Dynamic configuration of a gaming system
View Patent ↗A method to enable dynamic configuration of gaming terminals installed in one or a plurality of gaming premises whereby certified games, certified data files and certified support software components are activated in accordance with a predetermined schedule or automatically in response to the observed gaming activity. The method may include allocating an individual PKI certificate to each executable software component and each of its versions, binding the PKI certificate to the executable software, associating a distinctive policy for each certificate and then enforcing the software execution policies in accordance with the desired authorized game configuration and schedule. The PKI certificate's “Subject Name” (or “Issued to” field or “CommonName” field) may be a concatenation of the software component identification, its version number and optionally other identification characters. The method applies equally to other network connected gaming subsystems. The method enables a fine-grained and secure control of the authorized software components and thus the flexibility to securely configure the gaming system in accordance with a schedule or in a close-loop fashion in order to meet business objectives. In addition, a method to enable the certification authority to bind the certificates to the tested code is described.
1. A method for a gaming machine in a network connected gaming system to generate a menu of authorized games available to players, the method comprising the steps of:
generating a separate and unique code signed PKI certificate for a predetermined software module of each game;
generating an executable companion file for each game;
associating the executable companion file with the game for which it was generated, wherein the executable companion file executes faster than its associated game, and generates a predetermined output that is different from an output of its associated game;
code signing both the predetermined software module and its associated executable companion file with the generated separate and unique PKI certificate;
verifying a validity of the code signing of the predetermined software module and its associated executable companion file;
enforcing software restriction policy rules that deny execution of code signed software modules and companion files that are not successfully verified and allow execution of successfully verified code signed software module and companion files to execute;
attempting to execute each executable companion file to determine whether the to add the game associated therewith to the menu of authorized games, and
adding only those games to the menu of authorized games whose respective associated executable companion file has been allowed execution by the software restriction policy rules.
2. A method according to claim 1 further comprising the step of removing games from the menu of authorized games whose associated companion file is denied execution by the software restriction policy rules.
3. A method according to claim 1 , further comprising the step of removing games from the menu of authorized games whose associated companion executable file is not found.
4. A method according to claim 1 , wherein the code signing uses a separate and unique PKI certificate for each game.
5. A method according to claim 1 , further generating a list of authorized games added to the menu of authorized games and storing the list in a file.
6. A method according to claim 1 , wherein the predetermined software module includes an installation package.