Secure game download
A method for gaming terminals, gaming kiosks and lottery terminals to ensure that the code-signing verification process of downloaded game software can be trusted. Drivers independently developed from the operating system supplier are embedded within the operating system kernel to verify that the micro-coded hardware components, the BIOS ( 808 ), the operating system components and the downloaded game software can be trusted.
1. A method for verifying gaming terminal software, comprising:
installing at least one driver into a gaming machine;
blocking execution of an operating system of the gaming machine;
taking complete control of the gaming machine with the at least one driver executing at a highest machine permission level, disabling interrupts on the gaming machine, and freezing an operation of the operating system;
verifying a legitimacy of all software and memory content in the gaming machine using the at least one driver, wherein a challenge-response step is used to ensure that the at least one driver has not been spoofed and is executing;
triggering an alert if the verifying operation fails;
relinquishing control of the gaming machine back to the operating system; and
authorizing the gaming machine to execute software that is successfully verified.
2. The method of claim 1 , wherein the taking step includes a step of disabling interrupts on the gaming machine.
3. The method of claim 1 , wherein the verifying step includes verifying a downloadable microcode of smart hardware within the gaming machine.
4. The method of claim 1 , further comprising auditing a source code of the at least one driver by a third party.
5. The method of claim 1 , further comprising certifying the at least one driver by a third party.
6. The method of claim 1 , wherein the gaming machine further includes a hard disk drive that includes at least one partition formatted for simple file access and wherein the method further includes a step of accessing code-signed downloaded software from the at least one simple file access partitioned hard disk drive.
7. A gaming machine, comprising:
at least one processor;
at least one data storage device; a plurality of processes spawned by the at least one processor, the processes including processing logic for carrying out:
installing at least one driver into the gaming machine;
taking complete control of the gaming machine with the at least one driver executing at a highest machine permission level, disabling interrupts on the gaming machine, and freezing an operation of the operating system;
blocking the operation of an operating system of the gaming machine;
verifying a legitimacy of all software and memory content in the gaming machine, wherein a challenge-response step is used to ensure that the at least one driver has not been spoofed and is executing;
triggering an alert if the verifying operation fails;
relinquishing control of the gaming machine back to the operating system; and
authorizing the gaming machine to execute only of the software that is successfully verified.
8. The gaming machine of claim 7 , wherein the taking step includes a step of blocking the operation of the operating system.
9. The gaming machine of claim 7 , further comprising the step of auditing a source code of the at least one driver by a third party.
10. The gaming machine of claim 7 , wherein the verifying step verifies the legitimacy of the software and memory contents without modifying a content thereof and wherein the plurality of processes include a process to report an outcome of the verifying step.