Bally Gaming, Inc.

Networks Associates Technology, Inc.

The Boeing Company

Mcafee, Inc.

David Carman

James W Morrow

Robert Dubner

Lawrence C McAllister

Michael D Heyman

Alan T Sherman

Dennis K Branstad

David S Parkman

Marvin Arthur Hein, Jr

Gary V Stephenson

Paul R Osgood

Marv Hein

Larence McAllister

A system for verifying one or more downloaded componentsof a gaming devicethat includes the gaming device, which has an alterable hard drive(or other persistent storage media), and the downloaded components that further include gaming-related content-. A related method includes: enabling initiation of a game on the gaming device; downloading the gaming-related content-to the alterable hard drivewhile the gaming deviceis enabled for game play; reading an identifier associated with the gaming-related content-; verifying that the identifier is valid (using verification software); and reconfiguring the gaming deviceto utilize the newly-downloaded, gaming-related content-in response to an initiating event.

Alterable storage media gaming machine

A method is disclosed for authenticating a gaming device, wherein the gaming device includes a plurality of components, one of which is a storage device. The method includes: starting up the gaming device; authenticating a data file stored on the storage device, wherein the authenticating comprises: opening and reading a file allocation structure in a storage device using a file allocation reader; processing the file allocation structure using a processor to provide access to files stored in the storage device, wherein the files in the storage device include installed identification data from one or more selected gaming units as to components actually installed on the selected gaming units, and wherein the files also include registered identification data for components supposed to be installed on the selected gaming units, each component including hardware components and software components, and each gaming unit including multiple components with identification data; and examining the installed identification data and registered identification data to determine enablement of the gaming units.

Device verification system and method

The gaming network described herein includes network security features, host security features, audit protocols, and design architecture approaches to reduce the possibility of network attacks. The gaming network provides for traffic confidentiality, encryption, message authentication, secure authentication mechanisms, anti-replay protection of traffic, key management mechanisms, robust network availability, misrouting and redirection protection and prevention, rejection of external traffic, and a high entry-barrier to device addition to the network. The host protection and security includes secure host initialization, disabling unneeded components, download verification, disabling of unused IP ports, discarding traffic, strong passwords, dynamic one-time passwords for remote login, disabling default accounts, and appropriate 'least-level' device privileges. Audit requirements include integrity protection of audit logs, appropriate definition of auditable events, auditing of anomalous behavior, chain of evidence preservation, shutdown if audit disabled, full log entry audit, personal ID and time access audit trail, and auditing of internal user actions.

Gaming network

A rollback attack prevention systemfor a gaming machineincludes a configuration logand a revocation list. Preferably, the configuration logincludes a protected record of software that has been installed on the gaming machine. Further, the revocation listincludes an inventory of unauthorized software that the prevention systemprevents from being installed and/or used on the gaming machine

Rollback attack prevention system and method

There is provided a method and system for verifying a device, having components. Identification numbers of the components are read and then verified. The process of verifying comprises matching each identification number in a database to determine whether each identification number is valid. In one embodiment, the database is remote from the device, wherein verification is performed over a network connecting a database server containing the database with the device. The device transmits the identification numbers for each of the components to the database server for verification. A file allocation structure reader may be located in a basic input/output system of the device for reading and verifying data files from a persistent storage media without loading an operating system. The device may comprise a gaming machine that contains a monitor for monitoring one or more system events being processed by the gaming machine. The monitor monitors routine and non-routine events. A detector is included for detecting selected system events so that they may be recorded.

Gaming device verification system and method using a file allocation structure

A method is provided for asymmetrically encrypting data communicated between a ground platform and multiple airborne platforms. The method includes packet encrypting ground-based data so as to preserve routing information while encrypting the remaining data. The packet-encrypted data is then transmitted to the airborne platforms. The method also includes bulk encrypting airborne-based data so as to maximize security. The bulk-encrypted data is then transmitted to the ground platform.

Encryption for asymmetric data links

A system and method for implementing adaptive cryptographically synchronized authentication is disclosed. The authentication system includes a controller that dynamically selects one of a plurality of authentication mechanisms to be used in providing authentication for an exchange of message data. The variation in the level of authentication assurance can be based on one or more factors such as the current security conditions and the available CPU utilization.

System and method for adaptive cryptographically synchronized authentication

A system and method for generating a plurality of authentication tags using a plurality of authentication mechanisms is disclosed. The plurality of authentication tags can reflect different authentication strength-performance levels. It is a feature of the present invention that a receiver is afforded increased flexibility in adaptively choosing strength-performance levels. It is a further feature of the present invention that multiple authentication tags can be used in multicast environments, where different receivers may have different processor capabilities or security policies.

System and method for enabling authentication at different authentication strength-performance levels

A system and method for detecting and correcting errors using an authentication mechanism is described. In particular, a reversible inner function is used in a nested message authentication code configuration to provide both error detection and error correction in high performance applications.

System and method for fast nested message authentication codes and error correction codes

A high-speed, low-strength authentication mechanism is disclosed. This mechanism is based on a partial message authentication code, wherein a message authentication code is applied only to some portion of the message. By applying an authentication algorithm only to selected parts of the message, significant time can be saved while maintaining acceptable security.

Growing community of inventors

Glenwood, MD, United States of America

David Carman