TryTRY
BuyBUY
  • newsletter
  • contact
  • corporate
  • careers
Utimaco
de
TRYour free HSM simulator
BUYget a quote
  • home
  • solutions
  • products
  • services
  • blog
  • downloads
  • partners
  • company

Next event

24/Mar - 25/Mar | Webinar

The Path for Cloudifying Payment HSMs

Utimaco Portal

Here you will find everything you need as a partner and customerLogin required

  • home
  • solutions
    • industries
      • banking and financial services
        • acquirer
        • card scheme
        • issuer
        • hsm-as-a-service
      • government
        • federal government
      • cloud
        • cloud-based innovation
        • multi-cloud agility
      • connected car (V2V)
      • automotive solutions
      • road infrastructure (V2I), toll collection & ITS
      • industrial IoT & manufacturing
      • energy & utilities
      • lottery & gaming
      • media & entertainment
      • telecommunications
    • applications
      • authentication
      • blockchain
      • code signing
      • database encryption
      • document signing
      • key injection
      • post-quantum crypto agility
      • public key infrastructure (PKI)
        • EJBCA
      • random number generator (RNG)
    • compliance
      • certifications & approvals
        • Common Criteria (CC)
        • FIPS 140-2
      • compliance & standardization
        • FISMA, FedRAMP, and FICAM
        • Certificate Policy of the Smart Metering PKI
        • eIDAS
        • GDPR
        • PCI DSS
        • Privacy Shield
  • products
    • general purpose HSM
      • SecurityServer Se Gen2
      • SecurityServer CSe
      • Block-safe
      • CryptoServer CP5 (eIDAS & CC)
      • CryptoServer Cloud
      • TimestampServer
      • Q-safe
    • payment HSM
      • Atalla AT1000
      • PaymentServer Se Gen2
      • PaymentServer CSe
      • Secure Configuration Assistance (SCA)
      • QuickStart Services
      • u.cloud – Atalla PaymentHSMaaS
      • u.trust 360
    • key management
      • Enterprise Key Management
    • Software Development Kit (SDK)
      • CryptoServer SDK
      • CryptoScript SDK
    • HSM simulators
      • Block-safe HSM simulator
      • CryptoServer CP5 simulator (eIDAS & CC)
      • SecurityServer simulator
      • Q-safe HSM simulator
    • form factor
      • LAN appliance
      • PCIe card
      • cloud, “HSM as a Service”
    • KeyBRIDGE
      • KeyBRIDGE POI
      • KeyBRIDGE RKD
      • KeyBRIDGE eKMS
      • TokenBRIDGE™
    • u.trust Anchor
      • u.trust Anchor CSAR
      • u.trust Anchor High Performance HSM
  • services
    • consultancy
      • PQC consultancy
    • support
    • managed services
      • Key Exchange & Escrow Service (KEES™)
    • professional services
    • Utimaco Academy
  • blog
  • downloads
    • brochures
    • data sheets
    • case studies
    • white papers
    • webinars
    • e-books
      • PQC for Dummies e-book
      • HSM for Dummies e-book
    • Utimaco Portal
      • integration guides
      • knowledge base
  • partners
    • Partner Program
      • technology partner
    • Partner Locator
  • company
    • about Utimaco
      • legal
      • terms & conditions
      • privacy
        • cookie-policy
    • locations
    • news
      • newsletter
    • events
    • contact
    • careers
    • investors
    • utimaco management
    • business ethics
    • memberships and certifications
    • engagement in research
  • home
  • solutions
    • industries
      • banking and financial services
        • acquirer
        • card scheme
        • issuer
        • hsm-as-a-service
      • government
        • federal government
      • cloud
        • cloud-based innovation
        • multi-cloud agility
      • connected car (V2V)
      • automotive solutions
      • road infrastructure (V2I), toll collection & ITS
      • industrial IoT & manufacturing
      • energy & utilities
      • lottery & gaming
      • media & entertainment
      • telecommunications
    • applications
      • authentication
      • blockchain
      • code signing
      • database encryption
      • document signing
      • key injection
      • post-quantum crypto agility
      • public key infrastructure (PKI)
        • EJBCA
      • random number generator (RNG)
    • compliance
      • certifications & approvals
        • Common Criteria (CC)
        • FIPS 140-2
      • compliance & standardization
        • FISMA, FedRAMP, and FICAM
        • Certificate Policy of the Smart Metering PKI
        • eIDAS
        • GDPR
        • PCI DSS
        • Privacy Shield
  • products
    • general purpose HSM
      • SecurityServer Se Gen2
      • SecurityServer CSe
      • Block-safe
      • CryptoServer CP5 (eIDAS & CC)
      • CryptoServer Cloud
      • TimestampServer
      • Q-safe
    • payment HSM
      • Atalla AT1000
      • PaymentServer Se Gen2
      • PaymentServer CSe
      • Secure Configuration Assistance (SCA)
      • QuickStart Services
      • u.cloud – Atalla PaymentHSMaaS
      • u.trust 360
    • key management
      • Enterprise Key Management
    • Software Development Kit (SDK)
      • CryptoServer SDK
      • CryptoScript SDK
    • HSM simulators
      • Block-safe HSM simulator
      • CryptoServer CP5 simulator (eIDAS & CC)
      • SecurityServer simulator
      • Q-safe HSM simulator
    • form factor
      • LAN appliance
      • PCIe card
      • cloud, “HSM as a Service”
    • KeyBRIDGE
      • KeyBRIDGE POI
      • KeyBRIDGE RKD
      • KeyBRIDGE eKMS
      • TokenBRIDGE™
    • u.trust Anchor
      • u.trust Anchor CSAR
      • u.trust Anchor High Performance HSM
  • services
    • consultancy
      • PQC consultancy
    • support
    • managed services
      • Key Exchange & Escrow Service (KEES™)
    • professional services
    • Utimaco Academy
  • blog
  • downloads
    • brochures
    • data sheets
    • case studies
    • white papers
    • webinars
    • e-books
      • PQC for Dummies e-book
      • HSM for Dummies e-book
    • Utimaco Portal
      • integration guides
      • knowledge base
  • partners
    • Partner Program
      • technology partner
    • Partner Locator
  • company
    • about Utimaco
      • legal
      • terms & conditions
      • privacy
        • cookie-policy
    • locations
    • news
      • newsletter
    • events
    • contact
    • careers
    • investors
    • utimaco management
    • business ethics
    • memberships and certifications
    • engagement in research

Home / solutions / industries / lottery & gaming

lottery & gaming

Working with paper documents to ensure security is no longer a viable option. Today, players want secure and readily available mobile access to their accounts, anytime, and on multiple devices.

Utimaco HSMs media & entertainment + lottery & gaming

The lottery and gaming industry requires appropriate hardware-based security measures

Recent changes call for increased security measures like HSMs

The lottery and gaming industry has undergone major changes similar to those in other industries over the past two decades. The ongoing digitization of the market opens up numerous opportunities for companies and players alike:

  • rapid go-to-market
  • broader target groups
  • access anywhere anytime
  • higher efficiency and transparency
  • easier auditing

Simply offering services online is a thing of the past. Today, players want secure and readily available mobile access to their accounts, anytime, and on multiple devices.

Utimaco provides tamper-proof Hardware Security Modules (HSMs) with FIPS 140-2 Level 3 and 4 certifications that build the root-of-trust basis for numerous applications used in the lottery and gaming industry.

Regulations and standards to fight fraud and manipulation

Fraud and manipulation have always existed, since the very first casinos saw the light of day. However, digitalization brings new and more sophisticated attack vectors involving hackers and cybercriminals, taking security risks to a new level. A company’s reputation and success greatly depend on mitigating risks such as fraud and manipulation, theft of personal data, account or payment card information, as well as insider threats. The market has become heavily regulated over recent years, addressing increased IT security requirements, among other things. Regulators and other stakeholders have paved the way for national and international standards to protect sensitive and business-critical data. Two examples of applicable regulations are:

  • Data Protection laws and regulations such as the US Data Protection Act or the EU General Data Protection Regulation (GDPR) have been created to protect personal data of individuals. These apply to all industries, including the lottery & gaming industry.
  • Many lottery and gaming organizations and platforms need users’ payment card information to participate in gambling activities. As such, the Payment Card Industry Data Security Standard (PCI DSS) applies and requires that payment card information must always be protected when in use, in motion and at rest.

Working with paper documents to ensure security is no longer a viable option

For a long time, the lottery & gaming industry was reluctant to make the switch to using electronic documents and systems. The latter are much easier to access and manipulate. Nowadays, this is unthinkable. Offering goods and services online and in electronic format is considered as given in this industry.

The IT and security infrastructures need to account for this:

  • User authentication to access an account is based on the unique identification (ID) of an individual user. The user ID can be set up as part of a public key infrastructure (PKI) that provides each user with digital identities. The related cryptographic keys are stored inside a Hardware Security Module (HSM) for maximum security. 2-factor-authentication and strong passwords (one-time passwords, OTP) complement the secure access to the user account.
  • True random number generation (RNG) is essential, on the one hand, for generating cryptographic keys used in encryption, authentication and signing processes. On the other hand, it is key for the randomness and entropy required for online lottery and gaming operations.
  • Adding a digital signature to documents and transactions identifies the author, proves the authenticity of the content and ensures non-repudiation. A digitally signed timestamp adds certainty to their validity and chronological order.
  • The tamper-proof creation of timestamps is also crucial, e.g. for issuing lottery or sports betting tickets. Players guess the outcome of a future event and submit their guess before an event takes place. The timestamp proves that a player’s betting slip was issued before the lottery draw or end of the football game, which everyone can then verify. Back-dating or altering logs is not possible with secure auditable timestamps. The European eIDAS regulation lists various requirements for timestamping services.
  • Database encryption ensures that user, account and transaction data that is stored and at rest can never be accessed in the clear (unencrypted) by any unauthorized person. The related encryption keys are securely generated and stored in an HSM. They are kept separate from the actual encrypted data and cannot be accessed by either unauthorized parties or by the administrator themselves.

Utimaco provides tamper-proof Hardware Security Modules with FIPS 140-2 Level 3 and 4 certifications that build the root-of-trust basis for the above-mentioned applications used in the lottery and gaming industry.

Do you have questions regarding these applications? Or need assistance with selecting the most appropriate IT security solution for your business? Let us know at hsm@utimaco.com.

Try for FREE!

Need to implement quantum-safe algorithms?

Get in touch and try our Q-safe HSM simulator!

Utimaco HSM for Dummies Download e-book

Save for later. Download our knowledge.

Here you will find brochures and data sheets, as well as our well-known “HSM for Dummies” e-book for download. We also provide you with a comprehensive set of case studies, white papers and past webinars. In the Utimaco Portal you can access integration guides and register for the Utimaco HSM simulator or to access our broad knowledge base.

All downloads

Stay on top of our news
Don’t miss out on any Utimaco updates

Subscribe to Utimaco Newsletter

We will keep you posted with news from Utimaco and the industries we protect, as well as information on upcoming events and webinars.

Subscribe now

Partners

Skytech Computing Solutions Limited. - Utimaco Hardware Security Modules Partner Thomas-Krenn.AG CewTec S.A. Utimaco HSM - InfoGuard Swiss Cyber Security PrimeKey Labs GmbH EUROPEAN DYNAMICS SA. Komar Consulting Inc. - Utimaco Hardware Security Modules Partner Rohde & Schwarz Cybersecurity GmbH intarsys AG Cyber Armor Pte Ltd MALKOM D.Malińska i Wspólnicy s.j. Macroseguridad PKI Solutions Inc. CertiSur S.A. Clearkey Consulting - Utimaco Hardware Security Modules Partner Safesoft Kft. IQuantics Corp AKEA S.A. - Utimaco Hardware Security Modules Partner Altacom UAB Astel (UK) Ltd. - Utimaco Hardware Security Modules Partner E-Sign S.A. Telegrupp AS Envoy Data Corporation - Utimaco Hardware Security Modules Partner Nexus - Utimaco Hardware Security Modules Partner Fornetix - Utimaco Hardware Security Modules Partner Compumatica secure networks GmbH Primekey Solutions AB ESYSCO Sp. z o.o. Utimaco HSM - PTESA_profesionales en transacciones electronicas cv cryptovision GmbH Cryptomathic A/S Nexus Technology GmbH Cryptomathic GmbH Synergy Computers (Pvt.) Ltd. - Utimaco Hardware Security Modules Partner Versasec Compumatica secure networks B.V. Real security d.o.o. MTG - Utimaco Hardware Security Modules Partner Microexpert Limited Abrantix AG Cogito Group Pty Ltd CREA plus d.o.o. CREAplus Italia S.r.l SecureMetric Technology Sdn. Bhd. MIcrosec Fortiedge Pte Ltd. JJNet International Co., Limited - Utimaco Hardware Security Modules Partner Utimaco HSM - QuintessenceLabs Perceptus-sp.-z-o.-o. PETA (Thailand) Co., Ltd. CEGA Security Nexus - Utimaco Hardware Security Modules Partner Baas Control s.r.o. Ascertia - Utimaco Hardware Security Modules Partner VAR Group SpA - Utimaco Hardware Security Modules Partner Throughwave (Thailand) Co.,Ltd - Utimaco Hardware Security Modules Partner Encryption Consulting LLC Secure Source Distribution (M) Sdn Bhd - Utimaco Hardware Security Modules Partner Softline Solutions GmbH Cryptomathic Inc.
Find a partner

Share this page

EMEA

Utimaco IS GmbH
Germanusstraße 4
52080 Aachen
Germany
Phone: + 49 241 1696 200

Americas

Utimaco Inc.
900 E Hamilton Ave., Suite 400
Campbell, CA 95008
USA
Phone: +1 844 UTIMACO

APAC

Utimaco IS Pte Limited
80 Raffles Place,
#32-01, UOB Plaza
Singapore 048624
Phone: +65 6622 5347

Utimaco

  • support
  • corporate
  • careers
  • legal
  • terms & conditions
  • privacy
  • cookie-policy
© 2021
to top
  • home
  • solutions
    • industries
      • banking and financial services
        • acquirer
        • card scheme
        • issuer
        • hsm-as-a-service
      • government
        • federal government
      • cloud
        • cloud-based innovation
        • multi-cloud agility
      • connected car (V2V)
      • automotive solutions
      • road infrastructure (V2I), toll collection & ITS
      • industrial IoT & manufacturing
      • energy & utilities
      • lottery & gaming
      • media & entertainment
      • telecommunications
    • applications
      • authentication
      • blockchain
      • code signing
      • database encryption
      • document signing
      • key injection
      • post-quantum crypto agility
      • public key infrastructure (PKI)
        • EJBCA
      • random number generator (RNG)
    • compliance
      • certifications & approvals
        • Common Criteria (CC)
        • FIPS 140-2
      • compliance & standardization
        • FISMA, FedRAMP, and FICAM
        • Certificate Policy of the Smart Metering PKI
        • eIDAS
        • GDPR
        • PCI DSS
        • Privacy Shield
  • products
    • general purpose HSM
      • SecurityServer Se Gen2
      • SecurityServer CSe
      • Block-safe
      • CryptoServer CP5 (eIDAS & CC)
      • CryptoServer Cloud
      • TimestampServer
      • Q-safe
    • payment HSM
      • Atalla AT1000
      • PaymentServer Se Gen2
      • PaymentServer CSe
      • Secure Configuration Assistance (SCA)
      • QuickStart Services
      • u.cloud – Atalla PaymentHSMaaS
      • u.trust 360
    • key management
      • Enterprise Key Management
    • Software Development Kit (SDK)
      • CryptoServer SDK
      • CryptoScript SDK
    • HSM simulators
      • Block-safe HSM simulator
      • CryptoServer CP5 simulator (eIDAS & CC)
      • SecurityServer simulator
      • Q-safe HSM simulator
    • form factor
      • LAN appliance
      • PCIe card
      • cloud, “HSM as a Service”
    • KeyBRIDGE
      • KeyBRIDGE POI
      • KeyBRIDGE RKD
      • KeyBRIDGE eKMS
      • TokenBRIDGE™
    • u.trust Anchor
      • u.trust Anchor CSAR
      • u.trust Anchor High Performance HSM
  • services
    • consultancy
      • PQC consultancy
    • support
    • managed services
      • Key Exchange & Escrow Service (KEES™)
    • professional services
    • Utimaco Academy
  • blog
  • downloads
    • brochures
    • data sheets
    • case studies
    • white papers
    • webinars
    • e-books
      • PQC for Dummies e-book
      • HSM for Dummies e-book
    • Utimaco Portal
      • integration guides
      • knowledge base
  • partners
    • Partner Program
      • technology partner
    • Partner Locator
  • company
    • about Utimaco
      • legal
      • terms & conditions
      • privacy
        • cookie-policy
    • locations
    • news
      • newsletter
    • events
    • contact
    • careers
    • investors
    • utimaco management
    • business ethics
    • memberships and certifications
    • engagement in research