Software verification and authentication

• US 8,939,834 B2
• Filed: 09/11/2013
• Issued: 01/27/2015
• Est. Priority Date: 06/17/1998
• Status: Expired due to Term

• Current Assignee: Aristocrat Technologies Australia PTY Limited (Aristocrat Leisure Limited)
• Original Assignee: Aristocrat Technologies Australia PTY Limited (Aristocrat Leisure Limited)
• Inventors: Bond, Eugene Thomas
• Primary Examiner(s): Lewis, David L
• Assistant Examiner(s): Hoel, Matthew D
• Application Number:
  US14/023,997
• Publication Number:
  US 20140011582A1
• Time in Patent Office: 503 Days
• Field of Search: 463/29, 380/250, 380 28- 30
• US Class Current: 463/29
• CPC Class Codes: A63F 2300/401 Secure communication, e.g. using encryption or authentication
• CPC Class Codes: G06F 21/51 at application loading time, e.g. accepting, rejecting, starting or inhibiting executable software based on integrity or source reliability
• CPC Class Codes: G06F 2221/2109 Game systems
• CPC Class Codes: G07F 17/32 for games, toys, sports, or amusements
• CPC Class Codes: G07F 17/3202 Hardware aspects of a gaming system, e.g. components, construction, architecture thereof
• CPC Class Codes: G07F 17/3223 Architectural aspects of a gaming system, e.g. internal configuration, master/slave, wireless communication
• CPC Class Codes: G07F 17/3227 Configuring a gaming machine, e.g. downloading personal settings, selecting working parameters
• CPC Class Codes: G07F 17/3241 Security aspects of a gaming system, e.g. detecting cheating, device integrity, surveillance computer security G06F21/00

Abstract

A device for controlling electronic gaming machines comprises a single board computer (SBC) having a microprocessor, memory means, storage means and a ROM (Read Only Memory). The ROM includes: a loader program; verification program; an authentication program; and a presentation program. Additional Mass storage media in communication with the SBC store pre-verified and approved gaming software (program files) and related data files, each of which have a verification signature appended to them. Prior to usage of the gaming software, the program file software or data file is retrieved by the loader program and checked by the verification program which compares the verification signature with a newly calculated verification signature. If the newly calculated signature matches the verification signature, the requested file is deemed to be intact (a validated image).

Claims

1. A system, comprising:

a gaming machine comprising a storage medium that stores gaming software for the gaming machine, a processor configured to authenticate and execute the gaming software stored by the storage medium; and

an authentication agent apparatus external to the gaming machine and configured to transmit an authentication algorithm to said gaming machine, the authentication algorithm including instructions which the processor of the gaming machine executes to authenticate the gaming software stored in the storage medium; and

receive from the gaming machine an outcome of the processor executing and applying the authentication algorithm to the gaming software stored in the storage medium.

2. The system of claim 1, wherein the authentication agent apparatus is further configured to provide an approval response to the gaming machine in response to authenticating the gaming software based on the received outcome and an expected outcome of applying the authentication algorithm to the gaming software.

3. The system of claim 1, wherein the processor is configured to execute and apply the authentication algorithm to the gaming software in response to a request of the gaming machine, a request of a player of the gaming machine, a request of an authorized agent, a randomly event, and/or a periodically scheduled event.

4. The system of claim 1, wherein said at least one processor is further configured to execute a verification algorithm to verify a stored integrity of the gaming software in the storage medium.

5. The system of claim 1, wherein said gaming machine comprises a communication interface configured to permit the authorization agent apparatus to remotely transmit the authentication algorithm to the gaming machine via a communication link.

6. A method for authenticating gaming software stored in a gaming machine, the method comprising:

receiving, with the gaming machine, a plurality of instructions of an authentication algorithm transmitted by an external authentication agent;

executing, with a processor of the gaming machine, the plurality of instructions to apply the authentication algorithm to the gaming software stored in the gaming machine;

transmitting, an outcome of applying the authentication algorithm to the gaming software, from the gaming system to an authentication responder external to the gaming machine; and

determining, at the gaming machine, whether the gaming software is authentic based upon a response received from the authentication responder in response to the transmitted outcome.

7. The method of claim 6, further executing the authentication algorithm with the processor in response to a request of the gaming machine, a request of a player of the gaming machine, a request of an authorized agent, a randomly event, and/or a periodically scheduled event.

8. The method of claim 6, further comprising executing the gaming software with the processor in response to determining that the gaming software is authentic.

9. The method of claim 6, further comprising halting execution of the gaming software with the processor in response to determining that the gaming software is not authentic.

10. The method of claim 6, further comprising displaying an error messaging in response to determining that the gaming software is not authentic.

11. The method of claim 6, wherein the authentication agent and the authentication responder are both incorporated into a single apparatus external to the gaming machine.

12. A gaming machine, comprising:

a data storage device configured to store gaming software; and

a gaming controller configured to receive a plurality of instructions of an authentication algorithm from an authentication agent that is external to the gaming machine, execute the plurality of instructions to apply the authentication algorithm to the gaming software, transmit an outcome of applying the authentication algorithm to the gaming software to an authentication responder external to the gaming machine, and determine whether the gaming software is authentic based upon a response received from the authentication responder in response to the transmitted outcome.

13. The gaming machine of claim 12, wherein said gaming controller is further configured to prevent a player from playing a game implemented by the gaming software until the gaming software is determined to be authentic.

14. The gaming machine of claim 12, wherein said gaming controller is further configured to execute the plurality of instructions of the authentication algorithm in response to a player attempting to execute a game implemented by the gaming software.

15. The gaming machine of claim 12, wherein said gaming controller is further configured to download to the gaming machine one or more program files that comprise the gaming software, and initiate execution of the plurality of instructions of the authentication algorithm in response to downloading the one or more program files.