Security method
View Patent ↗A security method for verifying a client device comprising: loading and executing a boot loader at the client device which establishes a connection to a boot compliance server; sending a first cryptographic element from the boot compliance server to the client device; generating a first cryptographic response with the first cryptographic element based on at least part of the boot loader and sending the first cryptographic response to the boot compliance server for verification; and continuing the boot process upon successful verification of the first cryptographic response.
1. A security method for verifying and detecting physical tampering of a boot loader in a client gaming machine, the method comprising:
analyzing the client gaming machine based on stored client gaming machine version information;
updating at least one of a boot loader and an operating system of the client gaming machine via an update server storing: a) boot loader updates, b) operating system updates, and c) client gaming machine version information;
loading and executing the boot loader at the client gaming machine which establishes a connection to a boot compliance server;
sending a first cryptographic element from the boot compliance server to the client gaming machine;
generating a first cryptographic response with the first cryptographic element based on at least part of the boot loader and sending the first cryptographic response to the boot compliance server for verification; and
continuing to execute the boot loader of the client gaming machine upon successful verification of the first cryptographic response, wherein following said successful verification the boot loader is configured to load the operating system.
2. A method as claimed in claim 1 , comprising:
sending at least a second cryptographic element to the client gaming machine subsequent to the successful verification of the first cryptographic response;
generating a second cryptographic response with the second cryptographic element based on at least part of the operating system; and
loading the operating system upon successful verification of the second cryptographic response.
3. A method as claimed in claim 1 , wherein the client gaming machine takes at least one protective action upon unsuccessful verification of the first cryptographic response.
4. A method as claimed in claim 1 , wherein the first cryptographic element is a first hash key and generating the cryptographic response comprises applying a corresponding hash function to the boot loader using the first hash key.
5. A method as claimed in claim 2 , wherein sending at least a second cryptographic element comprises sending a valid second cryptographic response to the client gaming machine whereby the client gaming machine can verify the operating system without further reference to the boot compliance server.
6. A method as claimed in claim 2 , comprising sending a plurality of second cryptographic elements corresponding to respective ones of a plurality of possible operating versions to the client gaming machine and determining at the client gaming machine a relevant one of the second cryptographic elements to apply.
7. A method as claimed in claim 1 , wherein establishing a connection comprises establishing an encrypted connection.
8. A verification system comprising:
a boot compliance server;
a client gaming machine arranged to load and execute a boot loader at the client gaming machine to establish a connection to a boot compliance server; and
an update server storing: a) boot loader updates, b) operating system updates, and c) client gaming machine version information the update server configured to update the client gaming machine boot loader and operating system based on the client gaming machine version information, whereafter:
the boot compliance server sends a first cryptographic element from the boot compliance server to the client gaming machine;
the client gaming machine generates a first cryptographic response with the first cryptographic element based on at least part of the boot loader and sends the first cryptographic response to the boot compliance server for verification; and
the client gaming machine continues to execute the boot loader of the client gaming machine upon successful verification of the first cryptographic response, wherein following said successful verification the boot loader is configured to load an operating system.
9. A verification system as claimed in claim 8 , wherein:
the boot compliance server sending at least a second cryptographic element to the client gaming machine subsequent to the successful verification of the first cryptographic response;
the client gaming machine generates a second cryptographic response with the second cryptographic element based on at least part of the operating system; and
the client gaming machine loads the operating system upon successful verification of the second cryptographic response.
10. A verification system as claimed in claim 8 , wherein the client gaming machine takes at least one protective action upon unsuccessful verification of the first cryptographic response.
11. A verification system as claimed in claim 8 , wherein the first cryptographic element is a first hash key and the client device generates the cryptographic response by applying a corresponding hash function to the boot loader using the first hash key.
12. A verification system as claimed in claim 9 , wherein the boot compliance server sends a valid second cryptographic response to the client gaming machine whereby the client gaming machine can verify the operating system without further reference to the boot compliance server.
13. A verification system as claimed in claim 9 , wherein the boot compliance server sends a plurality of second cryptographic elements corresponding to respective ones of a plurality of possible operating versions to the client gaming machine and the client gaming machine determines a relevant one of the second cryptographic elements to apply.
14. A verification system as claimed in claim 8 , wherein establishing a connection comprises establishing an encrypted connection.
15. A verification system as claimed in claim 8 , wherein the client gaming machine comprises a player tracking module.
16. A verification system as claimed in claim 15 , wherein the verification system is configured to verify a boot sequence of a plurality of player tracking modules.
17. A verification system as claimed in claim 8 , wherein the update server further comprises a boot loader update server adapted to communicate an updated boot loader to the client gaming machine, whereafter the client gaming machine replaces the current boot loader with the updated boot loader.
18. A verification system as claimed in claim 8 , wherein the update server further comprises an operating system update server adapted to communicate an updated operating system to the client gaming machine, whereafter the client gaming machine replaces the current operating system with the updated operating system.
19. A client gaming machine including a processor and a memory arranged to:
analyze the client gaming machine based on stored client gaming machine version information;
update at least one of a boot loader and an operating system of the client gaming machine via an update server storing: a) boot loader updates, b) operating system updates, and c) client gaming machine version information;
load and execute the boot loader at the client gaming machine to establish a connection to a boot compliance server;
receive a first cryptographic element sent from a boot compliance server to the client gaming machine;
generate a first cryptographic response with the first cryptographic element based on at least part of the boot loader and send the first cryptographic response to the boot compliance server for verification; and
continue to execute the boot loader of the client gaming machine upon successful verification of the first cryptographic response, wherein following said successful verification the boot loader is configured to load the operating system.
20. A client gaming machine as claimed in claim 19 , arranged to:
receive a second cryptographic element to the client gaming machine subsequent to the successful verification of the first cryptographic response;
generate a second cryptographic response with the second cryptographic element based on at least part of the operating system; and
load the operating system upon successful verification of the second cryptographic response.
21. A client gaming machine as claimed in claim 19 , arranged to take at least one protective action upon unsuccessful verification of the first cryptographic response.
22. A client gaming machine as claimed in claim 19 , wherein the first cryptographic element is a first hash key and the client gaming machine generates the cryptographic response by applying a corresponding hash function to the boot loader using the first hash key.
23. A client gaming machine as claimed in claim 20 , arranged to receive a valid second cryptographic response to the client gaming machine whereby the client gaming machine can verify the operating system without further reference to the boot compliance server.
24. A client gaming machine as claimed in claim 20 , arranged to receive a plurality of second cryptographic elements corresponding to respective ones of a plurality of possible operating versions and determine a relevant one of the second cryptographic elements to apply.
25. A client gaming machine as claimed in claim 19 , wherein establishing a connection comprises establishing an encrypted connection.
26. A client gaming machine as claimed in claim 19 , wherein the client gaming machine comprises a player tracking module.
27. A security method for verifying and detecting physical tampering of a boot loader in a client gaming machine, the method comprising:
analyzing the client gaming machine based on stored client gaming machine version information;
updating at least one of a boot loader and an operating system of the client gaming machine via an update server storing: a) boot loader updates, b) operating system updates, and c) client gaming machine version information;
loading and executing the boot loader at the client gaming machine to establish a connection to a boot compliance server;
receiving a first cryptographic element sent from a boot compliance server to the client gaming machine;
generating a first cryptographic response with the first cryptographic element based on at least part of the boot loader and sending the first cryptographic response to the boot compliance server for verification; and
continuing to execute the boot loader of the client gaming machine upon successful verification of the first cryptographic response, wherein following said successful verification the boot loader is configured to load the operating system.