WO2007030288A2

WO2007030288A2 - Gaming network and peripherals and device identification

Info

Publication number: WO2007030288A2
Application number: PCT/US2006/032073
Authority: WO
Inventors: Harold K. Robb; James W. Morrow; David W. Carman; Paul Randall Osgood; Carmen Dimichele
Original assignee: Bally Gaming International, Inc.
Priority date: 2005-09-07
Filing date: 2006-08-15
Publication date: 2007-03-15
Also published as: WO2007030288A3; US20070054741A1

Abstract

The gaming network described herein includes network security features, host security features, audit protocols, and design architecture approaches to reduce the possibility of network attacks. The gaming network provides for traffic confidentiality, encryption, message authentication, secure authentication mechanisms, anti-replay protection of traffic, key management mechanisms, robust network availability, misrouting and redirection protection and prevention, rejection of external traffic, and a high entry-barrier to device addition to the network. The system provides the capability of identifying the presence and location of network devices. During start-up, a device sends its MAC address out on the network A local switch collects MAC and IP addresses for the devices connected to it. Periodically, the switch transmits raw Ethernet frames, USB packets, or TCP packets containing tables of devices and associated MACIIP addresses.

Description

GAMING NETWORK AND PERIPHERALS AND DEVICE IDENTIFICATION

Background of the Invention

[0001] 1. Field of the Invention The claimed invention relates generally to a network, and more particularly, to a gaming network with an identification and communication system for network devices.

[0002] 2. Background In early gaming environments, gaming machines were standalone devices. Security of the gaming machines was accomplished via physical locks, security protocols, security personnel, physical and video monitoring, and the need to be physically present at a machine to attempt to breach the security of the gaming machine. By the same token, management of the gaming machines required a great deal of personal physical interaction with each gaming machine. The ability to change parameters of the gaming machine also required physical interaction.

[0003] In view of the increased processing power and availability of computing devices, gaming machines have become customizable via electronic communications and remotely controllable. Manufacturers of gaming equipment have taken advantage of the increased functionality of gaming machines by adding additional devices and features to gaming machines, thereby maintaining a player's attention to the gaming machines for longer periods of time increasing minimum bet and bet frequency and speed of play. This, in turn, leads to the player wagering at the gaming machine for longer periods of time, with more money at a faster pace, thereby increasing owner profits.

[0004] One technique that has been employed to maintain a player's attention at the gaming machine has been to provide players with access to gambling-related information. In this regard, attaching a small electronic display to the gaming device, gambling-related information, as well as news and advertisements can be sent to the player. The gambling- related information may include, for example, information on sports betting and betting options for those sporting events. Additionally, the gambling-related information may also include information such as horse racing and off-track betting. News and advertisements can also maintain a player's attention by providing the player with access to information ranging from show times, to restaurant and hotel specials, and to world events, thus reducing the need and/or desire of the player to leave the gaming machine.

[0005] Moreover, it has been shown to be desirable to provide the player with interactive access to the above information. This type of interactivity allows players significantly more flexibility to make use of the above-described information. The gambling-related information can also be utilized by the player in a much more efficient manner. In this regard, greater levels of flexibility and access are likely to make the player remain and gamble at the gaming machine for significantly longer periods of time. [0006] In addition, the player may participate in a "premium" promotion where the player is registered with the gaming establishment as a club member when the player inserts an ID card into the gaming machines during play. The player may be rewarded for certain play patterns (e.g. wager amounts, wager totals, payouts, time of play, or the like) and earn redeemable benefits or upgrade of club member status.

[0007] Attempts to distribute gambling-related information and advertisements to players and to allow the recognition of premium membership players have resulted in additional system components that may be attached to the gaming devices. These components for accessing and displaying information for gaming machines may include a keypad, card reader, and display equipment.

[0008] The amount of interactivity and data presentation/collection possible with current processor based gaming machines has led to a desire to connect gaming machines in a gaming network. In addition to the gaming machines themselves, a number of devices associated with a gaming machine or with a group of gaming machines may be part of the network. It has become important for the devices within a gaming machine or cabinet to be aware of each other and to be able to communicate to a control server. Not only is the presence or absence of a network device important, but also the physical location of the device and the ability to associate devices within a particular gaming machine has become a necessary component of a gaming network.

[0009] Current networks for gaming machines have been primarily one-way in communication, have been slow, and have been proprietary (custom designed and incompatible with commercial networking equipment). Prior art networks provided accounting, security, and player related data reporting from the gaming machine to a backend server. Secondary auditing procedures allowed regulators and managers to double check network reporting, providing a method of detecting malfeasance and network attacks. However, such security is remote in time from when a network attack has occurred. Prior art networks lack many security features needed for more rapid detection of cheating from a variety of possible attackers. [0010] Although prior art networks of gaming machines provide advantages to gaming establishment operators, they also engender new risks to security of the gaming establishment and to the gaming machines. Not only is traditional data associated with gaming machines now potentially at risk on the gaming network, but personal player information is now at risk, as well.

[0011] In addition, the proprietary nature of prior art gaming machine networks limits the ability to use commercially available technology. This adds to the cost of gaming networks and limits their scalability and the ability to upgrade as technology improves. Further, as gaming machines are grouped in networks, the value of the pooled financial data traversing the network creates a great temptation to attack the network. The potential reward from attacking a network of gaming machines is greater than the reward from attacking a single machine.

[0012] Attempts to illicitly obtain access to the gaming network are referred to as network attacks. These attacks can be driven by different motivations and are characterized by the type of attack involved. In addition, attackers can be either insiders (gaming establishment employees, regulators, security personnel) or outsiders. Figure 7 illustrates possible attacks on a network. The gaming network 701 may be attacked by an insider 703. Insiders include casino employees, regulators, game manufacturers, game designers, network administrators, and the like. Outsiders 704 might also attack the network 701. Outsiders may include hackers with an IP connection attacking the network and/or devices (including games) on the network. The network may be attacked via a bridge 702 to the Internet. Examples of attacks are described below. In many cases, an attacker may attempt to populate the network with one or more devices that are not valid members of the network. The presence of such devices on the network may provide information to an attacker that can be used in attacks on the network. The devices might also themselves serve as a point of attack on the network. For example, an attacker could place a bill collector on the network that would allow the user to effectively play for free by providing false coin-in information. Other false devices could be added to the network, leading to security risks. [0013] Attack Motivation

[0014] Typical motivations for attack on a gaming network include the desire to steal money or to embarrass or blackmail an entity. For example, an attacker may attempt to steal money from the gaming establishment, from a patron or player, or from a regulatory or other political body (e.g., a state that taxes gaming revenue). The attempt to steal may involve attempts to artificially manipulate wagers or payouts to the attacker's benefit. An attacker may also attempt to obtain credit or other personal information from the network that can be used to illicitly obtain money. Other attackers (typically insiders) may wish to manipulate accounting data to defraud government agencies by underreporting taxable revenue. An attacker may attempt to collect gaming habit or other sensitive information regarding a patron as a blackmail threat, or the attacker may attempt to embarrass or blackmail the gaming establishment, the gaming machine manufacturer, a regulating agency, or a political organization by showing the vulnerability of the network to attack. Instead of talcing money directly, an attacker may attempt to manipulate a network so that a gaming establishment loses money to players. [0015] Attack Types

[0016] Attackers may attempt one or more direct attacks against the network, attacks against hosts, physical attacks, or other types of attacks. Attacks against the network may include attempts to obtain plaintext network traffic, forging network traffic, attaching fraudulent devices to the network, and denying network services.

[0017] Consequently, there are a number of methods of attack to obtain plaintext traffic. An attacker may eavesdrop (e.g., electronically) on unprotected traffic. The plaintext messages may be openly accessed or inferred via message and traffic analysis. Eavesdropping may be accomplished by illicitly controlling a device that is a legitimate part of the network or by re-routing network traffic to the attacker's own device. [0018] Furthermore, if the attacker has access to the network and can mimic network protocols, the attacker may forge network traffic so that malicious messages are routed as legitimate messages. Such malicious messages can affect game play, send false financial transactions, reconfigure network administration, and/or disable security features to permit other forms of attack, or to hide current attacks. This type of attack may also include repeating legitimate messages for malicious purposes, such as repeating a password message to gain access to the privileges associated with that password, playing back a cash withdrawal request, a winning game play message, or a jackpot won event.

[0019] Still further, "denial of service" attacks are a notorious method of attacking a network or server. Such attacks often consist of flooding the network with bogus messages, therefore blocking, delaying, or redirecting traffic. The saturation of the network at the devices, servers, IP ports, or the like, can prevent normal operation of the network, especially for those network services that are time sensitive. [0020] Moreover, an attacker may also use the network to attack a host or to attack the host directly via a local console. This is accomplished by attacking vulnerable, exposed, and/or unprotected IP ports, or via a "worm" transmitted via email, for example. In this way, malicious code can be introduced into the network to open the door for later attacks and to mask this and other attacks.

[0021] In addition, physical attacks on the network devices may also be a goal of an attacker. The devices, hosts, servers, and consoles should all have physical protection and security to prevent access by outsiders or by unauthorized insiders. Devices requiring such protection may include game machines, network cables, routers, switches, game servers, accounting servers, and network security components including firewalls and intrusion detection systems.

[0022] Other attacks may include attacks on the encryption/certification system. An attacker may attempt to compromise or to obtain the private key (e.g. of an operator or a manufacturer) of a public key infrastructure. Alternatively, the attacker may compromise the certifying authority of the network owner. Other schemes may include reinstalling older, but legitimate versions of software (recognized by the system as legitimate) the older version not being updated for corrected security flaws. Bridging a secure network to another network may also be attempted.

[0023] In some cases, the regulatory jurisdiction may have its own encryption key. This may be another type of inside attack that may be made. Someone in the regulatory jurisdiction may attempt to move or spoof data on the network for one or more of the purposes described above.

[0024] A gaming network may have a large number of dynamically changing and reconfigurable components. Because of the desire to keep down-time to a minimum, it is important that the population of devices on the network be determinable and verifiable. In the past, this has meant pre-programming knowledge of all other devices into each device, so that communication between devices could take place. Such a requirement of preprogramming or pre-knowledge is too time consuming to be practical in a gaming network environment.

[0025] In addition, operators desire to be able to access individual devices inside of a gaming machine from a central server or from other machines. In addition, it may be desirable for multiple machines to be able to communicate with a peripheral so that peripherals could be shared. In other cases, it may be desired to temporarily use another machines peripheral upon failure of one of its own peripherals.

[0026] Another disadvantage of current gaming systems is the hybrid nature of networks that include a number of different protocols. Many legacy devices are unable to effectively communicate with other devices in the system. In addition, proprietary protocols add to the expense of device manufacture and replacement.

[0027] Accordingly, a gaming network requires robust protection against attacks from insiders and outsiders using a variety of attack methods.

Summary of the Invention

[0028] Briefly, and in general terms, the gaming network described herein includes network security features, host security features, audit protocols, and design architecture approaches to reduce the possibility and success of network attacks. More particularly, the gaming network provides for traffic confidentiality, encryption, message authentication, secure authentication mechanisms, anti-replay protection of traffic, key management mechanisms, robust network availability, misrouting and redirection protection and prevention, rejection of external traffic, and a high entry barrier to device addition to the network.

[0029] The host protection and security aspects include secure host initialization, disabling unneeded components, download verification, disabling of unused IP ports, discarding traffic, strong passwords, dynamic one time passwords for remote login, disabling default accounts, and appropriate "least-level" device privileges.

[0030] Audit requirements include integrity protection of audit logs, appropriate definition of auditable events, auditing of anomalous behavior, chain of evidence preservation, shutdown if audit disabled, full log entry audits, personal ID and time access audit trails, and auditing of internal user actions.

[0031] In one embodiment of the gaming network, a host and a network device authenticate themselves to each other on the gaming network and generate a first security association. The host and the network device, which may be a gaming machine, use the first security association to generate a second security association for use in protecting message traffic on the gaming network. Each message has a certain minimum level of protection, provided by encryption in one embodiment, while still permitting additional security measures to be implemented in transactions between devices on the gaming network. In another embodiment, the negotiation used to authenticate a device to a host is the Internet Key Exchange (IKE) protocol phase I. In yet another embodiment, the protection of message traffic on the gaming network is accomplished by IKE protocol phase IL [0032] In another embodiment, the gaming network comprises a core layer with a host server and switches, a distribution layer with managed routers and switches, and an access layer that includes managed switches and game machines. In another embodiment, the gaming network includes intrusion detectors to monitor attempts to attack the network. In yet another embodiment, the gaming network includes automatic disabling of any device where an intrusion attempt is detected by the intrusion detector. In another embodiment, logically grouped devices can be identified and associated with a particular gaming machine. In yet another embodiment, identification and communication of network devices is accomplished using the device network connection through an in-game switch device. [0033] Similarly, in yet another embodiment, the gaming establishment system maps the association of legitimate IP addresses with device MAC addresses, unique device ID's (DID) and treats any alteration of any IP/MAC/DID association as an intrusion attempt. In still another embodiment, the gaming network uses private network IP addresses for network members. In another embodiment, the gaming network implements a virtual private network protocol.

[0034] The system provides the capability of identifying the presence and location of network devices. During start-up, a device sends its MAC address out on the network. A local switch collects MAC and IP addresses for the devices connected to it. Periodically, the switch transmits raw Ethernet frames, USB packets, or TCP packets containing tables of devices and associated MAC/IP addresses. When a device receives information about another device, the device may attempt communication with that device. First, a verification procedure is used to validate the devices. Subsequently, communication is possible between the devices. The system in one embodiment, uses the steps of MAC transmission/table building/rebroadcast, device identification, verification, and communication to enable network devices to find and communicate with each other.

[0035] In addition, the invention provides a method and apparatus for managing peripheral devices that are accessible via the gaming network. The peripheral devices may be accessible to other gaming machines in the network. The peripheral devices may be accessible through the network by an operator or administrator. In one embodiment, an interface device referred to as an IPX (Internet Protocol Exchange) is used to connect the peripheral devices together and to connect them to the gaming network. Any MPU can then communicate with any peripheral on the network. Any peripheral device may send to and receive data from any other device on the network. In another embodiment, the IPX is used for intelligent routing so that legacy devices not originally designed to work within a gaming network may be added to the network.

[0036] In one embodiment, a central server can access a printer device on a gaming machine. This permits a central server to provide, for example, a custom voucher or other personalized print output when a player uses an identifying means at a gaming machine. A player may insert a player's club card in a machine and that action is noted at a central server. The server can then access the printer in the gaming machine and print out a voucher for drinks, meals, rooms, promotions (e.g. a promotion at the gaming machine itself) or other printed output to enhance the player club offerings. These offers may be individualized based on the player and the players specific characteristics and history. In addition, the system permits a single peripheral to be shared among a plurality of gaming machines. In another embodiment, if a peripheral fails at a gaming machine, it is possible to use the peripheral at another gaming machine temporarily until the disabled peripheral can be repaired or replaced, reducing game, machine downtime. Although the invention contemplates a server based network for sharing of peripherals, the invention may also be applied to a peer-to-peer configuration where one or more nodes share computing and storage responsibility and capability. These nodes can function simultaneously as clients and servers as desired.

[0037] In another embodiment, each device in a gaming machine and on the network has an IP address and is IP addressable. In another embodiment, one or more devices can share an IP address as desired. In another embodiment, one or more of the devices in a gaming machine have an IP address and some do not. In one embodiment devices may include an Ethernet chip and accompanying MAC address. A host or network distribution device can assign IP addresses to each device and gather the devices into bindings indicating the association of the devices in a gaming machine or carousel. In another embodiment, devices may be pre-programmed with pre-arranged IP addresses. In one embodiment, the last digits of the IP octet are predefined to represent certain devices or types of devices (e.g. all printers have the same final digits). The initial digits may then be defined on a cabinet by cabinet basis so that unique addresses are defined. Other portions of the addresses may represent geographical locations if desired. IPv6 may be used in an embodiment of the invention. In another embodiment, a converter is used to convert non-IP protocols (e.g. USB, RS232, SDS,

I2C, and the like) to an internet protocol, for example, Ethernet protocol.

[0038] These and other features and advantages of the claimed invention will become apparent from the following detailed description when taken in conjunction with the accompanying drawings, which illustrate, by way of example, the features of the claimed invention.

Brief Description of the Drawings

[0039] Figure 1 is a diagram of an embodiment of functional layers of a gaming network. [0040] Figure 2 is a block diagram of an embodiment of a gaming network. [0041] Figure 3 is a flow diagram of initialization of a network device in an embodiment of a gaming network.

[0042] Figure 4 is a flow diagram of traffic authentication in an embodiment of a gaming network.

[0043] Figure 5 is a flow diagram of an attack detection protocol in an embodiment of a gaming network.

[0044] Figure 6 is a flow diagram illustrating a network device initialization sequence in an embodiment of the gaming network.

[0045] Figure 7 is a block diagram illustrating examples of possible network attacks. [0046] Figures 8A, 8B, and 8C are block diagrams of a gaming machine configuration in embodiments of the invention.

[0047] Figure 9 is a flow diagram illustrating one embodiment of game machine device management using the invention.

[0048] Figure 10 is a flow diagram illustrating the transmission step of Figure 9. [0049] Figure 11 is a flow diagram illustrating the identification step of Figure 9. [0050] Figure 12 is a flow diagram illustrating the communication step of Figure 9. [0051] Figure 13 is a flow diagram illustrating customized peripheral output in an embodiment of the invention.

[0052] Figure 14 is a flow diagram illustrating the response generation step of Figure 13. [0053] Figure 15 is a flow diagram illustrating another embodiment of the response generation step of Figure 13.

[0054] Figure 16 is a flow diagram illustrating the peripheral output step of Figure 13. [0055] Figure 17 is a flow diagram illustrating peripheral backup in an embodiment of the invention. DETAILED DESCRIPTION

[0056] The claimed invention is directed to a gaming network. The preferred embodiments of the system and method are illustrated and described herein, by way of example only, and not by way of limitation.

[0057] The gaming network described herein proposes an architecture and system that provides an appropriate level of security from network attack. There exist techniques to authenticate and verify individual messages or activities in existing gaming establishment networks relying on proprietary protocols, transport and message formats. However, the gaming network described herein provides additional protection to the network itself particularly when use of commercially based IP equipment is envisioned, above and beyond particular security protocols, for activities and transactions carried on the network. The gaming network is independent of, and in addition to, security techniques for particular transactions or activities.

[0058] Referring now to the drawings, wherein like reference numerals denote like or corresponding parts throughout the drawings and, more particularly to Figures 1-7, there is shown one embodiment of the gaming network constructed in accordance with the claimed invention. As shown in Figure 1, the network includes a core layer 101 over a distribution layer 102 above an access layer 103. The core layer 101 serves as a gateway between servers and the gaming devices. The core layer 101 is contemplated to be a so-called "back end" layer that resides in an administrative location, separate from the gaming floor, for example, and protected physically and electronically.

[0059] The distribution layer 102 serves to collect traffic between the core layer 101 and the access layer 103. The distribution layer may comprise trunks and switches that route message and signal traffic through the network. The access layer 103 provides a physical interface between the gaming machines (and any of their associated devices) and the rest of the network. This is done via managed switches.

[0060] One embodiment of a network using the layered scheme of Figure 1 is illustrated in Figure 2. The core layer 101 includes one or more servers 201 that are coupled via a communication path 202 to one or more switches 203. In one embodiment, the servers and switches of the core layer 101 are located within the gaming establishment premises in a secure administrative area. The servers 201 may, but are not required to be, game servers. The communication path 202 may be hardwire (e.g., copper), fiber, wireless, microwave, Ethernet, wireless Ethernet, or any other suitable communication path that may be protected from attack. In one embodiment, the switches 203 are L2/L3 switches. However, one of ordinary skill in the art will appreciate that other types of switches may be used without departing from the scope or spirit of the claimed invention.

[0061] The distribution layer 102 communicates with the core layer 101 via high bandwidth communications links 204. These links may be copper, fiber, Ethernet, wireless Ethernet, or any other suitable link. If desired, redundant links 205 may be built into the system to provide more failsafe operation. The communications links couple the core layer switches 203 to the distribution layer switches 206. These may be one or more switches, such as L2 switches, for example.

[0062] The distribution layer 102 communicates with the access layer 103 via a high capacity communication link 207. The link 207 may be Ethernet, wireless Ethernet, wire, fiber, wireless, or any other suitable communication link. In the embodiment of Figure 2, the communication link 207 is coupled to a gaming carousel 208 that comprises a plurality of gaming machines (e.g., 16 gaming machines 215A-215P). A managed switch 209 is coupled to the link 207 to provide an interface switch to a plurality of other managed switches 210 through 213. In the embodiment illustrated, each of the managed switches 210-213 manages four game machines 215. It is understood that the types of switches may be changed without departing from the scope of the claimed invention. Further, switches with more or fewer ports may be substituted and more or fewer tiers of switches in the access layer may be used, as well, without departing from the scope or spirit of the claimed invention. In another embodiment, each game machine has its own managed switch.

[0063] In one embodiment of the gaming network, the network uses TCP/IP sessions between the gaming machines 215 and the servers 201. The TCP/IP sessions are used to exchange private information concerning game operations, game performance, network management, patron information, revised game code, accounting information, configuration and download, and other sensitive information. In one embodiment, sessions may be a single message and acknowledgement, or the sessions may be an extended interactive, multiple transaction session. Other instantiations may include UDP/IP, token ring, MQ₅ and the like. [0064] In one embodiment of the gaming network, intrusion detectors provide additional security. In this regard, there may be intrusion detectors located between each layer, such as intrusion detector 220 located between the core layer 101 and the distribution layer 102, and the intrusion detector 221 located between the distribution layer 102 and the access layer 103. In addition, certain sensitive locations or choke points may include intrusion detectors such as the intrusion detector 223 coupled to the switch 209. The intrusion detector 223 may disable the individual ports of switch 209 to isolate attacks while permitting continued operation of the remainder of the gaming network.

[0065] Figure 8A is a block diagram of an example gaming machine configuration in an embodiment of the invention. The gaming machine 215 communicates with the network (e.g. through a managed switch such as switch 210) via communications path 214 which may be Ethernet, wireless Ethernet, wire, fiber, wireless, or any other suitable communication link. The gaming machine 215 may include a communications interface 801 that handles communication between the gaming machine and its associated devices and the remainder of the gaming network. Communication interface 801 is coupled to a game monitoring unit (MPU) 802. The MPU serves as the processor of the gaming machine. An interface referred to as a "SMIB" 803 (smart interface board or slot machine interface board) is coupled to the MPU and to the communication interface 801. SMIB 803 is coupled to one or more peripherals or other devices connected to the gaming machine 215, such as devices 804 A to 804N of Figure 8A. In one embodiment of the invention, SMIB 803 uses an Ethernet or other high-speed communications link to the communication interface 801, MPU 802, and devices 804A through 804N. In one embodiment, the SMIB includes switching capabilities. In one embodiment, the SMIB is implemented with a Mastercom 300 by Bally Technologies. [0066] Figure 8B illustrates an alternate embodiment of a gaming machine and peripherals. The gaming machine communicates with the network via communications path 214 (which may be an Ethernet connection). Communication is handled by network distribution device 805. This device could be an Ethernet hub, for example, or any other suitable communications interface. The game machine includes an MPU 802 that provides processing for the game. A number of peripherals are included in the gaming machine and are coupled directly to the network distribution device 805 or to the MPU 802. In the embodiment of Figure 8B, such peripheral devices include lights 806, keypad 807, card reader 808, primary display 809, lights 810, button deck 811, printer 812, hopper 813, coin acceptor 814, bill acceptor 815, and secondary display 816. It is understood that not every gaming machine will have this exact configuration of peripherals. A gaming machine may have fewer or more peripherals, and different peripherals, without departing from the scope of the invention.

[0067] An alternate embodiment of a gaming machine and peripherals is illustrated in Figure 8C. Here the gaming machine remains coupled to the gaming network via communication path 214 and network distribution device 805. The gaming machine includes an MPU 802 and a number of peripheral devices. In this embodiment, the devices are coupled to the network distribution device 805 and/or the MPU 802 via a plurality of protocols. These protocols could include parallel connections (e.g. lights 806), 12C connections (e.g. keypad 807), USB (e.g. card reader 808), LVDS (e.g. primary display 809) and other protocols. In this embodiment, the MPU 802 and/or the network distribution device 805 convert from the non-Ethernet protocol to Ethernet protocol for communication via the network.

[0068] The gaming network may use a number of network services for administration and operation. Dynamic Host Configuration Protocol (DHCP) allows central management and assignment of IP addresses within the gaming network. The dynamic assignment of IP addresses is used in one embodiment instead of statically assigned IP addresses for each network component. A DNS (domain name service) is used to translate between the domain names and the IP addresses of network components and services. DNS servers are well known in the art and are used to resolve the domain names to IP addresses on the Internet. [0069] Similarly, Network Time Protocol (NTP) is used to synchronize time references within the network components for security and audit activities. It is important to have a consistent and synchronized clock so that the order and the timing of transactions within the gaming network can be known with reliability and certainty. Network information can be gathered centrally at a single workstation by using the Remote Monitoring (RMON) protocol. SNMP (simple network management protocol) allows network management components to remotely manage hosts on the network, thus providing scalability. In one embodiment of the gaming network, SNMPv3 is used to take advantage of embedded security mechanisms to mitigate malicious attacks made against the configuration management function. Still further, TFTP (trivial file transfer protocol) is used by servers to boot or download code to network components.

[0070] In one embodiment, the network may be implemented using the IPv6 protocol designed by the IETF (Internet Engineering Task Force). When using IPv6, the network may take advantage of the Quality of Service (QoS) features available with IPv6. QoS refers to the ability of a network to provide a guaranteed level of service (i.e. transmission rate, loss rate, minimum bandwidth, packet delay, etc). QoS may be used as an additional security feature in that certain transactions may request a certain QoS as a rule or pursuant to some schedule. Any fraudulent traffic of that nature that does not request the appropriate QoS is considered an attack and appropriate quarantine and counter measures are taken.

[0071] Similarly, the Type of Service (ToS) capabilities of IPv4 may also be used in a similar manner to provide additional security cues for validation of transactions. Again, certain types of transactions may be associated with a particular specific ToS or a rotating schedule of ToS that is known by network monitors.

[0072] Traffic Content

[0073] In an embodiment of the gaming network, the traffic content varies in size and sensitivity. Messages may comprise transactional messages related to game play, such as coin-in. Other messages may be related to management, administration, or sensitive information, such as administrator passwords, new game code, pay tables, win rates, patron personal data, or the like.

[0074] Security

[0075] The gaming network includes network security features, host security features, audit protocols, and design architecture approaches to reduce the likelihood of success of network attacks. Where attacks cannot be prevented, the gaming network attempts to make such attacks expensive in terms of the computational power required, the time, risk, effect, and duration of the attack. Identification of attacks and the rapid recovery from such attacks should be emphasized, as should the limiting of the effect of any attacks.

[0076] Accordingly, the gaming network provides for traffic confidentiality. All nodes within the network exchange information that is confidentially protected. One method for providing confidentially protected data is by using encryption. A number of encryption schemes may be used, such as an FIPS approved encryption algorithm and an NIST specified encryption mode, such as the Advanced Encryption Standard (AES).

[0077] In addition, all nodes within the gaming network apply source authentication and integrity of all traffic. A suitable message authentication mechanism may be, for example, an

FIPS approved algorithm such as the Keyed-Hash Message Authentication Code (HMAC) and SHA-I. All nodes automatically drop messages that have been replayed. As noted above, replayed messages are a means of attack on network security.

[0078] Key management mechanisms should be sufficient to resist attack. In one embodiment, a 1024 bit Diffie-Hellman key exchange with a 1024 bit DSA/RSA digital signature is used to render key attacks computationally infeasible. It should be noted that the key sizes are given as examples only. Smaller or greater key size can be used in the gaming network as security recommends. The gaming network should be robust, maintaining the availability of critical services. The network should include protection against misrouting and also discard any traffic that has a source or destination outside of the network. The gaming network should also require a minimum level of authentication and assurance before permitting an additional device on the network and prevent such connection when the assurance is not provided.

[0079] Host protection and security includes secure host initialization where the host performs a self-integrity check upon power-up initialization. All operating system components that are not needed are disabled. When software patches are downloaded to the gaming network, the host verifies them. The host checks for unused IP ports and disables them prior to connecting to the gaming establishment network. When processing network traffic, any traffic not addressed to the host is dropped from the processing stack as soon as possible. In the gaming network, all service, guest, and default administrator accounts that may be part of the operating system are disabled. In one embodiment, one-time passwords and/or multi-part passwords are used for remote login, if remote login is enabled. The onetime password may itself be a multi-part password. When using a multi-part password, different trusted individuals each hold a part of the multi-part password. The entire password is required for enablement of the system. This prevents any single individual from compromising security. Moreover, all host software components are operated with the lowest privilege necessary for sufficient operation. For example, software that can operate with "user" privilege will do so, to limit its usefulness to an attacker.

[0080] Audit requirements include integrity protection of audit logs from date of creation and throughout their use. Events that are audited in an embodiment of the gaming network include account logon events (both success and failure), account management (both success and failure), directory service events (failure), logon events (success and failure), object access (failure), policy changes (success and failure), privilege use (failure), system events (success and failure), access to a host or networking device logged by user name and the time of access, and all other internal user actions. Anomalous behavior is audited and logged for purposes of evidence for law enforcement and/or attack recognition. Audit information is collected and stored in a secure manner to preserve the chain of evidence. If there is a failure of the audit system, automatic shutdown is initiated.

[0081] The gaming network is designed so that there is no single point of failure that would prevent remaining security features from operating when one is compromised. The gaming network also will continue to operate in the event of bridging to another network, such as the Internet.

[0082] Secure Initialization of Network Devices

[0083] The gaming network provides confidence that a network device is contacting a legitimate DHCP server rather than a spoofed server. The gaming network uses Internet Key Exchange (IKE) in one embodiment. There are a number of modes and phases of IKE. Phase I of IKE includes two modes, referred to as "main mode" and an "aggressive mode". Phase II has a single mode referred to as "quick mode". Main mode takes six packets to complete while aggressive mode takes 3 packets. Quick mode takes 3 packets to complete. In some embodiments, Phase I is used for initialization and Phase II is used to create security for subsequent traffic and messages. Figure 3 is a flow diagram illustrating the initialization of a network device using main mode of Phase I.

[0084] Phase I is used to authenticate devices to each other and to protect subsequent Phase II negotiations. In the following description, the network device is referred to as the initiator and the server is referred to as the responder. Referring to Figure 3, at step 301, the initiator sends a first IKE packet to the responder. The packet may or may not include vendor ID's (VID) that can inform the responder of the extensions the initiator supports. Each IKE message includes a mandatory Security Association (SA) that defines how to handle the traffic between the two devices. The SA of the initial packet lists the security properties that the initiator supports, including ciphers, hash algorithms, key lengths, life times and other information. At step 302, the responder replies with an IKE packet that may or may not include a VID, but does include a mandatory SA payload. At this stage, the packets are not encrypted because there is still no key for encryption.

[0085] The third packet, at step 303, is from the initiator to the responder and uses the Diffie-Hellman key exchange protocol. The packet contains a key exchange (KE) payload, a NONCE payload, and a certificate request (CR) payload. The public keys are created whenever the phase I negotiation is performed and are destroyed when the phase I SA is destroyed. The NONCE payload is a large random number that has not been used before on the network ("never-used-before") and is useful in defeating replays. The CR payload includes the name of the Certification Authority for which it would like to receive the responder' s certificate. (Note that the CR can be sent in the third and fourth packets or in first and second packets, as desired). [0086] At step 304, the responder returns its own KE, NONCE, and CR in the fourth packet. The third and fourth packets are used by each device to generate a shared secret using public key algorithms. . Because only public keys are sent in this exchange, and no encryption key is yet available, the messages are still not encrypted.

[0087] At step 305, the initiator uses the KE to generate a shared secret and uses it to encrypt the fifth message. The fifth message includes an Identification (ID) payload, zero or more certificate (CERT) payloads (or CRL) and a Signature payload (SIG) that is the digital signature that the responder must verify. The ID payload is used to tell the other party who the sender is and may include an IP address, FQDN (fully qualified domain name), email address, or the like. In an embodiment of the gaming network, it is an IP address. The CERT payload is optional if the initiator or responder cache the public key locally. In an embodiment of the gaming network, the public key is not cached locally and failure to receive a CERT payload is a failure of the negotiation. The SIG payload includes the digital signature computed with the private key of the corresponding public key (sent inside the CERT payload) and provides authentication to the other party.

[0088] At step 306, the responder sends a message with its ID, CERT, and SIG payloads. When both the initiator and responder have successfully verified the other party's SIG payload, they are mutually authenticated. The result of the successful negotiation is the Phase I SA.

[0089] After the phase I negotiation is successfully completed, the phase II negotiation can proceed to create SA's to protect the actual IP traffic with an IPsec protocol. Each of the phase II packets are protected with the phase I SA by encrypting each phase II packet with the key material derived from phase I. Phase II in the gaming network is illustrated in Figure 4. At step 401, the initiator sends a message with a number of payloads. The message includes SA and NONCE payloads that are the keying material used to create the new key pair. As noted above, the NONCE payload includes random never-used-before data. The SA payload is the phase II proposal list that includes the ciphers, HMACs, hash algorithms, life times, key lengths, IPsec encapsulation mode, and other security properties. Optionally, the message may include IDi (initiators ID) and IDr (responders ID), which can be used to make local policy decisions.

[0090] At step 402, the responder replies with a message with the same payload structure as the first message. The initiator replies with a HASH value at step 403. After phase II is completed, the result is two SA' s. One is used for inbound traffic and the other for outbound traffic.

[0091] Rekeying is done when the lifetime of the SA used for protecting network traffic expires. In one embodiment, PFS (perfect forward secrecy) protocol is used for rekeying. The network ensures the set of secret keys generated by one protocol message exchange is independent of the key sets generated by the other protocol message exchanges. This means compromise of one key set does not lead to compromise of the other sets [0092] Additional protection for network traffic is provided by use of a "virtual private network" (VPN). As a result, all network traffic is protected, and not just TCP/IP traffic. [0093] In an alternate embodiment, the network may be constrained to a particular regulatory jurisdiction. In this embodiment, a regulatory jurisdiction has its own private key and a multi-tiered approach is used to validate devices. During initialization, a combination key at an administrative location is used to sign messages and data. If there are attempts to communicate outside the jurisdiction, the lack of the regulatory jurisdiction key prevents communication. This is another security feature that is used to limit inside and outside attacks on the gaming network.

[0094] In one embodiment, the system uses a secure key server to store private keys and certificates. The secure key server requires multi-part passwords as described above for access and enablement. The secure key server is resistant to network or Internet attacks, denial of service attacks, and other software or protocol attacks. The secure key server is also resistant to physical attacks such as forced break-in attempts, changes in temperature, changes in pressure, vibration, attempts to disassemble the secure key server. In one embodiment, any attack attempt results in the destruction of stored keys, certificates, etc, to prevent compromise of the system.

[0095] In another embodiment, a physical transfer of certificates may be implemented as an additional security protection. No game machine or other device may be added to the system without a physical visit and installation of a certificate. In other words, a mere handshaking protocol is not sufficient to add a device onto the system. Rather, a potential new device will require a trusted person or persons to activate the device, install an appropriate certificate, and add it to the network. [0096] Blocking Illegitimate Traffic

[0097] As described above, the gaming network uses IKE, IPsec, and VPN to protect legitimate traffic from mischief. The gaming network also provides systems to block illegitimate traffic. Firewalls are installed at choke points within the access and distribution layers to isolate network segments from one another. Firewalls can limit the spread of damage from propagating beyond the compromised network segment. The use of NONCE never-used-before random numbers also prevents illegitimate traffic by blocking replay of legitimate messages. IKE and protection of all post initialization traffic makes it more difficult for illicit messages to achieve successful delivery.

[0098] In addition to detecting false messages using the techniques above, the gaming network reduces the possibility of access to the network by blocking all unused IP ports. Only IP ports required for gaming operation are enabled. To further limit the ability of outside access to the gaming network, private IP addresses are used. Typically IP addresses provide global uniqueness with the intention of participating in the global Internet. However, certain blocks of addresses have been set aside for use in private networks. These blocks of IP addresses are available to anyone without coordination with IANA or an Internet registry. Since multiple private networks may be using the same block of IP addresses, they lack global uniqueness and are thus not suitable for connection on the global Internet. Private network hosts can communicate with all other hosts inside the private network, both public and private. However, they cannot have IP connectivity to any host outside of the enterprise. Allocation of private network IP addresses may be accomplished pursuant to RFC 1918 protocol.

[0099] In another embodiment, the volume of network traffic is monitored at each link and compared to expected flow rates and/or historical flow rates. Histograms may be generated so that analysis and comparison of flow rates may be accomplished. Heuristic algorithms may be implemented to determine if the flow rate is within an acceptable range. If not, a data leak or attack is assumed and appropriate alarms are triggered. Heavy flow areas can be disabled so that appropriate investigation can be made. [00100] Detecting and Reacting To Attacks

[00101] Intrusion detection system (IDS) sensors and/or intrusion prevention systems are installed between the core, distribution, and access layers. IDS and intrusion prevention sensors may also be installed at choke points within the access and distribution layers to detect malicious traffic within these layers. One suitable IDS is "arpwatch" (www.securityfocus.com/tools/142) that monitors IP address changes, MAC addresses, flow rate changes, and other network activity and can be configured to notify an administrator when IP/MAC/DID address bindings (e.g. the combination of game machine DID and/or one or more associated device DIDs) change for a device on a gaming network. When a change is detected, automatic isolation procedures may be implemented to isolate the possible intrusion. Subsequent analysis and review by network administrators can determine appropriate responses.

[00102] The system may keep a physical map of the location of the IDS sensors so that when an intrusion is detected, the physical location of the attack can be immediately identified. Security can be dispatched to the location to apprehend the attackers, appropriate systems may be shut down or disabled, and perimeter measures can be taken to increase the chances of securing the attacker.

[00103] Figure 5 is a flow diagram of one embodiment of the operation of the intrusion detection system of the gaming network. At step 501, the gaming network is initialized and IP addresses are assigned to network devices. This may be accomplished using the technique described in Figures 3 and 4 or by any other suitable technique. At step 502, a mapping of the IP addresses of the network devices, their respective MAC addresses, and the DID is performed. This binding should remain stable through a session unless the core layer specifically initiates a change or if a regularly scheduled or anticipated change occurs. [00104] At step 503, the system monitors the network. Such monitoring may be accomplished by any suitable means for tracking IP/MAC/DID mapping. As noted above, one such method includes Arpwatch. At decision block 504, it is determined if there has been any change to the IP/MAC/DID mapping. If the answer is no, the system continues monitoring the network at step 503. If the answer is yes, meaning that there has been some change in IP/MAC/DID mapping, the system disables the IP address and the network device associated with the MAC address and DID in question at step 505. This step of disabling may also include shutting down ports or sections of the network to contain or limit any presumed attack on the network. The system notifies the administrator at step 506 so that analysis and correction may begin.

[00105] In an alternate embodiment of the system, the mapping may be between any two of the parameters IP address, MAC, and DID. In addition, there may be multiple devices inside of the gaming machine. In some instances, the DID of the gaming machine may be used exclusively. In other instances, the DID of an associated device such as a reel controller, LED controller, CPU, safeRAM, hard drive, physical cabinet, printer, or other associated devices may be used singly or in combination with the gaming machine DID. Each associated device may have a unique ID (such as a 32 bit hex value) so that the combination of game machine DID and/or one or more associated device DID's results in a unique ID that is difficult to duplicate. Fraudulent communications that lack the requisite binding will be detected easily. Further, malicious hardware that attempts to join the network will lack not only the correct device ID's but also the combination bindings described above. [00106] In yet another embodiment, the DHCP server is pre-loaded with a list of valid IP addresses, MAC addresses, machine and associated device DIDs, and IP/MAC/DID bindings. If the game machine requesting initialization or permission to join the network is not on the pre-determined list, the machine is not permitted on the network and an attack is logged. An alarm can be triggered so that the attacker can be identified and captured when possible. [00107] In some instances, it may be useful to use dynamically assigned IP addresses in a gaming network. In such a situation, it is still important to be able to identify with certainty that only valid devices are on the network. In one embodiment, globally unique identifiers (GUIDs) are used to identify managed switches at one or more levels of hierarchy. For example, the switch could be at the game cabinet level, a bank of machine level, and/or a casino level. The GUID is used to positively identify a valid managed switch. [00108] Associated with each managed switch is what is referred to herein as a "collection" of devices associated with that switch. The DIDs and MAC addresses can be used to identify the devices as being valid members of the collection. The dynamically assigned IP address can then be mapped to the collection so that the members of the network are known, and communication with the collection and its constituent devices can occur. The IP addresses can be subnet IP addresses for members of the collection if desired. [00109] GUIDs are registered at network creation and when valid devices are added to the system. Once registered, dynamically assigned IP addresses can be properly mapped for communication using the IP address if desired.

[00110] In another embodiment, each network device has its own GUID that is registered and may be mapped to a dynamically assigned IP address. If desired, the bindings described above may be implemented even with dynamically assigned IP addresses, once the proper mapping has been made using GUIDs.

[00111] Another embodiment takes advantage of GUIDs to create logical collections instead of physical collections. A logical collection may be disparate physically but may be useful for certain management, reporting, or game play operations. [00112] By being able to uniquely identify devices and collections, it is possible to create filters that allow communication with subsets of network devices at levels from single devices to collections to all devices and anywhere in between.

[00113] An additional security feature of the gaming network requires a secure boot sequence within each gaming machine and server such that an initial boot is accomplished using code residing in unalterable media. The initial boot code verifies the operating system and all network services it includes. Consequently, network services will not be enabled until the full operating system has been verified as legitimate.

[00114] Figure 6 is a flow diagram illustrating the boot initialization of a network device, such as a gaming machine in one embodiment of the gaming network. At step 601, the device boots from a locally stored unalterable media. At step 602, the network device establishes security for communication with a network host. This may be accomplished by the IKE phase I method described in Figure 3. Once secure host communication is established, traffic security is established at step 603. This may be accomplished by IKE phase II, as described in Figure 4.

[00115] If any of the steps fail in this sequence, communication is terminated and a network administrator is notified. At step 604, the network device submits its operating system for verification. Such verification may be by any desirable method and may be in addition to other network security features. At step 605, the host receives the verification request and checks the operating system of the network device.

[00116] At decision block 606, it is determined if the network device contains a legitimate operating system. If not, the device is disabled at step 607. This process may initiate notice to a network administrator, as well as, disabling of some portion of the network associated with the device in an attempt to mitigate damage from an attack. If the operating system of the network device is legitimate at step 606, the host enables the appropriate network services for the network device at step 608 and operation begins. As noted above, all traffic is protected in the gaming network to some degree. In addition, some traffic includes additional security checks.

[00117] In one embodiment, the game machine provides a secure boot and initial O/S verification as follows. Verification software resides within a BASIC input/output processor (BIOS). Upon application of power to the machine, the BIOS+ performs a self-verification on all of its code. Next, the verification software verifies all code, data and executables on any processing board (i.e., mains and personalities) upon application of power to the game machine. Once satisfactorily completed, the board (e.g. a Pentium class board) begins executing code from the BIOS+ contained in the conventional ROM device. This process verifies the media device such as a hard drive, CD-ROM/EPROM or equivalent and detects any substitution of the BIOS+.

[00118] Upon boot-up of the processor, the BIOS+ executes a SHA-I verification of the entire O/S that is presented. The digital signature is calculated and compared with an encrypted signature stored in a secure location on the game machine using, for example, the RSA private/public key methodology. If the signatures compare, the BIOS+ allows the operating system to boot, followed by the game presentation software. Next, display programs and content are verified, before being loaded into the RAM to be executed for normal game operation.

[00119] During communication, each message is protected using the security of the gaming network. However, certain messages incorporate additional security checks even if the package is considered trustworthy. For example, code downloads may require that they be cryptographically signed and verified before executing. For messages such as these, the digital signature for the code is independent of and in addition to the authentication provided by VPN and the other network security features. In addition to the digital signature check and verification, the gaming network implements increasing number versioning of network downloaded updates so that rollback attempts may be mitigated or eliminated. [00120] It may be desired to have some network communication links be wireless instead of hard wired. In such an environment, the gaming network includes wireless intrusion detection mechanisms detecting, for example, 802.1.la/b/g devices. Such detection has scope beyond network attacks and may detect wireless attacks on the gaming establishment, even if not specifically targeting the gaming network. [00121] Device Addressing

[00122] In one embodiment of the invention, each device, including each peripheral device in a game machine, could have its own MAC address. In another embodiment, one or more devices can share an IP address as desired. In another embodiment, one or more of the devices in a gaming machine have an IP address and some do not. The central server could be responsible for assigning IP addresses to each device and gathering the devices into bindings that represent a physical location of a device. For example, all of the bindings of a gaming machine may be in a single binding. Alternatively, the network distribution device 805 may be responsible for assigning IP addresses to the devices within the game machine. [00123] In one embodiment, there is a common IP address (e.g. 10.5.5.32) for the gaming machine and that is owned by network distribution device 805. (In some cases, the MPU 802 and/or other devices, such as the printer, may have their own IP addresses). The remaining devices in the gaming machine are addressable by a unique port assignment attached to the common IP address. For example, PORT 5020 could be associated with the card reader 808, PORT 5030 with the hopper 813, and the like. Even though the physical connection with the peripheral may be, for example, an RS232 connection, the MPU 802 and network distribution device 805 communicate using the IP and PORT address. In some cases the communication itself may use a proprietary protocol yet still use the IP and PORT address as a destination. [00124] In cases where multiple protocols are used in the system, the network distribution service can act as an Internet Protocol Exchange (IPX) to facilitate the translation of TCP/IP network traffic to the native protocol of a device and vice- versa.

[00125] Although the invention contemplates a server-based network for sharing of peripherals, the invention may also be applied to a peer-to-peer configuration where one or more nodes share computing and storage responsibility and capability. These nodes can function simultaneously as clients and servers as desired. [00126] Initialization of Gaming Machine Devices

[00127] An embodiment of the invention provides a process for identifying devices coupled to a game machine. This process is described in Figure 9. At step 901, during initialization, each device (e.g. devices 804A - 804N) attempts to communicate with the network and transmits its MAC/IP address. The address is received by a switch in the game machine (e.g. the SMIB 803, network distribution device 805, or the like) and a table of addresses of associated devices is assembled. This table is made available to the devices in the game machine so that the IP addresses of other devices within the gaming machine become available to each device.

[00128] At the identification step 902 each device identifies itself to other devices in the gaming machine. At step 903 a verification process is initiated so that it can be determined if the devices are valid devices on the network. At step 904 devices may begin to transmit data between themselves and to the core layer or other back-end server of the network. [00129] MAC/IP Transmission

[00130] A description of one embodiment of the MAC/IP transmission of step 901 is illustrated in the flow diagram of Figure 10. During a boot or initialization sequence 1001, any network-connected device inside the gaming machine will attempt to communicate with the network at step 1002 by sending its MAC/IP address via the SMIB or other switching device. The nature of this initial communication may be for a DHCP or BOOTP configuration, an ARP request, or any other attempt to identify itself to .the back-end system. The MAC/IP addresses that are part of these communication attempts are added at step 1003 to a table. This table is managed by the SMIB 803 in one embodiment, or by the MPU 802 in another embodiment. Eventually at step 1004, a table will be generated that contains the MAC/IP addresses of all of the devices in the gaming machine.

[00131] In one embodiment, the devices send only their MAC addresses but the switch or other management device associates an IP address with each MAC address to populate a table. This embodiment may be used when IP addresses are assigned dynamically as described above.

[00132] At step 1005, the switch or MPU, or whichever device is managing the address table, periodically transmits raw Ethernet frames, USB packets, or TCP packets that include a list of the attached MAC/IP addresses associated with that game machine. In one embodiment, the frame is sent on a regular basis (e.g. every three to five seconds) so that other devices can expect that frame and react appropriately if it is not received. The transmitted frame is sent to switches and game machines on the network. In one embodiment, the transmission is via User Datagram Protocol (UDP) but any suitable protocol may be used without departing from the spirit and scope of the invention. In this manner, game machine devices need only be able to recognize the frame to take action. Eventually all of the MAC/IP addresses of game machine devices are published throughout the network. In this embodiment, there is no necessity of flooding the network with broadcasts frames with address information. This information is distributed organically throughout the network. [00133] The process in one embodiment is an ongoing process, shown by the return path from step 1005 to step 1002 in Figure 10. The tables are rebroadcast periodically by the switch. This rebroadcast allows devices to learn about other new devices that have been added to the network. It also allows device to know when another device has left the network.

[00134] At this point in the process the information being collected is pre-authentication. It allows a list of possible devices to be known and addressable so that if the device is valid and authenticated, it can participate on the network. [00135] Identification [00136] The identification process 802 is described in conjunction with Figure 11. A device receives a MAC/IP transmission frame from the switch at step 1101. This is an ongoing process during runtime as the switch periodically transmits Ethernet frames containing updated and new MAC/IP address information as described above. At step 1102 the device identifies other devices within the same game machine or cabinet from information in the Ethernet frame. At step 1103 the device initiates an identification communication with one or more other devices in the game machine. The form of this transmission at step 1104 may be as simple as sending an "I'm here" message. In other embodiments, the identification message may include identification information about the device at step 1104. This information may include information such as the port address, device ID, a preferred communication protocol, and the like. In other embodiments, such information is provided during communication negotiations. [00137] Verification

[00138] Once two devices have identified themselves to each other, a verification procedure can take place. The verification procedure is intended to establish that the device with which another device is communicating is a valid gaming device. In one embodiment of the invention, verification may be accomplished by using the protocol described herein in connection with Figures 3 and 4. Any suitable verification protocol may be utilized without departing from the scope and spirit of the invention. In-cabinet devices have similar security concerns as other network devices described herein.

[00139] In one embodiment, a verification method such as is described in pending U. S. Patent application number 10/243,912, filed on September 13, 2002, and entitled "Device Verification System and Method", assigned to the assignee of the invention, and incorporated by reference herein in its entirety. The invention provides a system and method for verifying a device by verifying the components of that device. The components may comprise, for example, software components, firmware components, hardware components, or structural components of an electronic device. These components include, without limitation, processors, persistent storage media, volatile storage media, random access memories, readonly memories (ROMs), erasable programmable ROMs, data files (which are any collections of data, including executable programs in binary or script form, and the information those programs operate upon), device cabinets (housings) or cathode ray tubes (CRTs). Identification numbers or strings of the components are read and then verified. The process of verifying may comprise matching each identification number in a database to determine whether each identification number is valid. In the case where a data file comprises one of a plurality of operating system files, verification of that file, in effect, comprises verifying part of an operating system. For data files, the file names may comprise the identification numbers.

[00140] The database may comprise a relational database, object database, or may be stored in XML format, or in a number of other formats that are commonly known. The database may also comprise an independent system stack of bindings, which comprise numbers, identification strings or signatures in the database for matching or authenticating the components, from manufacturers of the components, each identification number being verified using the binding from the manufacturer of the respective component to verify the component. Especially in the context of smaller devices such as personal digital assistants (PDAs), such a system stack may comprise a subset of one or more global component databases containing bindings from manufacturers of the components, each binding of the subset being associated with at least one of the identification numbers of one of the components in the device.

[00141] Structural components, such as cabinets, may contain an electronic identification chip embedded within them, such as a so-called Dallas chip or an IBUTTON device manufactured by Dallas Semiconductor of Dallas, Texas. These devices allow a unique identifier, placed within a semiconductor or chip, to be placed on a component that may or may not be electronic, such as a computer or gaming machine cabinet. The IBUTTON device is a computer chip enclosed in a.16mm stainless steel can. The steel button can be mounted, preferably permanently or semi-permanently, on or in the structural component. Two wires may be affixed to the IBUTTON device, one on the top, and one on the bottom, to exchange data between the IBUTTON device and a processor, serial port, universal serial bus (USB) port, or parallel port.

[00142] The matching process may comprise matching each identification number based on the type of component that the identification number identifies. The identification number and the type of component are matched in the database in order to verify that the identification number is valid. Operation of the device may be stopped if any one of the identification numbers is not matched in the database. In the case of a game or gaming machine type of device, a tilt condition message is generated if any one of the identification numbers is not matched in the database. [00143] The database may consist of a set of signatures, also called bindings. At least with respect to the components that comprise data files or firmware, a well-known hash function, the Secure Hash Function -1, also known as SHA-I, may be used to compute a 160-bit hash value from the data file or firmware contents. This 160-bit hash value, also called an abbreviated bit string, is then processed to create a signature of the game data using an equally well-known, one-way, private signature key technique, the Digital Signature Algorithm (DSA). The DSA uses a private key of a private key/public key pair, and randomly or pseudorandomly generated integers, to produce a 320-bit signature of the 160-bit hash value of the data file or firmware contents. This signature is stored in the database in addition to the identification number. In another embodiment, Elliptic Curve Cryptography (ECC) may be used as the cryptographic methodology. Examples of ECC may be found in U. S. Patents 5,463,690 and 5,805,703 incorporated herein by reference in their entirety. [00144] Either contained in the device, or in communication with the device, is a processor and a memory containing executable instructions or a software program file for verification of the components (verification software), which may itself be one of the components to verify. The verification software may be stored on a persistent storage media such as a hard disk device, read only memory (ROM), electrically erasable programmable read-only memory (EEPROM), in the CMOS memory, battery-backed random access memory, flash memory or other type of persistent memory. Preferably, the verification software is stored in a basic input/output system (BIOS) on a solid-state persistent memory device or chip. BIOS chips have been used for storing verification software, such as the BIOS+ chip used by Bally Gaming Systems, Inc. of Las Vegas, NV in their EVO gaming system. Placing the verification software in the BIOS is advantages because the code in the BIOS is usually the first code executed upon boot or start-up of the device, making it hard to bypass the verification process.

[00145] Alternatively, the verification software may be stored in a firmware hub, which may comprise the part of an electronic device or computer that stores BIOS information. In personal computer hub technology, such as that manufactured by the Intel Corporation of Santa Clara, California, a hub is used in place of a peripheral component interconnect (PCI) bus to connect elements of chipsets.

[00146] The persistent storage media may be a removable storage unit such as a CD-ROM reader, a WORM device, a CD-RW device, a floppy disk device, a removable hard disk device, a ZIP disk device, a JAZZ disk device, a DVD device, a removable flash memory device, or a hard card device. However, the database is preferably stored in a non-removable, secure device either within the device being verified, or remotely on a server, in order to enhance security.

[00147] The verification software executes a DSA verification of the data files and firmware components. Also stored in the database is the public key of the private key/public key pair. For each data file and firmware component, as part of the DSA verification, the processor and verification software first computes the hash value of the digital contents of the component using the SHA-I algorithm. The verification software then processes or authenticates this computed hash value, using the DSA signature verification algorithm, which also takes, as input, the aforementioned public key stored in the database. The verification part of the DSA produces a boolean result (yes or no) as to whether the inputs solve the algorithm. If the algorithm is not solved by the inputs, then an unexpected result is produced, thereby failing to verify the particular component. This may cause a fault tilt to occur to prohibit the loading operation of the device. Otherwise, use of the device is permitted. A detailed description of the DSA can be found in the U.S. government's Federal Information Processing Standards Publication (FIPS) 186-2. That publication describes each step of the DSA signature generation and verification.

[00148] Alternatively, the set of executable instructions may use the Rivest-Shamir- Adleman (RSA) algorithm to verify the components. Using the RSA algorithm, a first abbreviated bit string or hash value is computed from each component's digital contents and encrypted into a digital signature. The digital signature is stored in the database along with the identification number for the component. When the device is verified, the component is verified by computing a second abbreviated bit string computed from the component's digital contents. The signature is retrieved from the database by searching the database for the identification number. The signature is decrypted to recover the first abbreviated bit string. The component is then verified by comparing the second abbreviated bit string with the first abbreviated bit string. If the first and second abbreviated bit strings do not match, then the component is not verified. As discussed below, this may cause a fault tilt to occur to prohibit the loading operation of the device. Otherwise, use of the device is permitted. [00149] Instead of creating a digital signature for, or signing, each data file individually, collections of data files may be signed together in order speed up processing. The abbreviated bit strings, hash values, or signatures, also called digests, of the collection of data files are collected into a catalog file, and the catalog is signed as described above. [00150] Communication

[00151] After verification between devices has been completed, they may begin communication. At step 1201 of Figure 12, a device initiates a communication with another device. The sending device may include a section of the first message to provide needed information to the intended recipient. This information may include at step 1202 the type of device, the protocol the device is using, any restrictions related to QOS, and other communication related information. At step 1203 the recipient determines if it can communicate with the sender directly or. if an interface is needed at decision block 1204. If an interface is needed at step 1206, the sender and receiver may need to communicate through the MPU, for example, if the MPU includes software or firmware for translating appropriately for the devices. If the devices can communicate directly, then messages are sent back and forth using an accepted protocol at step 1205.

[00152] The invention allows devices to be aware of each other's presence through MAC/IP transmissions. This permits the use of a single network port for each device to use to communicate with each other and with a back-end system. The devices do not need pre- knowledge of the MAC/IP addresses of other devices but can learn them at start up and during run-time. The system also allows a new device to be added to a game cabinet and have it be integrated and identified to the system without extensive IT effort. [00153] Although the invention has been described in connection with in-cabinet devices identifying themselves to each other, it is not limited to such an application. The invention may be used to provide identification of any network devices by organically updating identification information periodically in Ethernet frames. In addition, the invention is not limited to the specific network configuration described herein. Rather, the system can work with any number of network configurations without departing from the scope and spirit of the invention.

[00154] Peripheral Device Management

[00155] The ability to identify individual peripheral devices on a gaming machine, using, for example, the identification technique described herein, permits new capabilities for gaming network operation. These capabilities include customized peripheral output, cross- machine access to peripherals, hot backup of peripherals, system and carousel co-ordinated effects and operation, individual device customization and upgrading, control of multiple machines by a single player, use of multiple machines to play a single outcome game, multiplied screen area and sharing, and the like. [00156] An example of peripheral management using the system of the invention is illustrated in the flow diagram of Figure 13. This diagram illustrates the ability to provide customer specific output to a player at an individual gaming machine. At step 1301 the gaming machine receives player information such as by the insertion of a player's club card. At step 1302 the player information is transmitted to the server via the network. This transmission includes the address of the gaming machine. Using the system of the invention, the server has a binding of the gaming machine and its associated peripherals. At step 1303 the server checks a stored profile of the player. At step 1304 the server determines an appropriate response to the player. This response is based on the player profile as well as the peripherals available at the gaming machine and is described in more detail in conjunction with Figures 14 and 15 below. At step 1305 the server transmits a message to the gaming machine and/or to a specific peripheral of the gaming machine. At step 1306 output is generated at the appropriate peripheral. Examples of peripheral output are described in more detail in conjunction with Figure 16 below.

[00157] Figure 14 is a flow diagram illustrating the step of determining a response (step 1304 of Figure 13) to the presence of a player at a gaming machine. At step 1401 the server generates a basic response that may be used whenever a player is identified. This may be something as simple as instructing one or more of the gaming machine displays to display a welcome message to the player. Any other basic response that might be provided for all players may be provided at this step as well. At decision block 1402 it is determined if there is a custom system response that is to be provided to the player. Such a system response may include time based promotions that are intended to be provided to any players who are active at a given time. Other types of system responses may be used without departing from the scope of the invention. If there is a system response to be provided, it is added to a message at step 1403. If there is no system response, or step 1403 has been completed, the system proceeds to decision block 1404. At decision block 1404 it is determined if there is a player specific response to be provided. Such a player specific response may be determined based on the profile of the player. For example, the player may be eligible for a promotion such as complimentary vouchers for products or services. In other instances, the player may be offered the ability to play an enhanced version of the game or to select different games on the gaming machine not necessarily available to non-eligible players. If it is determined that there are player specific responses available, the system moves on to decision block 1405 to determine if the particular gaming machine has the necessary peripherals to satisfy the player specific response. For example, if the player is entitled to a voucher, it is determined at step 1405 if the gaming machine has a printer that can be used to print the voucher for the player. If so, the system proceeds to step 1406 and adds the player specific response to the message to be sent to the gaming machine.

[00158] If the gaming machine lacks the peripherals necessary for the player specific response, (or if there is no player specific response determined at step 1404) the system proceeds to assemble a message at step 1407 and sends it to the gaming machine. [00159] Figure 15 is another embodiment of the response generation step of Figure 13. In this embodiment, messages are sent at each step instead of waiting to assemble a message based on all of the decisions. For example, at step 1501 a basic message is generated and sent when a player is detected. If a system response is determined to be appropriate at decision block 1502, it is sent at step 1503. If there is a player specific response and the gaming machine has the correct peripheral, the message is sent at step 1505. [00160] Figure 16 is a flow diagram illustrating the peripheral output step of Figure 13. At step 1601 the game machine receives a message packet that includes a message for a peripheral. The message packet may be such as described in connection with Figures 14 and 15. The message is received at the network distribution device 805 or at the MPU 802. The message is routed to the appropriate peripheral device at step 1602. At step 1603 the peripheral device generates the appropriate output based on the message. In one embodiment, the output may consist of a greeting on one or more display devices associated with the gaming machine. For example, the output may display the name of the player and may be displayed on the primary display or on a secondary display of the gaming machine. In another embodiment, the peripheral output may be on more than one peripheral device. The display may inform the player that a voucher or other promotional output is being printed at a printer associated with the gaming machine. In other instances, a printer may be shared by more than one gaming machine and the message may indicate the location of the printer at which the player is to retrieve the voucher or promotion. [00161] Peripheral Backup

[00162] If a peripheral fails on a gaming machine, the system provides for the ability to utilize a nearby peripheral in another machine as a temporary backup so that game play is not interrupted. Figure 17 is a flow diagram illustrating the substitution of a backup peripheral upon failure of a peripheral in a game machine. At step 1701 the system checks for peripheral failure. If not, the system stays in the check peripheral mode. If there is a peripheral failure, the system checks at decision block 1702 if there is a suitable substitute peripheral in a location such that it can be used as a backup. For example, if a printer fails on a gaming machine, it may be possible to use a nearby printer as a substitute so that game play is not interrupted. If no suitable substitute peripheral is available at step 1702, the game is disabled at step 1703.

[00163] If there is a substitute peripheral available at decision block 1702, the player is informed at step 1704 that another peripheral will be used at step 1704. This may be accomplished via a displayed message at the player's gaming machine. At step 1705 the actions to be performed by the failed peripheral are routed to the selected substitute peripheral at step 1705. At step 1706 the failure of the peripheral is noted to administration so that appropriate repair can be initiated. [00164] Sharing Peripherals

[00165] Because the system allows individual peripherals to be addressed from a central server, it is possible to share a single peripheral among multiple gaming machines. For example, many times gaming machines are grouped together in what are referred to as "carousels". It is possible using this invention for a carousel of gaming machines to share certain peripherals. In one embodiment, a coin-in device, such as a bill acceptor, could be shared by a carousel of gaming machines. The bill acceptor could include a selection mechanism so that a player could indicate for which machine credit is desired. The player could then enter currency and the appropriate credit could show up on the desired gaming machine. In other instances, the payout of a gaming machine may be in the form of a printed credit slip. A carousel of gaming machines could share a single printer and the players cash- out could be printed at this shared printer.

[00166] In another embodiment, it may be possible to implement a system that permits other gaming machines or devices to accept wagers for a gaming machine that is being played by someone else. For example, consider Player A wagering on gaming machine A. Player B wishes to perhaps play the same gaming machine A but it is not available. By using this system, Player B could sit at gaming machine B and place wagers whose outcome depends on the outcome of game play at gaming machine A. In a way, player B may attempt to ride a hot streak of player A at gaming machine A. This is similar to other games such as craps, where it is possible to match the wager of another player or to wager on the performance of the thrower. [00167] In an alternate embodiment, gaming machine B could be remote geographically from gaming machine A₅ perhaps even in another state, but communicating over the network described herein (or any other suitable network). In such a scheme, there are safeguards in place to make sure that Player B's wager is accepted in a timely manner prior to game play on gaming machine A by player A. In some cases, the wager of Player B would be prevented if not made in time. The embodiment is not limited to a single additional player but may be implemented with one or more additional players. In addition, remote players may be able to place wagers on multiple other gaming machines being played by other players. [00168] In another embodiment, the remote gaming machine may be accessed and played remotely even without a player at the remote machine, so that a player may access any gaming machine on a network virtually from any location. [00169] Coordinated Effects

[00170] In one embodiment of the invention, the system permits the coordination of effects and actions across a group or all gaming devices. The lights, peripherals, and displays may all be coordinated for a show or a floor wide effect. For example, all or some of the unused machines in a carousel could have an attraction mode where the displays and speakers are coordinated to provided a planned a sequenced arrangement of images and sounds. The displays could all be consistently displaying the same image or an image could be made to seem to move around a number of displays. The effect is not limited to a single carousel but could be used throughout all gaming machines in an environment. The coordinated effect is not limited to an attraction mode but may be applied at any time, such as during a payoff, for coordinated advertising, announcements, promotional displays, and the like. [00171] Multiple Machine Control

[00172] In another embodiment of the invention, the system is used to permit a player to control multiple gaming machines from a single button deck and/or credit meter. The player may be provided with an opportunity to enable credits on multiple gaming machines, adjacent or remote from the players machine. The player may be able, for example, to select bets for multiple machines and enable game play on multiple machines with a single button on the players gaming machine. A player may choose to play slot machines to the immediate left and right for example. Instead of reaching back and forth to insert coins and make game playing choices, the player may simply sit at one machine and obtain credits, select bets, and initialize game play from the single gaming machine. The game play may be simultaneous or sequential. Alternatively the player may choose to play the machines one at a time in any sequence and as many times as desired before switching machines.

[00173] In another embodiment, the system permits a player to play a single outcome game on multiple machines. For example, consider a bank of gaming machines with three reel games. Using the invention multiple machines could be ganged together to play a multiple reel game. Using five machines a fifteen-reel single outcome game could be implemented. In such a case, special pay tables may be accessed and used. [00174] In another embodiment, games that require a much large display could take over adjacent displays to provide a new gaming experience. For example, multiple screens could be used to show twenty five or more hands of poker that the player could interact with. In other instances, multiple displays could be used in a more traditional game to provide an enhanced gaming experience.

[00175] In another embodiment, players may choose to implement a cooperative or competitive shared mode on one or more gaming machines. For example, two players may wish to share some or all of the reels of multiple gaming machines. In this manner, the outcome on the machines can affect the outcome on the shared reels. In other instances, the players may be in a competitive mode where success on one machine compared to the other machine may result in game play advantages or payouts.

It will be apparent from the foregoing that, while particular forms of the claimed invention have been illustrated and described, various modifications can be made without departing from the spirit and scope of the claimed invention. Accordingly, it is not intended that the claimed invention be limited, except as by the appended claims.

Claims

1. A method for identifying a first device on a network comprising: transmitting the MAC/IP address of the first device during an initialization procedure; detecting the transmission at a switch and creating a table of the MAC/IP address of the first device; periodically transmitting the table from the switch to the network.

2. The method of claim 1 wherein the switch transmits the table in an Ethernet frame.

3. The method of claim 1 further including the step of receiving a MAC/IP address of a second device at said first device.

4. The method of claim 3 further including the step of initiating a verification procedure between the first device and the second device to permit communication between the devices.

5. The method of claim 4 wherein the verification procedure comprises Internet Key Exchange (IKE) protocol phase I.

6. The method of claim 4 wherein the verification procedure comprises Internet Key Exchange IKE protocol phase II.

7. The method of claim 4 wherein the verification procedure comprises reading an identification number of a component of the first device and verifying that the identification number is valid.

8. The method of claim 1 wherein the switch is a Mastercom switch.

9. A method of identifying devices on a network comprising: causing each device to transmit its MAC address on the network and collecting the MAC addresses for each device in a table at a switch; periodically transmitting the table to the devices; initiating an identification process from a first device to a second device; executing a verification process between the first and second device; permitting communication between the first and second device if the verification process is successful.

10. The method of claim 9 wherein the transmission of the table is accomplished in an Ethernet frame.

11. The method of claim 9 wherein the verification procedure comprises Internet Key Exchange (IKE) protocol phase I.

12. The method of claim 9 wherein the verification procedure comprises Internet Key Exchange IKE protocol phase II.

13. The method of claim 9 wherein the verification procedure comprises reading an identification number of a component of the first device and verifying that the identification number is valid.

14. The method of claim 9 wherein the switch is a Mastercom switch.

15. The method of claim 9 wherein the table is rebroadcast over the network.

16. A method of identifying a first and second device on a network comprising: causing the first device to send identifying information on the network; causing the second device to send identifying information on the network; collecting the identifying information in a table at a switch in the network.

17. The method of claim 16 further including transmitting the table periodically on the network.

18. The method of claim 17 wherein the identifying information is used to generate address information.

19. The method of claim 18 wherein the identifying information is a MAC address.

20. The method of claim 19 wherein the MAC address is associated with an IP address in the table.

21. The method of claim 20 further including the step of sending identifying information from the first device to the second device.

22. The method of claim 21 further including verifying the first device and the second device.

23. The method of claim 22 further including the step of permitting communication between the first device and the second device when the verifying step is successful.

24. A method for initializing communication between a network device and a host located on a gaming network, comprising: negotiating a first security association between the network device and the host to enable the network device and the host to be authenticated to each other; using the first security association to generate a second security association to protect message traffic between the network device and the host.

25. The method of claim 24, wherein the step of negotiating the first security association comprises exchanging certain identification information in plaintext between the network device and the host, and using the identification information to exchange authentication information in encrypted form between the network device and the host.

26. The method of claim 25, wherein the authentication information is used to generate the second security association to encrypt traffic between the network device and the host.

27. The method of claim 26, wherein the second security association has a predetermined life and additional security associations are generated to protect the traffic when the second security association expires.

28. The method of claim 24, wherein negotiating the first security association is accomplished by using the Internet Key Exchange (IKE) protocol.

29. The method of claim 28, wherein negotiating the first security association is accomplished by executing phase I of the IKE.

30. The method of claim 24, wherein generating the second security association is accomplished by using the Internet Key Exchange (IKE) protocol.

31. The method of claim 30, wherein generating the second security association is accomplished by executing phase II of the IKE.

32. The method of claim 24, further including the step of verifying the operating system of the network device.

33. The method of claim 32, further including the step of enabling permitted network services on the network device when the operating system is verified.

34. A gaming network comprising: a core layer comprising a server coupled to a first switch; a distribution layer comprising a second switch coupled to the first switch; an access layer comprising a third switch coupled to the second switch and to a gaming device; an intrusion detector coupled to the network to detect attempts to attack the gaming network.

35. The gaming network of claim 34, further including an intrusion detector coupled between the core layer and the distribution layer for detecting attempts to attack the gaming network.

36. The gaming network of claim 35, further including an intrusion detector coupled between the distribution layer and the access layer for detecting attempts to attack the gaming network.

37. The gaming network of claim 36, wherein traffic on the gaming network is protected by a first level of security.

38. The gaming network of claim 37, wherein certain traffic messages and transactions on the gaming network are protected by a second level of security.

39. The gaming network of claim 38, further including a plurality of ports available to the gaming network and, wherein unused ports are disabled.

40. The gaming network of claim 39, wherein repeat messages are rejected by all devices coupled to the gaming network.

41. The gaming network of claim 40, wherein the intrusion detectors are used to detect changes in the association between IP addresses and MAC addresses of devices on the gaming network.

42. The gaming network of claim 41, wherein a device whose association between its IP address and MAC address has changed is disabled.

43. The gaming network of claim 42, wherein the gaming network uses private network IP addresses.

44. A method of initializing a gaming network, comprising: initializing a host of the gaming network; associating IP addresses with MAC addresses of network devices coupled to the gaming network and/or with device IDs ;(DIDs) of devices associated with the network device; monitoring changes to the IP/MAC/DID association of devices on the gaming network; disabling a network device when its IP/MAC/DID association is changed.

45. The method of claim 44, wherein the step of disabling a network device when its IP/MAC association is changed is accomplished automatically.

46. The method of claim 45, further including the step of notifying a network administrator when the IP/MAC association of a network device is changed and logging the changed association.

47. The method of claim 46, wherein the network administrator is notified automatically.

48. The method of claim 47, wherein the step of monitoring the IP/MAC associations of network devices on the gaming network is accomplished using intrusion detectors.

49. The method of claim 48, wherein the intrusion detector is implemented using an arpwatch intrusion detection system.

50. The method of claim 48, further including the step of disabling a portion of the gaming network coupled to the disabled network device.

51. A gaming network comprising; a host server; a switching network coupling the host to a plurality of network devices, the network devices including gaming machines; first software executed on the host server, on the switching network, and on the plurality of network devices to protect message traffic on the gaming network; second software independent of the first software for auditing all events on the gaming network; storage means coupled to the host server for storing audit information generated by the second software.

52. A method for authenticating communication from a device on a gaming network comprising: sending a communication from a device that includes a quality of service (QOS) request; receiving the communication at a host server and comparing the QOS request to a permitted QOS request for the device; authenticating the communication when the QOS request matches the permitted QOS request.

53. The method of claim 52 wherein the QOS request is independent of the type of communication sent from the device.

54. A method for communication between a peripheral device located in a gaming machine and a processing device in the gaming machine, comprising: assigning an IP address to the peripheral device; generating a message at the processing device and transmitting it to the peripheral device using the IP address.

55. The method of claim 54 wherein the processing device is an MPU.

56. The method of claim 54 wherein the processing device is a network distribution device.

57. The method of claim 54 wherein the processing device is an IPX (Internet Protocol Exchange).

58. The method of claim 54 wherein the peripheral device communicates using the IP/TCP protocol.

59. The method of claim 54 wherein the peripheral device communicates using the USB protocol.

60. The method of claim 54 wherein the peripheral device communicates using the Ethernet protocol.

61. The method of claim 54 wherein the IP address is a combination of a fixed IP address for the gaming device and a Port assignment of the peripheral device.

62. The method of claim 54 wherein the processing device converts Ethernet information to a non-Ethernet protocol for communication with the peripheral device.

63. The method of claim 54 wherein the peripheral device is coupled to the processing device via an Ethernet connection.

64. A method of communication between a server on a gaming network and a peripheral device located in a gaming machine comprising: assigning an IP address to the peripheral device; generating a message at the server and transmitting it to the peripheral device using the IP address.

65. The method of claim 64 wherein the IP address comprises a combination of a common IP address for the gaming machine and a port number for the peripheral device.

66. The method of claim 64 further including a plurality of gaming machines coupled to the server, each of the plurality of gaming machines including an associated peripheral device.

67. The method of claim 66 wherein each of the gaming machines has a unique IP address and the associated peripheral device has a port number.

68. The method of claim 66 wherein any of the plurality of gaming machines may communicate with any associated peripheral device via the server.