Security system for video game system with hard disk drive and internet access capability

• US 20030032486A1
• Filed: 05/15/2002
• Published: 02/13/2003
• Est. Priority Date: 04/08/1999
• Status: Active Grant

• Current Assignee: Nintendo of America, Inc. (Nintendo Company Limited)
• Original Assignee: Nintendo of America, Inc. (Nintendo Company Limited)
• Inventors: Elliott, Scott
• Granted Patent: US 6,712,704 B2
• Time in Patent Office: Days
• US Class Current: 463/43
• CPC Class Codes: A63F 13/12 involving interaction between a plurality of game devices, e.g. transmisison or distribution systems protocols for networked virtual reality, networked games H04L29/06034
• CPC Class Codes: A63F 13/30 Interconnection arrangements between game servers and game devices; Interconnection arrangements between game devices; Interconnection arrangements between game servers
• CPC Class Codes: A63F 13/335 using Internet
• CPC Class Codes: A63F 13/71 using secure communication between game devices and game servers, e.g. by encrypting game data or authenticating players
• CPC Class Codes: A63F 13/77 involving data related to game devices or game servers, e.g. configuration data, software version or amount of memory
• CPC Class Codes: A63F 2300/206 Game information storage, e.g. cartridges, CD ROM's, DVD's, smart cards
• CPC Class Codes: A63F 2300/401 Secure communication, e.g. using encryption or authentication
• CPC Class Codes: A63F 2300/407 Data transfer via internet
• CPC Class Codes: A63F 2300/50 characterized by details of game servers
• CPC Class Codes: A63F 2300/532 using secure communication, e.g. by encryption, authentication
• CPC Class Codes: A63F 2300/552 for downloading to client devices, e.g. using OS version, hardware or software profile of the client device
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 21/575 Secure boot
• CPC Class Codes: G06F 2221/2109 Game systems
• CPC Class Codes: G06F 2221/2121 Chip on media, e.g. a disk or tape with a chip embedded in its case

Abstract

An existing video game system is modified to include additional communication and storage capability via a modem and hard disk drive. In accordance with one embodiment of the present invention, the primary system security features are incorporated into a video game system expansion device having a hard disk drive. The security system does not rely on the relatively insecure video game system. The present exemplary embodiment focuses security control in a disk drive/mass media controlling engine which is physically disposed within the expansion device housing as close as possible to the hard disk drive and the downloaded video games and other data it is designed to protect. Security features are incorporated into, for example, a disk drive controlling processing engine to provide security features which extend far beyond simplistic password systems which have heretofore been utilized in conjunction with disk drive controllers. In accordance with an exemplary embodiment of the present invention, the disk controller also incorporates an encrypting engine which encrypts in accordance with a highly secure encrypting algorithm. A further level of security is provided in the illustrative embodiments by partitioning the hard drive into various partitions whose security/accessibility is tightly controlled. Each application program, e.g., a video game, has a predetermined number of private partitions, including a read only encrypted partition.

Claims

1. ) A video game system for executing a video game program and generating game play graphics for display on a user'"'"'s display comprising:

a game processing system for executing a video game program and generating game play graphics on a user'"'"'s display;

communications circuitry, coupled in use to said game processing system and to a user'"'"'s communications network, for linking said game processing system to a server;

a writeable mass storage device coupled in use to said game processing system for storing at least graphics data loaded therein;

a mass storage device controller for defining partitions in said mass storage device in response to encrypted commands received from said server.

2. ) A video game system according to claim 1, wherein said mass storage device controller includes a digital processor and encryption processing circuitry coupled to said digital processor and to said mass storage device.

3. ) A video game system according to claim 2, further including a random access memory coupled to said digital processor and a read-only memory coupled to said digital processor.

4. ) A video game system according to claim 1, wherein said mass storage device has an associated unique ID which is used during encryption operations.

5. ) A video game system according to claim 2, wherein said mass storage device includes a partition table and wherein said digital processor is operable to maintain said partition table.

6. ) A video game system according to claim 5, wherein said partition table associates a game program with a read-only partition for storing encrypted game program instructions.

7. ) A video game system according to claim 6, wherein said mass storage device controller includes encryption processing circuitry coupled to said digital processor for decrypting encrypted game program instructions accessed from said mass storage device.

8. ) A video game system according to claim 5, wherein an executing game program has access to a plurality of private partitions defined by said partition table.

9. ) A video game system according to claim 1, wherein said mass storage device controller includes a digital processor and encryption processing circuitry coupled to said digital processor and to said mass storage device, wherein said encryption processing circuitry is operable to compute a hash value for ensuring that transmitted data has not been corrupted.

10. ) A video game system according to claim 9, wherein the data for which a hash value is determined is used as a key during the hash computation.

11. ) A video game system according to claim 1, wherein said mass storage device controller is operable to generate random data in response to its detection of a security fault.

12. ) A video game system according to claim 1, wherein said mass storage device includes a plurality of partitions which are shared by a plurality of game programs.

13. ) A video game system according to claim 1, wherein said mass storage device stores unique data loaded during the manufacturing process which is used during cryptographic operations.

14. ) A video game system according to claim 1, wherein said unique data includes at least one private encryption key.

15. ) A video game system according to claim 14, wherein said unique data includes a mass storage device identifier uniquely identifying a particular mass storage device.

16. ) A video game system according to claim 1, wherein an executing video game is only permitted to access predetermined partitions of said mass storage device under the control of said mass storage device controller.

17. ) A video game system according to claim 1, wherein said server is operable to download a video game in response to an encrypted game request uniquely identifying the requesting mass storage device.

18. ) A video game system according to claim 1, wherein said mass storage device controller is operable to place said mass storage device in a write-only state.

19. ) A video game system according to claim 18, wherein said write-only state is set during application downloading operations from said server to said mass storage device.

20. ) A video game system according to claim 19, wherein said write-only state is cleared at the completion of a successful download operation from said server to said mass storage device.

21. ) A video game system according to claim 1, wherein said mass storage device controller includes a random access memory and wherein said mass storage device controller executes a security program, the location of which is distributed between said mass storage device and said random access memory.

22. ) A video game system according to claim 1, wherein said server includes a master server for receiving at least one encryption key from a mass storage device controller and for performing cryptographic operations therewith and an electronic commerce server associated with a user'"'"'s Internet service provider.

23. ) A video game system according to claim 1, wherein messages are continuously transmitted between said server and said mass storage device controller, said messages including a message counter field which is incremented each time a message is sent.

24. ) A video game system for executing a video game program and generating game play graphics for display on a user'"'"'s display comprising:

a game processing system for executing a video game program and generating game play graphics on a user'"'"'s display;

communications circuitry, coupled in use to said game processing system and to a user'"'"'s communications network, for linking said game processing system to a server;

a writeable mass storage device coupled in use to said game processing system for storing at least graphics data loaded therein;

a mass storage device controller for controlling access to said writeable mass storage device, and for generating a game request packet and transmitting the game request packet in encrypted form to server.

25. ) A video game system according to claim 24, wherein said mass storage device has an associated unique ID which is associated with at least one encryption key that is used during encryption processing.

26. ) A video game system according to claim 24, wherein said mass storage device controller includes a digital processor and encryption processing circuitry coupled to said digital processor and to said mass storage device.

27. ) A video game system according to claim 26, further including a random access memory coupled to said digital processor and a read-only memory coupled to said digital processor.

28. ) A video game system according to claim 24, wherein said mass storage device is operable to store a partition table defining the mass storage device partitions which are accessible to a game program and wherein said digital processor is operable to maintain said partition table.

29. ) A video game system according to claim 28, wherein said partition table associates a game program with a read-only partition for storing encrypted game program instructions.

30. ) A video game system according to claim 24, wherein said mass storage device controller includes a digital processor and encryption processing circuitry coupled to said digital processor for decrypting encrypted game program instructions accessed from said mass storage device.

31. ) A video game system according to claim 28, wherein an executing game program has access to a plurality of private partitions defined by said partition table.

32. ) A video game system according to claim 24, wherein said mass storage device controller includes a digital processor and encryption processing circuitry coupled to said digital processor and to said mass storage device, wherein said encryption processing circuitry is operable to compute a hash value for ensuring that information transmitted between said server and said mass storage device controller has not been corrupted.

33. ) A video game system according to claim 32, wherein the data on which a hash value is to be computed is used as a key during the hash computation.

34. ) A video game system according to claim 24, wherein said mass storage device controller is operable to detect security faults and to generate random data in response to its detection of a security fault.

35. ) A video game system according to claim 24, wherein said mass storage device includes a plurality of partitions which are shared by a plurality of game programs.

36. ) A video game system according to claim 24, wherein said mass storage device stores unique data loaded during the manufacturing process which is used during cryptographic operations.

37. ) A video game system according to claim 36, wherein said unique data includes at least one private encryption key.

38. ) A video game system according to claim 36, wherein said unique data includes a mass storage device identifier uniquely identifying a particular mass storage device.

39. ) A video game system according to claim 24, wherein an executing video game is only permitted to access predetermined partitions of said mass storage device under the control of said mass storage device controller.

40. ) A video game system according to claim 24, wherein said server is operable to download a video game in response to an encrypted game request uniquely identifying the requesting mass storage device.

41. ) A video game system according to claim 24, wherein said mass storage device controller is operable to place said mass storage device in a write-only state.

42. ) A video game system according to claim 41, wherein said write-only state is set during application downloading operations from said server to said mass storage device.

43. ) A video game system according to claim 42, wherein said write-only state is cleared at the completion of a successful download operation from said server to said mass storage device.

44. ) A video game system according to claim 24, wherein said mass storage device controller includes a random access memory and wherein said mass storage device controller executes a security program, the location of which is distributed between said mass storage device and said random access memory.

45. ) A video game system according to claim 24, wherein said server includes a master server for receiving at least one encryption key from a mass storage device controller and for performing cryptographic operations therewith and an electronic commerce server associated with a user'"'"'s Internet service provider.

46. ) A video game system according to claim 24, wherein messages are continuously transmitted between said server and said mass storage device controller, said messages including a message counter field which is incremented each time a message is sent.

47. ) A video game system according to claim 24, wherein game request packet includes a hash field.

81. ) A method according to claim 24, further including the step of computing a hash value for ensuring that information transmitted between said server and said mass storage device controller has not been corrupted.

48. ) A video game system for executing a video game program and generating game play graphics for display on a user'"'"'s display comprising:

a game processing system for executing any one of a plurality of video game programs selected by a user;

communications circuitry, coupled in use to said game processing system and to a user'"'"'s communications network, for linking said game processing system to a server;

a writeable mass storage device coupled in use to said game processing system for storing at least graphics data loaded therein;

a mass storage device controller for controlling access to said writeable mass storage device by determining the areas of the mass storage device to which a game selected by a user is permitted to access.

49. ) A video game system according to claim 48, wherein the user'"'"'s selection of a particular video game for execution results in a command being generated which causes said mass storage device controller to determine the mass storage device partitions said particular program is permitted to access.

50. ) A video game system according to claim 48, wherein, wherein said mass storage device has an associated unique ID which is associated with at least one encryption key used during encryption operations.

51. ) A video game system according to claim 48, wherein said mass storage device controller includes a digital processor and encryption processing circuitry coupled to said digital processor and to said mass storage device.

52. ) A video game system according to claim 51, further including a random access memory coupled to said digital processor and a read-only memory coupled to said digital processor.

53. ) A video game system according to claim 48, wherein said mass storage device is operable to store a partition table defining the mass storage device partitions which are accessible to a game program and wherein said mass storage device controller is operable to maintain said partition table.

54. ) A video game system according to claim 53, wherein said partition table associates a game program with a read-only partition for storing encrypted game program instructions.

55. ) A video game system according to claim 48, wherein said mass storage device controller includes a digital processor and encryption processing circuitry coupled to said digital processor for decrypting encrypted game program instructions accessed from said mass storage device.

56. ) A video game system according to claim 53, wherein an executing game program has access to a plurality of private partitions defined by said partition table.

57. ) A video game system according to claim 48, wherein said mass storage device controller includes a digital processor and encryption processing circuitry coupled to said digital processor and to said mass storage device, wherein said encryption processing circuitry is operable to compute a hash value for ensuring that information transmitted between said server and said mass storage device controller has not been corrupted.

58. ) A video game system according to claim 57, wherein the data on which a hash value is to be computed is used as a key during the hash computation.

59. ) A video game system according to claim 48, wherein said mass storage device controller is operable to detect security faults and to generate random data in response to its detection of a security fault.

60. ) A video game system according to claim 48, wherein said mass storage device includes a plurality of partitions which are shared by a plurality of game programs.

61. ) A video game system according to claim 48, wherein said mass storage device stores unique data loaded during the manufacturing process which is used during cryptographic operations.

62. ) A video game system according to claim 61, wherein said unique data includes at least one private encryption key.

63. ) A video game system according to claim 61, wherein said unique data includes a mass storage device identifier uniquely identifying a particular mass storage device.

64. ) A video game system according to claim 48, wherein an executing video game is only permitted to access predetermined partitions of said mass storage device under the control of said mass storage device controller.

65. ) A video game system according to claim 48, wherein said server is operable to download a video game in response to an encrypted game request uniquely identifying the requesting mass storage device.

66. ) A video game system according to claim 48, wherein said mass storage device controller is operable to place said mass storage device in a write-only state.

67. ) A video game system according to claim 66, wherein said write-only state is set during application downloading operations from said server to said mass storage device.

68. ) A video game system according to claim 67, wherein said write-only state is cleared at the completion of a successful download operation from said server to said mass storage device.

69. ) A video game system according to claim 48, wherein said mass storage device controller includes a random access memory and wherein said mass storage device controller executes a security program, the location of which is distributed between said mass storage device and said random access memory.

70. ) A video game system according to claim 48, wherein said server includes a master server for receiving at least one encryption key from a mass storage device controller and for performing cryptographic operations therewith and an electronic commerce server associated with a user'"'"'s Internet service provider.

71. ) A video game system according to claim 48, wherein messages are continuously transmitted between said server and said mass storage device controller, said messages including a message counter field which is incremented each time a message is sent.

72. ) A video game system according to claim 48, wherein a game may be accessed by a user by downloading the game from said server using a game request packet that includes a hash field.

73. ) A video game system according to claim 72, wherein, wherein said mass storage device has an associated unique ID which is associated with an encryption key used for encrypting said game request packet

74. ) A method of securely operating a video game system having a game processing system for executing a video game program and for accessing the Internet, said video game system including a mass storage device, comprising the steps of:

requesting by a user a video game to be downloaded for storage on said mass storage device;

transmitting an encrypted game request to a server which uniquely identifies said mass storage device, said request being generated by a mass storage device controller associated with said mass storage device; and

downloading said game program in ecrypted form via the Internet to the video game system so as to define the areas of said mass storage device that said game program has permission to access; and

writing said downloaded game program to said mass storage device.

75. ) A method according to claim 74, wherein said mass storage device has an associated unique ID and encrypting said game request with an encryption key associated with said unique ID.

76. ) A method according to claim 74, wherein said mass storage device controller includes a digital processor and encryption processing circuitry coupled to said digital processor and to said mass storage device and wherein said game request is encrypted using said encryption processing circuitry.

77. ) A method according to claim 74, further including the step of storing in said mass storage device a partition table defining the mass storage device partitions which are accessible to a game program and maintaining said partition table with said mass storage device controller.

78. ) A method according to claim 76, further including the step of associating in said partition table a game program with a read-only partition for storing encrypted game program instructions.

79. ) A method according to claim 74, further including the step of decrypting encrypted game program instructions accessed from said mass storage device.

80. ) A method according to claim 76, permitting an executing game program to have access to a plurality of private partitions as defined by said partition table.

82. ) A method according to claim 80, wherein the data on which a hash value is to be computed is used as a key during the hash computation.

83. ) A method according to claim 74, further including the step of detecting security faults and generating random data in response to a security fault.

84. ) A method according to claim 74, further including the step of sharing a plurality of partitions by a plurality of game programs.

85. ) A method according to claim 74, further including the step of storing unique data during the manufacturing process which is used during cryptographic operations.

86. ) A method according to claim 84, wherein said unique data includes at least one private encryption key.

87. ) A method according to claim 84, wherein said unique data includes a mass storage device identifier uniquely identifying a particular mass storage device.

88. ) A method according to claim 74, further including the step of permitting an executing video game to only access predetermined partitions of said mass storage device under the control of said mass storage device controller.

89. ) A method according to claim 74, further including the step of placing mass storage device in a write-only state.

90. ) A method according to claim 88, wherein said write-only state is set during application downloading operations from said server to said mass storage device.

91. ) A method according to claim 89, wherein said write-only state is cleared at the completion of a successful download operation from said server to said mass storage device.

92. ) A method according to claim 74, wherein said mass storage device controller includes a random access memory and wherein said mass storage device controller executes a security program, and further including the step of distributing the location of said security program between said mass storage device and said random access memory.

93. ) A method according to claim 74, further including the step of receiving at least one encryption key from a mass storage device controller and for performing cryptographic operations therewith by a master server for and performing electronic commerce operations with a server associated with a user'"'"'s Internet service provider.

94. ) A method according to claim 74 further including the steps of transmitting messages between said server and said mass storage device controller, and incrementing a message counter field in a message each time a message is sent.

95. ) A method according to claim 74, further including the step of including a hash field in the game request.

96. ) A method according to claim 74, further including the steps of checking that information that is downloaded is valid using a hash computation and maintaining the mass storage device in a write only status until the data is confirmed as correct.

97. ) An emulator for emulating on one computing system a video game system of a different hardware configuration than said one computing system, said emulator being operable to simulate a video game system including the following elements:

a game processing system for executing a video game program and generating game play graphics;

communications circuitry, coupled in use to said game processing system and to a user'"'"'s communications network, for linking said game processing system to a server;

a writeable mass storage device coupled in use to said game processing system for storing at least graphics data loaded therein;

a mass storage device controller for defining partitions in said mass storage device in response to encrypted commands received from said server.

98. ) An emulator for emulating on one computing system a video game system of a different hardware configuration than said one computing system, said emulator being operable to simulate a video game system including the following elements:

a game processing system for executing a video game program and generating game play graphics;

communications circuitry, coupled in use to said game processing system and to a user'"'"'s communications network, for linking said game processing system to a server;

a writeable mass storage device coupled in use to said game processing system for storing at least graphics data loaded therein;

a mass storage device controller for controlling access to said writeable mass storage device, and for generating a game request packet and transmitting the game request packet in encrypted form to server.

99. ) A method of emulating by a computing system having a first mass storage device, a video game system having a game processing system for executing a video game program and for accessing the Internet and having a second mass storage device, comprising the steps of:

requesting by a user a video game to be downloaded;

emulating the transmission of an encrypted game request by a mass storage device controller associated with said second mass storage device of said game processing system to a server which uniquely identifies said second mass storage device,

downloading said game program in encrypted form via the Internet to the video game system so as to define the areas of said second mass storage device that said game program has permission to access in response to the transmission of an emulated encrypted game request; and

writing said downloaded game program to said first mass storage device associated with the computing device performing the emulation.