US20100184509A1 - Initializing and authenticating wagering game machines - Google Patents

Abstract

Methods and apparatus for initializing and authenticating wagering game machines are described herein. In one embodiment, the method includes receiving a digital certificate from a mobile wagering game machine. The method can also include determining that the digital certificate is authentic and selecting wagering game content and services that are available to the mobile wagering game machine. The method can also include transmitting some of the available wagering game content to the mobile wagering game machine.

Description

RELATED APPLICATIONS
• This application claims the priority benefit of U.S. Provisional Application Ser. No. 60/947,166 filed Jun. 29, 2007.
LIMITED COPYRIGHT WAIVER
• A portion of the disclosure of this patent document contains material which is subject to copyright protection. The copyright owner has no objection to the facsimile reproduction by anyone of the patent disclosure, as it appears in the Patent and Trademark Office patent files or records, but otherwise reserves all copyright rights whatsoever. Copyright 2008, WMS Gaming, Inc.
FIELD
• Embodiments of the inventive subject matter relate generally to wagering game systems, and more particularly to processing authentication credentials in wagering game networks.
BACKGROUND
• Wagering game machines, such as slot machines, video poker machines and the like, have been a cornerstone of the gaming industry for several years. Generally, the popularity of such machines depends on the likelihood (or perceived likelihood) of winning money at the machine and the intrinsic entertainment value of the machine relative to other available gaming options. Where the available gaming options include a number of competing wagering game machines and the expectation of winning at each machine is roughly the same (or believed to be the same), players are likely to be attracted to the most entertaining and exciting machines. Shrewd operators consequently strive to employ the most entertaining and exciting machines, features, and enhancements available because such machines attract frequent play and hence increase profitability to the operator. Therefore, there is a continuing need for wagering game machine manufacturers to continuously develop new games and gaming enhancements that will attract frequent play.
SUMMARY
• In some embodiments, a method comprises receiving a digital certificate from a mobile wagering game machine; determining that the digital certificate is authentic; selecting wagering game content and services that are available to the mobile wagering game machine; and transmitting some of the available wagering game content to the mobile wagering game machine.
• In some embodiments, the selecting is based information contained in the digital certificate.
• In some embodiments, the method further comprises determining that the digital certificate is not revoked and not expired.
• In some embodiments, the determining that the digital certificate in not revoked includes querying another wagering game network device.
• In some embodiments, the determining that the digital certificate in not revoked includes querying a locally stored copy of a revocation list.
• In some embodiments, the method further comprises determining that the digital certificate is expired; and requesting revocation of the digital certificate.
• In some embodiments, the digital certificate complies with the X.509 standard.
• In some embodiments, the authenticity of the digital certificate is determined using a public encryption key associated with a certificate authority.
• In some embodiments, a mobile wagering game machine comprises an initialization controller configured to initialize the mobile wagering game machine for operation; a memory device including a digital certificate, wherein the digital certificate includes information identifying wagering game content that the mobile wagering game machine has permission to access; and a wagering game unit configured to present wagering games using the wagering game content.
• In some embodiments, the digital certificate conforms to the X.509 standard.
• In some embodiments, the initialization controller is configured to receive a boot record and the digital certificate over a physically secure wired network.
• In some embodiments, the digital certificate also includes information identifying services that the mobile wagering game machine has permission to access.
• In some embodiments, the mobile wagering game machine further comprises a secure store configured to securely store a private encryption key and the digital certificate.
• In some embodiments, the secure store includes a trusted platform module.
• In some embodiments, a system comprises a digital certificate server configured to distribute a digital certificate; a mobile wagering game machine configured to receive the digital certificate, to provide the digital certificate for authentication, and to present wagering games based on wagering game content; a wagering game server configured to authenticate the mobile wagering game machine based on the digital certificate, and to deliver the wagering game content to the mobile wagering game machine.
• In some embodiments, the mobile wagering game machine is further configured to receive a nonce from the wagering game server, and to transmit to the wagering game server a hash encrypted with a private key, wherein the private key is associated with the digital certificate.
• In some embodiments, the wagering game server is further configured to select the wagering game content based on information in the digital certificate.
• In some embodiments, the digital certificate includes information indicating services to be accessible the mobile wagering game machine.
• In some embodiments, the digital certificate conforms to the X.509 standard.
• In some embodiments, the digital certificate server includes a list of revoked digital certificates.
• In some embodiments, the wagering game server is further configured to request that the digital certificate server include the digital certificate on a list of revoked digital certificates.
BRIEF DESCRIPTION OF THE FIGURES
• Embodiments of the invention are illustrated in the Figures of the accompanying drawings in which:
• FIG. 1 is a dataflow diagram illustrating dataflow and operations for using digital certificates to authenticate and determine content for a mobile machine, according to some embodiments of the invention;
• FIG. 2 is a block diagram illustrating awagering game network200, according to example embodiments of the invention;
• FIG. 3 is a block diagram illustrating an architecture for a wagering game machine, according to example embodiments of the invention;
• FIG. 4 illustrates a digital certificate for use in a wagering game network, according to some embodiments of the invention;
• FIG. 5 is a flow diagram illustrating operations for initializing a wagering game machine, according to some embodiments of the invention;
• FIG. 6 is a flow diagram illustrating operations for processing digital certificates and exchanging wagering game content, according to some embodiments of the invention;
• FIG. 7 is a flow diagram illustrating operations for distributing digital certificates in a wagering game network, according to some embodiments of the invention;
• FIG. 8 is a flow diagram illustrating operations for processing a request to revoke a digital certificate, according to some embodiments of the invention; and
• FIG. 9 shows an example embodiment of a wagering game machine, according to some embodiments of the invention.
DESCRIPTION OF THE EMBODIMENTS
• This description of the embodiments is divided into five sections. The first section provides an introduction to embodiments of the invention, while the second section describes an example operating environment. The third section describes example operations performed by some embodiments and the fourth section describes example wagering game machines in more detail. The fifth section presents some general comments.
INTRODUCTION
• This section provides an introduction to some embodiments of the invention. Wagering game machines are typically large stationary devices. However, some wagering game machines are lightweight handheld devices designed for mobility. This mobility enables players to play wagering games in a wide variety of casino settings, such as by a casino pool, in a sports book, in a casino restaurant, etc.
• Mobile wagering game machines (hereinafter “mobile machines”) may be exposed to security risks not common to their stationary counterparts. For example, attackers can move mobile machines to clandestine locations that are free of casino security. Absent casino security, attackers can attempt to modify mobile machines with relative impunity. Attackers can use modified wagering game machines to commit fraud over wagering game networks and/or perform other rouge operations. However, some embodiments of the invention make wagering game networks more resistant to attack. For example, some mobile machines cannot access wagering game networks without first proving their authenticity using digital certificates. In some embodiments, the digital certificates are revoked when mobile machines report attacks and/or when they lose communication with certain network devices (e.g., wagering game servers). The revocation of digital certificates may be frequent, as the mobile machines may frequently report attacks and/or frequently lose communications with wagering game servers. Therefore, embodiments of the invention enable wagering game networks to proactively discover potentially rogue mobile machines and deny them access to the network.
• As yet another feature, some wagering game network components (e.g., wagering game servers) can process the digital certificates to determine what content and/or services will be made available to mobile wagering game machines.FIG. 1 describes the above-noted features in more detail.
• FIG. 1 is a dataflow diagram illustrating dataflow and operations for using digital certificates to authenticate and determine content for a mobile machine, according to some embodiments of the invention. InFIG. 1, awagering game network100 includes amobile machine102 connected to awagering game server104 over anetwork connection110. Themobile machine102 is configured to present wagering games and facilitate services using content received from thewagering game server104. However, before facilitating wagering games and services, thewagering game server104 uses digital certificates to authenticate themobile machine102. Dataflow and operations for authenticating themobile machine102 and determining content occur in four stages.
• During stage one, themobile machine102 establishes communications with thewagering game server104. During stage two, themobile machine102 provides adigital certificate106 to thewagering game server104. During stage three, thewagering game server104 determines whether thedigital certificate106 is valid. That is, thewagering game server104 determines whether thedigital certificate106 is expired, revoked, modified, etc. After determining thedigital certificate106 is valid, thewagering game server104 proceeds with stage four. During stage four, thewagering game server104 uses information in thedigital certificate106 to determine what content and services are available to themobile machine102. For example, thedigital certificate106 can indicate that themobile machine102 is limited to slots games and no services. Alternatively, thedigital certificate106 can indicate the mobile machine can play all available wagering game types (slots, black jack, poker, etc.) and can use an electronic drink ordering service.
• AlthoughFIG. 1 describes some embodiments, the following sections describe many other features and embodiments.
Operating Environment
• This section describes an example operating environment and provides structural aspects of some embodiments. In some embodiments, the structural components described herein can be further integrated, divided, and/or remotely distributed. This section includes discussion about wagering game machines, wagering game networks, and digital certificates.
Wagering Game Networks
• FIG. 2 is a block diagram illustrating awagering game network200, according to example embodiments of the invention. As shown inFIG. 2, thewagering game network200 includes a plurality ofcasinos212 connected to acommunications network214.
• Eachcasino212 includes alocal area network216, which includes anaccess point204,wagering game machines201 &202,gaming station218,wagering game server206,initialization server220, anddigital certificate server222. Theaccess point204 provideswireless communication links210 and wired communication links208. The wired and wireless communication links can employ any suitable connection technology, such as Bluetooth, 802.11, Ethernet, public switched telephone networks, SONET, etc. In some embodiments, the wired communication links208 (and other LAN components) are physically secured against unauthorized access.
• The wagering game machines described herein can take any suitable form, such as stationary floor models201 (hereinafter “stationary machines”), handheld mobile models202 (i.e., mobile machines), bartop models, workstation-type console models, etc. Moreover, any of the wagering game machines can be primarily dedicated for use in conducting wagering games, or they can include non-dedicated devices, such as mobile phones, personal digital assistants, personal computers, etc.
• In some embodiments, players check-outmobile machines202 from thegaming station218, which can store, recharge, and securely connect themobile machines202 to theinitialization server220. While residing in thegaming station218, themobile machines202 can perform an initialization process before they are removed for use in thecasino212. In some embodiments, as part of the initialization process, themobile machines202 can: 1) boot using operating systems received from theinitialization server220, and 2) securely receive digital certificates generated by thedigital certificate server222. After themobile machines202 initialize over the secure connection, they are ready to wirelessly connect to and authenticate with thewagering game server206. Additional details about authentication and operation are described in the next section.
• Theinitialization server220 can include aboot server228,operating system images230, components for verifying authenticity of content (not shown), etc. In some embodiments, the boot server connects towagering game machines201 &202 and transmits copies of the operating system image. The boot server can operate according to Intel Corporation's Preboot Execution Environment (PXE) standard and the operating system image can include any suitable operating system (e.g., one or more versions of Linux, UNIX, Windows, etc.).
• Thedigital certificate server222 can generate digital certificates, which can be used for authentication and selecting content and services for thewagering game machines201 &202. Thedigital certificate server222 includes adigital certificate generator224,key generator232, andrevocation list226. In some embodiments, thedigital certificate generator224 can generate X.509 digital certificates, while the revocation list indicates digital certificates that have been revoked. In some embodiments, devices that present revoked certificates will be denied access to the wagering game network and will be treated as rogue devices.
• In some embodiments, thedigital certificate server222 provides digital certificates to theinitialization server220 for distribution when themobile machines202 undertake the initialization process. The digital certificates can include information for authenticating wagering game machines and for defining wagering game content and services available to the wagering game machines. For example, the digital certificates can include public keys for authenticating devices and encrypting content.
• Thedigital certificate server222 also includes akey generator232 that can generate private cryptographic keys (and public keys) for distribution to network devices, where the private keys are associated with public keys included in the digital certificates. The private keys can be used in concert with the public keys to authenticate devices and to encrypt/decrypt content. In some embodiments, some wagering game network devices (e.g., mobile machines) can generate their own private keys for use in concert with public keys included in the digital certificates. Digital certificates will be described in more detail below (see discussion ofFIG. 4).
• Thewagering game server206 can authenticate wagering game network devices, serve wagering games, distribute content, and facilitate services for thewagering game machines201 &202. Thewagering game machines201 &202 can operate as thin, thick, or intermediate clients. For example, one or more elements of game play may be controlled by thewagering game machine201 &202 (client) or the wagering game server206 (server). Game play elements can include executable game code, lookup tables, configuration files, game outcome, audio or visual representations of the game, game assets or the like. In a thin-client example, thewagering game server206 can perform functions such as determining game outcome or managing assets, while thewagering game machine201 &202 can present a graphical representation of such outcome or asset modification to the user (e.g., player). In a thick-client example, thewagering game machines201 &202 can determine game outcomes and communicate the outcomes to thewagering game server206 for recording or managing a player's account.
• In some embodiments, either thewagering game machines201 &202 (client) or thewagering game server206 can provide functionality that is not directly related to game play. For example, account transactions and account rules may be managed centrally (e.g., by the wagering game server206) or locally (e.g., by awagering game machine201/202). Other functionality not directly related to game play may include power management, presentation of advertising, software or firmware updates, system quality checks, etc.
• In some embodiments, thewagering game network200 can include other network devices, such as accounting servers, wide area progressive servers, player tracking servers, and/or other devices suitable for use in connection with embodiments of the invention. Any of the wagering game network components (e.g., thewagering game machines201 &202) can include hardware and machine-readable media including instructions for performing the operations described herein.
Wagering Game Machine Architecture
• FIG. 3 is a block diagram illustrating an architecture for a wagering game machine, according to example embodiments of the invention. Thewagering game machine300 can be a mobile model, stationary model, etc. As shown inFIG. 3, thewagering game machine300 includes a central processing unit (CPU)326 connected tomain memory328. TheCPU326 can include any suitable processor, such as an Intel® Pentium processor,Intel® Core 2 Duo processor, AMD Opteron™ processor, or UltraSPARC processor.
• Themain memory328 includes aninitialization controller338,wagering game unit332,digital certificates340, andoperating system342. In some embodiments, theinitialization controller338,operating system342, anddigital certificate340 are loaded into themain memory328 during an initialization process. In some embodiments, theinitialization controller338 controls a boot process during which thewagering game machine300 receives theoperating system342 anddigital certificate340 from a trusted initialization server via a secure network link. After initialization is complete, thewagering game unit332 can connect to and authenticate with a wagering game server or other network device. As part of the authentication process, the wagering game machine can present the wagering game server a copy of thedigital certificate340. After authentication, thewagering game machine300 can present wagering games (e.g., video poker, video black jack, video slots, video lottery, etc.) and facilitate services (e.g., virtual concierge services, online beverage ordering, etc.). In some embodiments, the availability of wagering games and services is determined by content included in thedigital certificate340.
• TheCPU326 is also connected to an input/output (I/O)bus322, which can include any suitable bus technologies, such as an AGTL+ frontside bus and a PCI backside bus. The I/O bus322 is connected to anexternal system interface324,payout mechanism308,primary display310,secondary display312,value input device314,player input device316,information reader318,storage unit330, initialization read only memory (ROM)336, andsecure store344.
• In some embodiments, theinitialization ROM336 loads theinitialization controller338 intomain memory328 during an initialization process. In some embodiments, theinitialization controller338 can include a basic input/output system (BIOS) and network booting extensions.
• Thesecure store344 includes aprivate key346, which can be associated with public keys included in thedigital certificate340. In some embodiments, thesecure store344 includes logic for generating theprivate key346, while in other embodiments, the wagering game machine receives theprivate key346 from thedigital certificate server222. In some embodiments, thesecure store344 can include a trusted platform module (TPM) chip. In some embodiments, before check-out, mobile machines can receive digital certificates in theirsecure stores344.
• The I/O bus322 is also connected to alocation unit348. Thelocation unit348 can create information that indicates the wagering game machine's location in a casino. In some embodiments, thelocation unit348 includes a global positioning system (GPS) receiver that can determine the wagering game machine's location using GPS satellites. In other embodiments, thelocation unit348 can include a radio frequency identification (RFID) tag that can determine the wagering game machine's location using RFID readers positioned throughout a casino. Some embodiments can use GPS receiver and RFID tags in combination, while other embodiments can use other suitable methods for determining the wagering game machine's location.
• In some embodiments, the wagering game machine306 can include additional peripheral devices and/or more than one of each component shown inFIG. 3. For example, in some embodiments, the wagering game machine306 can include multiple external system interfaces324 and/ormultiple CPUs326. Although some components are depicted as software, any component of thewagering game machine300 can be implemented as hardware, firmware, and/or machine-readable media including instructions for performing the operations described herein. Machine-readable media includes any mechanism that provides (i.e., stores and/or transmits) information in a form readable by a machine (e.g., a wagering game machine, computer, etc.). For example, tangible machine-readable media includes read only memory (ROM), random access memory (RAM), magnetic disk storage media, optical storage media, flash memory machines, etc. Machine-readable media also includes any media suitable for transmitting software over a network.
Digital Certificates
• FIG. 4 illustrates a digital certificate for use in a wagering game network, according to some embodiments of the invention.FIG. 4 shows adigital certificate400. Thedigital certificate400 can conform to the X.509 standard, other suitable standards, and/or proprietary formats. Thedigital certificate400 includes fields indicating a validity period, public key, issuer name, available content and/or services, and a digital signature. Thevalidity period field402 indicates a time period in which thedigital certificate400 can be used (e.g., to authenticate a wagering game network device, such as a mobile machine). In some embodiments, devices presenting expired digital certificates will not be granted access to the wagering game network and will not be viewed as authenticate devices.
• The publickey field404 includes a public encryption key (“public key”). Devices can use the public key for encrypting, decrypting, and authenticating content. The public key can be associated with a particular wagering game network device. For example, the public key can be associated with thewagering game server206. Thus, after a mobile machine acquires adigital certificate400, the mobile machine can use the certificate's public key (contained in the public key field404) to encrypt, decrypt, and authenticate content sent to and received from thewagering game server206. The public key can also be associated with a private key known only to a wagering game network device, such as a mobile machine. The wagering game network device can utilize the private key in concert with a public key for encrypting messages and authenticating the device. In some embodiments, thedigital certificate server222 can distribute private keys associated with its digital certificates.
• Theissuer name field406 can indicate what device or authority issued thedigital certificate400.
• Theavailable content field408 can indicate wagering game content and/or services available to a network device (e.g., mobile machine) that presents thedigital certificate400. Available content and/or services can be indicated in bit strings, data fields, or any other suitable data structure. The data structure may be encoded to indicate more content and/or service options. In embodiments in which thedigital certificate400 conforms to the X.509 standard, user-defined portions of the certificate can include data indicating content and services available on a wagering game machine.
• Thedigital signature field410 can include a digital signature from a digital certificate authority (e.g., the digital certificate server222). In some embodiments, the certificate authority creates the digital signature using its own private cryptographic key. The certificate's digital signature can be verified using the certificate authority's public key.
Example Operations
• This section describes operations associated with some embodiments of the invention. In the discussion below, the flow diagrams will be described with reference to the block diagrams presented above. In certain embodiments, the operations are performed by executing instructions residing on machine-readable media (e.g., software), while in other embodiments, the operations are performed by hardware and/or other logic (e.g., firmware). In some embodiments, the operations are performed in series, while in other embodiments, one or more of the operations can be performed in parallel. Some embodiments perform less than all the operations shown in the flow diagrams. Moreover, despite the following headings, different components can perform the operations described below.
• In the following discussion,FIG. 5 describes operations typically performed by mobile machines, whereasFIG. 6 describes operations typically performed by wagering game servers.FIGS. 7 & 8 describe operations typically performed by digital certificate servers.
Mobile Machine Operations
• FIG. 5 is a flow diagram illustrating operations for initializing a wagering game machine, according to some embodiments of the invention. Theflow500 will be described with reference to the embodiments shown inFIGS. 2-4. Theflow500 begins atblock502.
• Atblock502, amobile machine202 receives initialization content and a digital certificate over a secure network connection. In some embodiments, themobile machine202 receives the initialization content while connected to agaming station218. The initialization content can include a boot record and other operating system components. The digital certificate can include data described in the discussion ofFIG. 4 and other suitable data. In some embodiments, themobile machine202 receives a single data packet from theinitialization server220, where the data packet includes the initialization content and a digital certificate. Alternatively, themobile machine202 can receive the initialization content and digital certificates in a plurality of data packets from theinitialization server220 and thedigital certificate server222. In some embodiments, the mobile machine receives more than one digital certificate. The flow continues atblock504.
• Atblock504, themobile machine202 and initializes using the initialization content. For example, themobile machine202 boots using a boot record received from theinitialization server220. After initialization, a player can check-out themobile machine202 from thegaming station218. After check-out, the player can use themobile machine202 to play wagering games and receive services. The flow continues atblock506.
• Atblock506, themobile machine202 connects to awagering game server206. Themobile machine202 may connect thewagering game server206 to initiate a process for receiving wagering game content and/or services. The flow continues atblock508.
• Atblock508, themobile machine202 provides a digital certificate to thewagering game server206. The digital certificate can include information indicating a validity period, public key, certificate issuer name, and content and/or services available to thewagering game machine202. The digital certificate can conform to the X.509 standard. In addition to providing the digital certificate, themobile machine202 may also perform additional authentication operations (e.g., sending data signed by the mobile machine's private key). The flow continues atblock510.
• Atblock510, themobile machine202 determines whether the digital certificate was accepted. In some embodiments, thewagering game server206 will not accept the digital certificate if the certificate is expired, revoked, or modified. If the certificate was not accepted, the flow ends. Otherwise, the flow continues atblock511.
• Atblock511, themobile machine202 performs additional authentication operations. For example, in some embodiments, themobile machine202 can receive a nonce from thewagering game server206. Using the nonce and itsprivate key346, themobile machine202 can generate and send a hash to thewagering game server206. In some embodiments, thewagering game server206 can verify the hash using a public key included in the digital certificate provided atblock508. In some embodiments, these additional authentication operations enable thewagering game machine206 to confirm that themobile machine202 has both a valid digital certificate and a private key associated with the digital certificate. The flow continues atblock512.
• Atblock512, themobile machine202 exchanges wagering game content with thewagering game server206. The wagering game content can include instructions and/or data for conducting wagering games (e.g., video slots, video poker, video black jack, and the like). For example, the wagering game content can include program code, audio content, video content, language content, and/or other data used for conducting all or part of a wagering game and/or bonus games. The wagering game content can also include executable game code, game math, art, configuration data (enumerating allowable percentages, denominations, paylines, etc.), operating system features, device drivers, attract mode displays, advertisements, episodic game content, etc.
• Atblock514, using the wagering game content, themobile machine202 presents wagering games and/or provides services. For example, themobile machine202 can present a video slots game and/or bonus games using content received from thewagering game server206. Additionally, themobile machine202 can provide concierge services, drink services, etc. The flow continues atblock516.
• Atblock516, if needed, themobile machine202 transmits a signal to maintain a connection with thewagering game server206. In some embodiments, themobile machine202 sends the signal to indicate that it has not been tampered with or removed from the casino. The flow continues atblock518.
• Atblock518, themobile machine202 determines whether to terminate theflow500. If themobile machine202 does not terminate the flow, the flow continues atblock512. Otherwise, the flow ends.
Wagering Game Server Operations
• This description continues by discussing how some wagering game servers interact with wagering game machines (e.g., mobile machines that perform the flow500).
• FIG. 6 is a flow diagram illustrating operations for processing digital certificates and exchanging wagering game content, according to some embodiments of the invention. Theflow600 begins atblock602.
• Atblock602, awagering game server206 establishes a communications connection (e.g., a wireless connection) with a wagering game network device, such as amobile machine202. The flow continues atblock604.
• Atblock604, thewagering game server206 receives adigital certificate400 from themobile machine202. As noted above, the digital certificate can include information indicating a validity period, public key, certificate issuer name, and content and/or services available to thewagering game machine202. The flow continues atblock606.
• Atblock606, thewagering game server206 determines whether thedigital certificate400 is expired or revoked. Thewagering game server206 can compare the digital certificate'svalidity period402 against it's internal time and date information. Additionally, thewagering game server206 can query a revocation list to determine whether the digital certificate has been revoked. In some embodiments, thewagering game server206 maintains a list of revoked certificates, while in other embodiments, thedigital certificate server222 maintains therevocation list226. The flow continues atblock608.
• Atblock608, thewagering game server206 determines whether thedigital certificate400 is authentic. In some embodiments, if thewagering game server206 can validate the digital certificate'sdigital signature410, thedigital certificate400 is authentic. Thewagering game server206 can use the certificate authority's public key to validate the digital certificate's digital signature. If thedigital certificate400 is not authentic, the flow ends. Otherwise, the flow continues atblock609.
• Atblock609, thewagering game server206 performs additional authentication operations. For example, in some embodiments, thewagering game server206 sends a nonce to themobile machine202. In turn, thewagering game server206 receives a hash generated from the nonce and the mobile machine's private key, where the private key is associated with the digital certificate received atbock604. In some embodiments, thewagering game server206 can verify the hash using a public key included in the digital certificate received atblock604. In some embodiments, these additional authentication operations enable thewagering game machine206 to confirm that themobile machine202 has both a valid digital certificate and a private key associated with the digital certificate. The flow continues atblock610.
• Atblock610, thewagering game server206 exchanges wagering game content with themobile machine202. In some embodiments, thewagering game server206 uses information in the digital certificate (e.g., information in the available content and/or services filed408) to determine what content to send to themobile machine202. As a result, thewagering game server206 can use the digital certificate to determine what wagering games and services are available to themobile machine202. The flow continues atblock612.
• Atblock612, thewagering game server206 determines whether it still has a communication connection with themobile machine202. In some embodiments, thewagering game server206 checks the communication connection for security purposes (e.g., to determine whether themobile machine202 has been modified or removed from the casino). If the connection is lost, the flow continues at block614. Otherwise, the flow continues atblock610.
• At block614, thewagering game server206 requests that the mobile machine'sdigital certificate400 be revoked. In some embodiments, the wagering game server sends this request to thedigital certificate server222. From block614, the flow ends.
Digital Certificate Server
• This description continues withFIGS. 7 & 8, which describe how some digital certificate servers distribute and revoke digital certificates.
• FIG. 7 is a flow diagram illustrating operations for distributing digital certificates in a wagering game network, according to some embodiments of the invention. In some embodiments, a digital certificate server performs theflow700 as part of a process for initializing a mobile machine202 (see discussion of block502). The flow diagram700 begins atblock702.
• Atblock702, thedigital certificate server222 establishes communications with amobile machine202. The flow continues atblock704.
• Atblock704, thedigital certificate server222 generates one or more digital certificates. The digital certificates can include root certificates and individual certificates. In some embodiments, the digital certificates include the information discussed inFIG. 4. In some embodiments, thedigital certificate server222 can also generate private keys for use by wagering game network devices. The flow continues atblock706.
• Atblock706, thedigital certificate server222 transmits the digital certificates to themobile machine202. In some embodiments, thedigital certificate server222 also transmits to themobile machine202 initialization content (e.g., a boot record) and/or a private key associated with the digital certificates. Fromblock706, the flow ends.
• WhileFIG. 7 describes operations for distributing digital certificates,FIG. 8 describes operations for revoking digital certificates.
• FIG. 8 is a flow diagram illustrating operations for processing a request to revoke a digital certificate, according to some embodiments of the invention. Theflow800 begins atblock802.
• Atblock802, thedigital certificate server222 receives a request to revoke a digital certificate. The request can originate from awagering game server206 or any other suitable device. In some embodiments, the revocation request explicitly identifies (e.g., by serial number) a digital certificate to revoke. The flow continues atblock804.
• Atblock804, thedigital certificate server222 modifies a list of revoked digital certificates to include the certificate for which revocation is requested. The flow continues atblock806.
• Atblock806, thedigital certificate server222 removes expired digital certificates from the revocation list. Deleting expired digital certificates from the revocation list can reduce overhead (e.g., system resources and processing time) associated with maintaining and searching the revocation list. In some embodiments, thedigital certificate server222 distributes the revocation list to other network devices (e.g., a wagering game server). The flow continues atblock808.
• Atblock808, thedigital certificate server222 digitally signs the revocation list using its private cryptographic key (e.g., the same key it uses for signing digital certificates). This digital signature can be used to authenticate the revocation list.
• In some embodiments, entries are removed from the revocation list as part of a separate periodic process. Some embodiments leverage knowledge about expiration times to keep the revocation list relatively small. For example, digital certificates may be issued every hour, where the certificates expire after an hour. Thus, every hour, thedigital certificate server222 can remove expired digital certificates from the revocation list. The frequency with which digital certificates are removed can vary. In some embodiments, thedigital certificate server222 can set a process to delete expired certificates at a specified time.
• Fromblock808, the flow ends.
More About Wagering Game Machines
• FIG. 9 shows an example embodiment of a wagering game machine, according to some embodiments of the invention. Like free standing wagering game machines, in a handheld or mobile form, thewagering game machine910 can include any suitable electronic device configured to play a video casino games such as blackjack, slots, keno, poker, blackjack, and roulette. Thewagering game machine910 comprises ahousing912 and includes input devices, including avalue input device918 and aplayer input device924. For output, thewagering game machine910 includes aprimary display914, asecondary display916, one ormore speakers917, one or more player-accessible ports919 (e.g., an audio output jack for headphones, a video headset jack, etc.), and other conventional I/O devices and ports, which may or may not be player-accessible. In the embodiment depicted inFIG. 9, thewagering game machine910 comprises asecondary display916 that is rotatable relative to theprimary display914. The optionalsecondary display916 can be fixed, movable, and/or detachable/attachable relative to theprimary display914. Either theprimary display914 and/orsecondary display916 can be configured to display any aspect of a non-wagering game, wagering game, secondary game, bonus game, progressive wagering game, group game, shared-experience game or event, game event, game outcome, scrolling information, text messaging, emails, alerts or announcements, broadcast information, subscription information, and wagering game machine status.
• The player-accessiblevalue input device918 can comprise, for example, a slot located on the front, side, or top of thehousing912 configured to receive credit from a stored-value card (e.g., casino card, smart card, debit card, credit card, etc.) inserted by a player. The player-accessiblevalue input device918 can also comprise a sensor (e.g., an RF sensor) configured to sense a signal (e.g., an RF signal) output by a transmitter (e.g., an RF transmitter) carried by a player. The player-accessiblevalue input device918 can also or alternatively include a ticket reader, or barcode scanner, for reading information stored on a credit ticket, a card, or other tangible portable credit or funds storage device. The credit ticket or card can also authorize access to a central account, which can transfer money to thewagering game machine910.
• Still other player-accessiblevalue input devices918 can require the use oftouch keys930 on the touch-screen display (e.g.,primary display914 and/or secondary display916) orplayer input devices924. Upon entry of player identification information and, preferably, secondary authorization information (e.g., a password, PIN number, stored value card number, predefined key sequences, etc.), the player can be permitted to access a player's account. As one potential optional security feature, thewagering game machine910 can be configured to permit a player to only access an account the player has specifically set up for thewagering game machine910. Other conventional security features can also be utilized to, for example, prevent unauthorized access to a player's account, to minimize an impact of any unauthorized access to a player's account, or to prevent unauthorized access to any personal information or funds temporarily stored on thewagering game machine910.
• The player-accessiblevalue input device918 can itself comprise or utilize a biometric player information reader which permits the player to access available funds on a player's account, either alone or in combination with another of the aforementioned player-accessiblevalue input devices918. In an embodiment wherein the player-accessiblevalue input device918 comprises a biometric player information reader, transactions such as an input of value to thewagering game machine910, a transfer of value from one player account or source to an account associated with thewagering game machine910, or the execution of another transaction, for example, could all be authorized by a biometric reading, which could comprise a plurality of biometric readings, from the biometric device.
• Alternatively, to enhance security, a transaction can be optionally enabled only by a two-step process in which a secondary source confirms the identity indicated by a primary source. For example, a player-accessiblevalue input device918 comprising a biometric player information reader can require a confirmatory entry from another biometricplayer information reader952, or from another source, such as a credit card, debit card, player ID card, fob key, PIN number, password, hotel room key, etc. Thus, a transaction can be enabled by, for example, a combination of the personal identification input (e.g., biometric input) with a secret PIN number, or a combination of a biometric input with a fob input, or a combination of a fob input with a PIN number, or a combination of a credit card input with a biometric input. Essentially, any two independent sources of identity, one of which is secure or personal to the player (e.g., biometric readings, PIN number, password, etc.) could be utilized to provide enhanced security prior to the electronic transfer of any funds. In another aspect, thevalue input device918 can be provided remotely from thewagering game machine910.
• Theplayer input device924 comprises a plurality of push buttons on a button panel for operating thewagering game machine910. In addition, or alternatively, theplayer input device924 can comprise a touch screen mounted to aprimary display914 and/orsecondary display916. In one aspect, the touch screen is matched to a display screen having one or moreselectable touch keys930 selectable by a user's touching of the associated area of the screen using a finger or a tool, such as a stylus pointer. A player enables a desired function either by touching the touch screen at an appropriate touch key930 or by pressing an appropriate push button on the button panel. Thetouch keys930 can be used to implement the same functions as push buttons. Alternatively, the push buttons926 can provide inputs for one aspect of the operating the game, while thetouch keys930 can allow for input needed for another aspect of the game. The various components of thewagering game machine910 can be connected directly to, or contained within, thecasing912, as seen inFIG. 9, or can be located outside thecasing912 and connected to thehousing912 via a variety of wired (tethered) or wireless connection methods. Thus, thewagering game machine910 can comprise a single unit or a plurality of interconnected (e.g., wireless connections) parts which can be arranged to suit a player's preferences.
• The operation of the basic wagering game on thewagering game machine910 is displayed to the player on theprimary display914. Theprimary display914 can also display the bonus game associated with the basic wagering game. Theprimary display914 preferably takes the form of a high resolution LCD, a plasma display, an LED, or any other type of display suitable for use in thewagering game machine910. The size of theprimary display914 can vary from, for example, about a 2-3″ display to a 15″ or 17″ display. In at least some embodiments, theprimary display914 is a 7″-10″ display. In some embodiments, the size of the primary display can be increased. Optionally, coatings or removable films or sheets can be applied to the display to provide desired characteristics (e.g., anti-scratch, anti-glare, bacterially-resistant and anti-microbial films, etc.). In at least some embodiments, theprimary display914 and/orsecondary display916 can have a 16:9 aspect ratio or other aspect ratio (e.g., 4:3). Theprimary display914 and/orsecondary display916 can also each have different resolutions, different color schemes, and different aspect ratios.
• As with the free standing embodiments a wagering gaming machine, a player begins play of the basic wagering game on thewagering game machine910 by making a wager (e.g., via thevalue input device918 or an assignment of credits stored on the handheld gaming machine via thetouch screen keys930,player input device924, or buttons926) on thewagering game machine910. In some embodiments, the basic game can comprise a plurality of symbols arranged in an array, and includes at least onepayline932 that indicates one or more outcomes of the basic game. Such outcomes can be randomly selected in response to the wagering input by the player. At least one of the plurality of randomly selected outcomes can be a start-bonus outcome, which can include any variations of symbols or symbol combinations triggering a bonus game.
• In some embodiments, the player-accessiblevalue input device918 of thewagering game machine910 can double as aplayer information reader952 that allows for identification of a player by reading a card with information indicating the player's identity (e.g., reading a player's credit card, player ID card, smart card, etc.). Theplayer information reader952 can alternatively or also comprise a bar code scanner, RFID transceiver or computer readable storage medium interface. In some embodiments, theplayer information reader952 comprises a biometric sensing device.
• In some embodiments, thewagering game machine910 can include a heat spreader to cool its electronic components. In some embodiments, the heat spreader includes IsoSkin™, which is available from Novel Concepts, Inc. In some embodiments, all or a portion of the wagering game machine'shousing912 includes IsoSkin™ or other suitable heat spreaders. The heat spreader can eliminate heat sinks and/or fans from some embodiments of the wagering game machine. In yet other embodiments, heat spreaders are disposed inside thehousing912 to dissipate heat generated by the machine's electronic components.
General
• This description describes numerous details about embodiments of the invention. However, some embodiments may be practiced without these specific details. In some instances, for sake of clarity, this description omits well-known circuits, structures and techniques. In this description, references to “one embodiment” or “an embodiment” mean that a feature is included in at least one embodiment of the invention. Furthermore, separate references to “one embodiment” do not necessarily refer to the same embodiment. Thus, the present invention can include any combination of embodiments described herein.
• This description does not, therefore, limit embodiments of the invention, which are defined only by the appended claims. Each of the embodiments described herein are contemplated as falling within the inventive subject matter, which is set forth in the following claims.

Claims (21)

1. A method comprising:

receiving a digital certificate from a mobile wagering game machine, wherein the digital certificate includes information indicating wagering games to which the mobile wagering game machine has access;

determining that the digital certificate is authentic;

selecting wagering game content and services that are available to the mobile wagering game machine, wherein the selecting is based on the information included in the digital certificate; and

transmitting some of the available wagering game content to the mobile wagering game machine.

2. The method ofclaim 1, wherein the information also indicates services available to the mobile wagering game machine.

3. The method ofclaim 1 further comprising:

determining that the digital certificate is not revoked and not expired.

4. The method ofclaim 3, wherein the determining that the digital certificate in not revoked includes querying another wagering game network device.

5. The method ofclaim 3, wherein the determining that the digital certificate in not revoked includes querying a locally stored copy of a revocation list.

6. The method ofclaim 1 further comprising:

determining that the digital certificate is expired;

requesting revocation of the digital certificate.

7. The method ofclaim 1, wherein the digital certificate complies with the X.509 standard.

8. The method ofclaim 1, wherein the authenticity of the digital certificate is determined using a public encryption key associated with a certificate authority.

9. A mobile wagering game machine comprising:

an initialization controller configured to initialize the mobile wagering game machine for operation;

a memory device including a digital certificate, wherein the digital certificate includes information identifying wagering game content that the mobile wagering game machine has permission to access; and

a wagering game unit configured to present wagering games using the wagering game content.

10. The mobile wagering game machine ofclaim 9, wherein the digital certificate conforms to the X.509 standard.

11. The mobile wagering game machine ofclaim 9, wherein the initialization controller is configured to receive a boot record and the digital certificate over a physically secure wired network.

12. The mobile wagering game machine ofclaim 9, wherein the digital certificate also includes information identifying services that the mobile wagering game machine has permission to access.

13. The mobile wagering game machine ofclaim 9 further comprising:

a secure store configured to securely store a private encryption key and the digital certificate.

14. The mobile wagering game machine ofclaim 13, wherein the secure store includes a trusted platform module.

15. A system comprising:

a digital certificate server configured to distribute a digital certificate;

a mobile wagering game machine configured to receive the digital certificate, wherein the digital certificate includes information identifying wagering game content available to the mobile wagering game machine, and to provide the digital certificate for authentication, and to present wagering games based on wagering game content;

a wagering game server configured to authenticate the mobile wagering game machine based on the digital certificate, to select wagering game content based on the digital certificate's information identifying wagering game content available to the mobile wagering game machine, and to deliver the wagering game content to the mobile wagering game machine.

16. The system ofclaim 15, wherein the mobile wagering game machine is further configured to receive a nonce from the wagering game server, and to transmit to the wagering game server a hash encrypted with a private key, wherein the private key is associated with the digital certificate.

17. The system ofclaim 15, wherein the wagering game server is further configured to select the wagering game content based on information in the digital certificate.

18. The system ofclaim 15, wherein the digital certificate includes information indicating services to be accessible the mobile wagering game machine.

19. The system ofclaim 15, wherein the digital certificate conforms to the X.509 standard.

20. The system ofclaim 15, wherein the digital certificate server includes a list of revoked digital certificates.

21. The system ofclaim 15, wherein the wagering game server is further configured to request that the digital certificate server include the digital certificate on a list of revoked digital certificates.

Images