Electronic casino gaming system with improved play capacity, authentication and security

0001This application is the national stage of International Application No. PCT/US96/10463, filed on Jun. 17, 1996, which is a continuation-in-part of U.S. application Ser. No. 08/497,662, now U.S. Pat. No. 5,643,086, filed on Jun. <b>29, 1995.Notice: More than one reissue application has been filed for the reissue of U.S. Pat. No. 6,106,396. The reissue applications are Reissue Application Ser. No. 10/225,096 filed Aug. 21, 2002, Reissue Application Ser. No. 10/224,680 filed Aug. 21, 2002 </b>(<i>the present application</i>), <i>Reissue Application Ser. No. <b>10</b>/<b>225</b>,<b>116</b> filed Aug. <b>21</b>, <b>2002</b>, Reissue Application Ser. No. <b>10</b>/<b>225</b>,<b>097</b> filed Aug. <b>21</b>, <b>2002</b> and Reissue Application Ser. No. <b>10</b>/<b>224</b>,<b>699</b> filed Aug. <b>21</b>, <b>2002</b>, all of which are divisional reissues of U.S. Pat. No. <b>6</b>,<b>106</b>,<b>396</b>, which issued from U.S. Ser. No. <b>08</b>/<b>981</b>,<b>882</b> which is the U.S. national phase of International Application No. PCT/US<b>96</b>/<b>10463</b> filed Jun. <b>17</b>, <b>1996</b>, which is a continuation</i>-<i>in</i>-<i>part of U.S. Ser. No. <b>08</b>/<b>497</b>,<b>662</b> filed Jun. <b>29</b>, <b>1995</b>, now U.S. Pat. No. <b>5</b>,<b>643</b>,<b>086</b>.</i>

BACKGROUND OF THE INVENTION

00021. Field of the Invention

0003This invention relates to microprocessor based gaming Systems used in gambling casinos.

00042. Brief Description of the Prior Art

0005Microprocessor based gaming systems are known which are used in gambling casinos to augment the traditional slot machine games (e.g. three reel single or multi-line games) and card games, such as poker and black jack. In a typical gaming systems of this type, a microprocessor based system includes both hardware and software components to provide the game playing capabilities. The hardware components include a video display for displaying the game play, mechanical switches for enabling player selection of additional cards or game play choices, coin acceptors and detectors and the electronic components usually found in a microprocessor based system, such as random access memory (RAM), read only memory (ROM), a processor and one or more busses. The software components include the initialization software, credit and payout routines, the game image and rules data set, and a random number generator algorithm. In order to be acceptable for casino use, an electronic gaming system must provide both security and authentication for the software compounds. For this reason, gaming commissions have heretofore required that all software components of an electronic gaming system be stored in unalterable memory, which is typically an unalterable ROM. In addition, a copy of the contents of the ROM or a message digest of the contents (or both) are normally kept on file in a secure location designated by the gaming commission so that the contents of an individual ROM removed from a gaming machine can be verified against the custodial version.

0006In a typical arrangement, a message digest of the ROM contents is initially generated prior to the installation of the ROM in the machine by using a known algorithm usually referred to as a hash function. A hash function is a computation procedure that produces a fixed-size string of bits from a variable-size digital input. The fixed-sized string of bits is termed the hash value. If the hash function is difficult to invert—termed a one-way hash function—the hash function is also termed a message digest function, and the result is termed the message digest. The message digest is unique to any given variable size input data set, i.e., the game data set stored in the ROM. When it becomes necessary to later authenticate the ROM from any given machine, the ROM is physically removed from the game console and the message digest of the ROM contents is computed directly from the ROM using the original hash function. The computed message digest is compared with the message digest on file at the designated custodial location (typically in the casino itself). This procedure is typically carried out whenever a machine produces a payoff beyond a given threshold value. If the two message digests match, then the contents of the ROM are considered to be authenticated (verified) and the payout is made to the player.

0007While such electronic casino gaming systems have been found to be useful in promoting casino game play, the restriction requiring that the casino game program be stored in unalterable ROM memory, leads to a number of disadvantageous limitations. First, due to the limited capacity of the ROM storage media traditionally used to hold the program, the scope of game play available with such systems is severely limited. For sophisticated games using motion video and audio multi-media elements, much more memory capacity, on the order of hundreds of megabytes, is necessary. However, physical verification of such a large quantity of physical devices is not practical, and has thus far been an impediment to creating sophisticated games with more player appeal. Second, the authentication check is only conducted on a limited basis (usually after a jackpot) or other significant winning game outcome, and the authentication procedure requires that game play be halted until the ROM contents have been found to be authentic.

SUMMARY OF THE INVENTION

0008The invention comprises an electronic casino gaming system which greatly expands casino game play capability and enhances security and authentication capabilities. More particularly, the invention comprises an electronic casino gaming system and method having greatly expanded mass storage capability for storing a multiplicity of high resolution, high sound quality casino type games, and provides enhanced authentication of the stored game program information with a high security factor.

0009According to a first aspect of the invention, authentication of a casino game data set is carried out within the casino game console using an authentication program stored in an unalterable ROM physically located within the casino game console. The casino game data set and a unique signature are stored in a mass storage device, which may comprise a read only unit or a read/write unit and which may be physically located either within the casino game console or remotely located and linked to the casino game console over a suitable network. The authentication program stored in the unalterable ROM performs an authentication check on the casino game data set at appropriate times, such as prior to commencement of game play, at periodic intervals or upon demand. At appropriate occasions, the contents of the unalterable ROM can be verified by computing the message digest of the unalterable ROM contents and comparing this computed message digest with a securely stored copy of the message digest computed from the ROM contents prior to installation in the casino game console.

0010From a process standpoint, this aspect of the invention comprises a method of authenticating a data set of a casino style game which consists of two phases: a game data set preparation phase and a game data set checking phase. In the game data set preparation phase, the method proceeds by providing a data set for a casino game, computing a first abbreviated bit string unique to the casino game data set, encrypting the first abbreviated bit string to provide an encrypted signature of the casino game data set, and storing the casino game data set and the signature in a mass storage device. The first abbreviated bit string is preferably computed using a hash function to produce a message digest of the casino game data set. The signature is then encrypted from the message digest. After storage of the game data set and unique signature, this information is installed in a casino game console. The casino game data set checking phase proceeds by computing a second abbreviated bit string from the stored casino game data set using the same hash function, decrypting the stored encrypted signature to recover the first abbreviated bit string, and comparing the first and second abbreviated bit strings to determine whether the two strings match. If a match does occur the casino game data set is deemed authentic; if there is no match, authentication is denied and game play is prohibited.

0011The encryption/decryption process is preferably performed using a private key/public key technique in which the first abbreviated bit string is encrypted by the game manufacturer using a private encryption key maintained in the custody of the game manufacturer. The decryption of the signature is performed using a public key which is contained in an unalterable read only memory element located in the game console, along with the casino game data set. The casino game data set is preferably stored in a mass storage device, such as a magnetic or CD-ROM disk drive unit or a network file unit, the selected unit having a relatively large capacity. The actual size of the mass storage device will depend upon the casino game storage requirements and can be tailored to any specific application.

0012Each time a casino game data set is transferred from the mass storage device to the main memory of the system, the authentication routine is run. The authentication routine can also be means of an operator switch mounted in the game console or remotely via a network. Consequently, the authenticity of the data set can be automatically checked whenever the transfer occurs and at other appropriate times.

0013In order to detect attempts to tamper with the contents of the unalterable read only memory element located in the game console, a message digest computed for the authentication program stored therein is stored in a secure manner in a different location from the game console, such as the casino operator's security facilities or the facilities of a gaming commission (or both). The authenticity of the unalterable read only memory element is checked in the same way as that now performed in prior art devices: viz. computing the message digest directly from the unalterable read only memory device, and comparing the message digest thus computed with the custodial version.

0014From an apparatus standpoint, the first aspect of the invention comprises an electronic casino gaming system having means for providing authentication of a game data set of a casino type game prior to permitting game play, the system including first means for storing a casino game data set and a signature of the casino game data set, the signature comprising an encrypted version of a unique first abbreviated bit string computed from the casino game data set; second means for storing an authentication program capable of computing a second abbreviated bit string from the casino game data set stored in the first storing means and capable of decrypting the encrypted signature stored in the first storing means to recover the first abbreviated bit string; processing means for enabling the authentication program to compute an abbreviated bit string from the casino game data set stored in the first storing means and for enabling the authentication program to decrypt the encrypted signature; and means for comparing the computed second abbreviated bit string with the decrypted abbreviated bit string to determine whether a match is present. The first storing means preferably comprises a mass storage device, such as a disk drive unit, a CD-ROM unit or a network storage unit. The second storing means preferably comprises an unalterable read only memory in which the authentication program is stored.

0015According to a second aspect of the invention, the authentication program stored in the unalterable ROM located within the casino game console is used to test the authenticity of all other programs and fixed data stored in memory devices in the electronic casino gaming system, such as a system boot ROM, memory devices containing the operating system program, system drivers and executive/loader programs, and other memory devices incorporated into the electronic casino game system architecture. The contents of each such memory device, whether program information or fixed data, include signatures encrypted from message digests computed using a hash function from the original program information or fixed data set. Upon system initialization, the authentication program in the unalterable ROM is used to authenticate the individual memory device contents in essentially the same fashion as that used to authenticate the casino game data sets. More specifically, the message digest for the given program or fixed data set is computed using the same hash function originally used to produce the message digest for that program or fixed data set. The encrypted signature is decrypted using the proper decryption program and decryption key to recover the message digest. The two versions of the message digest are then compared and, if found to be matching, the concerned program or fixed data set is deemed authentic and is permitted to be used by the system. Once all of the concerned programs and fixed data sets have been so authenticated, the casino game data set authentication procedure is run, after which game play is permitted (provided a match occurs).

0016From a process standpoint, this second aspect of the invention comprises a method of authenticating a program or data set of a casino style game which consists of two phases: a program or fixed data set preparation phase, and a program or fixed data set checking phase. In the program or fixed data set preparation phase, the method proceeds by providing a program or fixed data set for a casino game, computing a first abbreviated bit string unique to the program or fixed data set, encrypting the first abbreviated bit string to provide an encrypted signature of the program or fixed data set, and storing the program or fixed data set and the signature in a memory device. The first abbreviated bit string is preferably computed using a hash function to produce a message digest of the program or fixed data set. The signature is then encrypted from the message digest. After storage of the program or fixed data set and unique signature in the memory device, the memory device is installed in a casino game console. The casino game program or fixed data set checking phase proceeds by computing a second abbreviated bit string from the stored casino game program or fixed data set stored in the memory device using the same hash function, decrypting the encrypted signature stored in the memory device to recover the first abbreviated bit string, and comparing the first and second abbreviated bit strings to determine whether the two strings match. If a match does occur, the casino game program or fixed data set is deemed authentic; if there is no match, authentication is denied and use of that casino game program or fixed data set is prohibited.

0017The authentication routine is run each time a given casino game program or fixed data set needs to be called or used. The authentication routine can also be run automatically on a periodic basis, or on demand—either locally by means of an operator switch mounted in the casino game console or remotely via a network. Consequently, the authenticity of the casino game program or fixed data set can be automatically checked whenever use of that program or fixed data set is required and at other appropriate times, such as in the course of a gaming commission audit.

0018From an apparatus standpoint this second aspect of the invention comprises an electronic casino gaming system for providing authentication of a casino game program or fixed data set prior to permitting system use of that casino game program or fixed data set, the system including first means for storing a casino game program or fixed data set and a signature of the casino game program or fixed data set; the signature comprising an encrypted version of a unique first abbreviated bit string computed from the casino game program or fixed data set; second means for storing an authentication program capable of computing a second abbreviated bit string from the casino game program or fixed data set stored in the first storing means and capable of decrypting the encrypted signature stored in the first storing means to recover the first abbreviated bit string; processing means for enabling the authentication program to compute an abbreviated bit string from the casino game program or fixed data set stored in the first storing means and for enabling the authentication program to decrypt the encrypted signature; and means for comparing the computed second abbreviated bit string with the decrypted abbreviated bit string to determine whether a match is present. The first storing means preferably comprises a memory device, such as a read only memory or random access memory. The second storing means preferably comprises an unalterable read only memory in which the authentication program is stored.

0019Electronic casino game systems incorporating the invention provide a vastly expanded capacity for more sophisticated and attractive casino-style games, while at the same time improving the authentication of the games without compromising security. In addition, casino game systems incorporating the invention provide great flexibility in changing casino game play, since the casino game data sets representing the various games can be stored in alterable media rather than read only memory units as with present casino game systems.

0020By separating the authentication process from the casino game data set storage, the invention affords secure distribution and execution of program code and data, regardless of the particular distribution or storage technique employed. More specifically, the invention allows the casino game data set to reside in any form of secondary storage media, such as the traditional ROM storage, hard magnetic disk drives and CD-ROM drives, or networked file systems. So long as the authentication procedure conducted on the game data set is performed using the authentication program stored in an unalterable ROM, and so long as that ROM can be verified reliably, any casino game data set can be loaded from any source and can be verified by the system at any time: either prior to use, during run-time, periodically during run-time or upon demand. The large quantities of storage that can be made available in a secure fashion using the invention, facilitates the creation of casino gaming systems offering both an increased diversity of games, and individual games of superior quality. In addition, the authentication of all casino game program and fixed data software ensures the integrity of all system software both prior to game play and thereafter at periodic or random intervals.

0021For a fuller understanding of the nature and advantages of the invention, reference should be had to the ensuing detailed description taken in conjunction with the accompanying drawings.

0022In one aspect, the invention is directed to a casino gaming apparatus, comprising: a casino game console; a video display unit; a read/write memory having a data storage capacity, said read/write memory being disposed in said casino game console; a disk memory having a data storage capacity that is larger than said data storage capacity of said read/write memory, said disk memory having gaming data relating to a casino game stored therein, said disk memory being disposed in said casino game console; and a processor disposed in said casino game console and being operatively coupled to said video display unit, said read/write memory and said disk memory, said processor causing said gaming data to be checked based on a comparison of data generated by said processor from said gaming data with previously generated data, and said processor causing a remedial action to be taken based on an outcome of said checking of said gaming data.

0023<i>In another aspect, the invention is directed to a casino gaming apparatus, comprising: a casino game console; a video display unit; a sound</i>-<i>generating apparatus; a read/write memory having a data storage capacity, said read/write memory being disposed in said casino game console; a nonvolatile memory that stores gaming data; a disk memory having a data storage capacity that is larger than said data storage capacity of said read/write memory, said disk memory having gaming data relating to a casino game stored therein, said disk memory being disposed in said casino game console; and a processor disposed in said casino game console and being operatively coupled to said video display unit, said sound</i>-<i>generating apparatus, said read/write memory, said nonvolatile memory and said disk memory, said processor causing said gaming data stored in said disk memory to be transferred to said read/write memory, said processor causing said gaming data that was transferred from said disk memory to said read/write memory to be authenticated based on comparison of a message digest generated by performing a one</i>-<i>way hash function on said gaming data being authenticated with a message digest previously generated by performing a one</i>-<i>way hash function on known gaming data, each of said one</i>-<i>way hash functions producing a fixed</i>-<i>size string of bits, and said processor causing a remedial action to be taken if said gaming data transferred from said disk memory to said read/write memory is not authentic as determined by said processor. </i>

0024<i>Other aspects of the invention are defined by the claims set forth at the end of this patent.</i>

BRIEF DESCRIPTION OF THE DRAWINGS

0025<figref idref="DRAWINGS">FIG. 1</figref> is a block digram of a system incorporating the invention;

0026<figref idref="DRAWINGS">FIG. 2</figref> is a schematic diagram illustrating the contents of the read only memory and the mass storage device;

0027<figref idref="DRAWINGS">FIG. 3</figref> is a more detailed schematic view of the authentication program stored in the ROM and the game data stored in the mass storage unit;

0028<figref idref="DRAWINGS">FIG. 4</figref> is a diagram illustrating the preparation of the game data set;

0029<figref idref="DRAWINGS">FIG. 5</figref> is a diagram illustrating the authentication procedure for the game data set; and

0030<figref idref="DRAWINGS">FIG. 6</figref> is a diagram illustrating an alternative approach to the secure loading of software into the system.

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

0031Turning now to the drawings, <figref idref="DRAWINGS">FIG. 1</figref> is a block diagram of an electronic casino gaming system incorporating the invention. As seen in this figure, the system consists of several system components under software control. These system components include a microprocessor <b>12</b>, which may comprise any general purpose microprocessor, such as a Pentium-based microprocessor from Intel Corporation. A main memory unit <b>13</b> is provided, which is typically a random access memory having a capacity of between 32 and 64 megabytes for storing the majority of programs and graphics elements during game play. A system boot ROM <b>14</b> provides the initialization software required when power is first applied to the system. ROM <b>14</b> contains additional programs in read only form, including the operating system, related drivers and the authentication software described in detail below. A non-volatile RAM <b>17</b> is a battery backed static RAM capable of maintaining its contents through power cycle. NV RAM <b>17</b> stores significant information relating to game play, such as the number of player credits, the last game outcome and certain diagnostic and error information not critical to an understanding of the invention.

0032A mass storage unit implemented in the <figref idref="DRAWINGS">FIG. 1</figref> system as a magnetic hard disk drive unit <b>18</b> is coupled to and controlled by a disk subsystem <b>19</b> of conventional design and operation. Disk drive unit <b>18</b> provides storage for the game specific data set, which includes both program data and image data specifying the rules of the various different casino games or single casino game variations, and the types of images and image sequences to be displayed to the game players. The size of the disk drive unit <b>18</b> is a function of the number of games and game variations provided for a given system, as well as the amount of data required for each specific game. In general, the more motion video designed into a particular casino game, the more storage required for that casino game software. A disk drive unit <b>18</b> with a 4-gigabyte capacity will usually provide sufficient storage capacity. Disk subsystem <b>19</b> comprises a disk controller connected to a PCI bus <b>20</b> for controlling the disk drive unit <b>18</b>. Controller <b>19</b> preferably supports SCSI-2, with options of fast and wide. It should be noted that a number of different types of locally-based disk drive units may be used in the <figref idref="DRAWINGS">FIG. 1</figref> system, including a CD-ROM storage unit. Also, the mass storage unit need not be physically located within the game console along with the other elements depicted in FIG. <b>1</b>: the mass storage unit may be located remotely from the game console and coupled thereto by means of an appropriate network, such as an ethernet, an R5232 link, or some other hard-wired or wireless network link. This latter alternate arrangement is indicated by the inclusion of a network subsystem <b>21</b> of appropriate configuration and functional characteristics, which may have ethernet, R5232 serial, or other network compatibility.

0033A video subsystem <b>22</b> is coupled to the PCI bus and provides the capability of displaying full color still images and MPEG movies with a relatively high frame rate (e.g. 30 frames per second) on an appropriate monitor (not shown). Optional 3D texture mapping may be added to this system, if desired.

0034A sound subsystem <b>23</b> having a stereo sound playback capability with up to 16 bit CD quality sound is coupled to an ISA bus <b>24</b>. A general purpose input/output unit <b>25</b> provides interfaces to the game mechanical devices (not illustrated) such as manually actuatable switches and display lights. A first bridge circuit <b>27</b> provides an interface between microprocessor <b>12</b>, ROM <b>14</b>, main memory <b>13</b> and PCI bus <b>20</b>. Bridge circuit <b>27</b> is preferably a TRITON chip set available from INTEL Corporation. A second bridge circuit <b>28</b> provides an interface between the PCI bus <b>20</b> and the ISA bus <b>24</b>. Bridge circuit <b>28</b> is preferably a type 82378 chip available from Intel Corporation.

0035<figref idref="DRAWINGS">FIG. 2</figref> illustrates the types of information stored in the system ROM <b>14</b> and the mass storage unit. As seen in <figref idref="DRAWINGS">FIG. 2</figref>, the ROM unit <b>14</b> used in the <figref idref="DRAWINGS">FIG. 1</figref> system comprises two separate ROM elements: ROM <b>29</b> and ROM <b>30</b>. ROM <b>29</b> must be an unalterable device, such as a Toshiba type C53400 512K×8 bit mask programmed ROM. ROM <b>30</b> is preferably an unalterable device like ROM <b>29</b>, but may comprise a different type of ROM, such as a type 29FO40 field programmable flash ROM available from Intel Corp. ROM <b>29</b> contains the system initialization or boot code, an authentication program, a random number generator program and an initial portion of the executive/loader programs. ROM <b>30</b> contains the operating system program, the system drivers and the remainder of the executive/loader programs as noted below. The mass storage unit contains the applications, which include the game image and sound data, rules of game play and the like, and the signature associated to each particular casino game.

0036<figref idref="DRAWINGS">FIG. 3</figref> illustrates the authentication and application program information in more detail. As seen in this figure, the authentication program stored in unalterable ROM <b>29</b> comprises a message digest algorithm component <b>32</b>, a decryption algorithm component <b>33</b>, and a decryption key component <b>34</b>. The message digest algorithm component <b>32</b> stored in ROM <b>29</b> comprises an exact copy of a hash function program routine used to originally compute a message digest from the loadable game data set <b>36</b> in the manner described below. The decryption algorithm component <b>33</b> stored in ROM <b>29</b> comprises the algorithm required to decrypt any encrypted casino game data set signature using the decryption key component <b>34</b>.

0037The decryption key component <b>34</b> comprises the decryption key that is required to decrypt any of the encrypted signatures <b>37</b> in the manner described below during the authentication routine.

0038<figref idref="DRAWINGS">FIG. 4</figref> illustrates the manner in which an encrypted data set signature <b>37</b> is generated. A loadable casino game data set <b>36</b> is processed using a hash function <b>41</b> to generate a message digest <b>42</b> which is unique to the loadable game data set <b>36</b>. The hash function employed may be one of a number of known hash functions, such as the MD2, MD4, and MD5 hash functions and the SHS hash function; or any other suitable hash function capable of producing a unique abbreviated bit string from a variable size input data set. For further information about these hash functions, reference should be had to the publication entitled “Answers To Frequently Asked Questions About Today's Cryptography”, Revision 2.0, Oct. 5, 1993, published by RSA Laboratories, Redwood City, Calif., and the publications listed in the references section thereof, the disclosures of which are hereby incorporated by reference. After generation, the message digest <b>42</b> is then encrypted with an encryption algorithm <b>43</b> using a private encryption key <b>44</b> to generate a signature <b>37</b> of the message digest. In the preferred embodiment, the two-key (private/public key) encryption technique developed by RSA Data Security, Inc. of Redwood City, Calif., is used. This technique is disclosed and described in U.S. Pat. Nos. 4,200,770, 4,218,582 and 4,405,829, the disclosures of which are hereby incorporated by reference. The signature <b>37</b> of the message digest <b>42</b> is then stored in the mass storage unit along with the loadable data set <b>36</b>.

0039<figref idref="DRAWINGS">FIG. 5</figref> illustrates the authentication routine carried out in accordance with the invention, when the authentication routine is called (see below), the loadable casino game data set <b>36</b> is transferred from the mass storage unit to main memory <b>13</b> (unless already there), and the message digest of casino game data set <b>36</b> is computed using the message digest algorithm <b>32</b>. Message digest algorithm <b>32</b> uses the same hash function <b>41</b> as that used by the manufacturer to prepare the original message digest <b>42</b>. The result is an unencrypted version <b>46</b> of the message digest computed from the casino game data set <b>36</b> currently present in the mass storage unit. The encrypted data set signature <b>37</b> is decrypted using the public decryption key <b>34</b> matching the private key <b>44</b> used to originally encrypt the message digest <b>42</b> of the casino game data set <b>36</b>. The message digest <b>47</b> decrypted with decryption key <b>34</b> is then compared with the message digest <b>46</b> computed from the casino game data set <b>36</b>. If the two message digests match, then the casino game data set <b>36</b> is deemed authentic and game play may proceed. If there is no match, either the casino game data set <b>36</b> or the signature <b>37</b> is deemed corrupted and not authentic. Game play is prohibited and appropriate actions can be taken: e.g. alerting a security employee using a suitable messaging system (an audible alarm, flashing lights, or a network message from the game console to a central security area).

0040In order to ensure that the authentication routine cannot be bypassed by tampering with the loader program stored in ROM <b>30</b>, an initial part of the loader program is incorporated into unalterable ROM <b>29</b>. This initial portion of the loader program requires that the authentication program be called prior to the initiation of any casino game play. Since this initial portion of the loader program is located in the unalterable ROM <b>29</b>, and since no casino game play can occur until the particular casino game application data set <b>36</b> is loaded into main memory <b>13</b>, the authentication procedure cannot be bypassed by tampering with the software stored in ROM <b>30</b>.

0041Since authentication of the game data set <b>36</b> and signature <b>37</b> is entrusted to the contents of ROM <b>29</b>, a procedure must be provided to verify the ROM <b>29</b> contents. For this purpose, a message digest is computed for the authentication program stored in ROM <b>29</b>, and this message digest is stored in a secure manner with the casino operator or the gaming commission (or both) along with the hash function used to produce the message digest. This hash function may be the same hash function used to compute the message digest <b>42</b> of the casino game data set or a different hash function. In this way, the authenticity of the ROM <b>29</b> can be easily checked in the same way as that now performed in prior art devices; viz. computing the message digest directly from the ROM <b>29</b> and comparing the message digest thus computed with the custodial version of the message digest. If required by a given gaming commission or deemed desirable by a casino operator, the system may also display the message digest <b>42</b> of each particular data set <b>36</b> or the encrypted signature version <b>37</b> for auditing purposes. In addition, the system may transmit this information via networking subsystem <b>21</b> to an on-site or off-site remote location (such as the office of the gaming commission). The message digest displayed or transmitted may comprise the decrypted version or the computed version (or both).

0042The authentication procedure carried out by means of the message digest program <b>32</b>, decryption program <b>33</b> and decryption key <b>34</b> stored in unalterable ROM <b>29</b> in the manner described above is also used to authenticate the contents of all memory devices in the <figref idref="DRAWINGS">FIG. 1</figref> system, such as the contents of ROM <b>30</b> (see FIG. <b>2</b>), the fixed data portions and program components stored in NV RAM <b>17</b> and the program and fixed data contents of any memory devices stored in the networking subsystem <b>21</b>, video subsystem <b>22</b>, sound subsystem <b>23</b>, PCI-ISA interface <b>24</b>, and GPIO unit <b>25</b>. Each program or fixed data set stored in any memory device in any of these units has an associated signature, which is encrypted from a message digest of the original program or fixed data set using a hash function, which is preferably the same hash function used to prepare the message digest of the casino game data set. Prior to permitting any such program or fixed data set to participate in the system operation, that program or fixed data set is subjected to the authorization procedure to ensure that the message digest computed from the current version of the program or fixed data set matches the message digest decrypted from the encrypted signature associated to the program or fixed data set. In addition, the authentication procedure can be run on each such program or fixed data set at periodic or random intervals (on demand) in a manner essentially identical to that described above with respect to the casino game data set authentication procedure. As a consequence, the integrity of all software in the system is checked prior to the use of that particular software in order to reveal any unauthorized changes to the software portion of the casino gaming system.

0043An alternative approach to the secure loading of software into the system is depicted in FIG. <b>6</b>. In this embodiment the basic input/output system (BIOS) software is stored in a ROM <b>50</b>, the first of two ROMs making up the system boot ROM <b>14</b> (FIG. <b>1</b>). The boot strap code, operating system code (OS), OS drivers and a secure loader are stored in a second ROM <b>52</b>. An anchor application <b>54</b> including graphics and sound drivers, system drivers, money-handling software, a second secure loader, and a signature is stored in the mass storage <b>18</b> (FIG. <b>1</b>).

0044When power is initially applied to the system on start-up, or when the system experiences a warm restart, the CPU <b>12</b> will begin executing code from the BIOS ROM <b>50</b>. The BIOS is responsible for initializing the motherboard and peripheral cards of the system. After the BIOS has completed the initialization, it jumps to the boot strap code in ROM <b>252</b> causing the boot strap to copy the OS, OS drivers, and the secure loader into RAM.

0045Once in RAM, the OS is started and the secure loader stored in ROM <b>52</b> is used to load the anchor application <b>54</b> from disk <b>18</b>. On disk, the anchor application has a signature that is used during the load to verify the validity of the anchor application.

0046After the anchor application <b>54</b> is started, it will be used to load all other applications. The secure loader of the anchor application will check the validity of an application to be loaded by computing the signature and comparing it against the one stored on disk with the application as described above.

0047An important advantage of the invention not found in 20 prior art systems is the manner in which the casino game data set can be authenticated. In prior art systems, authentication of the casino game data set is normally only done when a payout lying above a given threshold is required by the outcome of the game play, and this requires that the game be disabled while the ROM is physically removed and the ROM contents are verified. In systems incorporating the invention, the authenticity of a given casino game data set can be checked in a variety of ways. For example, the game data set <b>36</b> can be automatically subjected to the authentication procedure illustrated in <figref idref="DRAWINGS">FIG. 5</figref> each time the game is loaded from the mass storage unit into the main memory <b>13</b>. Thus, as a player selects a casino game for game play in the system, the authenticity of that game actually stored in the mass storage unit is automatically checked using the authentication procedure described above without removing the ROM <b>29</b>. Further, if desired, the authentication procedure may be initiated in response to the pull of a slot game handle, the detection of a coin insert, the payout of coins or issuing of credit, or any other detectable event related to game play. The authenticity of a given casino game data set <b>36</b> can also be checked on demand, either locally at the game console or remotely via a network, by providing a demand procedure. Such a procedure may be initiated, e.g. by providing a manually operable switch in the game console, accessible only to authorized persons, for initiating the authentication routine. Alternatively, the <figref idref="DRAWINGS">FIG. 1</figref> system may be configured to respond to a demand command generated remotely (e.g. in a security area in the casino or off-site) and transmitted to the game console over a network to the networking subsystem <b>21</b>.

0048Another advantage of the invention lies in the fact that the game data set storage capacity of a system incorporating the invention is not limited by the size of a ROM, but is rather dictated by the size of the mass storage unit. As a consequence, games using high resolution, high motion video and high quality stereo sound can be designed and played on systems incorporating the invention. Also, since the mass storage unit need not be a read-only device, and need not be physically located in the game console, the invention affords great flexibility in game content, scheduling and changes. For example, to change the graphic images in a particular casino game or set of games, new casino game data sets can be generated along with new signatures and stored in the mass storage unit by either exchanging disk drives, replacing disks (for read only disk units), or writing new data to the media. In the networked mass storage application, these changes can be made to the files controlled by the network file server. Since the casino game data sets must pass the authentication procedure test, either periodically or on demand, corrupted data sets cannot go undetected. Thus the invention opens up the field of electronic casino gaming systems to readily modifiable games with flexible displays and rules, without sacrificing the essential security of such systems. In fact, security is greatly enhanced by the ability of the invention to authenticate all game data sets both regularly (for each handle pull) and at any time (on demand), without interfering with regular game play (unless no match occurs between the two forms of message digest).

0049While the above provides a full and complete disclosure of the preferred embodiments of the invention, various modifications, alternate constructions and equivalents may be employed without departing from the true spirit and scope of the invention. For example, while the RSA public/private key encryption technique is preferred (due to the known advantages of this technique), a single, private key encryption technique may be employed, if desired. In a system using this technique, the single key would be stored in ROM <b>29</b> in place of the public key <b>34</b>. Also, the message digest <b>42</b> and signature <b>37</b> for a given application <b>36</b> need not be computed from the entire casino game data set. For example, for some casino games it may be desirable to provide a fixed set of rules while permitting future changes in the casino game graphics, sound or both. For such casino games, it may be sufficient to compute the message digest <b>42</b> and signature <b>37</b> from only the rules portion of the applications program <b>36</b>. In other cases, it may be desirable or convenient to maintain the casino game video and audio portions constant, while allowing future changes to the rules of game play. For casino games of this category, the message digest <b>42</b> and signature <b>37</b> may be computed from the graphics and sound portions of the application program <b>36</b>. It may also be desirable to compute a message digest <b>42</b> and signature <b>37</b> from a subset of the rules, graphics or sound portions of a given applications program <b>36</b>, or from some other subset taken from a given applications program <b>36</b>. Therefore, the above should not be construed as limiting the scope of the invention, which is defined by the appended claims.