Electronic gaming machine security for software stored in nonvolatile media
An illustrative method provides security of software resident on electronic gaming machines (EGMs) that permit wagering on games. A determination is made if all software files stored on a partition of a nonvolatile storage device resident in an EGM are authenticated image type files prior to any attempt to execute any of the software files. Further processing by the EGM of all of the software files is terminated upon the determination that one of the software files is not an authenticated image type file.
1. A method for providing security of software resident on electronic gaming machines (EGMs) that permit wagering on games comprising the steps of:
determining if all software files stored on a partition of a nonvolatile storage device resident in an EGM are authenticated image type files prior to any attempt to execute any of the software files, where the nonvolatile storage device is a hard drive formatted to have only one partition in which all files stored in the one partition are quarantined such that the files cannot be directly executed, the determining step further determining if all files stored in the one partition are of the image type, wherein the storage device includes a primary master boot record;
terminating further processing by the EGM of all of the software files upon the determination that at least one of the software files stored in the one partition is not an authenticated image type file, wherein each of the authenticated image type files includes (a) a master boot record for the image type file, (b) a valid digital signature associated with the image type file and (c) a plurality of digital signatures each associated with corresponding ones of at least some read-only files contained in the image type file, (d) a read-only file system of the read-only files, and (e) a descriptor file describing how the read-only files are to be installed, the method further comprising the steps of:
responsive to determining that at least one of the files stored in the one partition is an authenticated image type file, an operating system mounting the read-only files in accordance with the descriptor file; and
prior to executing an executable file of the read-only files stored in the image type file, the executable file having an associated first digital signature of the plurality of digital signatures stored in the at least one authenticated image type file, validating the executable file using the first digital signature.
2. The method of claim 1 wherein the determining step further comprises determining the authentication of each of said files by authenticating a digital signature associated with each file using a public key stored at a predetermined location.
3. The method of claim 1 wherein the determining step further comprises determining whether each of said software files has a file format such that an install procedure needs to be executed before the software files can be brought into service.
4. The method of claim 1 further comprising the step of determining if each file stored on the one partition is an image type software file without opening or attempting to open any file stored in the one partition.
5. The method claim 4 wherein the determination of whether each file stored on the one partition is an image type software file comprises reading a file type characteristic for each stored file from a table of files stored on the hard drive outside of the one partition.
6. An electronic gaming machine that permits wagering on games comprising:
a nonvolatile storage device comprising a hard drive being formatted to have only one partition that contains all software files stored on the hard drive, all files stored in the one partition being quarantined such that the files cannot be directly executed, the nonvolatile storage device including a primary master boot record;
a microprocessor apparatus, coupled to the nonvolatile storage device, configured to determine if all of the software files stored on the one partition of the nonvolatile storage device are authenticated image type files prior to any attempt by the microprocessor apparatus to execute any of the software files;
the microprocessor apparatus further configured to terminate further processing of all of the software files upon determining that at least one of the software files stored in the one partition is not an authenticated image type file,
wherein at least one of the software files includes (a) a master boot record, (b) a digital signature associated with the at least one of the software files and (c) a plurality of digital signatures each associated with corresponding ones of at least some read-only files in the image type file corresponding to the at least one software file, and (d) a file system of the read-only files, the microprocessor apparatus being configured to:
responsive to the microprocessor apparatus determining that the at least one software file is an authenticated image type file, cause an operating system to mount the corresponding read-only files, the read-only files including an executable file having an associated digital signature of the plurality of digital signatures; and
prior to execution of the executable file, validate the executable file using the associated digital signature.
7. The electronic gaming machine of claim 6 wherein the microprocessor apparatus is configured to determine the authentication of each of said files by authenticating a digital signature stored and associated with each file using a public key stored at a predetermined location.
8. The electronic gaming machine of claim 6 wherein the microprocessor apparatus is configured to determine whether each of said software files has a file format such that an install procedure needs to be executed before the software files can be brought into service.
9. The electronic gaming machine of claim 6 wherein the microprocessor apparatus is configured to determine if each file stored on the one partition is an image type software file without opening or attempting to open any file stored in the one partition.
10. The electronic gaming machine of claim 9 , wherein the microprocessor apparatus is configured to make the determination of whether each file stored on the one partition is an image type software file by reading a file type characteristic for each stored file from a table of files stored on the hard drive outside of the one partition.
11. A non-transitory tangible computer readable storage medium encoded with instructions for controlling an electronic gaming machine (EGM) that permits wagering on games comprising:
computer readable storage instructions for determining if all software files stored on a partition of a nonvolatile storage device resident in an EGM are authenticated image type files prior to any attempt to execute any of the software files, where the nonvolatile storage device is a hard drive formatted to have only one partition in which all files stored in the one partition are quarantined such that the files cannot be directly executed, the computer readable storage instructions further causing a determination if all files stored in the one partition are of the image type, wherein the hard drive includes a primary master boot record;
computer readable storage instructions for terminating further processing by the EGM of all of the software files upon the determination that at least one of the software files stored in the one partition is not an authenticated image type file,
wherein the authenticated image type file includes (a) a master boot record, (b) a valid digital signature associated with the image type file and (c) a plurality of digital signatures each associated with corresponding ones of at least some read-only files contained in the image type file, and (d) a descriptor file describing how the read-only files are to be installed, the computer readable storage medium further comprising:
computer readable storage instructions for causing an operating system to mount the read-only files in accordance with the descriptor file; and
computer readable storage instructions for validating an executable file of the read-only files stored in the image type file, using a first digital signature of the plurality of digital signatures associated with the executable file, prior to executing the executable file.
12. The computer readable storage medium of claim 11 further comprising:
computer readable storage instructions for determining whether each of said software files has file format such that an install procedure needs to be executed before the software files can be brought into service.
13. The computer readable storage medium of claim 11 further comprising:
computer readable storage instructions for determining if each file stored on the one partition is an image type software file without opening or attempting to open any file stored in the one partition.
14. The computer readable storage medium of claim 13 wherein the determination of whether each file stored on the one partition is an image type software file comprises reading a file type characteristic for each stored file from a table of files stored on the hard drive outside of the one partition.
15. A server that supports electronic gaming machines that permits wagering on games, the server comprising:
a nonvolatile storage device comprising a hard drive being formatted to have only one partition that contains all software files stored on the hard drive, all files stored in the one partition being quarantined such that the files cannot be directly executed, the nonvolatile storage device having a primary master boot record;
microprocessor apparatus, coupled to the nonvolatile storage device, that is configured to determine if all of said software files stored on the one partition of the nonvolatile storage device are authenticated image type files prior to any attempt by the microprocessor apparatus to execute any of the software files;
the microprocessor apparatus being further configured to terminate further processing of all of the software files upon determining that at least one of the software files stored in the one partition is not an authenticated image type file,
wherein the authenticated image type file includes (a) a master boot record, (b) a valid digital signature associated with the image type file and (c) a plurality of digital signatures each associated with corresponding ones of at least some read-only files contained in the image type file, (d) a read-only file system of the read-only files, the microprocessor apparatus being configured to:
cause an operating system to mount the read-only files, the read-only files including an executable file having a corresponding digital signature of the plurality of digital signatures; and
prior to execution of the executable file, validate the executable file using the corresponding digital signature associated with the executable file.
16. The server of claim 15 wherein the microprocessor apparatus is configured to determine the authentication of each of said files by authenticating a digital signature stored and associated with each file using a public key stored at a predetermined location.
17. The server of claim 15 wherein the microprocessor apparatus is configured to determine whether each of said software files has a file format such that an install procedure needs to be executed before the software files can be brought into service.
18. The server of claim 15 wherein the microprocessor apparatus is configured to determine if each file stored on the one partition is an image type software file without opening or attempting to open any file stored in the one partition.
19. The server of claim 18 , wherein the microprocessor apparatus is configured to make the determination of whether each file stored on the one partition is an image type software file by reading a file type characteristic for each stored file from a table of files stored on the hard drive outside of the one partition.