Multiple user authentication for online console-based gaming

• US 7,818,568 B2
• Filed: 11/30/2005
• Issued: 10/19/2010
• Est. Priority Date: 03/09/2001
• Status: Expired due to Fees

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Chen, Ling Tony, Multerer, Boyd C., Anderson, Darren L.
• Primary Examiner(s): Vu; Kimyen
• Assistant Examiner(s): SCHWARTZ, DARREN B
• Application Number:
  US11/290,023
• Publication Number:
  US 20060085642A1
• Time in Patent Office: 1,784 Days
• Field of Search: 726/2, 726/5, 726/9, 726/10, 713/150, 713168-170, 463/29, 463/42
• US Class Current: 713/168
• CPC Class Codes: A63F 13/12 involving interaction between a plurality of game devices, e.g. transmisison or distribution systems protocols for networked virtual reality, networked games H04L29/06034
• CPC Class Codes: A63F 13/30 Interconnection arrangements between game servers and game devices; Interconnection arrangements between game devices; Interconnection arrangements between game servers
• CPC Class Codes: A63F 13/71 using secure communication between game devices and game servers, e.g. by encrypting game data or authenticating players
• CPC Class Codes: A63F 13/843 involving concurrently two or more players on the same game device, e.g. requiring the use of a plurality of controllers or of a specific view of game data for each player
• CPC Class Codes: A63F 2300/401 Secure communication, e.g. using encryption or authentication
• CPC Class Codes: A63F 2300/532 using secure communication, e.g. by encryption, authentication
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04L 63/065 for group communications cryptographic mechanisms or cryptographic arrangements for key management involving conference or group key H04L9/0833
• CPC Class Codes: H04L 9/3213 using tickets or tokens, e.g. Kerberos network architectures or network communication protocols for entities authentication using tickets in a packet data network H04L63/0807

Abstract

A console-based multi-user authentication process allows multiple users of a game console to be authenticated together in a single request/reply exchange with an authentication entity. The results of which is the possession of a single ticket that can be used to prove authenticity of multiple authentication principals to one or more online services. Also described is a handshake process that can be used to initially establish an authentication account for each game console, in which the account creation server can trust that a genuine game console is making the request.

Claims

1. A computer-readable storage medium for a game console comprising computer-executable instructions that, when executed, direct the game console to:

create multiple validated user identities (U₁, H₁), (U₂, H₂), . . . , (U_U, H_U) composed of the multiple user identities U₁, U₂, . . . , U_U and associated values H₁, H₂, . . . , H_U derived from the user'"'"'s key;

form a request containing a game console identity X, a game title identity G, the multiple user identities, and an identity A of an online service, as follows;

Request=[X,G,A,(U₁,H₁), . . . , (U_U,H_U)];

submit the request to a ticket issuing entity over a network; and

prove with the ticket the game console identity and the multiple user identities playing at the game console, wherein the ticket issuing entity simultaneously authenticates each of the identities contained in the request.

2. A computer-readable storage medium as recited in claim 1, further comprising the computer-executable instructions that, when executed, direct the game console to compute cryptographic hash digests of user keys associated with the multiple users, each user identity being a combination of the user identity and the cryptographic hash of an associated user key.

3. A computer-readable storage medium as recited in claim 1, further comprising the computer-executable instructions that, when executed, direct the game console to encrypt a time value using keys associated with the multiple users, each user identity being a combination of the user identity and the encrypted time value.

4. A computer-readable storage medium as recited in claim 1, further comprising the computer-executable instructions that, when executed, direct the game console to form the request to further include at least one of an identity of the game console, a random nonce, and a checksum value to ensure receipt of all contents of the request.

5. A computer-readable storage medium as recited in claim 1, further comprising the computer-executable instructions that, when executed, direct the game console to:

receive a ticket from the ticket issuing entity, the ticket containing the game console identity X, the game title identity G, the multiple user identities, the online service identity A, and a session key K_XA together encrypted with a key K_A associated with the online service, as follows;

TicketA=E_KA[K_XA,X,G,A,U₁,U₂, . . . U_U];

receive the session key K_XA from the ticket issuing entity; and

pass the ticket from the game console to the online service along with some information encrypted using the session key K_XA, wherein the ticket issuing entity simultaneously authenticates each of the identities contained in the request.

6. A method comprising computer-executable stored instructions executed on a central processing unit of a game console, the method comprising:

creating multiple validated user identities (U₁, H₁), (U₂, H₂), . . . , (U_U, H_U) composed of the multiple user identities U₁, U₂, . . . , U_U and associated values H₁, H₂, . . . , H_U derived from the user'"'"'s key;

forming a request containing a game console identity X, a game title identity G, the multiple user identities, and an identity A of an online service, as follows;

Request=[X,G,A,(U₁,H₁), . . . , (U_U,H_U)];

submitting the request to a ticket issuing entity over a network; and

proving the game console and the multiple user identities playing at the game console with the ticket, wherein the ticket issuing entity simultaneously authenticates each of the identities contained in the request.

7. The method as recited in claim 6, further comprising the computer-executable stored instructions to directing the game console to compute cryptographic hash digests of user keys associated with the multiple users, each user identity being a combination of the user identity and the cryptographic hash of an associated user key.

8. The method as recited in claim 6, further comprising the computer-executable stored instructions to directing the game console to encrypt a time value using keys associated with the multiple users, each user identity being a combination of the user identity and the encrypted time value.

9. The method as recited in claim 6, further comprising the computer-executable stored instructions that, when executed, direct the game console to form the request to further include at least one of an identity of the game console, a random nonce, and a checksum value to ensure receipt of all contents of the request.

10. The method as recited in claim 6, further comprising the computer-executable stored instructions that, when executed, direct the game console to:

receive a ticket from the ticket issuing entity, the ticket containing the game console identity X, the game title identity G, the multiple user identities, the online service identity A, and a session key K_XA together encrypted with a key K_A associated with the online service, as follows;

TicketA=E_KA[K_XA,X,G,A,U₁,U₂, . . . U_U];

receive the session key K_XA from the ticket issuing entity; and

pass the ticket from the game console to the online service along with some information encrypted using the session key K_XA.