Gaming Machine BIOS Authentication via Secured Module Challenge

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current authentication methods for gaming machines are time-consuming, leading to increased boot times and downtime, and there is a risk of rogue code execution if the BIOS authentication process is compromised, particularly in systems with non-secured media.

Innovation Solution

A secured module provides hardware authentication for the BIOS by generating challenges and evaluating responses during the boot process, ensuring the BIOS is validated and preventing unauthorized code execution.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If traditional authentication methods are used to validate BIOS, then security is improved, but boot time increases significantly

Engineering Contradiction:
ImproveBIOS authentication securityVSAvoidboot time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The patent applies preliminary action by performing BIOS authentication during the boot process itself, before the operating system loads. The secured module validates the BIOS code as it executes, rather than requiring a separate post-boot authentication phase. This integrates security verification into the boot sequence, eliminating the need for additional authentication time after booting completes.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The patent introduces a secured module as an intermediary component between the BIOS and the operating system. This dedicated authentication module handles the security validation independently, allowing the main boot process to continue without waiting for comprehensive authentication to complete. The secured module acts as a mediator that verifies BIOS integrity while minimizing impact on overall boot time.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If comprehensive data authentication is performed, then security is improved, but processing time increases

Engineering Contradiction:
Improvecontent authenticationVSAvoidprocessing time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The patent segments the authentication process into distinct phases: BIOS authentication during boot, and content authentication after boot. By dividing the authentication tasks, the system can perform critical security validation (BIOS) quickly during boot without blocking the entire process, while less critical content authentication can proceed in parallel or after the system is operational.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent performs preliminary BIOS authentication during the boot process before loading any gaming content. This ensures that the fundamental security layer is validated early, allowing subsequent content authentication to proceed more efficiently without the same time constraints, thereby reducing overall processing time while maintaining security.

Inventive Principle:
Principle #10Preliminary action

3Reliability

If EPROM is removed and independently verified, then authentication reliability is improved, but device complexity and downtime increase

Engineering Contradiction:
ImproveEPROM authenticationVSAvoidauthentication process complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent extracts the authentication function from the physical EPROM chip itself and relocates it to a dedicated secured module. Instead of relying on the EPROM's built-in verification capabilities, the system uses a separate authentication hardware module that can verify the EPROM contents without requiring physical removal or complex external verification equipment.

Inventive Principle:
Principle #2Taking out (Extraction)

Solution Approach 2:

The secured module serves as an intermediary authentication device that simplifies the verification process. Rather than requiring direct physical access to the EPROM or complex external verification systems, the secured module mediates the authentication process internally within the gaming machine, reducing device complexity while maintaining authentication reliability.

Inventive Principle:
Principle #24Intermediary (Mediator)

4Ease of operation

If authentication code is executed from BIOS EPROM, then system functionality is maintained, but security risk increases if authentication is compromised

Engineering Contradiction:
Improvesystem functionalityVSAvoidrogue code execution risk
Core Design Contradiction:
Ease of operationVSObject-affected harmful factors

Solution Approach 1:

The patent performs preliminary authentication of the BIOS code during the boot process before any gaming software or content is loaded. This ensures that the authentication code has not been compromised or modified before it executes, preventing rogue code from infiltrating the system through the BIOS. The security verification happens in advance, protecting against harmful factors before they can take effect.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The secured module acts as an intermediary security layer between the BIOS EPROM and the executing code. It verifies the integrity of the authentication code as it transitions from storage to execution, providing a buffer that prevents compromised BIOS code from directly executing rogue functions. This intermediary verification maintains system functionality while mitigating security risks.

Inventive Principle:
Principle #24Intermediary (Mediator)

Data Source

PatentUS8726000B2Authentication system for gaming machines and related methods
Publication Date: 2014.05.13 LNW GAMING INC
  • US8726000B2 patent drawing
  • US8726000B2 patent drawing
  • US8726000B2 patent drawing

AI summary

Various embodiments disclosed herein are directed to gaming devices having a secured basic input/output system (BIOS) and methods for determining the validity of the gaming device's BIOS. According to one embodiment, the gaming device includes a secured module for authenticating the BIOS of the gaming device. During the boot-up process, the secured module issues a challenge to the BIOS. The BIOS generates a response to the challenge, and the secured module determines whether the BIOS response matches the calculated response of the secured module. If the BIOS response matches the secured module response, the gaming device continues the boot process. Otherwise, the boot process is halted by the gaming device.