Encrypted Data Installation with Logic Seal Tamper Detection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for providing data security in wager gaming devices are inadequate, as they lack effective encryption and tamper detection, allowing unauthorized copying and access to game data.
Innovation Solution
Implementing a base encryption method followed by an installation encryption method to transform plain wagering game data into encrypted installation data, which is then stored securely on a hard drive, with a logic seal monitoring access and deleting encryption keys upon tampering detection.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If plain data is provided on installation media without encryption, then ease of installation is improved, but security against unauthorized copying deteriorates
Solution Approach 1:
The patent applies encryption to the installation media before the installation process begins. The encryption is pre-configured on the CD/DVD and hard drive, so that security measures are in place before any data access occurs, preventing unauthorized copying while maintaining legitimate installation functionality.
Solution Approach 2:
The patent changes the state of the data from plain text to encrypted form. By transforming the data parameters (from unencrypted to encrypted), the system maintains ease of installation for authorized users while dramatically improving security against unauthorized access and copying.
2Ease of operation
If full decryption is performed during installation, then data accessibility is improved, but security and processing time deteriorate
Solution Approach 1:
The patent implements partial decryption during installation rather than full decryption. Only the specific portions of encrypted data needed for installation are decrypted, while the rest remains encrypted on the installation media. This reduces processing time and maintains security for data not immediately needed.
Solution Approach 2:
The installation process is segmented into multiple stages, with decryption occurring only when specific data portions are needed. The system divides the installation process into discrete steps, decrypting and installing data in manageable segments rather than decrypting everything at once, improving both speed and security.
3Adaptability or versatility
If encryption/decryption is performed by host CPU, then flexibility is improved, but processing speed deteriorates
Solution Approach 1:
The patent extracts the encryption/decryption functionality from the host CPU and implements it directly in the video card's hardware. By moving the cryptographic operations to dedicated hardware in the video card, the system maintains flexibility through programmable logic while achieving significant speed improvements through hardware acceleration.
Solution Approach 2:
The patent replaces the software-based encryption/decryption mechanism (running on host CPU) with a hardware-based implementation in the video card. This substitution of mechanical/computational approach transforms slow software processing into fast hardware-level operations, dramatically improving processing speed while maintaining adaptability.
4Ease of operation
If decryption keys are stored in plain form, then ease of access is improved, but security against tampering deteriorates
Solution Approach 1:
The patent implements nested encryption where decryption keys are themselves encrypted and stored in an encrypted form within the video card's secure memory. The keys are protected by multiple layers of encryption and authentication, creating a nested security structure that maintains ease of access for authorized operations while providing robust protection against tampering.
Solution Approach 2:
The patent applies preliminary protective measures to the decryption keys by storing them in encrypted form and implementing authentication mechanisms before key access. This preliminary anti-action prevents tampering attempts before they can compromise the keys, while still allowing easy access for legitimate decryption operations through proper authentication.
Data Source
AI summary
A base encryption method may be applied to plain data to form base encrypted data. An installation encryption method may be applied to the base encryption data to provide encrypted installation data. During installation, the encrypted installation data are encrypted to form encrypted storage data for storage on a storage medium such as a hard drive. Preferably, the data are not fully decrypted at any stage of the installation process. The host CPU may be minimally involved (or not involved) in the encryption/decryption process. Some embodiments provide a logic seal (a/k/a a “tell-tale circuit”) that monitors access to a machine. In some such implementations, an encryption/decryption key may be stored in the logic seal. When the logic seal is broken, countermeasures may be taken, e.g., at least some data may be deleted. For example, one or more cryptographic keys may be erased.