User authorization system and methods

• US 8,201,229 B2
• Filed: 11/12/2008
• Issued: 06/12/2012
• Est. Priority Date: 11/12/2007
• Status: Expired due to Fees

• Current Assignee: Sg Gaming, Inc. (Scientific Games Corporation)
• Original Assignee: Bally Gaming Incorporated (Scientific Games Corporation)
• Inventors: Ruppert, Ryan, Deng, Haiyang
• Primary Examiner(s): Zand, Kambiz
• Assistant Examiner(s): Sanders, Stephen
• Application Number:
  US12/269,673
• Publication Number:
  US 20090183243A1
• Time in Patent Office: 1,308 Days
• Field of Search: 726/5
• US Class Current: 726/5
• CPC Class Codes: H04L 63/0815 providing single-sign-on or federations
• CPC Class Codes: H04L 63/101 Access control lists [ACL]

Abstract

A slot management system including a download and configuration server-based sub-system and method is disclosed for use with game devices, systems, and methods is provided to enable users to monitor, control, and modify game devices and other related activities. A computerized authorization system authorizes users access to the slot management system.

Claims

1. An authorization system to selectively provide user access to a download and configuration system in a casino, comprising:

a plurality of gaming machines coupled to a first communications network in a casino;

a download and configuration system, communicatively coupled to the first communications network and to a second communications network, that provides content that modifies at least one other respective gaming machine of the plurality of gaming machines, wherein the respective gaming machine receives content from the download and configuration system;

a plurality of control devices communicatively coupled to the second communications network;

a security store that stores a plurality of security credentials and a plurality of user access lists, each respective security credential associated with a user account, and each user access list associated with a respective user account, the security store being accessible only by a security query, the security store configured to provide a respective security response in response to receiving a respective security query, wherein for a valid security query, the security response includes at least one of a respective security credential or a respective user access list, wherein the respective security credential provides authorization for the user account associated therewith to logon to the download and configuration system, and wherein the respective user access list defines an authorization to access at least a portion of the download and configuration system granted to the user account associated therewith;

a user-authorization system communicatively coupled to the download and configuration system, the security store and the plurality of control devices, the user-authorization system configured to access the security store to provide the respective security query to the security store in response to receiving, from a respective control device, a logon request for a respective user account and configured to selectively grant or deny the respective user account access to the at least a portion of the download and configuration system in response to the respective security response from the security store by causing access to operations requested by the respective user account to be verified against the respective user access list,

wherein the security store is accessible only by the user-authorization system.

2. The computing system claim 1 wherein a given user uses a given control device of the plurality of control devices to send a given logon request for a given user account to the user-authorization system, wherein the user-authorization system initiates a given user security session for the given user account in response to receiving a given security response carrying a given security credential that is associated with the given user account, and the user-authorization system includes a buffer that buffers the given security credential associated with the given user account while the given user security session is active.

3. The authorization system of claim 2 wherein the given control device that sent the given logon request creates a logon lease in response to the user-authorization system granting the given user account access to the download and configuration system, wherein the given user security session for the given user account is active during a time period in which the logon lease has not expired.

4. The authorization system of claim 3 wherein from time to time, the given control device provides the user-authorization system with session information to request a renewal of the given logon lease, and the given control device determines whether to renew the given logon lease based at least on given security session information provided from the user-authorization system.

6. The authorization system of claim 2 wherein a respective control device is configured to provide a respective user account at the respective control device with an amount of access to the download and configuration system based at least on a respective user access list associated with the respective user account, wherein the respective user access list is loaded onto the respective control device.

7. The authorization system of claim 6 wherein the user-authorization system is configured to determine whether to provide a respective user access list associated with a respective user account to a respective control device based at least on the buffered security credential associated with the respective user account, where the user account associated with the respective user access list is accessing the download and configuration system from the respective control device.

5. The authorization system of 4 wherein the user-authorization system is configured to respond to a respective request to renew a respective logon lease for a respective user account by providing a respective security query to the security store which responds by providing a respective security response, and the user-authorization system is further configured to determine whether to create, or not to create, another user security session or to extend, or not to extend, a current user security session based at least on the respective security response and at least on the respective buffered security credential associated with the respective user account, and the user-authorization system is further configured to determine whether to provide, or not, respective security session information granting renewal of the respective logon lease based at least on the respective security response and at least on the respective buffered security credential associated with the respective user account.

8. A computer implemented method of selectively providing user access to a download and configuration system in a casino, comprising:

receiving a respective logon request that includes respective logon credentials from a user account at a respective control device of a plurality of control devices at a user-authorization system, wherein the user account is one of a plurality of user accounts, and wherein the respective logon request is for accessing a download and configuration system that modifies at least one other gaming machines in a casino;

in response to the received respective logon request, sending a security query to a security store that is accessible only by a security query sent by the user-authorization system and that stores a plurality of user security credentials and a plurality of user access lists, wherein each user security credential is associated with a respective user account of the plurality of user accounts and each user access list is associated with a respective user account of the plurality of user accounts, and wherein the respective security query includes information indicative of the logon credentials carried by the respective logon request;

receiving, at the user-authorization system, a respective security response from the security store that carries information indicative of whether access to the download and configuration system should be granted;

determining whether to grant the respective logon request based at least on the information carried by the respective security response at the user-authorization system;

if the determination of whether to grant the respective logon request is to grant the respective logon request,

buffering the respective user security credential associated with the respective user account that sent the respective logon request in a buffer of the user-authorization system, and

providing the respective user account with security session information;

receiving a respective user access list from the security store for the respective user account that sent the respective logon request;

providing the respective user account with the respective user access list, wherein the respective user access list limits an amount of access to the download and configuration system granted to the respective user account; and

in response to an access to operations request from the respective user account, causing access to operations requested by the respective user account to be verified against the respective access list.

9. The computer implemented method of claim 8 wherein determining whether to grant the respective logon request based at least on the information carried by the respective security response at the user-authorization system includes determining to grant the respective logon request based at least on the respective user security credential associated with the respective user account that sent the respective logon request, wherein the information carried by the respective security response includes the respective user security credential associated with the respective user account that sent the respective logon request.

10. The computer implemented method of claim 8 comprising:

comparing the information indicative of the logon credentials with valid logon credential information associated with the user account that sent the respective logon request;

determining whether the respective logon request is valid based at least on the comparison of the information indicative of the logon credentials with valid logon credential information;

determining whether to include the respective user security credential associated with the respective user account that sent the respective logon request in the respective security response based at least on a determination that the respective logon request is valid; and

sending the respective security response from the security store to the user-authorization system, wherein the respective security response carries the respective user security credential associated with the respective user account that sent the respective logon request, and wherein the respective security response carries the respective user security credential associated with the respective user account that sent the respective logon request only if the respective logon request is valid.

11. The computer implemented method of claim 8 comprising:

creating, at the user-authorization system, a respective user security session for the respective user account that sent the respective logon request in response to determining to grant the respective logon request.

12. The method of claim 11 comprising:

from time to time, receiving a respective logon lease renewal request from a respective user account that is logged in and granted access to the download and configuration system;

retrieving from the buffer of the user-authorization system a respective user security credential that is associated with the respective user account;

determining whether to grant the respective logon lease renewal based at least on the retrieved respective user security credential; and

if the determination of whether to grant the respective logon lease renewal is to grant the respective logon lease renewal,

providing the respective user account with security session information indicative of a renewed logon lease.

13. The computer implemented method of claim 12 wherein the respective logon lease renewal includes respective logon credentials, and wherein determining whether to grant the respective logon lease renewal based at least on the retrieved respective user security credential includes comparing the respective logon credentials with valid login credential information associated with the respective user account.