BIOS Multiple Key Pair Authentication for Gaming Machines
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing gaming machine security systems require hardware changes for key updates or replacements, limiting flexibility and making it difficult to authenticate and verify new applications, especially when provider keys expire or become unavailable.
Innovation Solution
Implementing multiple public keys within the BIOS of gaming machines, utilizing a Public Key Infrastructure (PKI) for extensible code signing, allowing authentication of software signed by any private key with a corresponding authorized public key, and enabling certificate revocation lists to manage key validity without requiring hardware changes.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If hardware security modules are used to store authentication keys, then security is improved, but flexibility for key updates and new application authentication deteriorates
Solution Approach 1:
The authentication system is segmented into multiple key pairs stored in BIOS, where each key pair can independently authenticate applications. This allows the system to maintain security through multiple discrete authentication mechanisms while enabling flexible updates by replacing or adding individual key pairs without affecting the entire security module or requiring hardware changes.
2Reliability
If provider keys are provided in hardware, then authentication security is improved, but the ability to authenticate new applications without hardware replacement deteriorates
Solution Approach 1:
The BIOS authentication system is designed with universal functionality to support multiple key pairs and multiple application authentication scenarios. The same BIOS authentication mechanism can authenticate different applications using different key pairs, and the system can adapt to new applications through software configuration rather than requiring new hardware, thereby improving ease of manufacturing and deploying new applications.
3Device complexity
If a single public key is embedded in BIOS, then authentication is simplified, but the system cannot accommodate key expiration or provider unavailability
Solution Approach 1:
Multiple key pairs are pre-configured in the BIOS authentication system before deployment. When a key expires or becomes unavailable, the system can immediately switch to using a different pre-configured key pair without requiring hardware changes or complex reconfiguration procedures. This preliminary preparation of multiple authentication options maintains both simplicity and reliability.
Data Source
AI summary
Executable applications on a gaming machine are verified before they can be executed, for security purposes and to comply with jurisdictional requirements. Unlike in prior systems for authenticating the executable applications, embodiments allow for new executable applications to be provided and verified over time with different private and public key pairs, even after the operating code of the gaming machine is certified by the jurisdiction and deployed in the field.