WO2024023425A1

WO2024023425A1 - Method, device and computer program for carrying out an electronic draw

Info

Publication number: WO2024023425A1
Application number: PCT/FR2023/051131
Authority: WO
Inventors: Franck RICHARD
Original assignee: La Française Des Jeux
Priority date: 2022-07-27
Filing date: 2023-07-20
Publication date: 2024-02-01
Also published as: FR3138553A1

Abstract

The invention relates in particular to a method for carrying out an electronic draw in a device, the device comprising a first and second part, the first part being secure. After having obtained (505, 530) at least one raw random number and at least one private signature key in the first part, said private key having been stored beforehand in the first part, said at least one obtained raw random number is signed, in the first part, using said at least one obtained private key, and transmitted (540) to a drawing module implemented in the second part.

Description

Method, device and computer program for electronic printing

[0001] The invention relates to the field of electronic drawing, in particular electronic drawing for games of chance.

[0002] When a game requires a result linked to chance, it is important that the device which makes it possible to obtain the result does not include any bias, that is to say that, statistically, the number of occurrences of a result is constant over a very large number of prints. By way of illustration, it is necessary, in a lotto drawing system using balls associated with numbers, to use balls that are equivalent in terms of shape and weight. In the context of an electronic drawing, specific devices offering very good chance qualities are generally used. These devices implement drawing functions which are based on the use of random numbers obtained from a module called a “random data generator”. This module is generally a hardware module which produces raw random data, generally binary, also called seed, which allows, after transformation, to determine a result in a given interval defined by the desired draw, for example to obtain 5 digits between 1 and 49.

[0003] Figure 1 illustrates an example of a gaming environment, in which an electronic drawing is implemented according to a known embodiment.

As illustrated, the gaming environment 100 here comprises a gaming device 105 such as a computer or a set of computers and a server 110 on which an electronic drawing function is implemented. The gaming device 105 and the server 110 are connected to each other by a communication network 115, for example an Internet or Ethernet type network. The gaming device 105 allows the execution of game modules, for example a module allowing players to participate in a lottery game. When a draw must be performed, a request 120 is transmitted to the server 110 which responds with a draw result 125. To provide a draw result, the server 110 includes a data processing system 130. This data processing system comprises for example a microprocessor and an associated memory allowing the execution of computer programs, referenced 135, as well as a cryptographic card 140. The cryptographic card 140 makes it possible to generate raw random numbers (seeds) in a secure manner. The cryptographic card 140 also makes it possible to store data securely, for example cryptographic keys, in particular keys private cryptographic assets that can be used to sign and thus authenticate the origin of data such as draw results.

[0005] As illustrated with reference to Figure 2, a computer program executed by the microprocessor and the associated memory 135 can request raw random numbers from the cryptographic card 140, generate drawing results from these raw random numbers , for example to provide sets of 5 numbers between 1 and 49, and sign these drawing results to allow their authentication.

[0006] Figure 2 illustrates the logical architecture of an electronic drawing system such as that described in Figure 1. As illustrated, the cryptographic card 140 comprises a random number generator 200 which can, upon request, address a random number raw to a transformation algorithm 205 implemented in the microprocessor and the associated memory 135. The transformation algorithm 205 then calculates a drawing result from the raw random number received (seed), for example 5 digits between 1 and 49 This drawing result is then sent to a signature module 210 which signs this result, as well as the raw random number used to calculate this result, for example using a private key obtained from a secure memory, referenced 215, of the cryptographic card 140. The signed drawing result is then transmitted to the gaming device 105 which can use the drawing result after authentication.

[0007] Although the solution described with reference to Figures 1 and 2 makes it possible to obtain quality results, it nevertheless has drawbacks.

[0008] First of all, it does not exclude an attack known as “man in the middle” which can allow an attacker connected to the server 110 to manipulate the generated raw random number (the seed) before draw results are calculated and signed (with the raw random number used). Having information about the seed, the attacker can then play combinations that are known to him before the draw.

[0009] This solution can also be the victim of a temporal attack according to which a legitimate seed at a given moment would be reused later. Thus, the attacker would steal a seed at a given moment, study the results of a first draw, make a play for a second draw (knowing the results of the first draw), and reintroduce into the system the seed used for the first draw for the second draw.

[0010] Finally, this solution can also be the victim of an excessive replay attack, according to which an attacker plays a very large number of draws to find a suitable combination. [0011] The present invention aims in particular to resolve these problems.

Presentation of the invention

[0012] For this purpose, the invention proposes a method, a device and an electronic printing computer program.

[0013] A method of electronic drawing in a device is thus proposed, the device comprising a first and a second part, the first part being secure, the method comprising,

- obtaining, in the first part, at least one raw random number,

- obtaining, in the first part, at least one private signature key, said private key having been previously stored in the first part,

- signature, in the first part, of said at least one raw random number obtained using said at least one private key obtained, and

- transmission of signed data to a drawing module implemented in the second part.

[0014] The method according to the invention thus makes it possible to improve the reliability of electronic prints by signing data used for the print in a secure environment and thus allow subsequent authentication of certain print parameters and their verification.

[0015] According to particular embodiments, the method further comprises a step of authenticating, in said drawing module, the signed data received and, if the data received is authenticated, a step of drawing from said at least one raw random number included in the received signed data.

[0016] Still according to particular embodiments, the method further comprises obtaining, in the first part, additional validation data, said signature comprising the signature of said at least one raw random number obtained and said additional validation data obtained using said at least one private key obtained.

[0017] Still according to particular embodiments, said additional validation data comprise a sequence number, temporal information and/or a hardware reference of said first part.

[0018] Still according to particular embodiments, the method further comprises, in said drawing module, a step of validating said at least one number raw random received, said validation being based on said additional validation data.

[0019] An electronic drawing system is also proposed comprising a first and a second device, the first device being secure and comprising a data processing unit configured to,

- obtain at least one raw random number,

- obtain at least one private signature key,

- sign said at least one raw random number obtained using said at least one private key obtained, and

- transmit the signed data to a drawing module implemented in the second device.

[0020] The system according to the invention thus makes it possible to improve the reliability of electronic prints by signing data used for the print in a secure environment and thus allow subsequent authentication of certain print parameters and their verification.

[0021] According to particular embodiments, said second device comprises a data processing unit configured to authenticate signed data received and, if the data received is authenticated, to carry out a draw from said at least one raw random number including in the received signed data.

[0022] Still according to particular embodiments, the data processing unit of said first secure device is further configured to obtain additional validation data, said signature comprising the signature of said at least one raw random number obtained and said data additional validations obtained using said at least one private key obtained.

[0023] According to particular embodiments, the data processing unit of said second device is further configured to validate said at least one raw random number received, said validation being based on said additional validation data.

[0024] A computer program implementing all or part of the process described above is in itself advantageous, since it allows the security of electronic prints.

[0025] Thus, the present invention also targets a computer program comprising instructions for implementing the method described above, when this program is executed by a processor. This program can use any programming language (for example, an object language or other) and be in the form of an interpretable source code, a partially compiled code or a fully compiled code.

[0027] Another aspect concerns a non-transitory storage medium for a program executable by computer, comprising a set of data representing one or more programs, said one or more programs comprising instructions for, during the execution of said one or several programs by a computer comprising a processing unit operationally coupled to memory means and to an input/output interface module, to execute all or part of the method described above.

Brief description of the drawings

Other characteristics, details and advantages of the invention will appear on reading the detailed description below. This is purely illustrative and must be read with reference to the accompanying drawings, in which: Figure 1 illustrates an example of a gaming environment, in which an electronic draw is implemented according to a known embodiment; Figure 2 illustrates the logical architecture of an electronic drawing system such as that described in Figure 1; Figure 3 illustrates an example of architecture of an electronic drawing system according to embodiments of the invention; Figure 4 illustrates an example of logical architecture of part of the electronic drawing system shown in Figure 3; Figure 5 illustrates an example of steps implemented in a secure device to securely generate and transmit a raw random number; Figure 6 illustrates an example of steps to obtain a raw random number and perform an electronic draw in a secure manner; and Figure 7 illustrates an example of a device that can be used to implement, at least partially, embodiments of the invention.

detailed description

[0029] According to particular embodiments, the invention aims to execute a program embedded in a device having a high level of certification in terms of security, for example a device certified according to the common EAL4+ criteria (evaluation assurance level 4 acronym). + in Anglo-Saxon terminology), the embedded program, called a secure program, making it possible to carry out a digital signature of a set of data comprising for example a raw random number (seed) used for a draw and, preferably, temporal information, a sequence number and/or a number of series (or any other reference, unique or not) of the equipment used. After signing, this data set can be considered tamper-proof. The data contained in this set can then be authenticated and used throughout the drawing process, its integrity can be verified at any time. They can thus in particular be used in a drawing module which can for example be implemented in a server in which the secure hardware device used to generate and sign the raw random numbers and other parameters is connected.

[0030] By way of illustration, the secure device can be (or include) the device known as HSM nShield Connect from the company Entrust Datacard, which is certified FIPS 140-2 and Common Criteria EAL4+ (EN 419 221-5 ), meets the requirements of the European Union's elDAS (electronic Identification, Authetntification and Trust Services) regulation and provides scalable and highly available encryption key services.

[0031] To carry out a draw, the draw module addresses a request to the secure program, executed inside the secure device (i.e. the secure program is embedded in the secure device), in order to obtain a raw random number. As described previously, the secure program responds with a set of signed data preferably comprising:

- a raw random number (the seed) necessary for the draw,

- temporal information such as the date and time at which the secure hardware device generated the raw random number, which makes it possible to subsequently control the age of the seed,

- a sequence number such as a seed generation order number, which makes it possible to avoid excessive firing attacks (noting that a large number of firings could be carried out in a few seconds),

- a serial number (or any other unique or non-unique reference) of the equipment used to, where applicable, carry out additional checks, and

- a signature of all previous data.

[0032] After the signature has been calculated in the secure device (for example by encrypting a fingerprint of the data using a private key), this data can be authenticated according to a known process. For example, authentication can consist of compare a fingerprint of the data received with that obtained from the signature received after it has been decrypted using the public key corresponding to the private key used (if the two fingerprints are different, this means that the data has been modified).

[0033] From an organizational point of view, the critical operations of this system (for example the creation of signatures, the compilation of the secure program, the loading of this program into the secure device, etc.) are preferably carried out while respecting a separation of roles using bailiffs. Thus, for example, the loading of secure programs and/or data into the secure device can be carried out after authentication based on distributed secrets using, for example, Shamir secret key sharing. As an illustration, the secret used for authentication can be divided into several parts, for example 8, distributed between several roles, for example 2. In this case, the authentication is carried out with at least 5 parts (the authentication requiring a quorum greater than what one of the parties has alone, which makes it compulsory for both roles to intervene simultaneously).

[0034] Figure 3 illustrates an example of architecture of an electronic drawing system according to embodiments of the invention.

[0035] As illustrated, the gaming environment 300 here comprises a gaming device 305 such as a computer or a set of computers, a server 310, a third-party device 315 making it possible to carry out controls and a monitoring device. timestamp of game shots 320 (also called PFH, acronym for PlateForme d’Horotatage). These devices are connected to each other by one or more communication networks, for example an Internet and/or Ethernet type network.

Like the game device 105, the game device 305 allows the execution of game modules, for example a module allowing players to participate in a lottery game. When a draw needs to be performed, a request is sent to the server which responds with a draw result. The gaming device 305 is an electronic drawing system where the drawing games are configured (for example the Keno and/or Euromillion games, Keno and Euromillion are registered trademarks). It may be a device accessible via a web-type interface, also known as EDS (acronym for Electronic Drawing Solution in Anglo-Saxon terminology), which allows any game to be configured according to its features. [0037] As illustrated, the server 310 comprises a secure data processing device 325, for example the device known as HSM nShield Connect from the company Entrust Datacard, and a data processing device 330 comprising for example a microprocessor and a memory, or front-end server, as described with reference to Figure 7.

[0038] The secure data processing device 325 notably comprises a data processing module 335 comprising a microprocessor and a secure memory, a module 340 for generating raw random numbers and a secure memory 345. The secure memory 345, also called HSM (acronym for Hardware Storage Module in Anglo-Saxon terminology) is a tamper-proof memory or electronic safe. It is impossible to output data from the outside. The secure memory 345 is used in particular to store a private key used to sign a set of data as described previously. The data processing module 335 includes the secure program used to obtain a raw random number (seed), temporal information, a sequence number and/or a serial number (or any other unique reference or not) of the hardware used in this way. as a private key and to sign the data obtained with the private key obtained. The raw random number is obtained (for example on request) from the module 340, the temporal information can be obtained from an internal clock of the secure device 325 and the sequence number, the serial number of the hardware used and the private key can be obtained from secure memory 345 (the sequence number being for example incremented as soon as a raw random number is generated).

[0039] The data processing device 330 makes it possible to execute a drawing module itself comprising several modules, for example a drawing management module 350, a seed request module 355, a security module 360, a transformation module (or scaling in Anglo-Saxon terminology) 365 and an interface 370, for example of the API type (acronym for Application Programming Interface in Anglo-Saxon terminology). The transformation module here implements an algorithm for transforming a seed into a combination of numbers drawn according to predetermined parameters. The interface 370 makes it possible in particular to receive drawing requests from a gaming device and to transmit drawing results.

[0040] The third-party device 315 can implement an independent control engine to carry out security checks in order to verify that there is no fraud or errors in the drawing system. The input data of the control engine are for example execution data (or application logs) of the gaming device 305. The control engine verifies the signatures, verifies that the timestamping platform has been requested, that the numbers drawn are the correct ones, etc. This control engine is preferably executed at the end of the draw on an independent platform to verify all the draw information, in order to validate that the draw is legitimate and has integrity.

[0041] Figure 4 illustrates an example of logical architecture of part of the electronic drawing system shown in Figure 3.

[0042] As illustrated, the secure program implemented in the secure device 325 is configured to obtain a raw random number (seed) 400, temporal information 405, a sequence number 410 and/or a serial number (or any other unique reference or not) 415 of the material used as well as a private key 420 and to sign the data obtained (with the exception of the private key) with the private key obtained. All of the data obtained (seed, temporal information, sequence number and/or serial number) and the signature calculated on this set of data using the private key are then transmitted to the data processing device 330 for carry out the draw, preferably after authentication and validation of the data received.

[0043] Figure 5 illustrates an example of steps implemented in a secure device, for example the secure device 325 of Figure 3, to securely generate and transmit a raw random number.

As illustrated, a first step (step 500) aims to receive a request to obtain a raw random number (seed). This request is for example received from the data processing device 330 illustrated in Figure 3.

[0045] In a following step, a raw random number is obtained (step 505). This raw random number is for example obtained in response to a request transmitted to module 340 of FIG. 3. A sequence number is then preferably incremented (step 510), for example by the value one. The sequence number is for example stored in secure memory 345. The initial value can be configured during installation of the system. In a following step, in parallel or previously, temporal information is obtained (step 515). As described previously, this information can correspond to the instant at which the raw random number is obtained. It can be obtained from an internal clock secure device 325 of Figure 3. In subsequent steps, in parallel or previously, the sequence number, a serial number, for example that of the secure device 325, and a private key are here obtained (steps 520, 525 and 530, respectively), for example from the secure memory 325.

[0046] After having been obtained, the raw random number, the temporal information, the sequence number and/or the serial number are signed using the private key obtained (step 535), for example using a known signature algorithm such as the signature algorithm known as RSA.

[0047] It is observed that according to other embodiments the set of signed data includes the raw random number and, optionally, one or more data from among the temporal information, the sequence number and the serial number . According to yet other embodiments, this data set includes other data.

The signed data, including the requested raw random number, are then transmitted (step 540), for example to a drawing module.

[0049] Figure 6 illustrates an example of steps implemented in a drawing module executed, for example, in the data processing device 330 illustrated in Figure 3, to obtain a raw random number and carry out an electronic drawing securely.

As illustrated, the purpose of a first step is to receive a pull request (step 600). This request is, for example, received from a gaming device such as the gaming device 305 in Figure 3.

[0051] In a following step, a request is addressed to a secure device, for example the secure device 325 of Figure 3, to obtain a raw or seed random number (step 605). In response to this request, a set of signed data is received (step 610), that is to say a set of data and a signature calculated on this set of data using a private key. This data set includes the requested raw random number as well as, for example, temporal information, a sequence number and/or a serial number (or any other unique or non-unique reference) of the hardware used to generate the raw random number.

[0052] In a following step, an authentication test of the data received is carried out (step 615). This test consists, for example, of calculating a fingerprint from all the data received and comparing this fingerprint with that obtained from the signature received decrypted with the public key corresponding to the private key used. If the signatures are different, the data received is not authenticated and the pull request is rejected. Otherwise, if the data received is authenticated, a test is preferably carried out to check whether the raw random number received is valid (step 620). This test consists, for example, of comparing temporal information with the current date. If the temporal information is later than the current date, it can be considered that the raw random number received is invalid. Furthermore, if the difference is greater at a given threshold, it can be considered that the raw random number received is too old. In these cases, the pull request may be rejected. Another test that can be performed to verify whether the raw random number received is valid consists of verifying the received serial number or any other device reference with corresponding data previously received to verify that the raw random number received was indeed generated by the secure device to which the request was sent. Yet another test to check whether the raw random number received is valid consists of checking that the sequence number received is consistent in particular with the number of draws carried out and with the number of draw requests received. Of course, there are many other types of tests that can be performed. These tests can be implemented in a combined or targeted manner, for example depending on the circumstances or randomly.

[0053] If it is considered that the raw random number received is valid, a draw is carried out from it, according to predetermined parameters or received from the gaming device at the origin of the draw request. Otherwise, the pull request is preferably rejected.

[0054] Figure 7 illustrates an example of a device that can be used to implement, at least partially, embodiments of the invention, in particular steps described with reference to Figures 3 to 6. It can act, for example, of the game device 305 of Figure 3, of the data processing device 330 of the server 310 of Figure 3, of the third-party device 315 of Figure 3 or of the timestamping device 320 of Figure 3.

The device 700 is for example a server blade, a server, a computer or a terminal.

[0056] The device 700 preferably comprises a communication bus 702 to which are connected:

- a central processing unit or microprocessor 704 (CPU, acronym for Central Processing Unit in Anglo-Saxon terminology);

- a read only memory 706 (ROM, acronym for Read Only Memory in English terminology) which can include an operating system and programs such as "Prog";

- a RAM or cache memory 708 (RAM, acronym for Random Access Memory in Anglo-Saxon terminology) comprising registers adapted to record variables and parameters created and modified during the execution of the aforementioned programs; And - a communication interface 726 connected to a distributed communication network 728, for example a wireless communication network and/or a local communication network, the interface being capable of transmitting and receiving data, in particular to and from a other device.

[0057] Optionally, the device 700 can also have the following elements:

- a hard disk 720 which can include the aforementioned "Prog" programs and data processed or to be processed according to the invention;

- a keyboard 722 and a mouse 724 or any other pointing device such as an optical pencil, a touch screen or a remote control allowing the user to interact with the programs according to the invention;

- a reader 710 of removable storage media 712 such as a memory card or a disk, for example a DVD disk; And

- a graphics card 714 connected to a screen 716.

The communication bus allows communication and interoperability between the different elements included in the device 700 or connected to it. The representation of the bus is not restrictive and, in particular, the central unit is capable of communicating instructions to any element of the device 700 directly or via another element of the device 700.

The executable code of each program allowing the programmable device to implement the processes according to the invention can be stored, for example, in the hard disk 720 or in read only memory 706.

[0060] According to a variant, the executable code of the programs can be received via the communication network 728, via the interface 726, to be stored in a manner identical to that described previously.

[0061] More generally, the program(s) can be loaded into one of the storage means of the device 700 before being executed.

[0062] The central unit 704 will control and direct the execution of the instructions or portions of software code of the program(s) according to the invention, instructions which are stored in the hard disk 720 or in the read-only memory 706 or in the other aforementioned storage elements. When powering up, the program(s) which are stored in a non-volatile memory, for example the hard disk 720 or the read-only memory 706, are transferred to the RAM 708 which then contains the executable code of the or programs according to the invention, as well as registers for storing the variables and parameters necessary for implementing the invention.

[0063] Depending on the chosen embodiment, certain acts, actions, events or functions of each of the methods described in this document may be carried out or occur in an order different from that in which they were described, or may be added, merged or not carried out or not occurring, as the case may be. Furthermore, in some embodiments, certain acts, actions or events are performed or occur concurrently and not successively.

[0064] Although described through a certain number of detailed exemplary embodiments, the proposed method and the equipment for implementing the method include different variants, modifications and improvements which will be obvious to those skilled in the art. art, it being understood that these different variants, modifications and improvements form part of the scope of the invention, as defined by the claims which follow. Additionally, different aspects and features described above may be implemented together, or separately, or substituted for each other, and all of the different combinations and sub-combinations of the aspects and features are within the scope of the application. 'invention. Additionally, some systems and equipment described above may not incorporate all of the modules and functions described for the preferred embodiments.

Claims

1. Electronic drawing method in a device, the device comprising a first and a second part, the first part being secure, the method comprising,

- obtaining (505), in the first part, of at least one raw random number,

- obtaining (530), in the first part, at least one private signature key, said private key having been previously stored in the first part,

- signature (535), in the first part, of said at least one raw random number obtained using said at least one private key obtained, and

- transmission (540) of the signed data to a drawing module implemented in the second part.

2. Method according to claim 1, further comprising an authentication step (615), in said drawing module, of the signed data received and, if the data received is authenticated, a step of drawing from said at least one number raw random included in the received signed data.

3. Method according to claim 1 or claim 2, further comprising obtaining (515, 520, 525), in the first part, additional validation data, said signature comprising the signature of said at least one raw random number obtained and said additional validation data obtained using said at least one private key obtained.

4. Method according to claim 3, according to which said additional validation data comprises a sequence number, temporal information and/or a hardware reference of said first part.

5. Method according to claim 3 or claim 4, further comprising, in said drawing module, a step of validating (620) said at least one raw random number received, said validation being based on said additional validation data.

6. Computer program comprising instructions for implementing each of the steps of the method according to one of claims 1 to 5, when this program is executed by a processor.

7. Electronic drawing system comprising a first and a second device, the first device being secure and comprising a data processing unit configured to,

- obtain (505) at least one raw random number, - obtain (530) at least one private signature key,

- sign (535) said at least one raw random number obtained using said at least one private key obtained, and

- transmit (540) the signed data to a drawing module implemented in the second device.

8. System according to claim 7, wherein said second device comprises a data processing unit configured to authenticate (615) received signed data and, if the received data is authenticated, to perform a draw from said at least one number raw random included in the received signed data.

9. System according to claim 7 or claim 8, according to which the data processing unit of said first secure device is further configured to obtain (515, 520, 525) additional validation data, said signature comprising the signature of said at least one raw random number obtained and said additional validation data obtained using said at least one private key obtained.

10. System according to claim 9, according to which the data processing unit of said second device is further configured to validate (620) said at least one raw random number received, said validation being based on said additional validation data.