System and method enabling parallel processing of hash functions using authentication checkpoint hashes

• US 8,966,278 B2
• Filed: 12/24/2013
• Issued: 02/24/2015
• Est. Priority Date: 03/27/2012
• Status: Active Grant

• Current Assignee: IGT (International Game Technology)
• Original Assignee: IGT (International Game Technology)
• Inventors: Wolf, Bryan D.
• Primary Examiner(s): Okeke, Izunna
• Application Number:
  US14/140,282
• Publication Number:
  US 20140108812A1
• Time in Patent Office: 427 Days
• US Class Current: 713/187
• CPC Class Codes: G06F 21/51 at application loading time, e.g. accepting, rejecting, starting or inhibiting executable software based on integrity or source reliability
• CPC Class Codes: G06F 21/64 Protecting data integrity, e.g. using checksums, certificates or signatures

Abstract

Systems and methods enabling parallel processing of hash functions are provided. A data string including a plurality of pieces arranged in an order is hashed using a hash function to determine a plurality of authentication checkpoint hashes associated with the pieces. To authenticate the data string, the pieces are grouped into sets, and the authentication checkpoint hash associated with the piece following all other pieces of that set in the order is associated with that set. The system simultaneously performs a separate hash process on each set. That is, the system hashes the pieces of that set using the hash function to determine a result hash, and compares that result hash with the authentication checkpoint hash associated with that set. The initial input to the hash function for the hash process for each set includes one of the pieces and either a default seed or an authentication checkpoint hash.

Claims

1. A system comprising:

at least one processor;

at least one display device; and

at least one memory device that stores a plurality of instructions which, when executed by the at least one processor, cause the at least one processor to operate with the at least one display device to;

(a) during a first time period, for a first piece of a code including a plurality of pieces;

(i) hash the first piece of the code and a default seed to obtain a first result hash;

(ii) determine whether the first result hash matches a first authentication checkpoint hash;

(iii) if the first result hash matches the first authentication checkpoint hash, authorize the first piece of the code for execution; and

(iv) if the first result hash does not match the first authentication checkpoint hash, not authorize the first piece of the code for execution;

(b) during a second time period that is initiated before completion of the first time period and that at least partially overlaps the first time period, for a second different piece of the code;

(i) hash the second piece of the code and the first authentication checkpoint hash to obtain a second result hash;

(ii) determine whether the second result hash matches a second authentication checkpoint hash;

(iii) if the second result hash matches the second authentication checkpoint hash, authorize the second piece of the code for execution; and

(iv) if the second result has does not match the second authentication checkpoint hash, not authorize the second piece of the code for execution; and

(c) if each piece of the code is authorized for execution, execute the code and display an image generated by the executed code.

2. The system of claim 1, wherein the first time period and the second time period completely overlap.

3. The system of claim 1, which includes a plurality of processors including a first processor and a second different processor, and wherein the first processor performs (a) and the second processor performs (b).

4. The system of claim 1, wherein the second time period expires before the first time period expires.

5. The system of claim 1, wherein the plurality of instructions, when executed by the at least one processor, cause the at least one processor to:

(1) if the first result hash does not match the first authentication checkpoint hash, generate a first error message identifying the first piece of the code; and

(2) if the second result hash does not match the second authentication checkpoint hash, generate a second error message identifying the second piece of the code.

6. A system comprising:

at least one processor;

at least one display device; and

at least one memory device that stores a plurality of instructions which, when executed by the at least one processor, cause the at least one processor to operate with the at least one display device to;

(a) during a first time period, for a designated one of a plurality of pieces of a code, said designated piece of the code preceding each remaining piece of the code in a designated order;

(i) hash said designated piece of the code and a default seed to obtain a first result hash;

(ii) determine whether the first result hash matches an authentication checkpoint hash associated with said designated piece of the code, said authentication checkpoint hash being one of a plurality of different authentication checkpoint hashes, each of the authentication checkpoint hashes being associated with a different piece of the code;

(iii) if the first result hash matches said authentication checkpoint hash associated with said designated piece of the code, authorize said designated piece of the code for execution; and

(iv) if the first result hash does not match said authentication checkpoint hash associated with said designated piece of the code, not authorize said designated piece of the code for execution;

(b) during a second time period that is initiated before completion of the first time period and that at least partially overlaps the first time period, for each remaining piece of the code;

(i) hash said piece of the code and the authentication checkpoint hash associated with the piece of the code immediately preceding said piece of the code in the designated order to obtain a result hash;

(ii) determine whether the result hash matches the authentication checkpoint hash associated with said piece of the code;

(iii) if the result hash matches the authentication checkpoint hash associated with said piece of the code, authorize said piece of the code for execution; and

(iv) if the result hash does not match the authentication checkpoint hash associated with said piece of the code, not authorize said piece of the code for execution; and

(c) if each of the pieces of the code are authorized for execution, execute the code and display an image generated by the executed code.

7. The system of claim 6, wherein the second time period completely overlaps the first time period.

8. The system of claim 6, which includes a plurality of processors including a first processor and a different second processor, and wherein the first processor performs (a) and the second processor performs (b) for at least one remaining piece of the code.

9. The system of claim 6, wherein the plurality of instructions, when executed by the at least one processor, cause the at least one processor to:

(1) if the first result hash does not match the authentication checkpoint hash associated with said designated piece of the code, generate a first error message identifying the designated piece of the code; and

(2) for each remaining piece of the code, if the result hash does not match the authentication checkpoint hash associated with said piece of the code, generate a second error message identifying said piece of the code.

10. The system of claim 6, wherein the plurality of instructions, when executed by the at least one processor, cause the at least one processor to initiate the first time period and the second time period at a same point in time.

11. A method comprising:

(a) during a first time period, for a first piece of a code including a plurality of pieces;

(i) causing at least one processor to execute a plurality of instructions to hash the first piece of the code and a default seed to obtain a first result hash;

(ii) causing the at least one processor to execute the plurality of instructions to determine whether the first result hash matches a first authentication checkpoint hash;

(iii) if the first result hash matches the first authentication checkpoint hash, causing the at least one processor to execute the plurality of instructions to authorize the first piece of the code for execution; and

(iv) if the first result hash does not match the first authentication checkpoint hash, causing the at least one processor to execute the plurality of instructions to not authorize the first piece of the code for execution;

(b) during a second time period that is initiated before completion of the first time period and that at least partially overlaps the first time period, for a second different piece of the code;

(i) causing the at least one processor to execute the plurality of instructions to hash the second piece of the code and the first authentication checkpoint hash to obtain a second result hash;

(ii) causing the at least one processor to execute the plurality of instructions to determine whether the second result hash matches a second authentication checkpoint hash;

(iii) if the second result hash matches the second authentication checkpoint hash, causing the at least one processor to execute the plurality of instructions to authorize the second piece of the code for execution; and

(iv) if the second result has does not match the second authentication checkpoint hash, causing the at least one processor to execute the plurality of instructions to not authorize the second piece of the code for execution; and

(c) if each piece of the code is authorized for execution, causing the at least one processor to execute the plurality of instructions to execute the code and operate with at least one display device to display an image generated by the executed code.

12. The method of claim 11, wherein the first time period and the second time period completely overlap.

13. The method of claim 11, which includes causing a first processor to execute the plurality of instructions to perform (a) and causing a second different processor to execute the plurality of instructions to perform (b).

14. The method of claim 11, wherein the second time period expires before the first time period expires.

15. The method of claim 11, which includes causing the at least one processor to execute the plurality of instructions to:

(1) if the first result hash does not match the first authentication checkpoint hash, generate a first error message identifying the first piece of the code; and

(2) if the second result hash does not match the second authentication checkpoint hash, generate a second error message identifying the second piece of the code.

16. A method comprising:

(a) during a first time period, for a designated one of a plurality of pieces of a code, said designated piece of the code preceding each remaining piece of the code in a designated order;

(i) causing at least one processor to execute a plurality of instructions to hash said designated piece of the code and a default seed to obtain a first result hash;

(ii) causing the at least one processor to execute the plurality of instructions to determine whether the first result hash matches an authentication checkpoint hash associated with said designated piece of the code, said authentication checkpoint hash being one of a plurality of different authentication checkpoint hashes, each of the authentication checkpoint hashes being associated with a different piece of the code;

(iii) if the first result hash matches said authentication checkpoint hash associated with said designated piece of the code, causing the at least one processor to execute the plurality of instructions to authorize said designated piece of the code for execution; and

(iv) if the first result hash does not match said authentication checkpoint hash associated with said designated piece of the code, causing the at least one processor to execute the plurality of instructions to not authorize said designated piece of the code for execution;

(b) during a second time period that is initiated before completion of the first time period and that at least partially overlaps the first time period, for each remaining piece of the code;

(i) causing the at least one processor to execute the plurality of instructions to hash said piece of the code and the authentication checkpoint hash associated with the piece of the code immediately preceding said piece of the code in the designated order to obtain a result hash;

(ii) causing the at least one processor to execute the plurality of instructions to determine whether the result hash matches the authentication checkpoint hash associated with said piece of the code;

(iii) if the result hash matches the authentication checkpoint hash associated with said piece of the code, causing the at least one processor to execute the plurality of instructions to authorize said piece of the code for execution; and

(iv) if the result hash does not match the authentication checkpoint hash associated with said piece of the code, causing the at least one processor to execute the plurality of instructions to not authorize said piece of the code for execution; and

(c) if each of the pieces of the code are authorized for execution, execute the code and display an image generated by the executed code.

17. The method of claim 16, wherein the second time period completely overlaps the first time period.

18. The method of claim 16, which includes causing a first processor to execute the plurality of instructions to perform (a) and causing a second different processor to execute the plurality of instructions to perform (b).

19. The method of claim 16, which includes causing the at least one processor to execute the plurality of instructions to:

(1) if the first result hash does not match the authentication checkpoint hash associated with said designated piece of the code, generate a first error message identifying the designated piece of the code; and

(2) for each remaining piece of the code, if the result hash does not match the authentication checkpoint hash associated with said piece of the code, generate a second error message identifying said piece of the code.

20. The method of claim 16, which includes causing the at least one processor to execute the plurality of instructions to initiate the first time period and the second time period at a same point in time.