems, wherein the plurality of gaming systems are capable of communicating with one another;

each of the plurality of gaming systems monitoring execution of the other gaming systems;

each of the plurality of gaming systems identifying suspected cheating by any of the other gaming systems;

determining a rate of suspected cheating reports generated by one game system of the plurality of gaming systems which are executing the game application;

determining a typical rate of suspected cheating reports generated by a gaming system executing the game application by monitoring suspected cheating reports made by gaming systems executing the game application during an initial period of time following release of the game application when cheating is unlikely to occur; and

preventing the one gaming system from participating in the online gaming service for a duration of time when the first one gaming system generates suspected cheating reports at a rate significantly greater than the typical rate.

28. A method as recited in claim 27 further comprising each of the plurality of gaming systems reporting suspected cheating to an online gaming service.

29. A method as recited in claim 28 wherein reporting suspected cheating includes identifying a gaming system suspected of cheating.

30. A method as recited in claim 28 wherein reporting suspected cheating includes identifying a cheat type.

31. A method as recited in claim 27 wherein identifying suspected cheating includes detecting activities that are inconsistent with the capabilities of the game application.

32. A method for preventing a computing system which generates false suspected cheating reports from participating in an online gaming service, the method comprising:

executing a monitoring application on a first computing system, the monitoring application associated with a first instance of a game application;

the monitoring application monitoring execution of a second instance of the game application on a second computing system coupled to communicate with the first computing system;

the monitoring application identifying suspected cheating by the second instance of the game application on the second computing system;

determining a rate of suspected cheating reports generated by the first computing system;

determining a typical rate of suspected cheating reports generated by a computing system executing the game application by monitoring suspected cheating reports made by computing systems executing the game application during an initial period of time following release of the game application when cheating is unlikely to occur; and

preventing the first computing system from participating in the online gaming service for a duration of time when the first computing system generates suspected cheating reports at a rate significantly greater than the typical rate.

33. A method as recited in claim 32 further comprising the monitoring application monitoring execution of a second third instance of the game application on a third computing system coupled to communicate with the first computing system.

34. A method as recited in claim 32 wherein identifying suspected cheating includes detecting movement of objects at a faster rate than permitted by the game application.

35. A method as recited in claim 32 wherein identifying suspected cheating includes detecting actions inconsistent with a typical performance of the game application.

36. One or more computer-readable memories containing a computer program that is executable by a processor to perform the method recited in claim 32.

37. A method for preventing computing systems which generate false suspected cheating reports from participating in an online gaming service, the method comprising:

identifying data associated with reports of suspected cheating submitted by a plurality of computing systems executing a game application;

determining a typical rate of suspected cheating reports generated by a computing system executing the game application by monitoring suspected cheating reports made by computing systems executing the game application during an initial period of time following release of the game application when cheating is unlikely to occur;

identifying computing systems generating suspected cheating reports at a rate significantly in excess of the typical rate; and

preventing the identified computing systems from executing any game application through the online gaming service.

38. A method as recited in claim 37 further comprising deleting any suspected cheating reports generated by the identified computing systems.

39. One or more computer-readable memories containing a computer program that is executable by a processor to perform the method recited in claim 37.

40. A method for preventing gaming consoles which generate false suspected cheating reports from participating in an online gaming service, the method comprising:

identifying data associated with reports of suspected cheating submitted by a plurality of game consoles;

determining a typical rate of suspected cheating reports generated by a game console by monitoring suspected cheating reports made by game consoles executing the game application during an initial period of time following release of the game application when cheating is unlikely to occur;

identifying game consoles generating suspected cheating reports at a rate significantly greater than the typical rate; and

preventing the identified game consoles from participating in the online gaming service.

41. A method as recited in claim 40 wherein the reports of suspected cheating submitted by the plurality of game consoles are associated with a particular game application.

42. A method as recited in claim 40 wherein preventing identified game consoles from participating in an online gaming service prevents all users of the identified game consoles from participating in the online gaming service.

43. A method as recited in claim 40 further comprising deleting any suspected cheater reports generated by the identified game consoles.

44. One or more computer-readable memories containing a computer program that is executable by a processor to perform the method recited in claim 40.

45. An apparatus comprising:

means for executing a first instance of a game application on a first computing system;

means for executing a second instance of the game application on a second computing system, wherein the second computing system is coupled to communicate with the first computing system;

means for identifying suspected cheating committed by the second computing system, wherein the means for identifying the suspected cheating does not rely on software of the second computing system;

means for reporting from the first computing system to an online gaming service, the suspected cheating of the second computing system;

means for determining a rate of suspected cheating reports generated by the first computing system;

means for determining a typical rate of suspected cheating reports generated by a computing system executing the game application by monitoring suspected cheating reports made by computing systems executing the game application during an initial period of time following release of the game application when cheating is unlikely to occur; and

means for preventing the first computing system from participating in an online gaming service for a duration of time when the first computing system generates suspected cheating reports at a rate significantly greater than the typical rate.

46. An apparatus as recited in claim 45 further comprising:

means for identifying suspected cheating committed by the first computing system; and

means for reporting from the second computing system to the online gaming service, the suspected cheating of the first computing system.

47. An apparatus as recited in claim 45 further comprising means for storing reports of suspected cheating.

48. An apparatus as recited in claim 45 further comprising means for analyzing reports of suspected cheating.

49. One or more computer-readable media having stored thereon a computer program that, when executed by one or more processors, causes the one or more processors to:

execute a first instance of a game application on a first computing system, wherein the first computing system is coupled to communicate with a second computing system executing a second instance of the game application;

identify suspected cheating committed by the second instance of the game application, wherein the identifying of the suspected cheating is performed by the first instance of the game application executing on the first computing system, and wherein the identifying of the suspected cheating does not rely on software of the second computing system;

report from the first computing system to an online gaming service any suspected cheating of the second instance of the game application;

determine a rate of suspected cheating reports generated by the first computing system;

determine a typical rate of suspected cheating reports generated by a computing system executing the game application by monitoring suspected cheating reports made by computing systems executing the game application during an initial period of time following release of the game application when cheating is unlikely to occur; and

prevent the first computing system from participating in the online gaming service for a duration of time when the first computing system generates suspected cheating reports at a rate significantly greater than the typical rate.

50. One or more computer-readable media as recited in claim 49 wherein the one or more processors further identify suspected cheating by the first instance of the game application.

51. One or more computer-readable media as recited in claim 49 wherein the one or more processors further identify suspected cheating by the first instance of the game application and report any suspected cheating by the first instance of the game application to the online gaming service.