Electronic gaming apparatus with authentication

Abstract

A gaming machine is provided with a cabinet, at least one user-interface button, a value-receiving mechanism associated with the cabinet, a display unit associated with the cabinet, a processor disposed in the cabinet, system software representing a game that may be played by a player, encoded data generated from at least one message digest that was generated based on using an encoding function with the system software, loading software stored in memory that loads system software into random-access memory and verifies correctness and authenticity of the system software, and operating system (OS) software stored in memory that comprises an application programming interface including an application programming interface portion that provides a software interface to the display unit.

Description

BACKGROUND

[0002] This patent is directed to an electronic gaming machine of the type used in a casino.

[0003] Electronic gaming machines have long been provided for playing casino-type games such as roulette, poker, bingo, keno, lotto and various other games, and have historically been constructed in a slot machine format typically including a pay board wherein the winning pay-out combinations are displayed; a play section in which electronic or mechanical reels, card-playing indicia or other gaming objects are displayed; and a third area in which a player interface is provided by means of an assortment of buttons, switches, etc. More modern gaming machines have included a video display screen (CRT tube) that is driven by an image generator coupled to a microprocessor that serves as the game controller. In such video implementations, standard television-style cathode ray tubes have normally been used, and electronically generated reels, cards and other objects have been depicted thereon for implementing play of the game.

SUMMARY OF THE INVENTION

[0004] In one aspect, the invention is directed to a gaming machine comprising a cabinet, at least one user-interface button, a value-receiving mechanism associated with the cabinet, a display unit associated with the cabinet, and a processor disposed in the cabinet and operatively coupled to the user-interface button, the value-receiving mechanism and the display unit. The gaming machine additionally comprises a read-only memory disposed in the cabinet, basic input/output system (BIOS) software stored in the read-only memory, a nonvolatile memory capable of storing critical system data, critical data storage software that causes critical system data to be stored in the nonvolatile memory, read/write memory disposed in the cabinet and operatively coupled to the processor, and system software stored in the read/write memory that comprises software representing a game that may be played by a player.

[0005] The gaming machine further comprises encoded data stored in the read/write memory having been generated from at least one message digest that was generated based on using an encoding function with the system software, loading software stored in memory that loads system software from the read/write memory into random-access memory and verifies correctness and authenticity of the system software based on a comparison of data generated from the encoded data and data generated from the system software, and operating system (OS) software stored in memory that comprises an application programming interface including an application programming interface portion that provides a software interface to the display unit.

[0006] Additional aspects of the invention are defined by the claims of the patent.

BRIEF DESCRIPTION OF THE DRAWINGS

[0007] FIG. 1 is a perspective view illustrating a gaming machine in accordance with the present invention;

[0008] FIG. 2 depicts a typical screen display in accordance with the present invention;

[0009] FIG. 3 is a functional block diagram illustrating the principal functional components used in the gaming machine of the present invention; and

[0010] FIGS. 4, 5 and 6 are diagrams generally illustrating software architecture and features of the preferred embodiment.

DETAILED DESCRIPTION OF VARIOUS EMBODIMENTS

[0011] A preferred embodiment of the present invention is depicted at 10 in FIG. 1 and includes a more or less rectangularly configured cabinet 12 forming an enclosure for the various functional mechanical, electrical and electronic components. The front face 14 of cabinet 12 is uniquely configured to include as the principal component thereof a video display screen 16 disposed in portrait format with its vertical dimension being substantially larger than its horizontal dimension. As is apparent from the illustration, the screen 16 occupies a substantial part of the front face of the device 10. Positioned to the right of screen 16 is a currency input section 18 including a coin-receiving slot 20, a paper money-receiving slot 22, and a credit/debit card slot 24. A pair of buttons 23 and 25 may be provided for allowing the player to select a “cash” or “credit” mode for payout of winnings.

[0012] Disposed beneath screen 16 and at the bottom of the front face is a coin drop receptacle 26. Immediately above the coin drop receptacle are a pair of high-quality audio speakers 28 and 30. Above screen 16 is an annunciator 32 including a third high-quality audio speaker or signal generator 34 and a multi-colored, multi-light display apparatus 36. Disposed immediately beneath screen 16 on a slightly protruding shelf 38 are a plurality of user interface buttons 40 that are of conventional configuration. Formed integral with the front face of display screen 16 is a transparent touch screen that is dynamically configurable to allow manual user inputs at screen positions determined by the software associated with the particular game or attract mode being presented.

[0013] On the right side of cabinet 12 is a conventional pull handle 39 that may be optionally used as a part of the user interface to the gaming apparatus.

[0014] The cabinet 12 was designed to coincide with the overall dimensions of traditional slot machines so that the device can be placed in existing casino carousels without requiring reconfiguration of the stands or machine layouts. The right side of the cabinet forms a compartment for containing currency input devices such as coin and bill acceptors, a card reader, keypad, and perhaps a display for a player tracking network interface. A locked service door 41 forms the right side wall of the cabinet and allows access to the currency components in this section. The front 43 of the lower section of the enclosure contains a coin hopper (a cache of coins that is used to pay out the player's winnings when playing in cash mode). The back of the lower section of the cabinet (behind the hopper) contains a CPU box with all of the associated electronics and power supplies. A locked service door allows access to the hopper in this section.

[0015] Player tracking network electronics are located in the top of the system and are accessed by removing a top cover (not shown).

[0016] The cabinet layout, which is more or less traditional for video-type slot machines, leaves a tall and narrow section at the upper left for the CRT that forms the display screen 16. To maximize the screen area in the available space, a 26″, wide screen CRT display device rotated 90° into a “portrait mode” is used with the screen origin at the bottom left corner, and the image scanned from left to right. For purposes of this disclosure “portrait mode” is defined as a display configuration in which a display screen has a height dimension that is substantially larger than its width dimension. The wide screen CRT has a 16×9 (height to width) aspect ratio and a 0.69 mm dot pitch allowing for an 856×480 visible display area. Portrait mode configured display screens or CRTs having other aspect ratios may also be used. For example, although less desirable, a standard 4×3 CRT monitor rotated into a portrait mode could be used.

[0017] When operating in a game play mode, the display screen may be electronically subdivided into three arbitrarily sized regions: an upper region 15 in which a pay board will be displayed, setting forth the jackpot payouts as a function of the coins input; a mid region 17 in which a game board, play reels, card hands, or other game play indicia is displayed; and a lower region 19 in which touch screen “buttons” are displayed for facilitating player selection of various input functions such as “hold,” “bet 1,” “draw,” etc. One example of a “3-way” screen configuration is illustrated in FIG. 2. Depending on the particular game being played, the dimensions of these regions may change. Furthermore, the configuration of the touch screen responsive areas within each region may likewise change to correspond to associated graphics displayed in one ore more of the regions. Moreover, in “attract mode” the screen may be subdivided into a geometrically grid of regions, e.g., a 2×4 or 2×6 (etc.) grid in which passive or active game logos may be simultaneously displayed for selection by a player. In such mode the touch screen would typically be configured to call up the game corresponding to the logo touched by the player.

[0018] An integrated touch screen overlaying the display screen, along with the series of “hard” buttons 40 arrayed along the bottom edge of the display, provide the main player interface to the system.

[0019] In FIG. 3 of the drawing, a generalized block diagram depicts the principal functional components of the system and includes a central processing unit (CPU) 45, the CRT 16, a user interface 42 that includes the touch screen buttons 40 and pull handle 39, a video storage subsystem 44, an audio storage subsystem 46, a disk storage subsystem 48, a peripheral memory subsystem 50, an annunciator and sound system 52, a network I/O 54, a card reader 56, a coin handler 58, and a bill reader 60. In the preferred embodiment, CPU 45 is a 133 MHz Pentium processor using a combination of the DUCK video Codec for motion video, A-RL (Alpha Run-Length) decoding of static graphics, and software compositing for the individual elements.

[0020] Although not shown in detail herein, the system includes a motherboard, a PCI-based video board and SCSI controller, a peripheral memory board, a general purpose input/output (GPIO) board, a power transformer, a disk drive, and a CPU power supply. The peripheral memory board is installed on the mother board PCI bus and is used to replace the BIOS ROMs of the standard PC architecture. Whereas on the standard mother boards the PCI-to-ISA bridge (PIB) chip provides the interface to the system BIOS ROMs by subtractive decoding of PCI accesses in the normal PCI BIOS range and its high-memory aliases, the peripheral memory board in the preferred embodiment responds to accesses to the BIOS address range using positive decoding, responding to the requested cycles before the PIB chip responds. This allows the ROM-based BIOS and OS to reside at these locations without modifying the mother board.

[0021] In addition, the peripheral memory board provides a removable subsystem containing all of the machine states, thereby allowing secure system auditing. The peripheral memory board contains 1 MB of EPROM to hold the BIOS and OS (including the secure loader described below), 64 KB of nonvolatile RAM to implement a SafeStore system, and 128 KB of electrically erasable PROM (EEPROM) to store the system configuration.

[0022] A peripheral memory controller performs byte-assembly and disassembly on memory reads/writes and parity generation on the PCI reads.

[0023] The preferred embodiment exhibits total immunity to Electric-Static Discharge (ESD) to a level of 27 KV. The requirement for this level of ESD immunity is an artifact of low humidity and prevalence of synthetic materials (carpeting, etc.) in Nevada casinos. All standard mother boards support an IEEE 1284 compatible parallel port, and such port provides the interface to the GPIO board. The GPIO board provides an electrically isolated interface to the external device ports and maps them to registers accessible through the mother board parallel port.

[0024] The system software is designed to address the unique requirements of casino gaming machines, including high reliability and security, fault detection and recovery, and responsive performance. The system software architecture is illustrated in FIG. 4.

[0025] A pSOS real-time operating system serves as the basis for the software platform of the preferred embodiment. This pSOS system consists of a multi-tasking kernel, the pREPC, ANSI-C, run-time library function, and a driver support library to access physical devices through a set of device drivers. The run-time Application Programming Interface (API) is a layer of system software providing a set of standard functions that application programmers develop to. Because the API provides a layer of abstraction between the applications and the hardware, the applications are not affected if the hardware or lower level system software are modified. The API is divided into a series of managers, each of which provides either access to some physical device or provides some set of services for the programmer. Examples of these managers are shown in the table illustrated in FIG. 5.

[0026] The system applications include a Navigator, Play Stoppage, a suite of games, and the Machine Management System. The Navigator presents the player with an animated icon of each game. The animation describes the key features of the game; users enter a game by touching its icon. Each game is a custom application offering a specific set of propositions to the player. Each game is accompanied by on-line help that describes the rules of play, general disclaimers for the game, and so on. Play Stoppage is an application that runs short animations or video segments that entertain the player if a system fault occurs, while communicating information about why a game was interrupted and when it will be returned to play. The Machine Management System (MMS) provides a graphical interface to all technical support functions of the slot machine. This includes player conflict resolution, accounting, product configuration, and machine diagnostics.

[0027] As described in detail in the above-referenced U.S. patent application Ser. No. 08/497,662, before software can be loaded from the hard disk, it must be verified as being an authentic proprietary product. A secure loader is the system software component that loads executable files from the disk subsystem into RAM, verifies that the contents are correct, and then executes the image. The secure loader is based on the use of two-key cryptographic authentication from RSA Data Security, Inc. of Redwood City, Calif.

[0028] When a software release is ready for shipment, a HASH function designed for cryptographic use generates a unique fixed-length string of 128 bits for the loadable code image. This string, called a message digest, is then encrypted using RSA software and the proprietor's private key to produce a digital signature for the image. The signature is then written to disk with the loadable code image. When the code image is loaded from the disk and is ready to be executed during the system boot sequence, the secure loader decrypts the digital signature using the public key stored in ROM. The secure loader verifies that the image is authentic by comparing the message digest computed for the loadable code image with the message digest decrypted from disk. The software can be authenticated at any time since the console diagnostics include tools that allow the operator to query all loadable applications and run the RSA verification algorithm on them on demand. The authentication process is not limited to just software images. Graphics files or any binary data set can be authenticated. Because the graphics images are so large, they are not verified every time a game is loaded. If needed, critical graphic images such as the faces of cards can be verified before initial use in a game.

[0029] A SafeStore application provides fault-tolerant storage for critical system data called safe objects stored in system nonvolatile SRAM. To facilitate recovery of information after a crash or system failure, state information about each safe object along with the object data is saved in an internal format known as a binary large object (BLOB). To protect against hardware or software faults corrupting SafeStore, all safe objects are mirrored across two independent nonvolatile SRAMs. If corruption occurs by hard or soft failures to indicate locations in SRAM, or if complete SRAM failures occur, SafeStore will detect this corruption and recover the data.

[0030] FIG. 6 depicts a BLOB in SafeStore with all of the important BLOB header fields. The data check sum fields 0 and 1 contain the check sums of the data in data areas 0 and 1, respectively. The active data area pointer field indicates that data area 0 contains the latest data written to SafeStore. The BLOB header check sum field contains a check sum of the BLOB header, including the data area check sums and the data area pointer. During a SafeStore update, the BLOB header is read into main memory where the header check sum is computed and checked against the value of the header check sum field. If the check sum does not match, the system will tilt. Assuming it matches, the new data is copied into the inactive data area. The copy of the BLOB header in main memory is updated with the check sum of the new data; the active data area pointer is updated to point to the data area 1; and the new header check sum is computed and written to SafeStore.

[0031] Although the present invention has been described above in terms of specific embodiments, it is anticipated that alterations and modifications thereof will no doubt become apparent to those skilled in the art. For example, it is contemplated that video screens formed by other apparatus such as liquid crystal displays, field emission displays, interference element displays, projection TV, and perhaps holographic and other display technology may be used in place of the CRT device presently used in the preferred embodiment. Furthermore, other cabinet configurations and designs may be used to support a large portrait-mode display screen, and whereas the preferred embodiment utilizes a single means to form the display screen, it is contemplated that a similar result may be achieved by using a plurality of contiguous display devices synchronously driven to display different portions of a common image.

Claims

1. A gaming machine, comprising: a cabinet; at least one user-interface button; a value-receiving mechanism associated with said cabinet; a value-dispensing mechanism associated with said cabinet; a video display unit associated with said cabinet; a touch-sensitive device associated with said video display unit; a processor disposed in said cabinet and operatively coupled to said user-interface button, said value-receiving mechanism, said video display unit and said touch-sensitive device; a read-only memory disposed in said cabinet; basic input/output system (BIOS) software stored in said read-only memory; a nonvolatile memory capable of storing critical system data; critical data storage software that causes critical system data to be stored in said nonvolatile memory; disk memory disposed in said cabinet and operatively coupled to said processor; system software stored in said disk memory, said system software comprising: a first software portion representing a first game that may be played by a player; a second software portion representing a second game that may be played by a player; and a third software portion that causes a first icon representing said first game and a second icon representing said second game to be generated on said video display unit, said third software portion causing one of said first and second games to be initiated in response to a player touching one of said first and second icons; encoded data stored in said disk memory, said encoded data having been generated from at least one message digest that was generated based on using an encoding function with said system software; secure loading software stored in memory that loads system software from said disk memory into random-access memory and verifies correctness and authenticity of said system software, said secure loading software verifying correctness and authenticity of said system software based on a comparison of data generated from said encoded data and data generated from said system software; and operating system (OS) software stored in memory, said operating system software comprising an application programming interface including a first application programming interface portion that provides a software interface to said video display unit and a second application programming interface portion that provides a software interface to said touch-sensitive device, wherein said encoded data comprises data that was generated by encrypting at least one message digest that was generated based on using a Hash function on said system software, and wherein said secure loading software verifies correctness and authenticity of said system software based on a comparison of data generated by decoding said encoded data and at least one message digest generated from said system software.

2. A gaming machine as defined in claim 1 wherein said value-receiving mechanism comprises a coin-receiving slot.

3. A gaming machine as defined in claim 1 wherein said value-receiving mechanism comprises a paper money-receiving slot.

4. A gaming machine as defined in claim 1 wherein said value-receiving mechanism comprises a credit/debit card slot.

5. A gaming machine as defined in claim 1 wherein said value-dispensing mechanism comprises a coin hopper.

6. A gaming machine, comprising: a cabinet; at least one user-interface button; a value-receiving mechanism associated with said cabinet; a display unit associated with said cabinet; a processor disposed in said cabinet and operatively coupled to said user-interface button, said value-receiving mechanism and said display unit; a read-only memory disposed in said cabinet; basic input/output system (BIOS) software stored in said read-only memory; a nonvolatile memory capable of storing critical system data; critical data storage software that causes critical system data to be stored in said nonvolatile memory; read/write memory disposed in said cabinet and operatively coupled to said processor; system software stored in said read/write memory, said system software comprising software representing a game that may be played by a player; encoded data stored in said read/write memory, said encoded data having been generated from at least one message digest that was generated based on using an encoding function with said system software; loading software stored in memory that loads system software from said read/write memory into random-access memory and verifies correctness and authenticity of said system software, said loading software verifying correctness and authenticity of said system software based on a comparison of data generated from said encoded data and data generated from said system software; and operating system (OS) software stored in memory, said operating system software comprising an application programming interface including an application programming interface portion that provides a software interface to said display unit.

7. A gaming machine as defined in claim 6 wherein said encoded data was generated from at least one message digest that was generated based on using a Hash function with said system software.

8. A gaming machine as defined in claim 6 wherein said encoded data comprises data that was generated by encrypting at least one message digest that was generated based on using a Hash function on said system software.

9. A gaming machine as defined in claim 6 wherein said loading software verifies correctness and authenticity of said system software based on a comparison of data generated by decoding said encoded data and at least one message digest generated from said system software.

10. A gaming machine as defined in claim 6, wherein said encoded data was generated by encrypting at least one message digest that was generated from said system software, and wherein said loading software verifies correctness and authenticity of said system software based on a comparison of data generated by decrypting said encoded data and at least one message digest generated from said system software.

11. A gaming machine as defined in claim 6 wherein said value-receiving mechanism comprises a coin-receiving slot.

12. A gaming machine as defined in claim 6 wherein said value-receiving mechanism comprises a paper money-receiving slot.

13. A gaming machine as defined in claim 6 wherein said value-receiving mechanism comprises a credit/debit card slot.

14. A gaming machine as defined in claim 6 wherein said read/write memory comprises a disk memory.