Patent Grant
8721457
The present invention relates to interactive gambling in general, and in particular to interactive gambling for use with interactive television (ITV).
Interactive gambling applications, including interactive gambling applications for use with interactive television (ITV), are known in the art. One such system is described in published PCT Patent Application WO 99/39312, assigned to NDS Ltd.
Some aspects of technologies and related art that may be useful in understanding the present invention are described in the following publications:
The disclosures of all references mentioned above and throughout the present specification are hereby incorporated herein by reference.
The present invention, in preferred embodiments thereof, seeks to provide apparatus and method for carrying out secure offline interactive gambling. The term “gambling” is used throughout the specification and claims in a broad sense to include any type of activity or gaming that involves, at least partially, chance, particularly but not necessarily, activity or gaming that results in winning or losing prizes, money, benefits or equivalents thereof.
The term “interactive gambling” is used throughout the specification and claims to refer to any form of gambling in which a gambler makes interactive decisions and selections while gambling. For example and without limiting the generality of the foregoing, the term “interactive gambling” includes participating in gambling games such as “Blackjack” and “Poker” in which the gambler draws playing cards and responds to game challenges. It is appreciated that secure offline interactive gambling, in certain preferred embodiments of the present invention, may especially be useful in interactive television (ITV) gambling applications.
In general, as described in more detail below, the present invention, in preferred embodiments thereof, makes use of three cooperating components: an offline interactive gambling application; a re-executed version of the offline interactive gambling application; and a secure processor. The term “re-execute” in all of its grammatical forms in association with an application is used throughout the specification and claims to refer to a repeated execution of the very same application or a portion thereof, or to execution of a corresponding verification application that provides results identical, or substantially identical, to results obtained by execution of the application.
The offline interactive gambling application is preferably executed in order to enable a user to gamble. Interaction of the user while the offline interactive gambling application is executed is considered insecure because the user may try to tamper with the application. Therefore, the secure processor is used to randomly or pseudo-randomly generate gambling input to the offline interactive gambling application during execution of the offline interactive gambling application. The secure processor also preferably securely stores information related to the execution of the offline interactive gambling application. The information may preferably include a log of the gambling input as well as a log of user selections made in response to the gambling input. This information, which is securely stored and which the user preferably cannot modify, can be used to derive at least one result of the offline interactive gambling application.
After execution of the offline interactive gambling application, the user may be locally notified by the offline interactive gambling application of the at least one result. However, the at least one result is not considered to be final until the information is validated. Therefore, the information stored in the secure processor is transmitted to a secure verification component situated, for example and without limiting the generality of the foregoing, in a central gambling facility such as a headend. The secure verification component in the central gambling facility preferably re-executes the offline interactive gambling application with the information received from the secure processor replacing the gambling input actually generated and the user selections actually entered. The offline interactive gambling application re-executed in such a form is the re-executed version of the offline interactive gambling application and it is typically a secure application.
Through re-execution of the offline interactive gambling application the central gambling facility preferably securely derives and determines the at least one result of the offline interactive gambling application. The central gambling facility may also preferably determine winnings or losses of the user based on the at least one result, and the user may receive from the central gambling facility a validated notice of the at least one result and be credited or debited in response to a determination of the winnings or losses respectively.
There is thus provided in accordance with a preferred embodiment of the present invention a secure offline interactive gambling system including: a subscriber unit operative, through interaction with a user, to execute an offline interactive gambling application, a secure processor operatively associated with the subscriber unit and including: a random gambling input generator operative to randomly or pseudo-randomly generate gambling input to the offline interactive gambling application during execution of the offline interactive gambling application, and a secure memory operatively associated with the random gambling input generator and operative to securely store information related to the execution of the offline interactive gambling application, the information including information from which at least one result of the offline interactive gambling application can be derived, and a central gambling facility operative to receive the information from the secure processor, to check the information and to decide the at least one result of the offline interactive gambling application.
The information related to the execution of the offline interactive gambling application may preferably includes a log of at least some or all user selections made in response to the gambling input during execution of the offline interactive gambling application. The information related to the execution of the offline interactive gambling application may also preferably include a log of at least some or all of the gambling input generated by the random gambling input generator during execution of the offline interactive gambling application.
Additionally, the system may also preferably include a communication interface operatively associated with the subscriber unit and the secure processor and operative to securely transmit the information related to the execution of the offline interactive gambling application to the central gambling facility. The communication interface is also preferably operative to receive indications of credit or debit.
Preferably, the subscriber unit includes a set-top box (STB) and the secure processor is included in a removable security element. The removable security element preferably includes a smart card.
The offline interactive gambling application preferably includes a game that is at least partially based on chance. The game preferably includes at least one of the following: a game of Poker, a game of Blackjack, and a Roulette game.
Preferably, the central gambling facility is included in a headend. The central gambling facility is preferably operative to check the information and to decide the at least one result by re-executing the offline interactive gambling application with the information replacing the gambling input and user selections made in response to the gambling input.
Preferably, the central gambling facility re-executes the offline interactive gambling application by performing at least one of the following: a repeated execution of a portion of the offline interactive gambling application, a repeated execution of the entire offline interactive gambling application, and execution of a corresponding verification application that provides results substantially identical to results obtained by execution of the offline interactive gambling application.
The central gambling facility preferably re-executes the offline interactive gambling application in a secure mode.
There is also provided in accordance with a preferred embodiment of the present invention a central gambling facility in a gambling system, the central gambling facility including: a central gambling facility communication interface operative to receive from a secure processor associated with a subscriber unit of the gambling system information including the following: gambling input randomly or pseudo-randomly generated for an offline interactive gambling application during execution of the offline interactive gambling application, and user selections made by a user in response to the gambling input during execution of the offline interactive gambling application, and a processing unit operatively associated with the central gambling facility communication interface and operative to check the information and to derive from the information at least one result of the offline interactive gambling application.
The processing unit is preferably operative to check the information and to derive the at least one result by re-executing the offline interactive gambling application with the information replacing the gambling input and the user selections. Preferably, the processing unit re-executes the offline interactive gambling application by performing at least one of the following: a repeated execution of a portion of the offline interactive gambling application, a repeated execution of the entire offline interactive gambling application, and execution of a corresponding verification application that provides results substantially identical to results obtained by execution of the offline interactive gambling application.
The processing unit preferably re-executes the offline interactive gambling application in a secure mode.
Preferably, the processing unit is also operative to determine winnings or losses of the user resulting from execution of the offline interactive gambling application. The processing unit is also preferably operative to generate indications of credit or debit for the user in response to a determination of the winnings or losses respectively and to respectively provide the indications of credit or debit to the secure processor.
Further in accordance with a preferred embodiment of the present invention there is also provided a secure offline interactive gambling method including: executing an offline interactive gambling application, randomly or pseudo-randomly generating gambling input to the offline interactive gambling application during execution of the offline interactive gambling application, securely storing information related to the execution of the offline interactive gambling application, the information including information from which at least one result of the offline interactive gambling application can be derived, securely transmitting the information related to the execution of the offline interactive gambling application to a central gambling facility, checking the information at the central gambling facility, and deciding, at the central gambling facility, the at least one result of the offline interactive gambling application based on the checking.
The checking and the deciding preferably include re-executing the offline interactive gambling application with the information replacing the gambling input and user selections made in response to the gambling input. The re-executing preferably includes at least one of the following: repeating execution of a portion of the offline interactive gambling application, repeating execution of the entire offline interactive gambling application, and executing a corresponding verification application that provides results substantially identical to results obtained by execution of the offline interactive gambling application.
The re-executing also preferably includes re-executing the offline interactive gambling application in a secure mode.
Preferably, the securely storing includes securely storing a log of some or all user selections made in response to the gambling input during execution of the offline interactive gambling application. The securely storing also preferably includes securely storing a log of some or all of the gambling input generated during execution of the offline interactive gambling application.
Additionally, the method also includes determining at the central gambling facility, based on the at least one result, winnings or losses of a user resulting from execution of the offline interactive gambling application. Further, the method also includes generating indications of credit or debit for the user in response to a determination of the winnings or losses respectively and transmitting the indications of credit or debit to the user.
The method also preferably includes statistically analyzing the log to identify improbable winning rates indicating fraud in the execution of the offline interactive gambling application. The statistically analyzing preferably includes checking to identify a spike in winning rate of a single user or a plurality of users.
When the log is a fixed-length log and the information cannot be included in a single log, the method also preferably includes opening a new log when a preceding log associated with the offline interactive gambling application reaches it end, the new log having a log identity which is identical to a log identity of the preceding log.
Still further in accordance with a preferred embodiment of the present invention there is provided a secure offline interactive gambling system including: a subscriber unit operative to insecurely store an offline interactive gambling application including all rules governing execution of the offline interactive gambling application, and, through interaction with a user, to execute the offline interactive gambling application, and a secure processor operatively associated with the subscriber unit and including: a random gambling input generator operative to randomly or pseudo-randomly generate gambling input to the offline interactive gambling application during execution of the offline interactive gambling application, and a secure memory operatively associated with the random gambling input generator and operative to securely store information related to the execution of the offline interactive gambling application, the information including information from which at least one result of the offline interactive gambling application can be derived.
Preferably, the information related to the execution of the offline interactive gambling application includes a log of at least some or all user selections made in response to the gambling input during execution of the offline interactive gambling application. The information related to the execution of the offline interactive gambling application also preferably includes a log of at least some or all of the gambling input generated by the random gambling input generator during execution of the offline interactive gambling application.
Additionally, the system includes a communication interface operatively associated with the subscriber unit and the secure processor and operative to securely transmit the information related to the execution of the offline interactive gambling application. The communication interface is also preferably operative to receive indications of credit or debit.
Preferably, the subscriber unit includes a set-top box (STB) and the secure processor is included in a removable security element. The removable security element preferably includes a smart card.
Preferably the offline interactive gambling application includes a game that is at least partially based on chance. The game preferably includes at least one of the following: a game of Poker, a game of Blackjack, and a Roulette game.
The system also preferably includes a central gambling facility operative to check the information and to decide the at least one result of the offline interactive gambling application. The central gambling facility is preferably operative to check the information and to decide the at least one result by re-executing the offline interactive gambling application with the information replacing the gambling input and user selections made in response to the gambling input. The central gambling facility preferably re-executes the offline interactive gambling application by performing at least one of the following: a repeated execution of a portion of the offline interactive gambling application, a repeated execution of the entire offline interactive gambling application, and execution of a corresponding verification application that provides results substantially identical to results obtained by execution of the offline interactive gambling application.
Preferably, the central gambling facility re-executes the offline interactive gambling application in a secure mode.
Further in accordance with a preferred embodiment of the present invention there is provided a secure offline interactive gambling method including: insecurely storing an offline interactive gambling application including all rules governing execution of the offline interactive gambling application, executing the offline interactive gambling application through interaction with a user, randomly or pseudo-randomly generating gambling input to the offline interactive gambling application during execution of the offline interactive gambling application, and securely storing information related to the execution of the offline interactive gambling application, the information including information from which at least one result of the offline interactive gambling application can be derived.
Preferably, the securely storing includes securely storing a log of at least some or all user selections made in response to the gambling input during execution of the offline interactive gambling application. The securely storing also preferably includes securely storing a log of at least some or all of the gambling input generated during execution of the offline interactive gambling application.
Additionally, the method also preferably includes securely transmitting the information related to the execution of the offline interactive gambling application. Further, the method also includes receiving indications of credit or debit.
Preferably, the offline interactive gambling application includes a game that is at least partially based on chance. The game preferably includes at least one of the following: a game of Poker, a game of Blackjack, and a Roulette game.
The method also preferably includes checking the information and deciding the at least one result of the offline interactive gambling application at a central gambling facility. The checking and the deciding preferably include re-executing the offline interactive gambling application with the information replacing the gambling input and user selections made in response to the gambling input. The re-executing preferably includes at least one of the following: repeating execution of a portion of the offline interactive gambling application, repeating execution of the entire offline interactive gambling application, and executing a corresponding verification application that provides results substantially identical to results obtained by execution of the offline interactive gambling application.
Preferably, the re-executing includes re-executing the offline interactive gambling application in a secure mode.
The present invention will be understood and appreciated more fully from the following detailed description, taken in conjunction with the drawings in which:
Appendix A is an example of a sequence representing a play of a Black jack application in the system of
Reference is now made to
The gambling system 10 may especially be useful in enabling the use of interactive television (ITV) gambling applications that may preferably include secure offline interactive gambling applications such as games that are at least partially based on chance, as described below. Therefore, the gambling system 10 is shown by way of example in
The gambling system 10 preferably includes a central gambling facility that may, for example and without limiting the generality of the description, be located at or comprised in a headend 20 that provides television services to the users. The headend 20 preferably communicates with a plurality of subscriber units 30, but for simplicity and without limiting the generality of the foregoing, only one subscriber unit 30 is depicted in
Each subscriber unit 30 preferably includes a set-top box (STB) 40 that is operatively associated with a television 50 and is electrically powered via a wall outlet (not shown). The STB 40 may preferably receive television transmissions from the headend 20, preferably via an outlet 60 of a radio frequency (RF) antenna or a coaxial cable feed (both not shown) as is well known in the art.
Preferably, the STB 40 may transmit to the headend 20, preferably via a communication interface 70, upstream transmissions related to an offline interactive gambling application executed by the STB 40. The STB 40 may also receive from the headend 20, preferably via the communication interface 70, downstream transmissions related to or in response to the upstream transmissions.
In a case where the television transmissions are provided via satellite and received by the RF antenna, the downstream transmissions may also be provided via satellite. In such a case, the communication interface 70 may preferably use a telephone link of a telephone network for transmitting the upstream transmissions related to the offline interactive gambling application to the headend 20. Alternatively, the telephone link may also be used for transmitting the downstream transmissions from the headend 20 to the STB 40. Further alternatively, the communication interface 70 may use a VSAT (Very Small Aperture Terminal) link for transmitting the upstream transmissions related to the offline interactive gambling application to the headend 20.
In a case where the television transmissions are provided via coaxial cables and the coaxial cable feed enables two-way communication over the coaxial cables, the television transmissions, the upstream transmissions, and the downstream transmissions may all be communicated over the coaxial cables. In such a case, the communication interface 70 may preferably use the coaxial cable feed for the upstream and downstream transmissions. Cable systems allowing two-way communication are well known in the art.
By way of example, in the embodiment depicted in
The upstream transmissions received via the communication interface 100 are preferably processed by a processing unit 110 in the headend 20 that operates, inter alia, as a secure verification component.
The subscriber unit 30 is preferably operated by a user 120 who may be, for example, a subscriber of television services received from the headend 20. The user 120 may preferably operate the subscriber unit 30 by interacting with the subscriber unit 30 via a user interface such as a remote control 130.
Preferably, the subscriber unit 30 executes, through interaction with the user 120, the offline interactive gambling application. In this respect, it is noted that the offline interactive gambling application including all rules governing execution of the application is preferably downloaded to the subscriber unit 30 before execution of the application and stored in the subscriber unit 30 in anticipation for execution. The offline interactive gambling application including the rules governing execution of the application being downloaded to the subscriber unit 30 and stored therein is preferably insecure. A memory (not shown) in the subscriber unit 30 in which the offline interactive gambling application including the rules governing execution of the application is stored is also preferably insecure. The reason why the memory and the offline interactive gambling application including the rules governing execution of the application are insecure is that security is maintained through cooperation with the headend 20 as described below.
Preferably, the user 120 interacts with the subscriber unit 30 to respond to gambling input generated during execution of the offline interactive gambling application as further described below.
The STB 40 may preferably be associated with a secure processor 140 that may preferably be implemented in a conventional security element. The security element may be comprised in the STB 40 or alternatively implemented in a removable form such as, for example, in a conventional smart card as is well known in the art. When associated with the STB 40, the secure processor 140 cooperates with the subscriber unit 30 in execution of the offline interactive gambling application and with the headend 20 as described below. By way of example and without limiting the generality of the foregoing, the secure processor 140 is implemented in a smart card in the embodiment depicted in
Reference is now additionally made to
The secure processor 140 preferably includes a secure memory 200, a central processing unit (CPU) 210, and an input/output (I/O) interface 220. The CPU 210 preferably includes a random gambling input generator 230 and an authenticator 240. The random gambling input generator 230 is preferably operative to randomly or pseudo-randomly generate gambling input to the offline interactive gambling application during execution of the offline interactive gambling application by the subscriber unit 30. Random and pseudo-random generation circuitry, suitable for implementing the random gambling input generator 230, are well known in the art. Examples of algorithms for random and pseudo-random input generation and generators and principles of generators therefor are described in the Handbook of Applied Cryptography, by Alfred J. Menezes, Paul C. van Oorschot and Scott A. Vanstone, CRC Press LLC, 1997, Chapter 5, the disclosure of which is hereby incorporated herein by reference.
The secure memory 200 is preferably operatively associated with the random gambling input generator 230, for example via the authenticator 240. The secure memory 200 is preferably operative to securely store information related to the execution of the offline interactive gambling application.
The authenticator 240 may preferably associate a digital signature or another suitable proof of authenticity with the information before transmitting the information via the I/O interface 220 to the STB 40 in order to prevent tampering with the information. Association of a digital signature or another suitable proof of authenticity with the information may take place, for example, prior to storage of the information in the secure memory 200, or at retrieval of the information from the secure memory 200.
It is appreciated that the secure processor 140 is preferably designed, as is well known in the art, to be tamper resistant and to forbid changes to any of its internal elements except in accordance with appropriate external commands. Accordingly, it is considered that a user is not normally able to successfully tamper with the secure processor 140 or any of its internal elements.
The operation of the apparatus of
Cooperation among the headend 20, the subscriber unit 30 and the secure processor 140 is preferably implemented through the following three cooperating components: the offline interactive gambling application executed at the subscriber unit 30; a re-executed version of the offline interactive gambling application executed at the headend 20; and the secure processor 140. The re-executed version of the offline interactive gambling application preferably results from the headend 20 performing, through the processing unit 110, at least one of the following: a repeated execution of a portion of the offline interactive gambling application; a repeated execution of the entire offline interactive gambling application; and execution of a corresponding verification application that provides results identical, or substantially identical, to results obtained by execution of the offline interactive gambling application.
During execution of the offline interactive gambling application the user 120 is enabled to gamble interactively. Interaction of the user 120 during execution of the offline interactive gambling application is considered insecure because the user 120 may try to tamper with the application. Therefore, the secure processor 140 uses the random gambling input generator 230 to randomly or pseudo-randomly generate gambling input to the offline interactive gambling application during execution of the offline interactive gambling application. The gambling input is typically generated in accordance with gambling rules and instructions provided by the offline interactive gambling application resident in the subscriber unit 30. Since the secure processor 140 is tamper resistant, the user 120 is not normally able to successfully tamper with the gambling input generated by the secure processor 140 even if he succeeds in tampering with the offline interactive gambling application residing in the subscriber unit 30.
The user 120 preferably interacts with the offline interactive gambling application by, inter alia, responding to the gambling input through entering his decisions and selections via the remote control 130. The user decisions and selections are collectively referred to below as “user selections”. The user selections are normally entered during execution of the offline interactive gambling application.
The secure processor 140 also preferably uses the secure memory 200 to securely store information related to the execution of the offline interactive gambling application. The information preferably includes information from which at least one result of the offline interactive gambling application can be derived. In its basic form, the information may include a log of some of the user selections, or all the user selections. The information stored in the secure memory 200 may also preferably include a log of some of the gambling input, or all the gambling input, generated by the random gambling input generator 230 during execution of the offline interactive gambling application.
The number of logs that the secure memory 200 can hold may preferably be configurable by the headend 20. It is appreciated that the number of offline interactive gambling applications executable by the subscriber unit 30 is generally limited by the number of logs the secure memory 200 can hold.
Each log is preferably given a unique log identity by the secure processor 140. However, in a case where the information related to the execution of the offline interactive gambling application cannot be comprised in a single log and the logs are fixed-length logs, the secure processor 140 may preferably open a new log whenever a preceding log associated with the offline interactive gambling application reaches its end and additional information remains to be stored. In such a case, the new log is preferably given a log identity that is identical to a log identity of the preceding log.
It is appreciated that the secure processor 140 may also preferably delete, preferably under control of the headend 20, logs including information that has been indicated as related to cases in which execution of the offline interactive gambling application resulted in loss of the user 120 and thus clear such logs for reuse.
The following are, by way of example, some commands supported by the secure processor 140 for manipulating logs, generating the gambling input, and storing the information:
In a case where the offline interactive gambling application is terminated prematurely, the secure processor 140 preferably allows the offline interactive gambling application to read its logs and to continue a log from where it had previously been stopped.
It is appreciated that since, as mentioned above, the information is stored in the secure processor 140 that is tamper resistant, the user 120 cannot normally modify the information. Also, since the information is associated with a digital signature or another suitable proof of authenticity, the user cannot normally transmit falsified information to the headend 20 which the headend 20 will interpret as authentic and correct.
The secure processor 140 may also create one or more secure backups of logs stored thereat on other available local storage devices, such as a non-volatile random access memory (NVRAM) in the STB 40 or a hard disk in the STB 40 (both not shown). The secure backups of the logs may be used in a case where the secure processor 140 becomes inactive after the secure backups have been created. The secure backups may preferably be made secure, for example, by associating the information in the logs with a digital signature. The secure backups may preferably be used to ensure that the user 120 can still provide proof of his winnings to the headend 20 in the case where the secure processor 140 becomes inactive.
In accordance with a preferred embodiment of the present invention the offline interactive gambling application may be associated with an entitlement to execute the offline interactive gambling application. Such entitlement may, for example, be transmitted to the secure processor 140 from the headend 20 in an entitlement management message (EMM) as is well known in the art. In such a case, the secure processor 140 may preferably refuse to open a log for the offline interactive gambling application unless such entitlement exists. Alternatively, the entitlement may be generated at the secure verification component in the headend 20 and used to determine whether the secure verification component must process a log associated with execution of the offline interactive gambling application.
After execution of the offline interactive gambling application is completed, the user 120 may be locally notified by the offline interactive gambling application of the at least one result. Local notification of the at least one result is preferably based on the user selections and the gambling input as read from the secure memory 200 and is preferably performed by a processor (not shown) in the STB 40. In this respect it is noted that the local notification provided by the STB 40 is not secure and the secure processor 140 cannot typically process the information to verify the at least one result and provide a secure local notification of the at least one result.
Since the local notification of the at least one result is not sufficient to securely determine correctness of the at least one result, the at least one result is not considered to be final until the information from which the at least one result is derived is validated. For this purpose, the information stored in the secure processor 140 is preferably transmitted to the headend 20 via the communication interface 70 and the telephone network. Since the information is associated with a digital signature or another suitable proof of authenticity, transmission of the information to the headend 20 can be considered secure.
It is appreciated that in the absence of a communication link for upstream transmission of the information to the headend 20, the user 120 may send the secure processor 140 by mail to the headend 20 or physically take the secure processor 140 to a dealer (not shown) who has appropriate means (not shown) to transmit the information to the headend 20.
At the headend 20, the information arriving from the secure processor 140 is preferably received at the central gambling facility communication interface 100 and checked by the processing unit 110 to derive and determine the at least one result of the offline interactive gambling application. For this purpose, the processing unit 110 preferably re-executes the offline interactive gambling application with the information received from the secure processor 140 replacing the gambling input actually generated and the user selections actually entered. Preferably, the processing unit re-executes the offline interactive gambling application by performing at least one of the following: a repeated execution of ai portion of the offline interactive gambling application; a repeated execution of the entire offline interactive gambling application; and execution of a corresponding verification application that provides results identical, or substantially identical, to results obtained by execution of the offline interactive gambling application.
The offline interactive gambling application re-executed in such a form is the re-executed version of the offline interactive gambling application mentioned above and it is preferably a secure application that is performed in a secure mode.
The secure application is thus similar to the offline interactive gambling application except that instead of interactively getting a sequence of user selections in response to gambling input, the secure application reads the sequence of user selections and the gambling input from logs received from the secure processor 140.
Preferably, prior to, during, or after execution of the secure application the logs received from the secure processor 140 may be checked for validity by the processing unit 110. The processing unit 110 may preferably use any appropriate method, such as checking a digital signature as is well known in the art, to authenticate the logs received from the secure processor 140. In a case where some of the logs are invalid, the processing unit 110 preferably informs an operator of the headend 20 of the invalid logs that it encounters.
It is appreciated that invalid logs may indicate an attempt to compromise the security of the gambling system 10. The processing unit 110 may also preferably statistically analyze the logs, prior to, during or after execution of the secure application, to identify improbable winning rates indicating fraud in the execution of the offline interactive gambling application or a compromise of the security of the gambling system 10. In this respect it is noted that if invalid logs are found or improbable winning rates are detected measures may preferably be taken against suspect secure processors that provide such invalid logs or reach such improbable winning rates. Such measures may include, for example, disabling the ability of the suspect secure processors to execute any gambling application, or disabling the ability of the suspect secure processors to execute offline interactive gambling applications and retaining the ability of the suspect secure processors to execute online interactive gambling applications.
It is further appreciated that in performing a statistical analysis, the processing unit 110 may refer not only to the logs received from the secure processor 140 but also to logs received from many other secure processors. In such a case, an improbable winning rate may be determined, for example, by detecting a sudden spike in winning rate of a single user or a plurality of users. In a case where such an improbable winning rate is determined, all secure processors are preferably disabled from performing any offline interactive gambling applications, and only online interactive gambling applications are enabled in which execution integrity can be monitored by the headend 20. Enabling of offline interactive gambling applications may resume, for example, only after all the secure processors are replaced.
Preferably, the processing unit 110 reads and checks the logs according to their log identity. If the offline interactive gambling application resulted in more than one log, all logs of the same offline interactive gambling application, which in fact have the same log identity as mentioned above, may be processed together. It is appreciated that the processing unit 110 will not typically process a log that it has already processed before.
Through re-execution of the offline interactive gambling application the processing unit 110 is thus able to securely derive and validate the at least one result of the offline interactive gambling application. It is appreciated that if security of the gambling system 10 were to be based only on security of the secure processor 140 without the headend 20 securely deriving and validating the at least one result, any compromise of the secure processor 140 or secure processors of other users could not be monitored and coped with.
The processing unit 110 may also preferably determine, based on the at least one result, winnings or losses of the user 120 resulting from execution of the offline interactive gambling application. Additionally, the processing unit 110 may generate indications of credit or debit for the user 120 in response to a determination of the winnings or losses respectively.
The indications of credit or debit together with a validated notice of the at least one result may preferably be transmitted to the subscriber unit 30 via the communication interface 100 and the telephone network. At the subscriber unit 30, the indications of credit or debit and the validated notice of the at least one result are preferably received via the communication interface 70 and displayed to the user 120 over the television 50. The user 120 is then preferably credited or debited as necessary.
The operation of the apparatus of
In this example, the user 120 plays a Blackjack application on the television 50 by using the remote control 130. The Blackjack application is executed by the STB 40 and the secure processor 140 is the smart card that provides conditional access to all television services, including the Blackjack application.
Preferably, when the user 120 turns on the Blackjack application, the Blackjack application sends a Start_New Log command to the secure processor 140 along with, typically, a game-type identification. Whenever the user 120 makes a user selection, such as a request for “dealing” another card, the Blackjack application sends a Log_Decision command to the secure processor 140 with a value representing the user selection. Whenever the Blackjack application needs randomness to be revealed to the user 120, for example a value of cards dealt to the user 120, the Blackjack application preferably sends a Generate_Random command to the secure processor 140 which generates gambling input to which the user 120 is expected to respond. When the Blackjack application determines that the game is over, it informs the user 120 the result of the game.
At some later time, the secure processor 140 may securely transmit a log with all user selections and gambling input to the headend 20. Based on this log, the headend 20 preferably securely re-executes the Blackjack application and determines and validates the result of the game. Based on the result of the game, the user 120 is preferably credited or debited as necessary, for example, by respectively transmitting from the headend 20 a credit or debit signal to the secure processor 140. The headend 20 may also preferably transmit a command to the secure processor 140 to clear the log associated with the Blackjack application so that this log can be overwritten.
An example of a sequence representing a play of a Blackjack application is shown in Appendix A which is incorporated herein.
It is appreciated that offline interactive gambling applications enabled by the gambling system 10 can be considered secure when the offline interactive gambling applications use some element of randomness or pseudo-randomness. In applications in which there is no inherent randomness, randomness can be artificially added. For example, for an offline interactive gambling application that includes a chess game, the offline interactive gambling application may randomly select a move from among several possible logical moves on a chess board. Such random selection may preferably be at least partially dependent on a random value read from the secure processor 140.
In a case where the gambling system 10 includes another suitable gambling system such as a telephone gambling system that employs a GSM cellular telephone network, the secure processor 140 may be implemented in the SIM card of a cellular telephone, the offline interactive gambling application may be executed by the cellular telephone, and the secure application may be executed at premises of a provider of cellular telephone services.
Reference is now made to
An offline interactive gambling application is preferably executed (step 300) in a non-secure unit, such as an STB. Gambling input to the offline interactive gambling application is preferably randomly or pseudo-randomly generated in a secure unit such as a smart card during execution of the offline interactive gambling application (step 310). Then, information related to the execution of the offline interactive gambling application is preferably securely stored (step 320), where the information includes information from which at least one result of the offline interactive gambling application can be derived. The information may be stored as one or more logs, where each log may preferably include some or all of the gambling input and some user selections, or all user selections, made by a user in response to the gambling input during execution of the offline interactive gambling application.
Preferably, the information is securely transmitted (step 330) to a secure verification component situated, for example, in a central gambling facility that can check and validate the information. At the central gambling facility, the information is preferably checked and the at least one result of the offline interactive gambling application is determined by re-executing (step 340), preferably in a secure mode, the offline interactive gambling application with the information replacing the gambling input actually generated and the user selections actually entered. Re-execution of the offline interactive gambling application preferably includes at least one of the following: repeating execution of a portion of the offline interactive gambling application; repeating execution of the entire offline interactive gambling application; and executing a corresponding verification application that provides results identical, or substantially identical, to results obtained by execution of the offline interactive gambling application.
Based on a determination of the at least one result, winnings or losses of the user resulting from execution of the offline interactive gambling application are preferably determined (step 350). Then, in response to the determination of the winnings or losses, indications of credit or debit for the user may preferably be generated (step 360) and transmitted (step 370) to the user.
It is appreciated that various features of the invention which are, for clarity, described in the contexts of separate embodiments may also be provided in combination in a single embodiment. Conversely, various features of the invention which are, for brevity, described in the context of a single embodiment may also be provided separately or in any suitable subcombination.
It will be appreciated by persons skilled in the art that the present invention is not limited by what has been particularly shown and described hereinabove. Rather the scope of the invention is defined only by the claims which follow:
In this example, User represents the User, OFA represents the offline application, SP represents the secure processor and ONA represents the online application.
At this point, the log has the following information:
The present application is a 35 USC §371 application of PCT/IL02/01047, filed on 27 Dec. 2002 and titled “Secure Offline Interactive Gambling”, which was published on 17 Jul. 2003 in the English language with International Publication Number WO 03/058566 A2. The present application claims the benefit of the filing date of U.S. Provisional Patent Application Ser. No. 60/346,506, filed 7 Jan. 2002, and titled “Secure Offline Interactive Gambling”.
| Filing Document | Filing Date | Country | Kind | 371c Date |
|---|---|---|---|---|
| PCT/IL02/01047 | 12/27/2002 | WO | 00 | 10/25/2004 |
| Publishing Document | Publishing Date | Country | Kind |
|---|---|---|---|
| WO03/058566 | 7/17/2003 | WO | A |
| Number | Name | Date | Kind |
|---|---|---|---|
| 4652998 | Koza et al. | Mar 1987 | A |
| 4764666 | Bergeron | Aug 1988 | A |
| 4882473 | Bergeron et al. | Nov 1989 | A |
| 5276312 | McCarthy | Jan 1994 | A |
| 5356144 | Fitzpatrick et al. | Oct 1994 | A |
| 5539450 | Handelman | Jul 1996 | A |
| 5592212 | Handelman | Jan 1997 | A |
| 5643086 | Alcorn et al. | Jul 1997 | A |
| 5674128 | Holch et al. | Oct 1997 | A |
| 5768382 | Schneier et al. | Jun 1998 | A |
| 5779549 | Walker et al. | Jul 1998 | A |
| 5787156 | Katz | Jul 1998 | A |
| 5800269 | Holch et al. | Sep 1998 | A |
| 5850447 | Peyret | Dec 1998 | A |
| 5851149 | Xidos et al. | Dec 1998 | A |
| 5871398 | Schneier et al. | Feb 1999 | A |
| 6024640 | Walker et al. | Feb 2000 | A |
| 6071190 | Weiss et al. | Jun 2000 | A |
| 6089982 | Holch et al. | Jul 2000 | A |
| 6234898 | Belamant et al. | May 2001 | B1 |
| 6280328 | Holch et al. | Aug 2001 | B1 |
| 6312336 | Handelman et al. | Nov 2001 | B1 |
| 6364769 | Weiss et al. | Apr 2002 | B1 |
| 6579182 | Orus et al. | Jun 2003 | B1 |
| 20010041612 | Garahi et al. | Nov 2001 | A1 |
| 20010046894 | Lemay et al. | Nov 2001 | A1 |
| 20010049720 | Eyer | Dec 2001 | A1 |
| 20020010013 | Walker et al. | Jan 2002 | A1 |
| 20020032057 | Ebihara | Mar 2002 | A1 |
| 20020052229 | Halliburton et al. | May 2002 | A1 |
| Number | Date | Country |
|---|---|---|
| 0 971 327 | Jan 2000 | EP |
| 0971327 | Jan 2000 | EP |
| 1 287 304 | Aug 1972 | GB |
| 1287304 | Aug 1972 | GB |
| 9939312 | Aug 1999 | WO |
| 0156252 | Aug 2001 | WO |
| 0175545 | Oct 2001 | WO |
| Entry |
|---|
| Office Action dated Jan. 27, 2008 and free English translation. |
| Menezes, A. et al. “Pseudorandom Bits and Sequences”, Chapter 5, pp. 169-190, Handbook of Applied Cryptography, CRC Press, Inc., 1997. |
| Summons to Attend Oral Proceedings Issued Dec. 1, 2010. |
| Number | Date | Country | |
|---|---|---|---|
| 20050107157 A1 | May 2005 | US |
| Number | Date | Country | |
|---|---|---|---|
| 60346506 | Jan 2002 | US |
