US20020002076A1 - Method and apparatus for securing electronic games - Google Patents

Abstract

A system for playing electronic games includes a game server and one or more player terminals. Game results are based on a random number generated in each of the game server and the player terminals. The game server and the player terminals cooperate to ensure that the random numbers are generated independently. As a result, game players and the game host, such as a casino, can be confident that play results are not fraudulent. In one embodiment, the random numbers are transmitted between the game server and the player terminals at substantially the same time. In other embodiments, the random numbers are encoded and exchanged between the game server and the player terminals. Then, keys to decode the random numbers are exchanged.

Description

BACKGROUND OF THE INVENTION
• The present invention relates to electronic games, and particularly to methods and devices for securing and ensuring the randomness of electronic or online games.[0001]
• Various forms of electronic games of chance have been available for many years. The way these games are played, however, is changing dramatically with the use of digital computers operating on electronic networks such as the Internet. Players can now connect to a remote server and wager electronically.[0002]
• Rather than traveling to a casino, a player can log into an electronic game and wager from the comforts of his own home. While this remote playing has many advantages, it raises several security issues. For example, when playing card games at a casino, a player can observe the dealer shuffle and deal the cards and thus has some confidence that the outcome was generated randomly. In an electronic casino, the shuffling process is typically digitally generated, driven by random number generators which the player cannot see. The player cannot know whether the random number generated is truly random or was selected by the casino to give it an advantage.[0003]
• Electronic game providers have tried to increase players' confidence in the legitimacy of games by assuring players that gaming software has not been tampered with. For example, an electronic game provider may allow an independent third party to perform an audit of the software. This is a time-consuming and expensive process, however. With complex software running into the hundreds of thousands of lines of code, it is very difficult to find a few lines of code that alter the randomness of the outcomes. Also, use of an independent, third party auditor shifts the need for trust to another party, and does not guarantee the legitimacy of the game.[0004]
• Some electronic lottery systems have subscribed to methods for securing communications between remote player terminals and a central controller. U.S. Pat. No. 4,652,998 to Koza, for example, describes cryptographic methods for securing these communications. In games dependent on the use of random numbers, however, simply securing the transmission of a fraudulent random number does not solve the problems inherent in the prior art.[0005]
• Although there are many patents which describe the generation of random numbers, such as U.S. Pat. No. 3,548,174 to Knuth, they describe only methods for improving the statistical performance of random number generators.[0006]
SUMMARY OF THE INVENTION
• Accordingly, the present invention is directed to systems and methods for ensuring the randomness of random numbers and authenticating the results of electronic games in a manner that substantially obviates one or more of the problems due to limitations and disadvantages of the related art. The present invention overcomes the limitations and disadvantages noted above by including in an electronic game system hardware and procedures to ensure that random numbers used to generate game results are truly random, independently-generated numbers.[0007]
• To overcome the disadvantages of the prior art, and in accordance with the present invention, as embodied and broadly described, the invention includes an electronic game system comprising a game server and one or more player terminals. The game server includes a random number generator and a first transmitting device for transmitting a first random number to the one or more player terminals The one or more player terminals includes a random number generator and a second transmitting device for transmitting a second random number to the game server. The system also includes hardware and procedures for ensuring that the first random number is generated independently of the second random number.[0008]
• Also in accordance with the purposes of the invention, as embodied and broadly described, the invention recites a method of controlling an electronic game played in a system including a game server and one or more player terminals. The method includes the steps of generating a first random number at the game server; generating a second random number at the player terminal; encoding the first random number at the game server; encoding the second random number at the player terminal; transmitting a player encoded number from the player terminal to the game server; transmitting a player decoding key from the player terminal to the game server; and decoding the player encoded number at the game server to obtain the second random number.[0009]
• For both the systems and methods of the invention, the invention generates a result value based on the first random number and the second random number and produces a game result based on the result value.[0010]
• The invention further includes the systems and procedures of the game server and the player terminal separately and hardware and procedures for encoding, hashing, encrypting, decoding, dehashing, and decrypting the first and second random numbers. Moreover, the systems and procedures of the present invention provide for authenticating players and create audit records of game data.[0011]
• Additional objects and advantages of the invention will be set forth in part in the description which follows, and in part will be obvious from the description, or may be learned by practice of the invention. The objects and advantages of the invention will be realized and attained by means of the elements and combinations particularly pointed out in the appended claims. It is to be understood that both the foregoing general description and the following detailed description are exemplary and explanatory only and are not restrictive of the invention, as claimed.[0012]
BRIEF DESCRIPTION OF THE DRAWINGS
• The accompanying drawings, which are incorporated in and constitute a part of this specification, illustrate several embodiments of the invention and together with the general description given above and the detailed description given below, serve to explain the principles of the invention.[0013]
• FIG. 1 is a block diagram of an electronic game system in accordance with one embodiment of the present invention;[0014]
• FIG. 2 is a block diagram showing one embodiment of a game server;[0015]
• FIGS. 2A and 2B are block diagrams showing exemplary database configurations;[0016]
• FIG. 3 is a block diagram showing one embodiment of a player terminal;[0017]
• FIG. 4 is a flow chart illustrating a process by which a player transmits a selection to a game server;[0018]
• FIG. 5 is a flow chart showing a process by which a player generates and encodes a random number;[0019]
• FIG. 6 is a flow chart illustrating a process by which a game server generates and encodes a random number;[0020]
• FIG. 7 is a flow chart illustrating a process of exchanging decoding keys between a player terminal and a game server;[0021]
• FIG. 8 is a flow chart illustrating a process of generating a game result based on a combination of a first random number and a second random number;[0022]
• FIG. 9 is a flow chart illustrating a process at a game server of generating and transmitting a random number without encoding it;[0023]
• FIG. 10 is a flow chart illustrating a process of transmitting a decoding key from a player terminal to a game server and decoding a random number;[0024]
• FIGS. 11 through 13 are flow charts illustrating an exemplary procedure for exchanging random numbers in which a player terminal generates a hash value of a random number;[0025]
• FIG. 14 is a flow chart illustrating an exemplary procedure for simultaneously exchanging random numbers between a player terminal and a game server;[0026]
• FIG. 15 is a flow chart illustrating an exemplary procedure for encoding and decoding a player communication using a symmetric key;[0027]
• FIG. 16 is a flow chart illustrating an exemplary procedure for encoding and decoding a player communication using asymmetric keys;[0028]
• FIG. 17 is a flow chart illustrating an exemplary procedure for providing authentication and message integrity; and[0029]
• FIG. 18 is a flow chart illustrating another exemplary procedure for providing authentication and message integrity.[0030]
DETAILED DESCRIPTION OF THE INVENTIONSystem Architecture
• FIG. 1 illustrates the basic system components of one embodiment of the present invention. Generally, the system comprises[0031]game server200 andmultiple player terminals300, each with an associatedplayer modem350.Game server200 preferably is connected to theplayer terminal modems350 via an Internet connection using the Public Switched Telephone Network (“PTSN”)110. Alternatively, the connections may be provided by dedicated data lines, cellular, Personal Communication Systems (“PCS”), microwave, satellite networks, or any other form of data communications path.
• FIG. 2 illustrates the basic hardware and data structures of[0032]game server200 in accordance with one embodiment of the present invention.Game server200 includes central processor (“CPU”)205,cryptographic processor210, random access memory (“RAM”)215, read-only memory (“ROM”)220,random number generator225,payment processor230,clock235, operating system240 (typically residing in memory as software),network interface245, anddata storage device250. These elements are connected appropriately, for example, by a standard system bus, so as to allow communications among them.
• [0033]Game server200 is preferably capable of high volume transaction processing, performing a significant number of mathematical calculations and processing communications and database searches. In one embodiment,game server200 comprises a conventional personal computer or computer workstation with sufficient memory and processing capability to perform the disclosed functionality. A Pentium microprocessor such as the 100 MHZ P54C, commonly manufactured by Intel Inc., may be used forCPU205. This processor employs a 32-bit architecture. In other embodiments,game server200 operates as a Web server, both transmitting and receiving communications to and fromplayer terminals300.
• [0034]Cryptographic processor210 supports the encoding and decoding of communications with players, as well as the authentication of players. An MC68HC16 microcontroller, commonly manufactured by Motorola Inc., may be used forcryptographic processor210. This microcontroller utilizes a 16-bit multiply-and-accumulate instruction in the 16 MHZ configuration and requires less than one second to perform a 512-bit private key operation. Other exemplary commercially available specialized cryptographic processors include VLSI Technology's 33 MHz 6868 or Semaphore Communications' 40 MHZ Roadrunner284. Alternatively,cryptographic processor210 may be configured as part ofCPU205.
• A conventional random number generating processor may be used for[0035]random number generator225. The HEMT integrated circuit manufactured by Fujitsu, for example, is capable of generating over one billion random numbers per second. Alternatively,random number generator225 may be incorporated intoCPU205.
• [0036]Payment processor230 supports the transfer and exchange of payments, charges, or debits. Functions performed bypayment processor230 include the preparation of on-line account statements, order-taking, credit card payment authorization, credit card settlement, automated sales tax calculations, digital receipt generation, account-based purchase tracking, and payment aggregation for low-priced services. Processing of credit card transactions bypayment processor230 may be supported with commercially available software, such as the Secure Webserver manufactured by Open Market, Inc. This server software transmits credit card numbers electronically over the Internet to servers located at the Open Market headquarters where card verification and processing is handled. Their Integrated Commerce Service provides back-office services necessary to run Web-based businesses.Payment processor230 preferably comprises a microprocessor (such as the Intel Pentium), but alternatively may be configured as part ofCPU205.
• [0037]Data storage device250 may include hard disk, magnetic, or optical storage units, as well as CD-ROM drives or flash memory.Data storage device250 contains databases used in the processing of transactions in the present invention, includingplayer database255, playerselection data database260,game result database265, playerrandom number database270, player decodingkey database275,audit database280,payment database285,player account database290, game serverrandom number database292, game server encodingkey database294, game server decodingkey database296, andcombination protocol database298. In a preferred embodiment, database software such as Oracle7, manufactured by Oracle Corporation, is used to create and manage these databases.
• For illustration purposes, FIG. 2A provides a structural diagram of an exemplary player[0038]selection data database260. As shown,selection data database260 maintains data on selections made by a player, and includes fields for savingplayer ID number261, trackingnumber262, game selected263, amount ofwager264, time ofwager266, type ofwager267, and agame result268.
• FIG. 2B illustrates another example of a database, this time, the[0039]game result database265. As shown,game result database265 tracks the results associated with each set of player selection data and includes fields for theplayer ID number261, selectiondata tracking number262,game result268,result value269, time ofresult271, and status ofpayment272.
• The meaning of the information in these various fields will become more clear in the following descriptions. The other databases are organized in a similar manner, thus separate figures of each are not necessary.[0040]Player database255 maintains data on players, and includes fields such as name, address, credit card number, phone number, ID number, social security number, electronic mail address, past system usage, public/private key information, and game preferences. This information is preferably obtained when the player first registers with the system.Player database255 also contains the tracking number of each player selection data and player random number generated by a player.
• Player[0041]random number database270 stores all player random numbers. This database is indexed by player ID and contains fields such as player ID number, corresponding selection data tracking number, tracking number of a corresponding player decoding key, a player random number, and the time at which the player random number was received bygame server200.
• Player decoding[0042]key database275 facilitates the decoding of the player random number, storing the keys necessary to decode communications from a player. For messages encrypted using a public key encryption system such as RSA, Data Security Inc.'s player public keys will be stored in player decodingkey database275. In a symmetric key cryptographic system such as Data Encryption System (“DES”), symmetric keys are stored. Both symmetric and public keys are long strings of binary digits, and are explained more fully below with respect to cryptographic authentication embodiments.
• [0043]Audit database280 stores transactional information relating to a player and, in one embodiment, includes the time and date of each player log in, and the number of games played.
• [0044]Payment database285 tracks all payments made by the players with fields such as player name, player ID number, amount of payment, and corresponding player selection data and a game result. This database may also store credit card numbers of players or bank account information.
• [0045]Player account database290 may be established if the player wants to keep a balance of funds atgame server200 for future transactions.Player account database290 acts as a checking account, with winnings deposited and losing wagers subtracted. Alternatively, this account may be a pointer to account data stored at the player's bank, storing only the name of the bank and the player's bank account number.
• Game server[0046]random number database292 tracks all game server random numbers generated bygame server200 and, in one embodiment, includes fields such as corresponding player selection data tracking number, player name, player ID number, the time that game server random number was generated, and the time that the game server random number was transmitted to the player.
• Game server encoding[0047]key database294 stores all encoding keys used bygame server200 to encode the game server random number.
• Game server decoding[0048]key database296 stores all decoding keys transmitted toplayer terminal300 to decode the game server random numbers.
• Finally,[0049]combination protocol database298 stores the protocols used to combine a player random number with a game server random number to form a result value.
• Referring again to FIG. 2,[0050]network interface245 is the gateway to communicate with players throughrespective player terminals300. Conventional internal or external modems may serve asnetwork interface245.Network interface245 preferably supports modems at a range of baud rates from1200 upward, but may combine such inputs into a T1 or T3 line if more bandwidth is required. In a preferred embodiment,network interface245 is connected to the Internet and/or a commercial on-line service such as America Online, CompuServe, or Prodigy, allowing players access togame server200 from a wide range of electronic connections. Several commercial electronic mail servers include the above functionality. For example, NCD Software manufactures “Post.Office,” a secure server-based electronic mail software package designed to link people and information over enterprise networks and the Internet. This product is platform independent and utilizes open standards based on Internet protocols. Users can exchange messages with enclosures such as files, graphics, video, and audio. This product also supports multiple languages. Alternatively,network interface245 may be configured as a voice-mail interface, web site, electronic Bulletin Board System (“BBS”), or electronic-mail address.
• While the above embodiment describes a single computer acting as[0051]game server200, those skilled in the art will realize that the functionality can be distributed over a plurality of computers, wherein the databases and processors are housed in separate units or locations. Some controllers perform the primary processing functions and contain at a minimum RAM, ROM, and a general processor. Each of these controllers is attached to a WAN hub which serves as the primary communication link with the other controllers and terminals. The WAN hub may have minimal processing capability itself, serving primarily as a communications router. Those skilled in the art will appreciate that an almost unlimited number of controllers may be supported.
• FIG. 3 illustrates the basic hardware and data structures of a player terminal in accordance with a preferred embodiment of the invention.[0052]Player terminal300 preferably includes central processor (CPU)305,cryptographic processor310,RAM315,ROM320,random number generator325,video driver327,video monitor330,clock335,communication port340,input device345,modem350, anddata storage device360.Biometric device355 may be added for increased security, as described below with respect to cryptographic authentication embodiments. A Pentium microprocessor such as the 100 MHZ P54C described above may be used forCPU305. A conventional random number generating processor such as the HEMT integrated circuit described above may be used forrandom number generator325. Alternatively,random number generator325 may be incorporated intoCPU305.Clock335 is a standard chip-based clock which can serve to time stamp transactions betweenplayer terminal300 andgame server200.
• In an exemplary embodiment,[0053]player terminal300 is a conventional personal computer having an input device, such as a keyboard, mouse, or conventional voice recognition software package.Player terminal300 would thus interface withgame server200 viamodem350. Alternatively,player terminal300 may be a voice-mail system, or other electronic or voice communications system. Devices such as fax machines or pagers are also suitable terminal devices.
• [0054]Modem350 may not require high-speed data transfer if most player selection data and player random numbers are text-based and not too long. Forcryptographic processor310, the MC68HC16 microcontroller described above may be used. The structure ofbiometric device355 will be described in conjunction with the cryptographic authentication embodiment.
• [0055]Data storage device360 preferably comprises a conventional magnetic-based hard disk storage unit such as those manufactured by Conner Peripherals.Selection data database365 records all selection data generated by a player, tracking games selected, type of bet, amount of wager, etc.Audit database370 stores communications betweenplayer terminal300 andgame server200. Encodingkey database375 stores keys used in the process of encoding communications transmitted togame server200.Combination protocol database380 stores the protocols used bygame server200 to combine a player random number and a game server random number.Game result database385 stores all of the players' results, including amounts won or lost. Playerrandom number database390 stores each random number generated by a player. Game serverrandom number database395 stores all game server random numbers received fromgame server200. This database may also store the corresponding decoding keys in the event that a game server random number is encoded.
• [0056]Player terminal300 communications are preferably software driven. There are many commercial software applications that can enable the communications required byplayer terminal300, the primary functionality being message creation and transmission. Eudora Pro manufactured by Qualcomm Incorporated, for example, provides editing tools for the creation of messages as well as the communications tools to route the message to the appropriate electronic address. Whengame server200 is configured as a Web server, conventional communications software, such as the Netscape Navigator Web browser from Netscape Communications Corporation may also be used. The player may use the Netscape Navigator browser to transmit and receive random numbers and selections.
• Having described the system and component architecture, we will now consider various embodiments of the present invention to ensure the integrity of electronic games.[0057]
Mutual Encoding Embodiments
• As discussed, in one embodiment of the present invention, communications between[0058]player terminal300 andgame server200 take place via electronic networks, withgame server200 acting as a Web server.
• FIG. 4 illustrates a process by which a player transmits a player selection to a game server. Initially, a player logs on to[0059]game server200 usingplayer modem350 ofplayer terminal300, establishing a communication link atstep400. Atstep410, the player selects the game that he wants to play by selecting from a list of possible games. The player may, for example, select a potential game from a list on a Web page by clicking on the appropriate icon or graphic. Games preferably include casino games such as blackjack, craps, roulette, baccarat, slot machines, lottery, poker, video poker, and sports betting, but may include any game in which a server generates a random number that must be trusted by a player, including raffles and prize drawings.
• After the game is selected, the player selects a type of wager at[0060]step420. The type of wager is directly related to the game selected. The type of wager for a roulette game, for example, might be a bet on “even” and a single number bet such as “18 black.” For a game like blackjack, the type of wager would indicate the number of simultaneous hands the player intends to play.
• At[0061]step430, the player then selects the amount of each wager. For example, the player might bet one hundred dollars on the next blackjack hand, or may bet five dollars on the next pull of a slot machine. The player may elect to use funds fromplayer account database290 or may transmit payment information such as a credit card number along with the total amount wagered. Atstep440, the player attaches his name or a unique player ID number to his selections, allowinggame server200 to authenticate the identity of the player. This ID number is preferably received fromgame server200 when the player registers with the service or is chosen by the player and then registered withgame server200 by phone. As shown in FIG. 2A,game server200 maintains a database of player ID numbers inplayer database255 and issues (or allows) only unique numbers. If less security is required, the player's telephone number could serve as the ID number since it has the advantages of being both unique and easily remembered. If additional security is required, procedures such as those described below with respect to cryptographic authentication embodiments may be implemented.
• At[0062]step450, all of the data provided by the player is combined to form “selection data” which is transmitted togame server200.Game server200 then receives the player selection data and adds a tracking number before storing it inselection data database260.
• Instead of a World Wide Web-based interface, players may also transmit the selection data via electronic-mail, voice-mail, or facsimile transmissions. With voice-mail, the player calls[0063]game server200 and leaves selection data in audio form. Selection data is then transcribed into digital text atgame server200 by a conventional audio-to-text transcriber, not shown. As described,game server200 supports a plurality of transmission methods, allowing for a wide variety of formats of selection data.
• FIG. 5 illustrates a process by which a player generates and encodes a random number for use by the[0064]game server200. Atstep500, the player generates a player random number either by selecting a number himself or promptingrandom number generator225 ofplayer terminal300 to produce the number. Although this number is preferably random, the system works equally well with any number that cannot be predicted bygame server200.Random number generator225 may incorporate external factors such as the time between keystrokes of the player, or the current position of acomputer mouse345. Atstep510,player terminal300 stores the player random number in playerrandom number database390. Atstep520,cryptographic processor310 encodes the player random number using an encoding key from encodingkey database375. Because each player random number preferably uses a unique encoding key, encodingkey database375 preferably contains either a large number of unique keys or generates new encoding keys in real-time. Various methods for encoding numbers are known in the art and need not be described here in detail. For reference, one of ordinary skill in the art may refer to Bruce Schneier, Applied Cryptography, Protocols, Algorithms, And Source Code In C, (2d Ed, John Wiley & Sons, Inc., 1996).
• Along with an encoded player random number, the player appends his player ID number and the tracking number (see FIG. 2A) to the corresponding selection data so that[0065]game server200 knows to which wager the player random number should apply. This information is then transmitted togame server200 usingplayer modem350 atstep530. In order to authenticate the player's identity,game server200 extracts the player ID number from the message containing the encoded player random number and looks up the player's identity inplayer database255. If further authentication is desired, the protocols of the authentication embodiments discussed below may be employed.
• FIG. 6 illustrates a procedure used by[0066]game server200 to generate and encode a game server random number. After authenticating a player,random number generator225 ofgame server200 generates a game server random number atstep600. Atstep610, the game server random number is stored in game serverrandom number database292. Atstep620,cryptographic processor210 ofgame server200 encodes the game server random number. As with the encoding of the player random number,cryptographic processor210 preferably has access to a large supply of unique encoding keys or an algorithm to produce them. Atstep630,game server200 then transmits encoded game server random number toplayer terminal300. It should be noted that there are a number of hardware options for the receipt of the encoded game server random number atplayer terminal300.
• In this embodiment, the system remains secure because the random numbers have been generated and exchanged for future verification, but have not yet been decoded. As such, both parties know that the random numbers have been generated independently, ensuring a fair game result.[0067]
• FIG. 7 illustrates a procedure for exchanging decoding keys between the[0068]player terminal300 andgame server200. Atstep700, game server200 (for the first time) transmits game server decoding key toplayer terminal300. Like the encoding key used to encode the game server random number, the game server decoding key must be unique for each random number generated. Atstep710, theplayer terminal300 transmits a unique player decoding key togame server200. In this embodiment, this exchange of decoding keys need not take place simultaneously since both parties are already in possession of each other's encoded random number. Atstep720,game server200 uses the player decoding key to decode the player random number. At this point,game server200 now has both a player random number and a game server random number in decoded form and can use these numbers to generate a game result. The player need only decode the encoded game server random number in the event of a dispute, as described below.
• FIG. 8 illustrates a procedure for the[0069]game server200 to generate a game result. As shown,game server200 generates a game result based on the game server random number and the decoded player random number using the combination protocol from combination protocol database298 (FIG. 2). Atstep800, the combination protocol is retrieved fromcombination protocol database298. The combination protocol is preferably known to both theplayer terminal300 andgame server200, is unique to the particular game selected, and may be published for anyone to read. The combination protocol is preferably a series of mathematical steps which transform the player random number and the game server random number into a distinct “result value.” For example, the combination protocol developed for a roulette game may indicate that the player random number and the game server random number are first multiplied together, with the resulting number squared. The remainder, after dividing this resulting number by “38,” is the “result value.” The result value in this example, therefore, is an integer between “0” and “37.” For the roulette game, the integers between “0” and “37” are mapped with the set of “38” possible outcomes for the spin of a roulette wheel. Thus, the result value corresponds to the result of the spin of a roulette wheel.
• At[0070]step810, the result value is then compared to the type of wager in the player selection data indatabase260 to determine a game result. For example, in the roulette example, a player making a bet on “fifteen-red” (see FIG. 2A) would lose the wager if the result value were any number other than “fifteen-red.” The game result for a loss might be “lose one dollar” for a one dollar wager. Atstep820, the game result is then transmitted toplayer terminal300.Payment processor230 ofgame server200 then decrementsplayer account290 by one dollar, or charges the player's credit card one dollar (step830), then stores the game result ingame result database265, indexed by the player ID number (step840). For an improved audit trail, in one embodiment the game result is time stamped byclock235 ofgame server200 before being stored, or is cryptographically chained to previously stored game results. The corresponding player selection data stored inselection data database260 is then updated to indicate that a result has been reached in step850 (see e.g. the “result” column in FIG. 2). The player may now begin the cycle again by selecting another set of player selection data.
• Using the above method, a player may be confident that the random numbers were generated independently of one another, i.e. that the player random number was generated without knowledge of the game server random number, and vice-versa. For[0071]game server200 to cheat, it would have to decode the player random number before generating the game server random number. With knowledge of the player random number,game server200 could select a game server random number to obtain a desired result value and, hence, game result. Obtaining the player random number before generating the game server random number, however, requiresgame server200 to decode the encoded player random number, which cannot be accomplished practically before receiving the player decoding key. If the player suspects thatgame server200 has cheated by not properly incorporating the player random number, he can decode the game server random number using the game server decoding key and apply the combination protocol from the combination protocol database398 at theplayer terminal300 to both random numbers, thus verifying the game result.
Single Encoding Embodiments
• In another embodiment of the present invention,[0072]player terminal300 andgame server200 again exchange random numbers. This embodiment, however, requires that only one of the parties encode its random number. The party transmitting its random number without encoding preferably waits until it has received the coded random number from the other party. This embodiment will now be discussed with reference to FIGS. 9 and 10.
• Referring to FIG. 9,[0073]player terminal300 has already generated a player random number, encoded it, and transmitted it togame server200 in a manner similar to that described for the mutual encoding embodiments. Atstep900,game server200 generates a game server random number and, atstep910, stores it in game serverrandom number database292. Atstep920,game server200 transmits the game server random number toplayer terminal300. Since no encoding takes place, however,game server200 does not transmit a game server decoding key.
• As shown in FIG. 10, after receiving the game server random number,[0074]player terminal300 transmits a player decoding key togame server200 atstep1000. Atstep1010,game server200 uses the player decoding key to decode the encoded player random number. At this point, each party is in possession of the other party's respective random number. The random numbers are then combined as described above to generate a game result.
• In this embodiment,[0075]player terminal300 generates and transmits encoded player random number beforegame server200 generates and transmits the game server random number. Then, after receiving the game server random number,player terminal300 transmits the decoding key for thegame server200 to decode the encoded player random number. In an alternative embodiment,game server200 andplayer terminal300 switch procedures. Specifically,game server200 generates and transmits an encoded game server random number beforeplayer terminal300 generates and transmits the player random number. Then, after receiving the player random number, thegame server200 transmits the decoding key for the player terminal to decode the game server random number should the player so choose.
• Again, in these embodiments, both the player and the[0076]game server200 may be confident that the player random number and the game server random number were developed independently.
Hash Value Embodiments
• In this embodiment, neither[0077]player terminal300 norgame server200 encodes their respective random numbers. Instead,player terminal300 generates a player random number, hashes it, sends the hash value togame server200, and then receives the game server random number. The player terminal then transmits the player random number togame server200, where it is hashed and then compared to the hash value previously received to determine whether it is the number originally generated byplayer terminal300. Operation of this embodiment is illustrated in the flow diagrams of FIGS.11-13.
• Referring to FIG. 11,[0078]player terminal300 has already transmitted player selection data togame server200 as described above. Atstep1100,player terminal300 then generates a player random number as previously described. Atstep1110, the player random number is stored in playerrandom number database390 ofplayer terminal300.Cryptographic processor310 then hashes the player random number atstep1120, generating a hash value. This hash value represents a one-way transformation of the original player random number. While it is computationally simple to generate the hash value from the player random number, it is computationally unfeasible to re-create the player random number from the hash value alone. Atstep1130,player terminal300 transmits the hash value togame server200.
• As shown in FIG. 12,[0079]game server200 then generates a game server random number atstep1200. This number cannot be based on the player random number since, in this embodiment,game server200 only possesses the hash value of the player random number. Atstep1210,game server200 stores the game server random number in game serverrandom number database292, then, atstep1220, transmits the game server random number to the player terminal.
• Referring to FIG. 13,[0080]player terminal300 receives and stores the game server random number atstep1300. Atstep1310,player terminal300 then sends the unhashed player random number togame server200. Atstep1320, cryptographic processor of thegame server200 hashes the player random number, comparing the resulting hash value to the hash value received fromplayer terminal300. If the hash values match, thengame server200 is assured thatplayer terminal300 has not submitted an altered player random number. With both random numbers now in its possession,game server200 then proceeds to generate a game result as described above.
• As with the single encoding embodiments, in one embodiment of the hash value operation, the[0081]player terminal300 generates and transmits a hash value of its random number as described above. However, in an alternative embodiment, the hash value of a random number may be generated bygame server200, in which case, the corresponding procedures of thegame server200 and player terminal are again switched.
Simultaneous Exchange Embodiments
• In this embodiment,[0082]player terminal300 andgame server200 simultaneously exchange random numbers, eliminating the need for any coding or hashing to ensure the independence of the generation of the random numbers.
• FIG. 14 illustrates a procedure for this embodiment. In FIG. 14,[0083]player terminal300 has already transmitted player selection data as described above. Atstep1400,player terminal300 generates a player random number, then stores it in playerrandom number database390 atstep1410. Atstep1420,game server200 generates a game server random number and, atstep1430, stores it in game serverrandom number database292. Atstep1440, the player random number and the game server random number are simultaneously posted to an electronic bulletin board. In one embodiment, this is accomplished by setting a time at which the random numbers are to be posted. For example, both parties agree to post the random numbers at 3:00 PM, and incorporate this time into their respective communication software. At 3:00 PM, the communications software (not shown separately) automatically posts the random numbers. To deter cheating, the operating system of the electronic bulletin board could void any random number not posted within one tenth of a second of the agreed-upon posting time. This time requirement is preferably so small as to make the reverse calculations using a combination protocol computationally infeasible.
• Once the player random number and the game server random number have been posted, the process for this embodiment proceeds as described above to generate a game result.[0084]
Multiple Player Embodiments
• The above embodiments describe protocols in which one player interacts with[0085]game server200. Multiple players could easily be handled by treating each player individually, with players receiving individual game results. Five roulette players, for example, could each submit player selection data and receive a game result based on a different result value. Alternatively, players could combine their player random numbers and receive a game result based on a single communal result value. In thisway game server200 more closely parallels a physical casino in which a group of players face wins or losses based on the same spin of the wheel.
• As in the previously described embodiments, in multiple player embodiments, each player generates selection data describing the type of wager that they want to make.[0086]Game server200 then generates a game server random number and encodes it usingcryptographic processor210. Eachplayer terminal300 generates a player random number and encodes it with its respectivecryptographic processor310. Eachplayer terminal300 then transmits its encoded player random number togame server200. Oncegame server200 has collected all encoded player random numbers, it transmits the encoded game server random number to eachplayer terminal300. After receiving the encoded game server random number, eachplayer terminal300 transmits its player decoding key togame server200.Game server200 decodes each encoded player random number and uses them to generate a game result using the combination protocol fromcombination protocol database298, which may store different protocols for various numbers of players, up to the maximum number of players allowed in a game. The game result is transmitted to eachplayer terminal300. Players can verify the result value by exchanging decoded player random numbers with each other and comparing them with the game server random number after decoding it with a game server decoding key.
• In another embodiment, each[0087]player terminal300 generates player selection data and a player random number. The first player encodes his player random number and transmits it to the second player. The second player concatenates his random number with the encoded random number from the first player, and encodes both numbers before sending them to the third player. This process continues for each of the players. The last player sends the combined player random number togame server200.Game server200 creates a game server random number, encodes it, then transmits it to each player. After receiving the game server encoded random number, eachplayer terminal300 sends its player decoding key togame server200.Cryptographic processor210 ofgame server200 decodes the combined player random number using these decoding keys, forms a result value, and produces a game result for each player.
• Instead of the mutually encoding embodiments described above, hash algorithms, single encoding, and simultaneous exchange procedures consistent with those described above may be used to facilitate the interaction of multiple players.[0088]
Single Event Versus Multiple Event Embodiments
• Outcomes for gambling games are determined by either a single event or a multiple event. Roulette and slots are good examples of single event games as a single outcome determines the game result. One spin of the roulette wheel completely resolves all bets placed on that spin. The result of a slot machine wager requires a single handle pull to determine whether the player wins or loses. In these single event games, a result value is easily compared to player selection data to determine a game result.[0089]
• In multiple event games, however, a game result may be based on multiple result values. Blackjack is one example of a multiple event game. Whether a player wins a hand depends on the player's cards and the dealer's cards. Generating a single result value to represent one card is not enough. Instead, in one embodiment of the invention, a result value represents the complete sequence of fifty-two cards. Once the card sequence is defined based on the player random number and the game server random number, the cards can be dealt.[0090]
• For example, after generating an encoded player random number and transmitting it to[0091]game server200,player terminal300 receives the encoded game server random number.Player terminal300 then transmits a decoding key togame server200 which generates the result value representing the complete sequence of cards in the deck. Before sending a game server decoding key toplayer terminal300,game server200 sends the player card values representing a hand of cards dealt from the sequence of cards generated by the result value. If he desires, the player then selects to draw additional cards for his blackjack hand, again, from the defined sequence of cards. Once the hand is selected,game server200 transmits a game server decoding key toplayer terminal300. It is important that the player not receive this key before making his selection to draw additional cards, since decoding the game server encoded random number would allow the payer to know the complete sequence of cards.
• Another method for handling blackjack games is to generate a result value for each card dealt. After making his bet (by establishing player selection data) the player generates a series of player random numbers, exchanging them with[0092]game server200 for each card required in the hand. The game result might therefore require seven or eight result values, each one created through the described procedures of the present invention.
Cryptographic Authentication Embodiments
• In certain embodiments of the present invention, authentication of authorship of the player selection data and player random number involves checking an attached ID or name and comparing it with those stored in[0093]player database255. In an alternative embodiment, cryptographic protocols are added to the authentication process. These protocols enhance the ability to authenticate the sender of a message and serve to verify the integrity of the communication itself, proving that it has not been altered during transmission. Encryption can also prevent eavesdroppers from learning the contents of the communication. Such techniques shall be referred to generally as cryptographic assurance methods and include the use of both symmetric and asymmetric keys as well as digital signatures and hash algorithms.
• The practice of using cryptographic protocols to ensure the authenticity of senders as well as the integrity of communications is well known in the art and need not be described here in detail. Any conventional cryptographic protocols such as those described in Bruce Schneier, Applied Cryptography, Protocols, Algorithms, And Source Code In C, (2d Ed, John Wiley & Sons, Inc., 1996), could be used in accordance with the present invention and would be executed by[0094]cryptographic processor210.
• FIG. 15 illustrates a symmetric key embodiment in which[0095]player terminal300 andgame server200 share a key. Thus, both encryption and decryption of the player selection data and player random number (also referred to separately or together as a player communication) are performed with the same key. This encryption may be implemented with an algorithm such as DES (U.S. Government standard, specified in FIPS PUB 46), or with any of several algorithms known in the art such as IDEA, Blowfish, RC4, RC2, SAFER, etc.
• Initially, a player encrypts his communication with his assigned symmetric key at[0096]step1500, usingcryptographic processor310 ofplayer terminal300. The key may be stored in encodingkey database375 or otherwise stored or memorized by the player. The player communication is then transmitted tocryptographic processor210 ofgame server200 atstep1510.Cryptographic processor210 extracts the player ID from the player communication (step1520), looks up the symmetric key of the player in player database255 (step1530), and decrypts the player communication with this key (step1540). Game server encodingkey database294 contains algorithms and keys for encrypting, decrypting, and/or authenticating communications. Atstep1550, thecryptographic processor210 determines if the resulting communication is intelligible. If so, then the communication must have been encrypted by the same key, authenticating that the player must have indeed been the author of the message. It will be understood that these cryptographic techniques are employed to protect the security of the communications, in addition to the appropriate random number encryption technique described above.
• This procedure makes it difficult for an unauthorized player to represent himself as a legitimate player. Without cryptographic procedures, an unauthorized player who obtained a sample communication from a legitimate player might be able to extract the player ID and then attach this ID number to unauthorized communications. When player communications are encrypted with a symmetric key, however, an unauthorized player obtaining a sample player communication only discovers the player's ID number, not the symmetric key. Without this key, the unauthorized player cannot create a player communication that will fool[0097]game server200, since he cannot encrypt his communication in the same way that the authorized player could. The symmetric key protocol also ensures that the player communication has not been tampered with during transmission, since alteration of the communication requires knowledge of the symmetric key. An encrypted player communication also provides the player with more anonymity.
• FIG. 16 illustrates an asymmetric key protocol in which a player communication is encrypted with a private key and decrypted with a public key. Two such algorithms for asymmetric key protocols are the RSA algorithm and the Digital Signature Algorithm (“DSA”). At[0098]step1600,player terminal300 encrypts the player communication with the player's private key usingcryptographic processor310.Player terminal300 then transmits the player communication togame server200 atstep1610.Cryptographic processor210 atgame server200 then extracts the player ID atstep1620, looks up the player's associated public key inplayer database255 atstep1630, and decrypts the communication with this public key atstep1640. As before, if the player communication is intelligible thengame server200 has authenticated the player atstep1650. Again, unauthorized players obtaining the player communication before it is received bygame server200 are not able to undetectably alter it since they do not know the private key of the player. Unauthorized players might, however, be able to read the message if they managed to obtain the public key of the player. Communication secrecy is obtained if the player encrypts the player communication with his public key, requiring the unauthorized player to know the player's private key to view the player communication.
• FIG. 17 shows a cryptographic technique using digital signatures to provide authentication and message integrity. One such algorithm is DSA. As in the asymmetric protocol described above, each player has an associated public and private key. The player signs his communication with his private key at[0099]step1700 withcryptographic processor310 and transmits it togame server200 atstep1710. Atgame server200,cryptographic processor210 extracts the player ID atstep1720 and looks up the player's public key atstep1730, verifying the signature using the communication and the public key of the player atstep1740. If the communication is intelligible, thengame server200 accepts the communication as authentic atstep1750.
• Referring now to FIG. 18, there is illustrated a cryptographic technique using message authentication codes for verifying the authenticity and integrity of a player communication. In the hash protocol of the present invention,[0100]player terminal300 andgame server200 share a symmetric key, which the player includes in a hash of the communication atstep1800. In the hash protocol, a one-way function is applied to the digital representation of the communication. Any of the MAC algorithms, such as RIPE-MAC, IBC-Hash, CBC-MAC, and the like may be applied in this application. After transmitting the communication togame server200 atstep1810,cryptographic processor210 ofgame server200 extracts player ID from the player communication atstep1820. Thencryptographic processor210 looks up the player's symmetric key atstep1830 and hashes the communication with the symmetric key atstep1840, comparing the resulting hash value with the hash value attached to the communication. If the values match atstep1850, the integrity of the communication is verified along with the authenticity of the player.
• Although cryptographic techniques can provide greater confidence in the authenticity of player communications, they are useless if the player's cryptographic keys are compromised. An unauthorized player who obtains the symmetric key of another player is indistinguishable from that player in the eyes of[0101]game server200. There is no way to know whether the player was the true author of the communication, or an unauthorized player with the right cryptographic keys. In one embodiment, biometric device355 (FIG. 3) such as a fingerprint reader, voice recognition system, retinal scanner, or the like help to solve this problem. A biometric device incorporates a physical attribute of the player into a communication, which is then compared with the value stored inplayer database255 atgame server200.
• Fingerprint verification, for example, may be executed before the creation of a communication, during the generation of a communication in response to prompts from[0102]game server200, at some predetermined or random time, or continuously by incorporating the scanning lens intoplayer terminal300 and requiring the player to maintain a finger on the scanning lens at all times for continuous verification while the communication is generated.
• An example of such a biometric device is the FC100 FINGERPRINT VERIFIER available from Startek, a Taiwanese company The FC100 is readily adaptable to any PC via an interface card. The fingerprint verifier utilizes an optical scanning lens. The player places a finger on the lens, and the resulting image is scanned and digitized, and the data compressed and stored in memory. Typically, a 256 byte file is all that is required. Each live-scan fingerprint is compared against the previously enrolled/stored template, stored in[0103]data storage device360. If the prints do not match, the cryptographic algorithms executed bycryptographic processor310 may prevent the player from generating a communication.
• In a voice verification embodiment, the player's voice is used to verify his identity. This embodiment has the advantage of not requiring the use of any specialized hardware since it can be implemented over a standard phone connection. The player's identity is verified at[0104]game server200. The process of obtaining a voice-print and subsequently using it to verify a person's identity is well-known in the art, and therefore need not be described in detail. Conventional speaker identification software samples the player's voice. This sample is stored atgame server200 inplayer database255. Each time the player wants to transmit a communication togame server200, he is required to callgame server200 and speak into the phone at the prompt for a voice sample. If this sample matches that stored inplayer database255, the player is provided a password which is incorporated into the digital signature appended to his communication. Any communication received without an appropriate voice match password is not accepted. The voice-print may also be stored in a database withindata storage device360 ofplayer terminal300, to verify the player's identity locally prior to allowing his communication to be created.
Anonymous Transactions Embodiments
• As mentioned previously, the present invention allows for the anonymity of players. Such anonymity is accomplished by eliminating all references to the names of the players for all communications. A player, for example, would include his ID in the player selection data, rather than his name, preventing eavesdroppers from discovering the player's identity. To prevent detection of a player's ID stored in[0105]player database255, the ID numbers are preferably encrypted with the public key ofgame server200.
• As an additional protection of identity, the player may communicate with[0106]game server200 through conventional anonymous remailers found on the Internet.
Payment Embodiments
• While the invention can be implemented without provisions for payment features, there are many methods by which the providers of the foregoing systems could derive a revenue stream. In one embodiment, a flat fee is charged for every set of player selection data submitted. In other embodiments, flat fees would cover any number of sets of player selection data over a given period of time, allowing players to subscribe to the service much as they would subscribe to a newspaper. In another embodiment, advertisers pay to have messages listed along with the Web pages for the player selection data, supplementing the costs of operating the system.[0107]
• While there has been illustrated and described what are at present considered to be preferred embodiments and methods of the present invention, it will be understood by those skilled in the art that various changes and modifications may be made, and equivalents may be substituted for elements thereof without departing from the true scope of the invention.[0108]
• In addition, many modifications may be made to adapt a particular element, technique or implementation to the teachings of the present invention without departing from the central scope of the invention. Therefore, it is intended that this invention not be limited to the particular embodiments and methods disclosed herein, but that the invention include all embodiments falling within the scope of the appended claims.[0109]

Claims (52)

What is claimed is:

1. An electronic game system comprising:

a first electronic system for generating a first random number;

a second electronic system for generating a second random number;

means for exchanging said first and second random numbers between said first and second electronic systems; and

means for ensuring that said first random number is generated independently of said second random number.

2. An electronic game system comprising a game server and one or more player terminals,

said game server including:

a random number generator; and

first transmitting means for transmitting a first random number to said one or more player terminals;

said one or more player terminals including:

a random number generator; and

second transmitting means for transmitting a second random number to said game server; and

said system including means for ensuring that said first random number is generated independently of said second random number.

3. An electronic game system comprising a game server and one or more player terminals,

wherein said one or more player terminals include:

a first random number generator; and

first transmitting means for transmitting said first random number to said game server; and

wherein said game server includes:

a second random number generator;

second transmitting means for transmitting said second random number to said one or more player terminals; and

said system including means for generating a game result based on said first random number and said second random number.

4. An electronic game system as defined inclaim 3, wherein said one or more player terminals further include encoding means for encoding said first random number; and wherein said game server further includes decoding means for decoding said encoded first random number.

5. An electronic game system as defined inclaim 3, wherein said game server further includes encoding means for encoding said second random number.

6. An electronic game system as defined inclaim 5, wherein said one or more player terminals further include:

decoding means for decoding said encoded second random number.

7. An electronic game system according toclaim 3, wherein said first and second transmitting means includes means for transmitting said first and second random numbers at substantially the same time.

8. An electronic game system according toclaim 6, further comprising:

means for exchanging decoding keys between said game server and said player terminal to decode said first and second random numbers.

9. An electronic game system according toclaim 4 said player terminal further comprising:

means for generating a decoding key; and

means for transmitting said encoded first random number to said game server before receiving said second random number from said game server and for transmitting said decoding key to said game server after receiving said second random number from said game server.

10. An electronic game system according toclaim 5, said game server further comprising:

means for generating a decoding key; and

means for transmitting said encoded second random number to said player terminal before receiving said first random number from said player terminal and for transmitting said decoding key to said player terminal after receiving said first random number from said player terminal.

11. An electronic game system according toclaim 3, wherein said player terminal further comprises:

means for generating a hash value of said first random number,

means for transmitting said hash value to said game server before receiving said second random number from said game server; and

means for transmitting said first random number to said game server after receiving said second random number from said game server.

12. An electronic game server according toclaim 3, wherein said game server further comprises:

means for generating a hash value of said second random number;

means for transmitting said hash value to said player terminal before receiving said first random number from said player terminal; and

means for transmitting said second random number to said player terminal after receiving said first random number from said player terminal.

13. An electronic game server according toclaim 3, further comprising:

means at said player terminal for encrypting said first random number or other player selection data using a first encryption key;

a database at said game server storing at least one decryption key corresponding to said first encryption key; and

means at said game server for decrypting said first random number or said other player selection data using said at least one decryption key.

14. An electronic game server according toclaim 3, further comprising:

means at said player terminal for encrypting said first random number or other player selection data using a private encryption key; and

means at said game server for decrypting said first random number or said other player selection data using a public decryption key.

15. A game server for an electronic game system comprising:

means for generating a first random number;

means for receiving a second random number generated at a separate device;

means for generating a game result based on said first and second random numbers; and

means for ensuring that said first and second random numbers are generated independently.

16. A player terminal for an electronic game system comprising:

means for generating a first random number;

means for transmitting said first random number to a separate device;

means for receiving a game result based on said first random number and a second random number generated at said separate device; and

means for ensuring that said first and second random numbers are generated independently.

17. A method of controlling an electronic game played in a system including first and second electronic systems, comprising the steps of:

generating a first random number at said first electronic system;

generating a second random number at said second electronic system;

exchanging said first and second random numbers between said first and second electronic systems; and

ensuring that said first and second random numbers are generated independently.

18. A method of controlling an electronic game played in a system including a game server and one or more player terminals, comprising the steps of:

generating a first random number at said game server;

generating a second random number at said player terminal;

encoding said first random number at said game server;

encoding said second random number at said player terminal;

transmitting a player encoded number from said player terminal to said game server;

transmitting a player decoding key from said player terminal to said game server; and

decoding said player encoded number at said game server to obtain said second random number.

19. A method of controlling an electronic game as defined inclaim 18, further comprising the steps of:

transmitting a server encoded number from said game server to said player terminal;

transmitting a server decoding key from said game server to said player terminal; and

decoding said server encoded number at said player terminal to obtain said first random number.

20. A method of controlling an electronic game as defined inclaim 19, wherein said step of encoding said first random number is performed by encoding said first random number with said game server encoding key to create said server encoded number; and said step of encoding said second random number is performed by encoding said second random number with said player encoding key to create said player encoded number.

21. In a game server for a game system including a game server and a player terminal, a method comprising the steps of:

generating a first random number;

encoding said first random number;

receiving a player encoded number from said player terminal;

receiving a player decoding key from said player terminal;

transmitting a server decoding key to said player terminal; and

decoding said player encoded number to obtain a second random number.

22. A method of controlling an electronic game as defined inclaim 21, further comprising the step of:

transmitting a server encoded number to said player terminal.

23. In a player terminal for a game system including a game server and a player terminal, a method comprising the steps of:

generating a first random number;

encoding said first random number;

transmitting said encoded first random number to said game server;

transmitting a player decoding key to said game server; and

receiving a game result based on said first random number and a second random number generated at said game server.

24. A method of controlling an electronic game as defined inclaim 23, further comprising the step of:

receiving a server encoded number from said game server.

25. A method of controlling an electronic game as defined inclaim 24, further comprising the step of:

decoding said server encoded number to obtain said second random number.

26. A method of controlling an electronic game played in a system having a game server and a player terminal, comprising the steps of:

generating a first random number at said game server;

storing said first random number at said game server;

generating a second random number at said player terminal;

encoding said second random number at said player terminal to produce an encoded player number;

transmitting said encoded player number from said player terminal to said game server;

transmitting said first random number from said game server to said player terminal;

transmitting a player decoding key from said player terminal to said server; and

decoding said encoded player number using said player decoding key to obtain said second random number.

27. A method of generating a play result for an electronic game as defined inclaim 26, wherein said first random number is transmitted from said game server to said player terminal after or at substantially the same time as the player decoding key is transmitted from said player terminal to said game server.

28. In a game server for an electronic game environment having a game server and a player terminal, a method of controlling an electronic game, comprising the steps of:

generating a first random number;

storing said first random number;

receiving from said player terminal an encoded second random number;

receiving from said player terminal a decoding key; and

decoding said encoded second random number using said decoding key.

29. A method of controlling an electronic game as defined inclaim 28, further comprising the step of:

making said first random number available for retrieval by said player terminal or transmitting said first random number to said player terminal.

30. In a player terminal of an electronic game environment having a game server and a player terminal, a method of controlling an electronic game, comprising the steps of:

generating a first random number;

encoding said first random number;

transmitting to said game server said encoded first random number;

transmitting to said game server a decoding key after said game server has generated a second random number; and

receiving from said game server a game result based on said first and second random numbers.

31. A method of obtaining a play result for an electronic game as defined inclaim 30, further comprising the step of:

receiving said second random number from said game server before transmitting said decoding key to said game server.

32. A method of controlling an electronic game for a system including a game server and a player terminal, comprising the steps of:

generating a first random number at said game server;

generating a second random number at said player terminal;

encoding said first random number at said game server using a server encoding key to produce a server encoded number;

transmitting said server encoded number from said game server to said player terminal;

transmitting a second random number from said player terminal to said game server;

transmitting said server decoding key from said game server to said player terminal; and

decoding said server encoded number using said server decoding key to obtain said first random number.

33. A method of controlling an electronic game for a system including a game server and a player terminal, comprising the steps of:

generating a first random number at said game server;

generating a second random number at said player terminal;

encoding said first random number at said game server using a server encoding key to produce a server encoded number;

transmitting said server encoded number from said game server to said player terminal;

transmitting a second random number from said player terminal to said game server after or at substantially the same time as said server decoding key is transmitted from said game server to said player terminal; and

decoding said server encoded number using said server decoding key to obtain said first random number.

34. A method of controlling an electronic game as defined inclaim 33, wherein said game server encoding key is chosen from a database.

35. In a game server for an electronic game environment having a game server and a player terminal, a method of controlling an electronic game, comprising the steps of:

generating a first random number;

encoding said first random number;

transmitting said encoded first random number to said player terminal;

receiving a second random number from said player terminal; and

transmitting a decoding key to said player terminal after or at substantially the same time as said random number is received from said player terminal.

36. In a player terminal for an electronic game environment having a game server and a player terminal, a method of obtaining a game result, comprising the steps of:

receiving an encoded first random number from said game server;

generating a second random number;

transmitting said second random number to said game server;

receiving from said game server a decoding key after or at substantially the same time as transmitting said second random number to said game server; and

receiving from said game server a game result based on said first and second random numbers.

37. In an electronic game environment having a game server and a player terminal, a method of controlling an electronic game, comprising the steps of:

generating a first random number at said player terminal;

generating a second random number at said game server; and

transmitting said first random number to said game server and transmitting said second random number to said player terminal at substantially the same time.

38. A method according toclaim 37, further comprising the step of:

posting said first and second random numbers to an electronic network.

39. A method of according toclaim 38, further comprising the step of:

attesting to the veracity of said posted numbers by a third party.

40. A method according toclaim 38, further comprising the steps of:

transmitting player identifying information to said game server; and

authenticating at said game server said player identifying information.

41. A method according toclaim 40, further comprising the step of:

creating an audit record including said player identifying information, said first random number, said second random number, and said game result.

42. A method according toclaim 41, further comprising the step of:

storing said audit record at a location separate from said game server.

43. In a game server for an electronic game environment having a game server and a player terminal, a method of controlling an electronic game, comprising the steps of:

generating a first random number;

receiving a second random number from said player terminal;

transmitting said first random number to said player terminal at substantially the same time that said second random number is received from said player terminal.

44. In a player terminal of an electronic game environment having a game server and a player terminal, a method of obtaining a game result, comprising the steps of:

generating a first random number;

receiving a second random number from said game server;

transmitting said first random number to said gamer server at substantially the same time that said second random number is received from said game server; and

receiving a game result from said game server, said game result being based on said first and second random numbers.

45. In an electronic game environment having a game server and a player terminal, a method of controlling an electronic game, comprising the steps of:

generating a first random number at said game server;

storing said first random number at said game server;

generating a second random number at said player terminal;

hashing said second random number according to a hash algorithm at said player terminal to produce a player hash value;

transmitting said player hash value from said player terminal to said game server;

transmitting said first random number from said game server to said player terminal; and

transmitting said second random number from said player terminal to said server.

46. A method according toclaim 48, further comprising the step of hashing said second random number according to said hash algorithm at said game server.

47. In a game server for an electronic game environment having a game server and a player terminal, a method of controlling an electronic game, comprising the steps of:

generating a first random number;

storing said first random number;

receiving from said player terminal an encoded second random number;

retrieving a player encoding key from a data base; and

decoding said encoded second random number using said player encoding key.

48. In a player terminal of an electronic game environment having a game server and a player terminal, a method of obtaining a game result random numbers, comprising the steps of:

generating a first random number;

encoding said first random number using an assigned player encoding key;

transmitting to said game server said encoded first random number; and,

receiving from said game server a game result based on said first and second random numbers.

49. In an electronic game environment having a game server and a player terminal, a method of controlling an electronic game, comprising the steps of:

generating a first random number at said game server;

storing said first random number at said game server;

generating a second random number at said player terminal;

encoding said second random number using a player encoding key at said player terminal to produce an encoded player number;

transmitting said encoded player number from said player terminal to said game server;

transmitting said first random number from said game server to said player terminal;

retrieving said player encoding key from a player data base at said game server; and

decoding said encoded player number using said player encoding key to obtain said second random number.

50. In a game server for an electronic game environment having a game server and a player terminal, a method of controlling an electronic game, comprising the steps of:

generating a first random number;

storing said first random number;

receiving from said player terminal an encoded second random number;

retrieving a public player encoding key from a database; and

decoding said encoded second random number using said public player encoding key.

51. In a player terminal of an electronic game environment having a game server and a player terminal, a method of obtaining a play result, comprising the steps of:

generating a first random number;

encoding said first random number using a private player encoding key;

transmitting to said game server said encoded first random number; and

receiving from said game server a game result based on said first and second random numbers.

52. A method according to one of claims18,21,26,28,32,33,35,37,43,36,47,49, and50, further comprising the steps of:

generating a result value based on said first random number and said second random number; and

producing a game result based on said result value.

Images