System and method for downloading electronic information to a video lottery terminal

• US 8,488,789 B2
• Filed: 02/12/2007
• Issued: 07/16/2013
• Est. Priority Date: 09/26/2000
• Status: Active Grant

• Current Assignee: Igt Canada Solutions Ulc (GTECH SpA)
• Original Assignee: Spielo International Canada ULC (International Game Technology)
• Inventors: Gordon, Timothy Alexander, Kelly, Bartholmew Matthew, Cormier, Joseph Emile Junior
• Primary Examiner(s): TRAN, ELLEN C
• Application Number:
  US11/705,641
• Publication Number:
  US 20070143631A1
• Time in Patent Office: 2,346 Days
• Field of Search: 713/176, 713/189, 380/2, 380/251, 380/278, 463/29, 463/42
• US Class Current: 380/251
• CPC Class Codes: G06F 1/24 Resetting means
• CPC Class Codes: G06F 21/602 Providing cryptographic facilities or services
• CPC Class Codes: G07F 17/32 for games, toys, sports, or amusements
• CPC Class Codes: G07F 17/323 wherein the player is informed, e.g. advertisements, odds, instructions
• CPC Class Codes: G07F 17/3241 Security aspects of a gaming system, e.g. detecting cheating, device integrity, surveillance computer security G06F21/00

Abstract

This invention relates to reprogramming of in-circuit programmable chips installed in video lottery terminals (VLTs) by downloading electronic information (software) to such chips. Encrypted electronic information is downloaded from a host device to a gaming terminal through a communications link. The terminal comprises a decryption component configured for decrypting the encrypted electronic information using at least two security keys, at least one said key being resident in the terminal and at least another said key being delivered to the terminal at the time of the downloading (the downloading facilitating a replacement of existing software in terminal with corresponding decrypted software obtained from decrypting the encrypted information). The encrypted information transmitted to the terminal comprises at least one next version key for later use by the decryption component in decrypting a next version of encrypted electronic information. The non-resident key may be provided to the terminal by means of an electronic plug-in security key or provided through a secure network.

Claims

1. A gaming terminal, comprising:

a memory configured to store a first resident security key and a first resident electronic information, the first resident security key being resident in the terminal;

a receiving component configured to receive a second encrypted electronic information from outside the gaming terminal and a second non-resident security key separately from the first resident security key and the second encrypted electronic information, the second non-resident security key being delivered to the gaming terminal;

a decrypting component configured to decrypt the second encrypted electronic information into a second decrypted electronic information in a process that requires at least the first resident security key and the second non-resident security key wherein the first resident security key decrypts the second encrypted electronic information into a first result and the second non-resident security key decrypts the first result into a second result and either the first resident security key or a separate security key decrypts the second result into the second decrypted electronic information; and

a processor configured to replace the first resident electronic information with the second decrypted electronic information.

2. The gaming terminal of claim 1, wherein the receiving component is in communication with a communications link, and the second non-resident security key is received through the communications link.

3. The gaming terminal of claim 1, further comprising:

an interface configured to communicate with a removable storage media, wherein the removable storage media is removably attached to the gaming terminal and includes the second non-resident security key.

4. The gaming terminal of claim 1, wherein the receiving component is further configured to receive a second non-resident security key identifier, wherein the second non-resident security key identifier identifies the second encrypted electronic information to be decrypted with the second non-resident security key.

5. The gaming terminal of claim 1, wherein the processor is configured to extract the non-resident security key from a received bit stream using a known bit order assignment.

6. The gaming terminal of claim 1, wherein the processor is further configured to calculate a signature of the second decrypted electronic information and transmit the signature to a host for verification of the second decrypted electronic information.

7. The gaming terminal of claim 1, wherein the second decrypted electronic information includes game terminal software.

8. The gaming terminal of claim 1, wherein the second decrypted electronic information includes video lottery terminal software.

9. The gaming terminal of claim 1,

wherein said memory is configured to store an encrypted master reset component;

wherein said decrypting component is configured to decrypt the encrypted master reset component into a decrypted master reset component; and

wherein said processor is configured to reset the gaming terminal to an initial state by executing the decrypted master reset component and effecting a master reset of the gaming terminal.

10. The gaming terminal of claim 9, further comprising:

an interface configured to receive the non-resident security key from a removable storage.

11. The gaming terminal of claim 9, further comprising:

a communications link in communication with the receiving component, the encrypted master reset component received over the communications link before being stored in memory.

12. The gaming terminal of claim 9, wherein the decrypting component is further configured to decrypt an encrypted electronic information with at least the non-resident security key and a resident security key.

13. The gaming terminal of claim 9, wherein the receiving component is further configured to receive a non-resident security key identifier, wherein the non-resident security key identifier identifies the gaming terminal to be reset.

14. The gaming terminal of claim 9, wherein the processor is configured to extract the non-resident security key from a received bit stream using a known bit order assignment.

15. The gaming terminal of claim 9, wherein the initial state includes a game state and an accounting state.

16. The gaming terminal of claim 1, wherein the second encrypted electronic information includes a first resident key for use in a subsequent decryption of later-received encrypted electronic information.

17. A host, comprising:

an encryption component, the encryption component configured to encrypt a second decrypted electronic information into a second encrypted electronic information decryptable by a process that requires at least a first resident security key and a second non-resident security key, wherein the first resident security key decrypts the second encrypted electronic information into a first result and the second non-resident security key decrypts the first result into a second result and either the first resident security key or a separate security key decrypts the second result into the second decrypted electronic information, and wherein the second decrypted electronic information is configured to replace a first resident electronic information and the first resident security key is resident in a terminal separate from the host; and

a transmitting component configured to transmit the second encrypted electronic information and the second non-resident security key separately.

18. The host of claim 17, wherein the transmitting component is in communication with a communications link, and the second non-resident security key is transmitted over the communications link.

19. The host of claim 17, further comprising:

an interface configured to transmit the second non-resident security key to a removable storage media.

20. The host of claim 17, wherein the transmitting component is further configured to transmit a second non-resident security key identifier, the second non-resident security key identifier identifying the second encrypted electronic information to be decrypted with the second non-resident security key.

21. The host of claim 17, further comprising:

a receiving component, the receiving component configured to receive a terminal signature; and

a processor, the processor configured to calculate a reference signature of the second decrypted electronic information and compare the reference signature with the terminal signature to verify the transmitted second encrypted electronic information was correctly received.

22. The gaming terminal of claim 17, wherein the second decrypted electronic information includes game terminal software.

23. The gaming terminal of claim 17, wherein the second decrypted electronic information includes video lottery terminal software.

24. A method for securely downloading information to a gaming terminal, comprising:

receiving a second encrypted electronic information at the gaming terminal, a first resident security key being present at the gaming terminal;

receiving a second non-resident security key separately from the second encrypted electronic information at the gaming terminal;

decrypting the second encrypted electronic information into a second decrypted electronic information in a process that requires at least the first resident security key and the second non-resident security key wherein the first resident security key decrypts the second encrypted electronic information into a first result and the second non-resident security key decrypts the first result into a second result and either the first resident security key or a separate security key decrypts the second result into the second decrypted electronic information; and

replacing a first resident electronic information with the second decrypted electronic information.

25. The method of claim 24, wherein the second non-resident security key is received over a communications link.

26. The method of claim 24, wherein the second non-resident security key is received from a removable storage media removably attached to the gaming terminal.

27. The method of claim 24, further comprising:

verifying a second non-resident security key identifier associated with the second encrypted electronic information before decrypting the second encrypted electronic information.

28. The method of claim 24, further comprising:

extracting the non-resident security key from a received bit stream using a known bit order assignment.

29. The method of claim 24, further comprising:

calculating a signature of the second decrypted electronic information; and

transmitting the signature to a host for verification of the second decrypted electronic information.

30. The method of claim 24, wherein the second decrypted electronic information includes game terminal software.

31. The method of claim 24, wherein the second decrypted electronic information includes video lottery terminal software.

32. The method of claim 24, further comprising:

decrypting a encrypted master reset component with the received non-resident security key into a decrypted master reset component, wherein the encrypted master reset component is stored in the gaming terminal; and

resetting the gaming terminal to an initial state by executing the decrypted master reset component to effect a master reset of the gaming terminal.

33. The method of claim 32, wherein the non-resident security key is received from a removable storage removably attached to the gaming terminal.

34. The method of claim 32, further comprising:

receiving the encrypted master reset component over a communications link.

35. The method of claim 32, further comprising:

decrypting an encrypted electronic information with at least the non-resident security key and a resident security key.

36. The method of claim 32, further comprising:

verifying a non-resident security key identifier before decrypting the encrypted master reset component.

37. The method of claim 32, further comprising:

extracting the non-resident security key from a received bit stream using a known bit order assignment.

38. The method of claim 32, wherein the initial state includes a game state and an accounting state.

39. A method for securely transmitting information from a host, comprising:

encrypting a second decrypted electronic information into a second encrypted electronic information, the second encrypted electronic information configured to be decryptable by a process that requires at least a first resident security key and a second non-resident security key, wherein the first resident security key decrypts the second encrypted electronic information into a first result and the second non-resident security key decrypts the first result into a second result and either the first resident security key or a separate security key decrypts the second result into the second decrypted electronic information, and wherein the second decrypted electronic information is configured to replace a first resident electronic information and the first resident security key is resident in a terminal separate from the host;

transmitting the second encrypted electronic information; and

transmitting the second non-resident security key separately from the second encrypted electronic information.

40. The method of claim 39, wherein the second non-resident security key is transmitted over a communications link.

41. The method of claim 39, wherein the second non-resident security key is transmitted to a removable storage media.

42. The method of claim 39, further comprising:

transmitting a second non-resident security key identifier associated with the second encrypted electronic information, the second non-resident security key identifier identifying the second encrypted electronic information to be decrypted by the second non-resident security key.

43. The method of claim 39, further comprising:

calculating a reference signature of the second decrypted electronic information; and

comparing the reference signature with a received terminal signature to verify the second encrypted electronic information was correctly received.

44. The method of claim 39, wherein the second decrypted electronic information includes game terminal software.

45. The method of claim 39, wherein the second decrypted electronic information includes video lottery terminal software.

46. A gaming terminal, comprising:

a memory configured to store a first resident security key, a second resident security key and a first resident electronic information, the first resident security key and the second resident security key both being resident in the terminal;

a receiving component configured to receive a second encrypted electronic information from outside the gaming terminal and a non-resident security key separately from the first resident security key, the second resident security key and the second encrypted electronic information, the non-resident security key being delivered to the gaming terminal;

a decrypting component configured to decrypt the second encrypted electronic information into a second decrypted electronic information in a process wherein three decryptions are performed one after another with the first resident security key, the second resident security key and the non-resident security key so that a first decryption begins with the second encrypted electronic information and each subsequent decryption begins with the outcome of the earlier decryption and the decrypted outcome is the second decrypted electronic information; and

a processor configured to replace the first resident electronic information with the second decrypted electronic information.

47. The gaming terminal of claim 46, wherein the first resident security key and the second resident security key are provided to the gaming terminal in a version of software previously provided to the gaming terminal.