EGM authentication mechanism using multiple key pairs at the BIOS with PKI
Executable applications on a gaming machine are verified before they can be executed, for security purposes and to comply with jurisdictional requirements. Unlike in prior systems for authenticating the executable applications, embodiments allow for new executable applications to be provided and verified over time with different private and public key pairs, even after the operating code of the gaming machine is certified by the jurisdiction and deployed in the field.
1. A wager based gaming machine comprising:
a bill validator or cashless credit acceptor;
a mass storage volume;
a microprocessor;
an operating system stored in the mass storage volume;
a gaming application;
a read only basic input output system (“BIOS”) chip;
BIOS operating instructions stored within the read only BIOS chip; and
a certificate of a code signing certificate authority stored within the read only BIOS chip;
wherein the gaming machine is configured by the operating system and the BIOS operating instructions to:
receive a certificate revocation list;
authenticate the certificate revocation list;
store the authenticated certificate revocation list in the mass storage volume;
validate that a public key is certified by a code signing certificate authority by referencing the certificate of the code signing authority stored within the read only BIOS chip;
utilize the certificate revocation list in the mass storage volume to ascertain whether the code signing certificate authority has revoked a code signing certificate issued to the code signing authority; and
authenticate the gaming application using the validated public key.
2. A wager based gaming machine comprising:
a bill validator or cashless credit acceptor;
a mass storage volume;
a microprocessor;
an operating system stored in the mass storage volume;
a gaming application;
a read only basic input output system (“BIOS”) chip;
BIOS operating instructions stored within the read only BIOS chip;
a first public key embedded within the BIOS chip, wherein the first public key is configured to authenticate a first executable in the gaming machine; and
a second public key, of a code signing certificate authority, embedded within the BIOS chip;
the gaming machine configured to:
verify the first executable with the first public key; and
verify a second executable with the second public key only after determining that the second executable is signed by a valid private key of the code signing certificate authority.