Security for gaming devices

Abstract

A secure smart card or other secure modular memory device is plugged into (or otherwise connected to) a port of a game controller board internal to a gaming machine. The smart card is programmed to detect an encrypted “challenge” message from the host CPU and output an encrypted “response.” If the host CPU determines that the response has the expected properties, then the host CPU verifies that the game program is authentic (i.e., the game program is accurate and authorized for use by that particular gaming machine and customer), and the game can be played. The challenge/request exchange may be performed before every game is played on the machine or at any other time. If the response is improper, then the host CPU will issue a halt command to halt play of the game. By controlling access to the properly programmed smart card, gaming machines cannot run unauthorized copies of the game program. Various other security features are disclosed for protecting communications and data within the gaming machine, such as erasing secure memories if tampering is detected and requiring that an authorized secure smart card be connected to each one of multiple game boards in a single gaming machine for accurate secure communications between boards.

1 . A method of providing secure communications in a gaming machine comprising: 
 providing an authorized first circuit for connection within the gaming machine, the first circuit being a modular secure circuit whereby data stored in the first circuit is protected by security features, the first circuit containing at least one key for use in a cryptographic function;    providing a main controller board in the gaming machine containing a processor and a memory circuit for carrying out a game program;    using the at least one key in the first circuit for decrypting data generated in the gaming machine;    carrying out the game program to play a game on the gaming machine if the at least one key stored in the first circuit is a proper key; and    preventing carrying out of the game program if it is detected that the first circuit does not contain the proper at least one key.    
   
   
       2 . The method of  claim 1  further comprising: 
 providing a secure area on the main controller board protected by at least one security feature; and    erasing data in the memory circuit upon detection of unauthorized tampering with the secure area.    
   
   
       3 . The method of  claim 1  wherein the first circuit is a smart card.  
   
   
       4 . The method of  claim 1  wherein the gaming machine is one of a plurality of machines that use an identical first circuit for controlling unauthorized uses of game software.  
   
   
       5 . The method of  claim 4  wherein the plurality of gaming machines all play the same game.  
   
   
       6 . The method of  claim 4  wherein the plurality of gaming machines are all used in a same casino.  
   
   
       7 . The method of  claim 4  wherein the plurality of gaming machines are all used in a same jurisdiction.  
   
   
       8 . The method of  claim 1:   wherein the first circuit contains at least one game cryptographic key, and wherein carrying out the game program to play a game on the gaming machine comprises using the at least one game cryptographic key to decrypt a game applications program stored in a memory device in the gaming machine; and    wherein the first circuit contains at least one communications cryptographic key, wherein using the at least one key in the first circuit for decrypting data generated in the gaming machine comprises the first circuit using the at least one communications cryptographic key for decrypting communications between the first circuit and the processor on the main processing board.    
   
   
       9 . The method of  claim 1  wherein the gaming machine contains a second board having a second circuit, the second circuit being a modular, secure circuit containing at least one key for use in a cryptographic function, the method further comprising using the keys in the first circuit and the second circuit to provide encrypted communications between the main controller board and the second board.  
   
   
       10 . The method of  claim 1  wherein the main controller board has a secure access area containing a first circuit access key, the method further comprising using the first circuit access key in a cryptographic function for providing secure communications between the main controller and the first circuit.  
   
   
       11 . The method of  claim 1  wherein the memory on the main controller board stores an access key to determine the authenticity of the first circuit, and wherein the first circuit contains at least one game cryptographic key, the method further comprising: 
 determining, by communications between the main controller board and the first circuit, if the access key is proper, and, if not, preventing the carrying out of the game;    downloading the at least one game cryptographic key from the first circuit to the main controller board;    decrypting, by the main controller board using the at least one game cryptographic key, a game applications program stored in a memory device in the gaming machine to carry out the game if it is determined that the access key is proper.    
   
   
       12 . The method of  claim 11  further comprising using the at least one key stored in the first circuit for providing encrypted communications between the first circuit and the main controller board.  
   
   
       13 . The method of  claim 1  wherein the at least one key in the first circuit comprises a private/public key pair for secure communications and a game key for decrypting a game application program.  
   
   
       14 . The method of  claim 1  further comprising: 
 generating a challenge code by the main controller board prior to a game being performed by the gaming machine, the challenge code being for determining if the first circuit is an authorized first circuit;    receiving the challenge code by the first circuit;    generating a response code by the first circuit in response to the challenge code;    determining by the main controller board if the response code was a proper response code;    if the response code was determined to be a proper response code, then determining that the first circuit is an authorized first circuit and carrying out the game program; and    if the response code was determined to not be a proper response code, then determining that the first circuit is not an authorized first circuit and preventing the game being performed by the gaming machine.    
   
   
       15 . The method of  claim 14  wherein the first circuit is a smart card.  
   
   
       16 . The method of  claim 14  wherein the response code is an encrypted version of the challenge code.  
   
   
       17 . The method of  claim 14  wherein the first circuit is a removable circuit.  
   
   
       18 . A gaming machine for carrying out a game and granting an award to a player for one or more particular outcomes comprising: 
 a first controller board having a host processing system for carrying out a program;    a memory for storing the program for carrying out a game on the gaming machine; and    a modular, secure first circuit in communication with the host processing system, the first circuit being a secure circuit whereby data stored in the first circuit is protected by security features, the first circuit containing at least one key for use in a cryptographic function;    the host processing system for carrying out the program to play a game on the gaming machine if the at least one key stored in the first circuit is a proper key and for preventing carrying out of the game program if it is detected that the at least one key stored in the first circuit is not a proper key.    
   
   
       19 . The machine of  claim 18  wherein the first circuit contains a processor that uses the at least one key for encrypting communications between the host processing system and the first circuit, and wherein the host processing system uses the at least one key in the first circuit to decrypt a game program for carrying out the game.  
   
   
       20 . The machine of  claim 18  further comprising a second controller board having electrically connected to it a modular, secure second circuit containing at least one key used in a cryptographic function to provide secure communications between the first controller board and the second controller board.  
   
   
       21 . The machine of  claim 18  further comprising: 
 a secure area on the first controller board protected by at least one security feature such that triggering the at least one security feature erases data in a protected memory on the first controller board.    
   
   
       22 . The machine of  claim 18  wherein the first circuit is a smart card.  
   
   
       23 . A method of preventing unauthorized use of gaming software in gaming machines comprising: 
 providing an authorized first circuit for connection within a gaming machine, the first circuit being a modular secure circuit whereby data stored in the first circuit is protected by security features, the first circuit for communicating with a host processing system internal to the gaming machine to establish that the first circuit is an authorized first circuit;    providing gaming software in the gaming machine, run by the host processing system, for carrying out a game played by the gaming machine, the gaming software preventing carrying out of the game unless the authorized first circuit is installed in the gaming machine; and    controlling distribution of the authorized first circuit such that a gaming machine running an unauthorized copy of the game program will not be able to carry out the game without an authorized first circuit.    
   
   
       24 . The method of  claim 23  wherein the first circuit is a smart card.