Wagering Game Authentication via Secure Element Hardware
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing wagering game machines face vulnerabilities in software authentication, where authentication components can be compromised during initialization, leading to delays and potential tampering, especially in networked gaming environments where components are received in varying orders.
Innovation Solution
Incorporating a processor with native authentication hardware that allows for authenticating wagering game software and assets in any order, using authentication keys and isolation modes to secure components, enabling on-demand authentication and encryption without reliance on external software authenticators.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If software authentication components are used to verify digital signatures, then authentication capability is provided, but the authentication components themselves become vulnerable to attack and modification
Solution Approach 1:
The patent introduces a secure element as an intermediary component that physically separates authentication keys from the main processor. This mediator holds the private keys in a tamper-resistant environment, preventing direct access by software while still enabling cryptographic operations. The secure element acts as a trusted intermediary that protects the authentication process from software-based attacks.
Solution Approach 2:
The patent replaces software-based authentication mechanisms with hardware-based authentication. Instead of using software components that can be modified, the system uses a secure element with dedicated hardware for key storage and cryptographic operations. This substitution of hardware for software eliminates the vulnerability of software authentication components to modification and attack.
2Reliability
If every software component is authenticated before execution, then system security is improved, but the initialization process is delayed
Solution Approach 1:
The patent performs authentication of critical components, particularly the authentication library, during the manufacturing or initialization phase before the system enters normal operation. The secure element pre-loads authentication keys and verifies the authenticity of core software components before they are needed for gameplay. This preliminary authentication eliminates the need for time-consuming verification during each gaming session.
Solution Approach 2:
The patent implements selective authentication rather than authenticating every single component. The secure element focuses authentication efforts on critical path components such as the authentication library and game logic, while trusting previously authenticated components. This partial authentication approach provides sufficient security while significantly reducing initialization time compared to full component verification.
3Adaptability or versatility
If authentication is performed in a networked environment with components received in varying orders, then system flexibility is improved, but authentication complexity increases
Solution Approach 1:
The patent implements self-authenticating components that contain their own digital signatures and authentication data. Each game client and server component is bundled with its authentication credentials, allowing it to prove its authenticity independently without requiring a centralized authentication sequence. The secure element automatically verifies signatures as components are loaded, regardless of the order in which they arrive from the network.
Solution Approach 2:
The secure element serves as a mediator that handles authentication independently of the component loading order. It provides a consistent authentication interface that works regardless of whether components arrive sequentially or in parallel from different network sources. This intermediary abstraction layer simplifies the overall system architecture by centralizing authentication logic in the hardware secure element.
Data Source
AI summary
In some embodiments, a processor includes a plurality of local stores configured to store wagering game assets and at least part of a wagering game controller, and to store authentication keys for use in authenticating the wagering game controller and the wagering game assets; a plurality of processing elements, wherein each processing element is coupled to one of the local stores, each processing element configured to present wagering games by executing the wagering game controller; at least one authentication controller including hardware configured to authenticate, using the authentication keys, the wagering game controller and wagering game assets; a storage device in communication with the processor, the storage device configured to store the wagering game controller and wagering game assets, wherein the wagering game assets include audio and video content for use in presenting the wagering games.