Cryptography and certificate authorities in gaming machines

[0001] This document is based on and claims the priority benefit of copending provisional application Ser. 60/161,591 filed Oct. 26, 1999.

[0002] 1. Field of the Invention

[0003] The present invention relates to an apparatus and method for encrypting communications on a network bus in a gaming system, and more particularly, to an apparatus and method where a certificate authority server manages keys used to secure communications on a network bus in a gaming system.

[0004] 2. Statement of the Problem

[0005] Conventional gaming machines include a processor, a rules library, a random number generator and an interactive display. In the casino, these conventional gaming devices are, typically, stand-alone type machines. Increasingly, the gaming machines in a casino are networked via a network bus to a gaming server. This networking is desired because it allows the casino to monitor wagering and other activities performed at each of the networked gaming machines. Since the monitoring of wagering and other activities performed at each of the networked gaming machines can include financial information, the casino desires that the communications over the network bus be secure.

[0006] In considering secure gaming communications, there are several important goals that should be addressed. The network bus should ensure privacy. Privacy, also termed confidentiality, is the condition where the information is kept secret from all but those authorized to access the information. In the gaming environment, privacy can apply to the transmitted information as well as the identity of a player of the gaming machines.

[0007] In addition, information transmitted over the network bus should be authenticated. Authentication ensures that the content, integrity of the transmitted information, origin of the transmitted information, date of transmission, time of transmission and other attributes of the transmitted information have not been tampered with during transmission.

[0008] Additionally, entities transmitting information over the network bus should not be capable of repudiating the transmission. Cryptographic services that facilitate non-repudiation prevent a player and/or a casino from denying a previous action or commitment. The casino desires non-repudiation, especially, to enforce payment by a player that has wagered and lost. Conversely, the player desires non-repudiation to enforce payment by the casino when the player wins.

[0009] As a result of networking of the gaming machines, the ubiquity of the Internet, greater connectivity between networks, and the support for electronic commerce both inside and outside the casino, the casino desires secure communications over the network bus that provides privacy, authentication and non-repudiation. Therefore, a need exists to provide these services to support secure communication over the network bus between the gaming server and the gaming machines in a casino.

[0010] In addition, the casino may decide or desire to connect the gaming server and, hence, the network bus and all networked gaming machines, to an outside network. Networking the casino to an outside network may be advantageous for a gaming entity that owns several casinos in different locations. For example, the connection of each casino to a centralized computer would provide centralized accounting of financial information for all the casinos operated by the gaming entity.

[0011] If casinos are connected to outside networks, however, it is critical that communications originating within the casino (including gaming machines and the gaming server) remain secured against misuse or tampering by an unauthorized party after the information exits the physical protection of the casino. This desire for secured communications becomes particularly important when financial information is transmitted by the casino over the outside network. Consequently, a need exists for a secure communication link between the gaming server in a casino and an outside network.

[0012] In addition, the connection between gaming machines requires various transmission and/or data protocols. These protocols are typically created as standards in the industry. However, a game manufacturer would like to control the connection between the gaming machines such that only authorized personnel can connect the gaming machines. Therefore, a need exists for a technique to control the connection between the gaming machines such that only authorized personnel can properly connect the gaming machines.

[0013] Additionally, some casino players may prefer playing a specific gaming machine. However, the player may be in a remote location and unable to travel to the casino to play. In such instances, the casino can connect a gaming machine to an outside network so that the player can connect to the outside network via a remote computer and play, even though absent from the casino. In such instances, a need exists for a secure network that provides privacy, authentication and non-repudiation so that the player can play and both the player and casino can be confident in the knowledge that the transmitted information is secure and that the rules of the game will be upheld with integrity.

[0014] 3. Solution to the Problem

[0015] The present invention provides a method and apparatus that allows secure communication in a casino between networked gaming machines and a gaming server. With the present invention, privacy is ensured; communication is authenticated; and messages cannot be repudiated.

[0016] Additionally, the present invention discloses a method and apparatus that provides secure communications between the casino and an outside network. The present invention is especially advantageous if the gaming entity manages machines at multiple casinos in different locations and the gaming entity requires quick, yet secure retrieval of information over the outside network.

[0017] In addition, the present invention provides a method and apparatus for secure communications between each gaming machine. In this regard, this secure communication allows for the connection between the gaming machines to be controlled by the game manufacturer such that the gaming machines cannot be connected unless the cryptographic technique used to secure the communications between the gaming machines is known.

[0018] Lastly, the present invention provides secure communications between the casino and a remote player over an external network. The present invention is especially critical in ensuring that transmitted information between player and casino is kept confidential and indecipherable by unauthorized individuals intercepting the transmitted information.

[0019] The present invention provides a casino gaming system having a plurality of gaming machines. In the Asymmetric case, a gaming server is provided that includes a plurality of long term keys from which it may generate keys used to communicate between gaming machines and also between the gaming machines and server. Prior to use, each of the keys is time stamped. The gaming server also includes a random number generator that is used to facilitate generation of the keys. The gaming server also includes an encryption algorithm.

[0020] A network bus is provided that interconnects the gaming machines and the gaming server. The network bus provides a communication link for transmitting information between the gaming machines and the gaming server. The gaming server uses the encryption algorithm to encrypt the keys and transmits the encrypted keys over the network bus to the gaming machine. Likewise, the gaming machines use the keys to encrypt information and transmit the encrypted information over the network bus. In one aspect, the encrypted information is transmitted via the network bus to another of the gaming machines. In another aspect, the encrypted information is transmitted via the network bus to the gaming server.

[0021] In another embodiment, the casino gaming system includes an outside network that is connected to the gaming server. A remote computer is also provided that connects to the outside network so that the encrypted information is transmitted over the network bus and the outside network to the remote computer. In one aspect, the outside network comprises the Internet.

[0022] In another embodiment of the present invention, the gaming server is a certificate authority server having a memory. In this aspect, the keys are public keys of asymmetric key pairs which are stored in the memory at the certificate authority server. In addition, the certificate authority server may generate and transmit the public keys over the network bus to the gaming machines, or the public/private key pairs may be generated by a third party and delivered to the certificate authority for authentication.

[0023] In a further embodiment of the present invention, a plurality of access switches are each connected to a different one of the gaming machines. The network bus is connected to the gaming server and each of the access switches. In this embodiment, an outside network is connected to the gaming server and the access switches provide a communication link between specific gaming machines and a remote computer over the outside network when the specific gaming machine is idle, so as to enable a remote player of the remote computer to play the specific gaming machine.

I. Overview

[0029] In FIG. 1, a highly simplified gaming system 100 includes a gaming server 110 that is connected to a plurality of gaming machines 120-124 via network bus 130. The gaming server 110 can comprise, for example, a micro-computer or a network server. The connection of the gaming server 110 to network bus 130 can comprise, for example, a hard-wired communication link connection or a wireless communication link connection. The network bus 130 also connects to the plurality of gaming machines 120-124 that are located in a casino. In one embodiment, the gaming machines 120-124 can comprise conventional stand-alone gaming machines that are networked to the gaming server 110 via the network bus 130. The gaming machines 120-124 can also allow play of various conventional casino games such as, but not limited to, slots, poker, blackjack, etc.

[0030] In one embodiment, the casino gaming system 100 can also includes an outside network 140, such as, for example, the Internet, a Local Access Network (LAN) or a Wide Area Network (WAN). At least one remote computer 150 is connected to the outside network 140. In one embodiment, the connection of the remote computer 150 to the outside network 140 also enables the remote computer 150 to connect to the gaming server 110, and hence, the network bus 130 and the gaming machines 120-124. In this embodiment, a remote player of the remote computer 150 can play a specific one of the gaming machines 120-124 on the network bus 130 through the connection to the outside network 140. As such, a remote player can play a specific one of the gaming machines 120-124 via an outside network 140 without having to be physically in the casino.

[0031] The connection between the network bus 130 and the gaming server 110 is conventionally known in the art, and the connection can include other equipment (not shown) such as, for example a router. The connection between the gaming server 110 and the outside network 140 is also know in the art, and the connection can include various security features, such as, for example, a firewall. The connection between the remote computer 150 and the outside network 140 can include, for example, a hardwire connection, a wireless connection or a modem connection. It should be appreciated that the present invention is not limited to the manner in which the components are connected, since such connection of the components is known in the art.

[0032] In the gaming system 100 of the present invention, information that is transmitted over the network bus 130 and the outside network 140 must be secure, especially with regard to financial information, such as, for example, player credit card information, player wagering information and casino pay-out information. To ensure a secure transmission of information over the network bus 130 and the outside network 140, the information is encrypted using various cryptography techniques. Key cryptography and certificate authority techniques are described below with regard to secure encrypted information transmission in a casino gaming system 100.

II. Key Cryptography

[0033] A. Casino Gaming System using Keys

[0034] In FIG. 1, the casino gaming system 100 includes a network 130 that interconnects gaming machines 120-124 and gaming server 110. The network bus 130 provides a communication link for transmitting information between the gaming machines 120-124, themselves, and between the gaming machines 120-124 and the gaming server 110. It should be noted that the computational capabilities of the gaming server 110 should generally exceed those of the gaming machines 120-124, at least with respect to cryptographic operations. In this regard, many computer systems have architecture and/or use compilers that physically limit the bit length of an integer, such as, for example, 32 bit length. However, key cryptography requires the use of very large integers having a bit length such as, for example, 64 or 256 bits. To enable these computer systems to arithmetically manipulate these integers, cryptographic primitives are required. Cryptographic primitives include algorithms that process large integers during various arithmetic processes. It should also be noted that these cryptographic primitives can be any algorithm that allows processing of large bit length integers by these bit-limited computer systems.

[0035] However, these primitives should be able to support Rivest, Shamir, and Adleman (RSA), El Gamal and other known key cryptographic algorithms. It should also be appreciated that the present invention is not limited by the algorithms and/or cryptography used to manipulate these large bit length integers, and the present invention encompasses any technique known and practiced in the art.

[0036] The gaming server 110 also includes keys 160. For example, the keys 160 can comprise, as will be described later, symmetric keys, asymmetric keys or session keys. The keys 160 include a time stamp 165 that indicates a period of time for which each of the keys 160 is valid. The time stamp 165 also ensures that the keys 160 are changed on a periodic basis to provide a more secure communication link.

[0037] The gaming server 110 also includes a random number generator 170 that is used by the gaming server 110 to generate the keys 160. The random number generator 170 can comprise a pseudo-random number generator and/or a random number generator that has been approved by a governmental regulation agency. The generation of the keys 160 by using the random number generator 170 is known in the art and the present invention should not be limited to any one technique for generating the keys 160. It should also be appreciated that in another embodiment the random number generator 170 is optional. In this embodiment, the gaming server 110 receives the keys 160 from another device (not shown) connected to the network bus 130.

[0038] It should also be appreciated that the gaming server 110 can also include an encryption algorithm 180. The gaming server 110 uses the encryption algorithm 180 to encrypt information or data before it is transmitted over the network bus 130. The encrypted information is decrypted before it is used. The encryption algorithm 180 can comprise, for example, a symmetric key or one of an asymmetric key pair as will be explained herein below.

[0039] In one embodiment, the gaming server 110 transmits at least one of the keys 160 over the network bus 130 to a gaming machine 120. It should be appreciated that the gaming server 110 can transmit one of the keys 160 to any one of the gaming machines 120-124 on the network bus 130. However, for ease of description, this discussion will focus on transmission to gaming machine 120.

[0040] In this embodiment, the gaming machine 120 uses the keys 160 to encrypt information, such as, player credit card information, player identification information, wagering information and casino payout information. This encrypted information is transmitted over the network bus 130.

[0041] In one aspect, the encrypted information is transmitted over the network bus 130 to the gaming server 110. In another aspect, the encrypted information is transmitted over the network bus 130 from gaming machine 120 to another of the gaming machines 122-124. At the other gaming machine 122-124, the encrypted information is decrypted based on the type of key 160 used as will be described herein below.

[0042] In another embodiment, the casino gaming system 100 includes an outside network 140 that is connected to the gaming server 110. The outside network 140 is connected to a remote computer 150. The outside network 140 comprises, for example, the Internet, a local access network (LAN) or a wide area network (WAN). In this embodiment, the gaming server 110 includes various known security mechanisms (not shown), such as, a firewall.

[0043] In this embodiment, the gaming server 110 transmits the key 160 to gaming machine 120. The gaming machine 120 encrypts information using the key 160 and transmits the encrypted information over the network bus 130. In one aspect of the present invention, the encrypted information is transmitted to the gaming server 110. In another aspect of the present invention, the encrypted information is transmitted by the gaming machine 120 to another of the gaming machines 122-124 on the network bus 130. In even another aspect, the encrypted information is transmitted to the outside network 140 and, ultimately, to the remote computer 150. Once the encrypted information has been received, it is decrypted based on the type of key 160 used, as will be described herein below. The information is then processed as required.

[0044] 1. Symmetric Keys

[0045] As explained above, the keys 160, in one embodiment, comprise symmetric keys. Symmetric keys, also termed private keys, use a unique key to encrypt and exchange information between two parties. In this embodiment, gaming machine 120 (the sender) and gaming server 110 (the recipient) share a symmetric key k which is secret. In this embodiment, the gaming machine 120 encrypts information m before transmitting it over the network bus 130 to the gaming server 110. If symmetric encryption algorithm E and symmetric key k are used, the encryption of m by E under k is denoted c=E_k(m) where c represents the cipher-text associated with information m. Therefore, gaming machine 120 transmits cipher-text c over the network bus 130 to the gaming server 110. At the gaming server 110, the cipher-text c is decrypted using the symmetric key k. The gaming server 110 applies the decryption algorithm m=E_k⁻¹(c) to decrypt cipher-text c and obtain information m.

[0046] In addition, the symmetric key k can also be a session key. A session key is used for a specific exchange of a message m between two parties, such as, two gaming machines 120 and 122 or between a gaming machine 120 and the gaming server 110. In this embodiment, gaming machine 120 desires to communicate with gaming machine 122. The gaming server 110 contains a symmetric encryption function, E, that allows the encryption of a session key, k, that will be sent by the gaming server 110 in an encrypted format to gaming machines 120 and 122. In this embodiment, E_ki(m) represents the encryption of message m under encryption algorithm E using key k_i, and E_ki⁻¹(m) represents the decryption of message m under encryption algorithm E using key k_i. In order to allow the communication between gaming machines 120 and 122, the gaming server 110 generates a new unique session key k, and the gaming server 110 sends E_k1(k) to gaming machine 120 and E_k2(k) to gaming machine 122. The gaming machines 120 and 122 each can recover the session key k by forming k=E_k1⁻¹(E_k2(k))=E_k21⁻¹(E_k2(k)). Using the session key k, gaming machine 120 can communicate message m to gaming machine 122 by sending E_k(m) to gaming machine 122, gaming machine 122 can form m=E_k⁻¹(E_k(m)) to recover the message. It should be appreciated that this technique can be used with communications between any device connected to the network bus 130 and should not be limited to communications between only gaming machines 120 and 122. In addition, in one embodiment, the gaming server 130 generates the session key k using the long term asymmetric key 160 as a seed to random number generator 170. In another embodiment, the gaming server can use any one way function that is non-invertable to generate the session key k. However, it should be appreciated that the present invention can use any technique known in the art to generate the session key k, and the present invention should not be limited to only those disclosed. It should be noted that the cipher-text c is described as being transmitted only from the gaming machine 120 to the gaming server 110. However, it should be understood that the cipher-text c can be transmitted from the casino gaming server 110 to the gaming machine 120 using the same symmetric key 160. Moreover, it should be appreciated that cipher-text c can be transmitted from any one of the gaming machines 120-124 to the gaming server 110 or vise versa using the symmetric key 160. In addition, the cipher-text c can be transmitted from the gaming machines 120-124 or the gaming server 110 to the outside network 140 and the remote computer 150 (or vise versa) using the symmetric key 160 as described above. It should further be appreciated that the encryption algorithm 180 used by the gaming server 110 to encrypt and transmit the keys 160 to the gaming machines 120-124 can comprise a symmetric key 160, and the key 160 can be encrypted and/or decrypted as described above with reference to information m. In a preferred embodiment, the symmetric key 160 uses the Data Encryption Standard (DES) or one of the variants of DES such as triple-DES, DES-X or Advanced Encryption Standard (AES).

[0047] 2. Asymmetric Keys

[0048] As mentioned above, the keys 160 can comprise asymmetric keys. Asymmetric keys, also termed public keys, use two different keys in a transaction. The asymmetric key pair consists of a public and a private key. The public key is made available to all devices on the network bus 130 and the outside network 140 while the private key is kept secret. The essential feature of a public key cryptographic system is that knowledge of a public key does not provide computational information about the private key.

[0049] In this embodiment, the asymmetric key pair 160 is represented by (u,r) where u represents the public key and r represents the private key. The gaming machine 120 acquires the public key u of the gaming server 110 from the gaming server 110 or another device (not shown) connected to the network bus 130 or the outside network 140. The gaming machine 120 encrypts information m using public key algorithm E_u. As a result, the cipher-text c is c=E_u(m). The cipher-text c is transmitted to the gaming server 110 over the network bus 130. The private key algorithm E_r⁻¹ is used by the gaming server 110 to decrypt the cipher-text c and therefore obtain the information m=E_r⁻¹(E_u(m)). In this embodiment, it should be appreciated that each of the gaming machines 120-124, the gaming server 110 and the remote computer 150 have a unique asymmetric key pair (u,r). The public key u is provided to the sending party and only the private key r can decrypt information encrypted by the public key u. It should also be appreciated that the asymmetric key technique can be used by any device connected to the network bus 130 or the outside network 140 so long as the appropriate public key u is used to encrypt the information m and the cipher-text c is sent to the device having the corresponding private key r.

[0050] In addition, it should also be appreciated that the encryption algorithm 180 can comprise the public key u of the asymmetric key pair (u,r). The gaming server 110 encrypts the key 160 using the public key u and transmits the encrypted key 160 to the appropriate gaming machine 120-124 or remote computer 150 having the corresponding private key r. In a preferred embodiment of the present invention, the asymmetric keys 160 comprise Rivest, Shamir, and Adleman (RSA) and El Gamal asymmetric algorithms.

[0051] 3. Digital Signatures

[0052] In another embodiment, the keys 160 can comprise a digital signature. A digital signature can be constructed by reversing the asymmetric key technique described above. In this embodiment, the gaming machine 120 uses the private key algorithm E_r⁻¹ to encrypt the information m where the cipher-text is c=E_r⁻¹(m). The cipher-text c is transmitted to the gaming server 110 where the cipher-text c is decrypted to obtain information m by applying the public key algorithm m=E_u(E_r⁻¹(m)). Since the private key algorithm E_r⁻¹ is only known by the gaming machine 120, the gaming server 110 can be particularly certain that the information m was sent by the gaming machine 120 because only the public key algorithm E_u is able to decrypt cipher-text c that has been encrypted using the private key algorithm E_r⁻¹.

[0053] As shown above, the digital signature is a variation of the asymmetric key technique described above and can be fully implemented using asymmetric keys. The digital signature provides an extra security feature that allows the receiving party to verify the sending party. This technique is particularly useful in the casino gaming system 100 when financial information, such as, credit card information, is being transmitted over the network bus 130.

[0054] It should be appreciated that the digital signature has been disclosed with reference to the gaming machine 120 and the gaming server 110 but should not be limited as such. The digital signature can be used by all devices connected to the network bus 130 and/or the outside network 140. In addition, the encryption algorithm 180 used by the gaming server 110 to encrypt and transmit keys 160 over the network bus 130 can comprise a digital signature.

[0055] B. Method for Using Keys

[0056] As shown in FIG. 2, the present invention includes a method for communicating information using a casino gaming system 100 having gaming machines 120-124 and a gaming server 110. The method includes establishing a first communication link (network bus 130 in FIG. 1) between the gaming machines 120-124 and the gaming server 110 (step 210). A second communication link (outside network 140 in FIG. 1) is established between the gaming server 110 and the remote computer 150 (step 220). It should be appreciated that the outside network 140 can comprise the Internet, a local access network (LAN) or a wide area network (WAN).

[0057] The gaming server 110 includes keys 160. In one embodiment, the gaming server 110 includes a random number generator 170 that randomly generates the keys 160 (step 230). The gaming server 110 can also include an encryption algorithm 180 that is used to encrypt the keys 160 at the gaming server 110 (step 240). It should be appreciated that the keys 160 and the encryption algorithm 180 can comprise symmetric keys or asymmetric keys that function as described herein above.

[0058] The key 160 is transmitted from the gaming server 110 to, in one embodiment, a gaming machine 120 (step 250). It should be appreciated that the gaming server 110 can transmit the key 160 to any other device connected to the network bus 130 or the outside network 140. The key 160 is used by the gaming server 110 to encrypt information sent from the gaming machine 120 (step 260). The encrypted information is transmitted over the first communication link (network bus 130) and/or the second communication link (outside network 140) (step 270). It should be appreciated that the encrypted information can be transmitted to another of the gaming machine 122-124, the gaming server 110 or the remote computer 150. Once the encrypted information is received, it is decrypted by the receiving device (such as, for example, gaming server 110) using a technique based on the type of key 160 used as described herein above (step 280).

[0059] It should be appreciated that the method described with reference to gaming machine 120 and gaming server 110 is only for ease of description and should not be interpreted as being limited as such. It should be appreciated that the above described method can be used by any device connected to the network bus 130 and/or the outside network 140.

III. Certificate Authority

[0060] In general, as shown in FIG. 3, a certificate authority server 300 guarantees the identity of a device connected to the network bus 130 or connected to the outside network 140. The certificate authority 300 guarantees the identity by granting a unique public key 315 to each of the devices (as shown in FIG. 3, such as, gaming machines 120-124, gaming servers 330-332 and certificate servers 340-342) connected to the network bus 130. The certificate authority server 300 can also grant a unique public key to certain devices (such as remote computer 150) that are connected to the outside network 140. As noted above, there can be other certificate authority servers 340 and 342 connected to the network 130. All the certificate authority servers 300, 340 and 342 can be connected in a hierarchical configuration which is known in the art. In addition, there may be gaming servers 330-332 that do not have the ability to guarantee the identity of a device connected to the network bus 130. However, these gaming server 330-332 have the ability to perform other operations on the network bus 130, as described above with reference to FIG. 1.

[0061] A. Casino Gaming System Using a Certificate Authority

[0062] As shown in FIG. 3, another embodiment of the casino gaming system 100 includes a certificate authority server 300 that is used for communicating information using asymmetric key pairs including a private key and a public key. In this embodiment, a network bus 130 interconnects the certificate authority 300 and the gaming machine 120-124. The network bus 130 can also be connected to other certificate authority servers 340-342 and gaming servers 330-332. The certificate authority server 300 includes a memory 310 that stores public keys 315. The public keys 315 can also include a time stamp (not shown) that indicates a time period that the asymmetric key pair is used. The certificate authority server 300 also includes a random number generator 320 that is capable of generating the asymmetric key pairs of the present invention.

[0063] The certificate authority server 300 is also connected to an outside network 140 and a remote computer 150 is connected to the outside network 140. The outside network 140 can comprise the Internet, a local access network (LAN) or a wide area network (WAN). In another embodiment, it should be appreciated that the outside network 140 can connect to a gaming server 330-332 or another certificate authority server 340-342. The certificate authority server 300 can include other security mechanisms (not shown) to facilitate connection to the outside network 140, such as, for example, a firewall. The remote computer 150 can connect to the outside network 140 via, a hard wired connection, a wireless connection or a modem connection.

[0064] For ease of discussion, the certificate authority server 300 will be described with regard to transmissions to and from gaming machine 120 and gaming server 330. However, it should be appreciated that the certificate authority server 300 can transmit to any device on the network bus 130 and/or the outside network 140, and these devices can communicate using the same techniques as previously described with regard to the gaming machine 120 and the gaming server 110 (in FIG. 1).

[0065] In the present embodiment, when the gaming machine 120 desires to communicate with the gaming server 330, the gaming machine 120 requests a public key 315 from the certificate authority server 300. The certificate authority server 300 transmits a public key 315 to the gaming machine 120. The public key 315 is used by the gaming machine 120 to communicate with the gaming server 330 connected to the network bus 130. Prior to transmission of the pubic key 315, the certificate authority server 300 has verified the identity of the gaming server 330 and granted a unique asymmetric key pair to the gaming server 330. The verification is accomplished using various techniques known in the art. As a result of this verification, the certificate authority server 300 can guarantee the identity of the gaming server 330 and the validity of the public key 315 that is to be used by the gaming machine 120 to communicate with the gaming server 330.

[0066] In addition to transmitting the public key 315, the certificate authority server 300 signs the public key 315. The signing of the public key 315 uses an encryption algorithm that is similar to the symmetric and asymmetric keys, such as, a digital signature, as described above. Once the gaming machine 120 receives the signed public key 315, the public key 315 is validated using, as described above, symmetric or asymmetric key techniques. The gaming machine 120 uses the public key 315 to encrypt information and transmits that information over the network bus 130 to the gaming server 330.

[0067] As explained above, the gaming machine 120 can communicate with any other device connected to the network bus 130 and/or the outside network 140. However, these other devices must also be verified by the certificate authority server 300. As a result, the gaming machine 120 receives the appropriate public key 315 and transmits encrypted information to the appropriate device, such as, for example, other gaming machines 122-124, gaming severs 330-332, certificate authority servers 300, 340-342 and remote computer 150. In a preferred embodiment, the certificate authority server 330 meets the X.509 (ISO/IEC 9594-8) standard.

[0068] IV. Remote Access

[0069] As shown in FIG. 4, another embodiment of the casino gaming system 100 includes switches 420, 422 and 424 that enable a remote player using a remote computer 150 to connect to and play a specific gaming machine 120-124 that is located in a casino.

[0070] A. Remote Access Casino Gaming System

[0071] In this embodiment, shown in FIG. 4, a network bus 130 interconnects a gaming server 110 and switches 420, 422 and 424. A certificate authority server 300 is also connected to the network bus 130. The certificate authority server 300 provides public keys 315 used for encrypting communications, as described above. The switches 420, 422 and 424 are connected to gaming machine 120, 122 and 124, respectively. In a preferred embodiment, the gaming machines 120, 122 and 124 are located in a casino. However, the physical location of the gaming machines 120, 122 and 124 should not be interpreted as limiting the present invention. The gaming server 110 is connected to an outside network 140 and a remote computer 150 is connected to the outside network 140.

[0072] In another embodiment, the outside network 140 can connect to the certificate authority server 300. The gaming server 110 can have various security features to facilitate connection to the outside network 140, such as, for example, a firewall. The outside network 140 can comprise the Internet, a local access network (LAN) or a wide area network (WAN). The remote computer 150 can be connected to the outside network 140 via a hard wired connection, a wireless connection or a modem connection.

[0073] The present invention allows a remote player using a remote computer 150 to connect to and play a specific gaming machine 120-124 in a casino. For ease of description, the remote computer 150 will be described as connecting to gaming machine 120. However, it should be noted that the present invention encompasses the remote computer 150 connecting to any of the gaming machine 122-124 that are connected to the outside network 140. As such, the remote computer 150 connects to the outside network 140 which is connected to the gaming server 110. The remote computer 150 can be located in the casino, or the remote computer 150 can be located remotely from the casino, such as, but not limited to, a hotel connected to the casino.

[0074] To play the gaming machine 120, the remote computer 150 makes a request to the gaming server 110 to gain access to gaming machine 120. The request made by the remote computer 150 can include entering identification information that uniquely identifies the remote player of the remote computer 150. The identification information can comprise a password, credit card information, etc.

[0075] The gaming server 110 compares the identification information with a database. The database can include a listing of all passwords, a credit check of the credit card information or casino-specific credit information. If the identification information matches one of the entries in the database, the remote computer 150 is given access to the gaming machine 120 through switch 420.

[0076] It should be appreciated that, in another embodiment, the switch 420 disconnects the gaming machine 120 from access by the remote computer 150 when the gaming machine 120 is being used in the casino. The disconnection of the gaming machine 120 can be initiated by a casino player in the casino. In this embodiment, if a casino player in the casino does not want a remote player connecting to the gaming machine 120, the casino player can activate switch 420 to prevent a remote player from accessing the gaming machine 120.

[0077] In addition, governmental regulation may require that only one person at a time can play a gaming machine 120 in the casino. In this case, the remote computer 150 receives a gaming machine unavailable signal when the gaming machine 120 is occupied and/or not idle, and the remote computer 150 is asked to choose another gaming machine 122-124. Conversely, if a remote computer 150 is accessing the gaming machine 120, a casino player cannot play the accessed gaming machine 120. In the casino, this disconnection is indicated by a light (not shown) or other indicators that verify that the gaming machine 120 is unavailable.

[0078] Once the remote computer 150 gains access to the gaming machine 120, the remote player can play the gaming machine 120. In one embodiment during play of the gaming machine 120, the remote player views a digital representation of the game being played on the gaming machine 120. The remote player can view and interact with the gaming machine 120 via other mechanisms that are known in the art.

[0079] The present invention should not be interpreted as being limited to the manner in which the remote player views and interacts with the play of the gaming machine 120. Furthermore, if the gaming machine 120 breaks down or malfunctions during play, the gaming machine 120 sends a signal to the remote computer 150 indicating that the gaming machine 120 is no longer available and the remote player is asked to play another game and is credited any winnings from the gaming machine 120.

[0080] In addition, the communication between the remote computer 150 and the gaming machine 120 can be encrypted using symmetric or asymmetric keys as described herein above. The gaming server 110 or the gaming machine 120 can document information with regard to the wagering during remote play of the gaming machine 120. Such information can include identification information about the remote player, amounts wagered, the time the remote player plays the gaming machine 120 and the location from which the remote player is playing the gaming machine 120.

[0081] B. Method Remotely Accessing Casino Gaming System

[0082] As shown in FIG. 5, a method is provided that allows a remote player to access and play a specific gaming machine 120-124 from a remote location. In this method, a request is received from an outside network 140 to access and play a gaming machine 120-124 (step 510). The request from the outside network 140 may be initiated by the input of identification information. The identification information can comprise a password, credit card information, etc. The gaming server 110 compares the identification information with a database.

[0083] The database can comprise a listing of all passwords, a credit check of the credit card information or casino-specific credit information. If the identification information matches one of the entries in the database, the remote computer 150 is given access to the gaming machine 120 through switch 420. It should be appreciated that, in another embodiment, the switch 420 disconnects the gaming machine 120 from access by the remote computer 150 when the gaming machine 120 is being played in the casino. It should further be appreciated that the present invention is not limited to the type of request that is made by the remote computer 150 for access to the gaming machine 120.

[0084] Based on the request, a secured communication link is provided between the outside network 140 and the gaming machine 120-124 (step 530). In one embodiment, the secured communication link is only provided if the gaming machine 120-124 is idle and/or not being played by another player (step 520). In this embodiment, if the gaming machine 120 is not idle, a gaming machine unavailable message is provided to the outside network 140 (step 540). Additionally, the remote player can be asked to choose another of the gaming machines 122-124.

[0085] Once the outside network 140 accesses a gaming machine 120-124, information can be documented (step 550). The information can include identification information about the remote player, amounts wagered, the time the remote player plays the gaming machine 120 and the location from which the remote player is playing the gaming machine 120. When the remote player begins to play, the player views a digital representation of the gaming machine 120.

[0086] The foregoing discussion of the invention and as presented in Exhibit A (incorporated herein by reference) has been presented for purposes of illustration and description. Further, the description is not intended to limit the invention to the form disclosed herein. Consequently, variation and modification commensurate with the above teachings, within the skill and knowledge of the relevant art, are within the scope of the present invention.

[0087] The embodiment described herein and above is further intended to explain the best mode presently known of practicing the invention and to enable others skilled in the art to utilize the invention as such, or in other embodiments, and with the various modifications required by their particular application or uses of the invention. It is intended that the appended claims be construed to include alternate embodiments to the extent permitted by the prior art.