US6722986B1
Expired / Lapsed
US
⏱️ 0.0 years remaining
Electronic casino gaming with authentication and improved security
Assignee: Aristocrat Technologies Australia Pty Ltd
•
Filing: 1999-11-26
•
Granted: 2004-04-20
•
Expires: 2019-11-26
Abstract
Abstract A gaming machine is described in which all interested parties to a game program to run on the gaming machine, will digitally sign each piece of approved program prior to installation. These signatures are stored with the program on a mass storage device inside the gaming machine. When the machine needs to load a piece of program, or upon an external command after a significant event such as a jackpot payout, it will execute the SHA-1 program code in the EPROM on the program being loaded, and then perform a DSA verification operation using the SHA-1 output as one of the parameters. The DSA verification operation will be repeated for every digital signature stored with the program, and all must be valid, so that it is impossible to execute program code that has not been approved by the manufacturer, the jurisdictional authority and optionally the casino and/or other parties.
Inventors
- 👤 Martin Lyons
- 👤 Robert Linley Muir
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-11-08 20:32
CPC Classifications
G; G07; G07F; G07F17/00; G07F17/32; G06; G06F; G06F21/00; G06F21/50; G06F21/51; G07F17/3241; G06F2211/00; G06F2211/007; G06F2211/008; G06F2221/00; G06F2221/21; G06F2221/2101; G06F2221/2109; G06F2221/2149
Claims Analysis
Total Claims: 82
Claim 1
Independent Claim
76 words
A programmable controller, including a readable and writable storage means to hold a program during its execution by the programmable controller, and program authentication means comprising digital signature verification means which verifies a digital signature associated with the program and prevents execution of the program if the digital signature is not valid, the digital signature being generated by a method that does not include encryption such that de-encryption is not performed during the digital signature verification.
Claim 2
Dependent Claim
76 words
A programmable controller, including a readable and writable storage means to hold a program during its execution by the programmable controller, and program authentication means comprising digital signature verification means which verifies a digital signature associated with the program and prevents execution of the program if the digital signature is not valid, the digital signature being generated by a method that does not include encryption such that de-encryption is not performed during the digital signature verification.
Claim 3
Dependent Claim
18 words
The controller as claimed in claim 1 , wherein a plurality of signatures are applied to the program.
Claim 4
Dependent Claim
31 words
The controller as claimed in claim 2 , wherein each of the equivalent signatures is identifiable as being associated with a person or entity responsible for issuing or authorizing the program.
Claim 5
Dependent Claim
42 words
The controller as claimed in claim 1 , wherein the signature verification means stores one or more public signature keys in secure storage and uses a public signature key from the secure storage to verify the digital signature associated with the program.
Claim 6
Dependent Claim
35 words
The controller as claimed in claim 4 , wherein the signature verification means includes signature revocation means for removing public signature keys from a set of valid keys as a method of revoking signature keys.
Claim 7
Dependent Claim
41 words
The controller as claimed in claim 5 , wherein the signature revocation means is activated by a password such that when the password is entered it allows a particular public signature stored in the verification means to be changed or deleted.
Claim 8
Dependent Claim
34 words
The controller as claimed in claim 5 , wherein a digital revocation certificate can be used, which must be validated by the validation means before it causes a public signature key to be revoked.
Claim 9
Dependent Claim
38 words
The controller as claimed in claim 5 , wherein revocation is time based, whereby the machine stores a set of public signature keys, which are valid for a fixed period of time, after which they are automatically revoked.
Claim 10
Dependent Claim
21 words
The controller as claimed in claim 8 , wherein the fixed period before automatic revocation is a period of 10 years.
Claim 11
Dependent Claim
43 words
The controller as claimed in claim 8 , wherein identification of a current active public signature is based upon comparison of a time stamp embedded in the signature with a time and date obtained from a current time value from a system clock.
Claim 12
Dependent Claim
37 words
The controller as claimed in claim 4 , wherein a plurality of equivalent signatures are provided in the secure storage, such that any one of the equivalent signatures can be used as part of the verification authorization.
Claim 13
Dependent Claim
31 words
The controller as claimed in claim 11 , wherein each of the equivalent signatures is identifiable as being associated with a person or entity responsible for issuing or authorizing the program.
Claim 14
Dependent Claim
48 words
The controller as claimed in claim 1 , wherein the programmable controller is used to control the operation of a game played on an electronic gaming machine and the program with which the digital signature is associated is a game program or a component of a game program.
Claim 15
Dependent Claim
31 words
The electronic gaming machine as claimed in claim 13 , wherein the digital signature is applied to the program by or on behalf of a manufacturer of the electronic gaming machine.
Claim 16
Dependent Claim
43 words
The controller as claimed in claim 13 , wherein the digital signature is applied to the program by or on behalf of a jurisdictional authority that has jurisdiction to authorize use of the game in a location in which the game is installed.
Claim 17
Dependent Claim
32 words
The controller as claimed in claim 13 , wherein the digital signature is applied to the program by or on behalf of a casino in which the electronic gaming machine is installed.
Claim 18
Dependent Claim
42 words
The controller as claimed in claim 1 , wherein the signature verification means stores one or more public signature keys in secure storage and uses a public signature key from the secure storage to verify the digital signature associated with the program.
Claim 19
Dependent Claim
35 words
The controller as claimed in claim 17 , wherein the signature verification means includes signature revocation means for removing public signature keys from a set of valid keys as a method of revoking signature keys.
Claim 20
Dependent Claim
41 words
The controller as claimed in claim 18 , wherein the signature revocation means is activated by a password such that when the password is entered it allows a particular public signature stored in the verification means to be changed or deleted.
Claim 21
Dependent Claim
34 words
The controller as claimed in claim 18 , wherein a digital revocation certificate can be used, which must be validated by the validation means before it causes a public signature key to be revoked.
Claim 22
Dependent Claim
38 words
The controller as claimed in claim 18 , wherein revocation is time based, whereby the machine stores a set of public signature keys, which are valid for a fixed period of time, after which they are automatically revoked.
Claim 23
Dependent Claim
21 words
The controller as claimed in claim 21 , wherein the fixed period before automatic revocation is a period of 10 years.
Claim 24
Dependent Claim
43 words
The controller as claimed in claim 21 , wherein identification of a current active public signature is based upon comparison of a time stamp embedded in the signature with a time and date obtained from a current time value from a system clock.
Claim 25
Dependent Claim
37 words
The controller as claimed in claim 17 , wherein a plurality of equivalent signatures are provided in the secure storage, such that any one of the equivalent signatures can be used as part of the verification authorization.
Claim 26
Dependent Claim
39 words
The controller as claimed in any one of claim 1 , wherein the verification program records versions of a program that have been verified and will not re-verify versions earlier than the latest version that it has already verified.
Claim 27
Dependent Claim
33 words
The controller as claimed in claim 25 , wherein the record of verified program versions is stored in a secure log and entries in the record are unforgable and unalterable after being written.
Claim 28
Dependent Claim
22 words
The controller as claimed in claim 26 , wherein a record of digital signature key updates is kept in the secure log.
Claim 29
Dependent Claim
19 words
The controller as claimed in claim 26 , wherein the secure log is recorded in a tamper proof device.
Claim 30
Dependent Claim
21 words
The controller as claimed in claim 28 , wherein the tamper proof device is a smartcard or contains a smartcard chip.
Claim 31
Dependent Claim
59 words
A programmable controller, including a readable and writable storage means to hold a program during its execution by the programmable controller, and program authentication means comprising digital signature verification means which verifies each of a plurality of digital signatures associated with the program and prevents execution of the program if any one of the digital signatures is not valid.
Claim 32
Dependent Claim
59 words
A programmable controller, including a readable and writable storage means to hold a program during its execution by the programmable controller, and program authentication means comprising digital signature verification means which verifies each of a plurality of digital signatures associated with the program and prevents execution of the program if any one of the digital signatures is not valid.
Claim 33
Dependent Claim
48 words
The controller as claimed in claim 30 , wherein the programmable controller is used to control the operation of a game played on an electronic gaming machine and the program with which the digital signature is associated is a game program or a component of a game program.
Claim 34
Dependent Claim
31 words
The controller as claimed in claim 2 , wherein one of the digital signatures is applied to the program by or on behalf of a manufacturer of the electronic gaming machine.
Claim 35
Dependent Claim
45 words
The controller as claimed in claim 2 , wherein one of the digital signatures is applied to the program by or on behalf of a jurisdictional authority that has jurisdiction to authorize use of the game in a location in which the game is installed.
Claim 36
Dependent Claim
34 words
The controller as claimed in claim 2 , wherein one of the digital signatures is applied to the program by or on behalf of a casino in which the electronic gaming machine is installed.
Claim 37
Dependent Claim
39 words
The controller as claimed in any one of claim 30 , wherein the verification program records versions of a program that have been verified and will not re-verify versions earlier than the latest version that it has already verified.
Claim 38
Dependent Claim
33 words
The controller as claimed in claim 35 , wherein the record of verified program versions is stored in a secure log and entries in the record are unforgable and unalterable after being written.
Claim 39
Dependent Claim
22 words
The controller as claimed in claim 36 , wherein a record of digital signature key updates is kept in the secure log.
Claim 40
Dependent Claim
19 words
The controller as claimed in claim 36 , wherein the secure log is recorded in a tamper proof device.
Claim 41
Dependent Claim
21 words
The controller as claimed in claim 38 , wherein the tamper proof device is a smartcard or contains a smartcard chip.
Claim 42
Independent Claim
101 words
A method of verifying a program or a program component for a programmable controller, including a readable and writable storage means to hold a program during its execution by the programmable controller, and program authentication means comprising digital signature verification means which verifies a digital signature associated with the program, the digital signature being generated by a method that does not include encryption and the method including a step of verifying the digital signature against a key, in which de-encryption is not performed during the digital signature verification, and preventing execution of the program if the digital signature is not valid.
Claim 43
Independent Claim
101 words
A method of verifying a program or a program component for a programmable controller, including a readable and writable storage means to hold a program during its execution by the programmable controller, and program authentication means comprising digital signature verification means which verifies a digital signature associated with the program, the digital signature being generated by a method that does not include encryption and the method including a step of verifying the digital signature against a key, in which de-encryption is not performed during the digital signature verification, and preventing execution of the program if the digital signature is not valid.
Claim 44
Dependent Claim
17 words
The method as claimed in claim 40 , a plurality of signatures are applied to the program.
Claim 45
Independent Claim
48 words
The method as claimed in claims 40 , wherein the programmable controller is used to control the operation of a game played on an electronic gaming machine and the program with which the digital signature is associated is a game program or a component of a game program.
Claim 46
Dependent Claim
31 words
The method as claimed in claim 42 , wherein one of the digital signatures is applied to the program by or on behalf of a manufacturer of the electronic gaming machine.
Claim 47
Dependent Claim
34 words
The method as claimed in claim 42 , by or on behalf of a jurisdictional authority that has jurisdiction to authorize use of the game in a location in which the game is installed.
Claim 48
Dependent Claim
34 words
The method as claimed in claim 42 , wherein one of the digital signatures is applied to the program by or on behalf of a casino in which the electronic gaming machine is installed.
Claim 49
Dependent Claim
42 words
The method as claimed in claim 40 , wherein the signature verification means stores one or more public signature keys in secure storage and uses a public signature key from the secure storage to verify the digital signature associated with the program.
Claim 50
Dependent Claim
35 words
The method as claimed in claim 46 , wherein the signature verification means includes signature revocation means for removing public signature keys from a set of valid keys as a method of revoking signature keys.
Claim 51
Dependent Claim
41 words
The method as claimed in claim 47 , wherein the signature revocation means is activated by a password such that when the password is entered it allows a particular public signature stored in the verification means to be changed or deleted.
Claim 52
Dependent Claim
34 words
The method as claimed in claim 47 , wherein a digital revocation certificate can be used, which must be validated by the validation means before it causes a public signature key to be revoked.
Claim 53
Dependent Claim
38 words
The method as claimed in claim 47 , wherein revocation is time based, whereby the machine stores a set of public signature keys, which are valid for a fixed period of time, after which they are automatically revoked.
Claim 54
Dependent Claim
21 words
The method as claimed in claim 50 , wherein the fixed period before automatic revocation is a period of 10 years.
Claim 55
Dependent Claim
43 words
The method as claimed in claim 50 , wherein identification of a current active public signature is based upon comparison of a time stamp embedded in the signature with a time and date obtained from a current time value from a system clock.
Claim 56
Independent Claim
39 words
The method as claimed in any one of claims 46 ; wherein a plurality of equivalent signatures are provided in the secure storage, such that any one of the equivalent signatures can be used as part of the verification.
Claim 57
Dependent Claim
31 words
The method as claimed in claim 53 , wherein each of the equivalent signatures is identifiable as being associated with a person or entity responsible for issuing or authorizing the program.
Claim 58
Independent Claim
39 words
The method as claimed in any one of claims 40 , wherein the verification program records versions of a program that have been verified and will not re-verify versions earlier than the latest version that it has already verified.
Claim 59
Dependent Claim
33 words
The method as claimed in claim 55 , wherein the record of verified program versions is stored in a secure log and entries in the record are unforgable and unalterable after being written.
Claim 60
Dependent Claim
22 words
The method as claimed in claim 56 , wherein a record of digital signature key updates is kept in the secure log.
Claim 61
Dependent Claim
21 words
The method as claimed in claim 57 , wherein the tamper proof device is a smartcard or contains a smartcard chip.
Claim 62
Dependent Claim
19 words
The method as claimed in claim 56 , wherein the secure log is recorded in a tamper proof device.
Claim 63
Independent Claim
86 words
A method of verifying a program or a program component for a programmable controller, including a readable and writable storage means to hold a program during its execution by the programmable controller, and program authentication means comprising digital signature verification means which verifies each of a plurality of digital signatures associated with the program, and the method including steps of verifying each of the digital signatures against a respective key, and preventing execution of the program if any one of the digital signatures is not valid.
Claim 64
Independent Claim
86 words
A method of verifying a program or a program component for a programmable controller, including a readable and writable storage means to hold a program during its execution by the programmable controller, and program authentication means comprising digital signature verification means which verifies each of a plurality of digital signatures associated with the program, and the method including steps of verifying each of the digital signatures against a respective key, and preventing execution of the program if any one of the digital signatures is not valid.
Claim 65
Dependent Claim
48 words
The method as claimed in claim 60 , wherein the programmable controller is used to control the operation of a game played on an electronic gaming machine and the program with which the digital signature is associated is a game program or a component of a game program.
Claim 66
Dependent Claim
31 words
The method as claimed in claim 61 , wherein one of the digital signatures is applied to the program by or on behalf of a manufacturer of the electronic gaming machine.
Claim 67
Dependent Claim
45 words
The method as claimed in claim 61 , wherein one of the digital signatures is applied to the program by or on behalf of a jurisdictional authority that has jurisdiction to authorize use of the game in a location in which the game is installed.
Claim 68
Dependent Claim
34 words
The method as claimed in claim 61 , wherein one of the digital signatures is applied to the program by or on behalf of a casino in which the electronic gaming machine is installed.
Claim 69
Dependent Claim
42 words
The method as claimed in claim 61 , wherein the signature verification means stores one or more public signature keys in secure storage and uses a public signature key from the secure storage to verify the digital signature associated with the program.
Claim 70
Dependent Claim
35 words
The method as claimed in claim 65 , wherein the signature verification means includes signature revocation means for removing public signature keys from a set of valid keys as a method of revoking signature keys.
Claim 71
Dependent Claim
41 words
The method as claimed in claim 66 , wherein the signature revocation means is activated by a password such that when the password is entered it allows a particular public signature stored in the verification means to be changed or deleted.
Claim 72
Dependent Claim
34 words
The method as claimed in claim 66 , wherein a digital revocation certificate can be used, which must be validated by the validation means before it causes a public signature key to be revoked.
Claim 73
Dependent Claim
38 words
The method as claimed in claim 66 , wherein revocation is time based, whereby the machine stores a set of public signature keys, which are valid for a fixed period of time, after which they are automatically revoked.
Claim 74
Dependent Claim
21 words
The method as claimed in claim 69 , wherein the fixed period before automatic revocation is a period of 10 years.
Claim 75
Dependent Claim
43 words
The method as claimed in claim 69 , wherein identification of a current active public signature is based upon comparison of a time stamp embedded in the signature with a time and date obtained from a current time value from a system clock.
Claim 76
Independent Claim
39 words
The method as claimed in any one of claims 65 , wherein a plurality of equivalent signatures are provided in the secure storage, such that any one of the equivalent signatures can be used as part of the verification.
Claim 77
Dependent Claim
31 words
The method as claimed in claim 72 , wherein each of the equivalent signatures is identifiable as being associated with a person or entity responsible for issuing or authorizing the program.
Claim 78
Independent Claim
39 words
The method as claimed in any one of claims 60 , wherein the verification program records versions of a program that have been verified and will not re-verify versions earlier than the latest version that it has already verified.
Claim 79
Dependent Claim
33 words
The method as claimed in claim 74 , wherein the record of verified program versions is stored in a secure log and entries in the record are unforgable and unalterable after being written.
Claim 80
Dependent Claim
22 words
The method as claimed in claim 75 , wherein a record of digital signature key updates is kept in the secure log.
Claim 81
Dependent Claim
19 words
The method as claimed in claim 75 , wherein the secure log is recorded in a tamper proof device.
Claim 82
Dependent Claim
21 words
The method as claimed in claim 77 , wherein the tamper proof device is a smartcard or contains a smartcard chip.
References Cited (Backward Citations)
US5004232A
Cited
US5326104A
Cited
US5421006A
Cited
US5489095A
Cited
US5259626A
Cited
US5860099A
Cited
JPH0859023A
Cited
US6106396A
Cited
US5643086A
Cited
US6149522A
Cited
US5721781A
Cited
US5638447A
Cited
US5778070A
Cited
JPH11288198A
Cited
US6301658B1
Cited
US6490491B1
Cited
US6595856B1
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2007-04-20 | 2007-10-20 | 2008-04-20 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2011-04-20 | 2011-10-20 | 2012-04-20 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2015-04-20 | 2015-10-20 | 2016-04-20 | $7700.00 | Window Closed / Lapsed |