Technique for secure network transactions

• US 6,178,510 B1
• Filed: 09/04/1997
• Issued: 01/23/2001
• Est. Priority Date: 09/04/1997
• Status: Expired due to Term

• Current Assignee: Spielo International Canada ULC (International Game Technology)
• Original Assignee: GTECH Rhode Island Corporation (International Game Technology)
• Inventors: Stanford, Donald L., Khan, Tariq M., Hutton, Michael A., Beason, Steve W., OʼConnor, William Y., Angell, Robert C.
• Primary Examiner(s): LE, DIEU MINH T
• Application Number:
  US08/923,653
• Time in Patent Office: 1,237 Days
• Field of Search: 395/187.01, 395/186, 395/188.01, 395/200.41, 395/200.42, 395/200.46, 395/200.59, 380/4, 380/23, 380/25, 380/3, 340/825.31, 340/825.32, 713/200, 713/201, 713/202, 709/225, 709/229
• US Class Current: 726/5
• CPC Class Codes: G06F 2221/2129 Authenticate client device independently of the user
• CPC Class Codes: G06Q 20/02 involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
• CPC Class Codes: G07F 19/20 Automatic teller machines [ATMs]
• CPC Class Codes: G07F 19/211 Software architecture within ATMs or in relation to the ATM network
• CPC Class Codes: H04L 63/102 Entity profiles

Abstract

A system for performing regulated transactions is used with a network that is commonly accessible by a plurality of communication terminals. A gatekeeper, coupled to the network, permits access to the system only if authorization information, as indicated by an authorization signal received by the gatekeeper from a communication terminal via the network, complies with at least one predetermined criterion. The authorization information includes information independent of information supplied by a communication terminal user and independent of information indicative of a communication line coupled to the user'"'"'s communication terminal. A host, coupled to the gatekeeper, receives a first signal from the user'"'"'s communication terminal through the network and sends a second signal through the network to the user'"'"'s communication terminal in response to the first signal.

Claims

1. A system for performing regulated transactions for use with a network that is commonly accessible by a plurality of communication terminals, the system comprising:

a gatekeeper, coupled to the network, adapted to permit access to the system only if authorization information, as indicated by an authorization signal received by the gatekeeper from a communication terminal via the network, complies with at least one predetermined criterion, the authorization information being associated with the communication terminal and being independent of information supplied by a user of the communication terminal and independent of information indicative of a communication line coupling the communication terminal to the gatekeeper via the network; and

a host, coupled to the gatekeeper, that receives a first signal from the communication terminal through the network and sends a second signal through the network to the communication terminal in response to the first signal.

2. The system of claim 1 wherein the authorization signal is encoded and the gatekeeper is capable of decoding the authorization signal.

3. The system of claim 1 wherein the gatekeeper transmits an identification signal over the network indicative of the identity of the gatekeeper to the communication terminal.

4. The system of claim 1 wherein the first signal is indicative of a gaming instruction and the host performs a gaming operation and generates the second signal indicating a result of the gaming operation corresponding to the gaming instruction indicated by the first signal.

5. The system of claim 1 further comprising a game repository, coupled to the gatekeeper, that stores a plurality of games.

6. The system of claim 5 wherein the host is capable of downloading games from the game repository through the gatekeeper.

7. The system of claim 5 wherein the first signal is indicative of a gaming instruction, the game repository performs a gaming operation, and the host communicates with the game repository and generates the second signal indicating a result of the gaming operation corresponding to the gaming instruction indicated by the first signal.

8. The system of claim 1 wherein the gatekeeper and host are associated with a gaming jurisdiction and the at least one predetermined criterion requires that the authorization signal is indicative of the user'"'"'s compliance with regulations of the gaming jurisdiction.

9. The system of claim 1 wherein the authorization information is associated with a person that has met authorization requirements as verified by having appeared in person at a predetermined location.

10. A gaming system for use with a network that is commonly accessible by a plurality of communication terminals, the system comprising:

a host capable of receiving a first signal indicative of a gaming instruction and transmitting a second signal indicative of a result of a gaming operation;

a gatekeeper, coupled to the host and to the network, adapted to analyze data from a source and to permit access to the host only to sources of authorized data associated with the sources; and

a game repository, coupled to the gatekeeper, that stores a plurality of games;

wherein the host is adapted to access a game in the game repository to determine the second signal; and

wherein the gatekeeper and game repository are adapted to permit access to games stored in the game repository only to sources of authorized data associated with the sources and to the host if the host meets at least one authorization requirement.

11. The system of claim 10 wherein the host is a first host and the gatekeeper is a first gatekeeper, the system further comprising:

a second host;

a second gatekeeper coupled to the second host;

an access controller, coupled to and interposed between the network and the gatekeepers, adapted to control access to the first gatekeeper by a communication terminal user and by the second gatekeeper.

12. The system of claim 11 wherein the access controller is further coupled to the game repository and adapted to control access to the repository by the gatekeepers.

13. The system of claim 11 wherein the network comprises a network known as the Internet and the access controller comprises a private network that is accessible through an Internet site.

14. A computer program product for use with a system including a network that is commonly accessible by a plurality of communication terminals and an access control device coupled to the network, the computer program product comprising:

a computer-readable memory comprising;

authorization signal code that causes a communication terminal to supply an authorization signal to the access control device via the network, the authorization signal being indicative of authorization information that is associated with the computer program product and that is independent of information supplied by a user of the computer program product and independent of information indicative of a communication line coupling the communication terminal to the access control device via the network.

15. The computer program product of claim 14 wherein the computer-readable memory further comprises code that processes an authorization response signal, received from the access control device, indicative of a response to the authorization signal.

16. The computer program product of claim 14 wherein the system further includes a host device, coupled to the access control device, to which a user desires access and wherein the computer-readable memory further comprises:

code that allows the user to instruct the communication terminal to supply an action signal to the host device; and

code that processes an action response signal indicative of a response to the action signal.

17. The computer program product of claim 14 wherein the computer-readable memory further comprises copy-prevention code that prevents duplication of the authorization signal code.

18. The computer program product of claim 17 wherein the authorization signal code is original authorization signal code and wherein the copy-prevention code causes an attempted copying of the original authorization code to create new authorization signal code that is different from the original authorization signal code.

19. The computer program product of claim 14 further comprising alteration code that disables the authorization signal code if a copy of the authorization signal code is attempted to be made.

20. The computer program product of claim 14 wherein the computer-readable memory is adapted for use with multiple software platforms.

21. The computer program product of claim 14 wherein the authorization signal code is written in JAVA programming language.

22. The computer program product of claim 14 wherein the computer-readable memory further comprises code that processes a global positioning signal and instructs the communication terminal to send a location signal indicative of information in the global positioning signal to the access control device.

23. The computer program product of claim 14 wherein the computer-readable memory further comprises code that instructs the communication terminal to send a location signal indicative of a location of the communication terminal to the access control device.

24. The computer program product of claim 14 wherein the computer-readable memory further comprises code that instructs the communication terminal to send user-identification information to the access control device periodically.

25. A computer program product for use with a system including a network that is commonly accessible by a plurality of communication terminals, a host device to which a user desires access, and an access regulator, coupled to the host device and to the network, that regulates access to the host device, the computer program product comprising:

a computer-readable memory comprising;

code that processes an authorization signal, received from a communication terminal, indicative of authorization information that is associated with the communication terminal and that is independent of information supplied by the user and independent of information indicative of a communication line coupling the communication terminal to the access regulator via the network; and

code that instructs the access regulator to permit the communication terminal to communicate with the host device only if the authorization information meets at least one predetermined criterion.

26. The computer program product of claim 25 wherein the computer-readable memory further comprises code that determines a location of the communication terminal.

27. The computer program product of claim 25 wherein the computer-readable memory further comprises code that processes a location signal indicative of a location of the communication terminal.

28. The computer program product of claim 25 further comprising:

code that receives a gaming action signal indicative of a gaming action desired by a user;

code that determines an outcome of the desired gaming action; and

code that causes transmission of an outcome signal to the communication terminal indicative of the outcome of the user'"'"'s desired gaming action.

29. The computer program product of claim 28 further comprising code that performs a game.

30. The computer program product of claim 28 for use with a game repository storing a plurality of games, the computer program product further comprising code that instructs the game repository to perform a game.

31. The computer program product of claim 28 further comprising code that receives outcomes of activities of gaming interest via the network.

32. A system for performing regulated transactions for use with a network that is commonly accessible by a plurality of communication terminals, the system comprising:

a repository that stores a plurality of computer programs; and

a transaction controller, coupled to the network and to the repository;

wherein access to a program by the transaction controller is permitted only if appropriate authorization information that is associated with a communication terminal is independent of information supplied by a communication terminal user and independent of information indicative of a communication line coupling the communication terminal to the transaction controller via the network.

33. The system of claim 32 wherein the transaction controller is capable of downloading a program from the repository.

34. The system of claim 32 wherein the transaction controller is capable of instructing the repository to run a selected program.

35. The system of claim 34 wherein the repository transmits results of the running of the program to the transaction controller.

36. The system of claim 34 wherein the transaction controller sends an authorization signal associated with the transaction controller to the repository.

37. The system of claim 32 wherein the authorization information is associated with a person that has met authorization requirements as verified by having appeared in person at a predetermined location.

38. A method of authenticating a transmission from a communication terminal, the method comprising:

transmitting an authentication signal from a communication terminal to an access controller, the authentication signal indicative of authorization information that is associated with the communication terminal and that is independent of information supplied by a communication terminal user and independent of information indicative of a communication line that conveys data from the communication terminal to the access controller; and

verifying that the authorization information meets predetermined criteria.

39. The method of claim 38 wherein the authentication information is associated with software resident in the communication terminal.

40. The method of claim 38 further comprising transmitting a transaction controller identification signal from the transaction controller to the communication terminal, the transaction controller identification signal indicative of an identity of the transaction controller.

41. The method of claim 38 further comprising transmitting a user identification signal from the communication terminal to the transaction controller, the user identification signal being indicative of an identity of the user of the communication terminal.

42. The method of claim 41 wherein the user enters information indicative of the identity of the user.

43. The method of claim 41 wherein an identification device produces the user identification signal after analyzing a physical feature of the user.

44. The method of claim 38 wherein the verifying step comprises comparing the authorization information with predetermined data parameters.

45. The method of claim 38 wherein the verifying step comprises:

processing the authorization information according to a predetermined operation; and

comparing results of the operation with predetermined result parameters.

46. The method of claim 38 further comprising transmitting a gaming instruction to a host if the verifying step is successful.

47. The method of claim 46 further comprising processing the gaming instruction in the host.

48. A method of claim 38 further comprising associating authorization information with a qualified person that appears in person at a predetermined location.

50. The method of claim 48 further comprising downloading a gaming program from the central repository to the first host.

51. The method of claim 48 further comprising performing a gaming operation in the central repository corresponding to the first request signal.

52. The method of claim 48 further comprising transmitting information corresponding to the first request signal from the central repository to the first host.

53. The method of claim 48 wherein the first and second gaming instruction signals are received from at least one communication terminal, the method further comprising verifying, before the receiving and transmitting steps, that authentication information from the at least one terminal meets at least one criterion, the authentication information being associated with the at least one communication terminal and being independent of data entered by a user of the at least one terminal and independent of information indicative of a communication line coupling the at least one terminal to the first and second hosts via the network.

49. A method of gaming using a network that is commonly accessible by a plurality of gaming terminals, the method comprising:

receiving a first gaming instruction signal at a first host from a gaming terminal via the network;

verifying whether the first host and the gaming terminal meet at least one authorization requirement for accessing a game corresponding to the first gaming instruction signal;

transmitting a first request signal, corresponding to the first gaming instruction signal, from the first host to a central repository that stores a plurality of games;

receiving a second gaming instruction signal at a second host from a gaming terminal via the network;

verifying whether the second host and the gaming terminal meet at least one authorization requirement for accessing a game corresponding to the second gaming instruction signal; and

transmitting a second request signal, corresponding to the second gaming instruction signal, from the second host to the central repository.

54. A computer program product for use with a system including a network that is commonly accessible by a plurality of communication terminals and an access control device coupled to the network, the computer program product comprising instructions for causing a computer to:

cause a communication terminal to supply an authorization signal to the access control device via the network, the authorization signal being indicative of authorization information that is associated with the computer program product and that is independent of information supplied by a user of the computer program product and independent of information indicative of a communication line coupling the communication terminal to the access control device via the network.

55. The computer program product of claim 54 further comprising copy-prevention instructions for causing a computer to prevent duplication of the instructions to cause a communication terminal to supply an authorization signal.

56. The computer program product of claim 55 wherein the instructions to cause a communication terminal to supply an authorization signal are original authorization signal instructions and wherein the copy-prevention instructions produce, in response to an attempted copying of the original authorization signal instructions, new authorization signal instructions that are different from the original authorization signal instructions.

57. The computer program product of claim 54 further comprising alteration instructions that disable the authorization signal instructions if a copy of the authorization signal instructions is attempted to be made.

58. The computer program product of claim 54 further comprising instructions for causing a computer to process a global positioning signal and to send a location signal indicative of information in the global positioning signal to the access control device.

59. The computer program product of claim 54 further comprising instructions for causing a computer to send a location signal indicative of a location of the communication terminal to the access control device.

60. The computer program product of claim 54 further comprising instructions for causing a computer to send user-identification information to the access control device periodically.

61. The computer program product of claim 54 further comprising instructions for causing a computer to produce user-identification information in response to analysis of a physical feature of the user.

62. The computer program product of claim 54 wherein the information independent of information supplied by a user of the computer program product is associated with personal data of the user that are objectively verifiable in person.

63. The computer program product of claim 62 wherein the personal data include an identity of the user.

64. The computer program product of claim 62 wherein the personal data include an age of the user.

65. A computer program product for use with a system including a network that is commonly accessible by a plurality of communication terminals, a host device to which a user desires access, and an access regulator, coupled to the host device and to the network, that regulates access to the host device, the computer program product comprising instructions for causing a computer to:

process an authorization signal received from a communication terminal indicative of authorization information that is associated with the communication terminal and that is independent of information supplied by the user and independent of information indicative of a communication line coupling the communication terminal to the access regulator via the network; and

permit the communication terminal to communicate with the host device only if the authorization information meets at least one predetermined criterion.

66. The computer program product of claim 65 further comprising instructions for causing a computer to determine a location of the communication terminal.

67. The computer program product of claim 65 further comprising instructions for causing a computer to process a location signal indicative of a location of the communication terminal.

68. The computer program product of claim 65 for use with a game repository storing a plurality of games, the computer program product further comprising instructions for causing the game repository to perform a game.

69. The computer program product of claim 65 wherein the authorization information is associated with a person that has met authorization requirements as verified by having appeared in person at a predetermined location.