ROM BIOS based trusted encrypted operating system
There is disclosed a device, system, and method for a ROM BIOS based trusted encrypted operating system for use in a gaming environment. The gaming device includes a ROM storing a BIOS, a secure loader, an encrypted operating system, and a decryption key for decrypting the encrypted operating system. The decryption key is partitioned and scattered about the secure loader. The method includes initializing the BIOS, locating the decryption key, decrypting the encrypted operating system with the encryption key, verifying a plurality of check codes, and transferring control to the operating system. The check codes are verified responsive to decrypting the encrypted operating system. The check codes are dispersed about the operating system and are unrelated to the operating system. Control is transferred to the operating system responsive to verifying the check codes.
1. A gaming device having a ROM, the device comprising:
a BIOS stored in the ROM;
a secure loader stored in the ROM, wherein the secure loader is loadable by the BIOS, wherein the secure loader is initialized responsive to a command by the BIOS, and wherein control is transferred from the BIOS to the secure loader;
an encrypted operating system stored in the ROM, wherein the encrypted operating system is a ciphertext of an operating system; and
a decryption key for decrypting the ciphertext, wherein scattered partitions of the decryption key are steganographically hidden about the secure loader, wherein the scattered portions of the decryption key are located to decrypt the encrypted operating system, thereby yielding the operating system;
wherein a plurality of check codes are verified responsive to decrypting the encrypted operating system, wherein the plurality of check codes are dispersed about the operating system, wherein the check codes are unrelated to the operating system, and wherein control is transferred from the secure loader to the operating system responsive to verifying the plurality of check codes.
2. The gaming device of claim 1 , wherein the operating system includes a plurality of software modules and a plurality of check codes dispersed about the plurality of software modules, wherein the plurality of check codes are unrelated to the plurality of software modules.
3. The gaming device of claim 1 , wherein the decryption key is a public key of a public key encryption system.
4. The gaming device of claim 1 , wherein the ROM is a trusted ROM.
5. The gaming device of claim 1 , wherein the BIOS, the encrypted operating system, and the secure loader are at a root level of trust for an authenticated trust model.
6. A ROM in a gaming system, the ROM comprising:
a single memory device;
a BIOS stored on the single memory device;
a ciphertext of an operating system, the ciphertext stored on the single memory device;
a secure loader stored on the single memory device, wherein the secure loader is loadable by the BIOS, wherein the secure loader is initialized responsive to a command by the BIOS, and wherein control is transferred from the BIOS to the secure loader; and
a key for decrypting the ciphertext, wherein the key is steganographically hidden on the single memory device about the ciphertext, wherein the key is partitioned and scattered,
wherein the scattered portions of the decryption key are located to decrypt the encrypted operating system, thereby yielding the operating system;
wherein a plurality of check codes are verified responsive to decrypting the encrypted operating system, wherein the plurality of check codes are dispersed about the operating system, wherein the check codes are unrelated to the operating system, and wherein control is transferred from the secure loader to the operating system responsive to verifying the plurality of check codes.
7. The ROM of claim 6 , wherein the operating system includes a plurality of software modules and a plurality of check codes dispersed about the plurality of software modules, wherein the plurality of check codes are unrelated to the plurality of software modules.
8. The ROM of claim 7 , wherein the ROM is a trusted ROM.
9. The ROM of claim 8 , wherein the BIOS, the ciphertext, and the secure loader are at a root level of trust for an authenticated trust model.
10. An electronic gaming system, comprising:
a plurality of gaming machines connected via a network to a central computer, wherein each of the gaming machines includes a ROM storing a BIOS; a secure loader initiatable responsive to a command by the BIOS, wherein control is transferred from the BIOS to the secure loader; an encrypted operating system, wherein the encrypted operating system is a ciphertext of an operating system; and a key for decrypting the encrypted operating system,
wherein the key is steganographically hidden about the secure loader, wherein the key is partitioned and scattered about the secure loader, wherein the scattered portions of the decryption key are located to decrypt the encrypted operating system, and wherein the ROM is at a root level of trust;
wherein a plurality of check codes are verified responsive to decrypting the encrypted operating system, wherein the plurality of check codes are dispersed about the operating system, wherein the check codes are unrelated to the operating system, and wherein control is transferred from the secure loader to the operating system responsive to verifying the plurality of check codes.
11. The gaming device of claim 10 , wherein the secure loader has access to a password for locating the scattered partitioned decryption key.
12. The gaming device of claim 11 , wherein the password enables the secure loader to locate a header of the scattered partitioned decryption key.
13. The gaming device of claim 12 , wherein the header enables identification of an inode map for the scattered partitioned decryption key.