solutions

Szrek provides customized lottery solutions to meet all gaming needs: for electronic draws, e-instant or interactive game outcomes, ticket authentication, transaction integrity. On-premise or cloud solutions/ services available.

All solutions provide built-in proof of integrity for verification by an independent trusted audit process.

Trusted audit can be deployed by:

The lottery

dedicated system in lottery’s computer room
A 3rd party

regulator, auditor, ICS provider, etc.
On the cloud

operated by the lottery, a 3rd party, or multiple entities

Szrek provides customized lottery solutions to meet all gaming needs: for electronic draws, e-instant or interactive game outcomes, ticket authentication, transaction integrity.

All solutions provide built-in proof of integrity for verification on an independent system – trusted audit.

Proof of integrity is verified by trusted audit and can be deployed by:

The lottery

dedicated system in lottery’s computer room
A 3rd party

regulator, auditor, ICS provider, etc.
On the cloud

operated by the lottery, a 3rd party, or multiple entities

Draw system solutions

OFFLINE/ STANDALONE

Draw machines not connected to any network, manual draws

ISOLATED/ REMOTE

Remote draws, connected to a local network, manual draws

HYBRID

Connected to gaming system, automated & manual draws

CONNECTED/ AUTOMATED

Connected to gaming system, automated draws

Trusted Draw, Trusted Play, Trusted Transactions, and Trusted Monitor can be integrated in hybrid and connected systems, cloud solutions available.

trusted monitor

Remote monitoring of draw & auditing operations.

trusted auditor

Integral to all trusted suite solutions

Gaming solutions

PLAY

RNG for instant or interactive games

PLAY & DRAW

RNG for instant, interactive, and draw games

TICKET

Authentication of third-party tickets and electronic receipts

TRANSACTION

Securing wager transactions

Shared values of all system solutions:

Common functionality of Trusted Draw and Trusted Audit
Future-proof security and integrity model (100% fraud detection)
Flexible architecture: ability to migrate from one system configuration to another as needed
Support provided by experienced engineers

Differences between the system solutions:

Physical connectivity
Level of automation of Trusted Draw and Trusted Audit
Required amount of human interaction
Various benefits of different modes of operation

Benefits of connectivity and automation:

Cost savings to perform draw and audit
1. Reduction of staff hours
2. Inclusion of draws outside of regular business hours
Ability to run frequent draw games (5 minute keno)
Reduced errors due to minimized human involvement
Increased security
1. No direct human access to RNG systems
2. Real-time auditing of draws by Trusted Audit
3. Verification of draw integrity by ICS system
4. 100% fraud-detection of potential attacks guarantees the security of all Szrek RNG systems

Additional Options (Add-ons):

Animation Manager: Rendering and publication of draw animations to social media and television broadcast
Integration of the Independent Systemic Audit with the lottery’s ICS system
Trusted Monitor: Remote monitoring of draw and audit operations
Trusted Transactions: Securing all wagers before the draw (sealing draw transactions)
Trusted Play:Extend RNG platform to include instant and interactive games
Multi-tenant capability (Safe and independent draws for different organizations)
Emergency support provided by experienced engineers

When the digital signature is used as random number seed, every specific random number derived from this seed is also verifiable. Because an incorruptible clock is also digitally signed, the time of the signing operation is also verifiable. Each time the HSM generates a signature, the internal embedded counter is incremented and signed. This way each signature and every random number generated is accounted for. In addition, the method allows verification of the specific HSM being used and any additional draw information: since draw information is digitally signed (e.g. personnel conducting the draw, etc.) it can be verified. LYNKS II Security certified by NIST.

Szrek provides a secure and reliable method for random numbers generation based on its patented method of RNG non-repudiation (patent nr 6,934,846). The method is based on asymmetric properties of digital signatures, where a digital signature generated with a private key is used as a random number seed. Random numbers are derived from the seed, and since the seed is a digital signature of draw data it can be verified using the public key, along with the random numbers and the draw data. For digital
signing, Trusted Draw uses secure and tamper evident NIST certified Hardware Security Modules (HSMs).

The unique benefit of Szrek RNG technology is that generated unpredictable and unbiased random numbers can be mathematically verified to detect any potential fraud. The RNG has been certified by several US and international independent labs and has been used successfully since 2005 by numerous lottery operators and state licensed lotteries around the world.

FAQ

Does certification ensure RNG security?

Certifying an RNG does not usually address security. Certification is important and it is typically done to guarantee randomness, but rarely does it address RNG security. Hence security must be addressed specifically and in a different way.

What kind of security measures are there to protect an RNG?

RNG Vendors work with lotteries to establish many important preventive security features that are aimed at limiting access to the RNG (not allowing for an open network, password protection, locks and keys, use of various users to oversee the draw). By limiting access, they protect the RNG from many types of attacks. However, these systems are vulnerable to some types of attacks, particularly attacks from insiders.

We also introduce protective measures, but our security offers a solution that rests within the system – this is why we say it is a different paradigm. Our technology combines cryptographic hardware and software solutions that enable us to detect traces of any manipulation to the RNG, without relying on anything outside of the system. Manipulations cannot be erased or hidden without leaving a trace, unlike those used by other methods of logs and traces, so trying to break into the RNG will always be useless!

What are the limitations of preventive security?

The industry has gained experience from the recent Hot Lotto fraud and other incident about how to respond to known vectors of attack. Although far from perfect, we have some methods for trying to address these attacks. However, with advances in technology there may be new methods of attack forthcoming, and systems are vulnerable to these attacks particularly if they are executed by skilled insiders. This is the limitation of preventive methods – you can only try to prevent against known methods of attack.

This is why you need a methodology that protects against all vectors of attack, known or unknown. Our RNG technology detects every manipulation to the RNG because any manipulation to software, hardware, or otherwise would leave a trace and affect its functioning, causing the RNG and Systemic Independent Audit to have different draw results.

What type of audit is available for RNG systems?

Some people believe that having an auditor present during the draw is sufficient for RNG security, because the auditor by witnessing the draw can verify data consistency and ensure that procedures are followed. However an auditor may not be able to detect what is not visible. For other areas in the lottery, such as gaming systems and lottery tickets, independent system verification is required.

The Szrek2Solutions System offers Systemic Independent Audit that verifies the inner-workings of the RNG, rather the external processes that were used. The Systemic Independent Audit actually uses an independent system to recreate the draw based on the data that the RNG created. This Systemic Independent Audit will recreate the exact same output if the draw was not manipulated. If there was any manipulation, this would affect the data created by the RNG, and then the Systemic Independent Audit would recreate a different draw, providing evidence of tampering with the system.

Draw time substitution after the results are generated

The time stamp for offline draws can be altered, meaning draw results can be known before they are published.

Hardware substitution for alternative hardware that produces predictable results

Such substitution may go unnoticed unless there is a way to identify the hardware used for each draw

Substitution of numbers drawn after the results are generated

An insider can substitute the winning numbers and this can go unnoticed if the RNG system does not provide verification methods and the results are not consistently verified.

Software substitution during initial delivery, during maintenance, or later

Certification, pre-post testing, verification of program checksums, system scans, verification tests, and post-mortem testing may not find the hidden code.

Phishing or attempting multiple RNG generations to obtain desired outcomes

Traditional RNGs allow for multiple generations and it may be impossible to know how many have occurred.

Hardware deterioration results in hardware not performing RNG functions safely or properly

Traditional RNGs may not have specific hardware verification tests in place.

Inadequate RNG design & implementation detection of software and hardware errors and malfunctions

Software designed to check for errors, detect hardware issues and malfunction

certifications

Our games have been certified in 4 continents

integrity assurance

Play & draw solutions

Mode of operation: Automated

Each RNG server is located in a secure computer room in a locked cabinet and connected securely to the gaming system. Random outcomes are triggered by the gaming system and sent back from the RNG to the gaming system.

The RNG integrity file (a tamperproof Signature Log) is transferred automatically to a separate independent audit system to verify the integrity of the random numbers generated. An internal control system (ICS) can communicate with the audit system to reconcile the RNG outcomes between the gaming system and RNG system. Verified results are confirmed and communicated to the public, etc.

Customers that use this solution include:

primary data center:

computer room:

2 servers for RNG

2 (trusted draw and play system)

4 HSMs

1 or 2 servers for audit

2 (trusted audit system)

*servers are connected to the gaming system

back-up data center:

computer room:

1 server for RNG

2 (trusted draw and play system)

2 HSMs

1 server for audit

2 (trusted audit system)

*servers are connected to the gaming system

Play solutions

Mode of operation: Automated

Customers that use this solution include:

primary data center:

computer room:

2 servers for RNG

2 (trusted play systems)

4 HSMs

1 or 2 servers for audit

2 (trusted audit system)

*servers are connected to the gaming system

back-up data center:

computer room:

1 server for RNG

2 (trusted play system)

2 HSMs

1 server for audit

2 (trusted audit system)

*servers are connected to the gaming system

Connected/ Automated System

Mode of operation: Automated

Draw and audit triggered from the gaming system and performed automatically.

Each RNG server is located in a secure computer room in a locked cabinet and connected securely to the gaming system. Automated draws are triggered by the gaming system and the draw results are sent back from the RNG to the gaming system, without any human interaction.

Customers that use this solution include:

primary data center:

computer room:

2 servers for RNG

2 (trusted draw systems)

4 HSMs

1 server/pc/laptop for audit

2 (trusted audit system)

*servers are connected to the gaming system

back-up data center:

computer room:

1 server for RNG

2 (trusted draw system)

2 HSMs

1 server/pc/laptop for audit

2 (trusted audit system)

*servers are connected to the gaming system

Hybrid System

Mode of operation: Hybrid: Automated and Manual

Draw triggered automatically from the gaming system and manually by draw staff using the remote Graphical User Interface (single-click draw). Audit can be automated or manual.

Each RNG server is located in a secure computer room in a locked cabinet and connected securely to the gaming system and a remote Graphical User Interface (GUI). Automated draws are triggered by the gaming system and the draw results are sent back from the RNG to the gaming system, without any human interaction. Manual draws are performed by draw staff from the secure draw room using a remote GUI, eliminating human access to the RNG server. Draw reports are generated, printed, and automatically exported to the gaming system.

The proof of draw integrity file (a tamperproof Signature Log) is transferred automatically or manually to a separate independent audit system to verify the draw integrity file. An internal control system (ICS) can communicate with the audit system for verification of the draw results between the gaming system and draw system. Verified draw results are confirmed on the gaming system and communicated to the public, etc.

Customers that use this solution include:

primary data center

computer room:

2 servers for RNG

2 (trusted draw systems)

4 HSMs

1 server/pc/laptop for audit

2 (trusted audit system)

*servers are connected to the gaming system

draw room:

2 pcs/laptops

2 (for remote GUI access

2 to trusted draw system)

2 printers

1 pc/laptop

2 (for remote GUI access

2 to trusted audit system)

back-up data center

computer room:

1 server for RNG

2 (trusted draw system)

2 HSMs

1 server/pc/laptop for audit

2 (trusted audit system)

*servers are connected to the gaming system

draw room:

1 pc/laptop

2 (for remote GUI access

2 to trusted draw system)

1 printer

1 pc/laptop

2 (for remote GUI access

2 to trusted audit system)

1 printer

test environment:

1 pc/server(or virtual machine)

for RNG

2 (trusted draw system)

1 audit

2 (trusted audit)

2 HSMs

1 pc/laptop

2 (for remote GUI access

2 trusted draw and trusted audit systems)

Isolated/ Remote System

Mode of operation: Manual

Draw and Audit performed manually by draw staff using the remote Graphical User Interface (GUI).

Each RNG server is isolated in a secure computer room in a locked cabinet. It can be accessed securely in a few ways, depending on lottery preference:

1) by a securely connected remote GUI- with no other connections (air-gapped)

2) by a RDP (remote desktop) from a PC on a lottery network

3) by a RDP from a PC connected securely to the lottery local network, from a remote location, e.g. from draw staff’s home.

In all cases, draws are triggered by the GUI, which eliminates human access to the RNG server – draw reports are generated, printed, and exported to a USB drive (in 1) or can be exported to a folder on the remote PC (2 and 3).

The proof of draw integrity (a tamperproof Signature Log) is transferred for further verification to a USB drive (in 1) or to the Trusted Audit system folder (2 and 3). A separate independent Audit system, located in the computer room, is accessed by an auditor via a remote GUI to recreate draw results and verify the draw integrity. Verified draw results can be communicated to the gaming system, public, etc.

Customers that use this solution include:

primary data center

computer room:

2 pcs/servers for RNG

2 (trusted draw systems)

4 HSMs

1 server/pc/laptop for audit

2 (trusted audit system)

draw room:

2 pcs/laptops

2 (for remote GUI access

2 to trusted draw system)

2 printers

1 pc/laptop

2 (for remote GUI access

2 to trusted audit system)

back-up data center

computer room:

1 pc/server for RNG

2 (trusted draw system)

2 HSMs

1 server

1 pc/laptop for audit

2 (trusted audit system)

draw room:

1 pc/laptop

2 (for remote GUI access

2 to trusted draw system)

1 printer

1 pc/laptop

2 (for remote GUI access

2 to trusted audit system)

test environment:

1 pc/laptop for RNG

2 (trusted draw system)

1 audit

2 (trusted audit system)

2 HSMs

Offline/ Standalone System

Mode of operation: Manual

Draw and Audit performed manually by draw staff using the Graphical User Interface (single-click draw).

Each RNG system is isolated, offline, and not connected to any network. Draws are triggered by draw staff in the secure draw room on the offline TD 360 system. Draw reports are generated and can be printed and exported to a USB drive.

The proof of draw integrity file (a tamperproof Signature Log) is transferred to a USB drive for further verification. A separate independent audit system is used to verify the draw integrity file. Verified draw results can be communicated to the gaming system, public, etc.

Customers that use this solution include:

primary data center:

2 pcs/laptops for RNG

2 (trusted draw system)

4 HSMs

2 printers

1 pc/laptop for audit

2 (trusted audit system)

back-up data center:

1 pc/laptop for RNG

2 (trusted draw system)

2 HSMs

1 printer

1 pc/laptop for audit

2 (trusted audit system)

test environment:

1 pc/laptop for RNG

2 (trusted draw system)

2 HSMs

1 audit

2 (trusted audit system)

company

Superior knowledge of RNG solutions and implementations
High awareness of system security issues
Extensive technology expertise
Vast lottery / transaction systems experience
The ability to provide custom solutions that address complex or unique requirements
Concentration on software technologies and a systemic approach
100% focus on electronic drawing systems

product

Superior security and fraud detection capabilities
Reliability and superior quality: 100 % availability with 0 hotline calls since our first day of operations in 2005
Scalable and flexible product architecture that supports standalone systems, remote operation, on-line connected systems, and multitenant systems
The simple and intuitive drawing system interface (Draw GUI) designed by user experience professionals
Complete RNG solution for gaming supporting draw games, instant winners, quick-picks and providing audit and monitoring.
Audit capability built into products to verify integrity and provide fraud detection both during the draw process as well as at any time in the future

history

Szrek2Solutions, LLC (S2S) was founded in 2003 by Irena and Walter Szrek, both with over 20 years of experience in on-line lottery systems. Previously they contributed to GTECH Corporation’s growth from a small startup into an industry leader in lottery systems.
Irena and Walter Szrek designed the concept of an auditable Random Number Generator (RNG) – of an RNG with fraud-detection – and they developed a company around this breakthrough concept. They patented this RNG methodology and developed the Trusted Product SuiteTM by extending ideas from this initial patent and from consequent patents. Since the beginning, the focus of Szrek2Solutions has been on the RNG system’s transparency, integrity, and security, while always developing very high performance and reliable systems.

The company’s ﬁrst customer was Danske Spil in 2005, where Szrek2Solutions provided a very advanced RNG system for instant games, a system that is still advanced over a decade later. Over the years, the company served customers across four different continents. The company has had 0 hotline calls and 100% uptime and reliability since inception.
The company now, although somewhat larger, remains committed to these same principles. Szrek2Solutions continues to develop secure innovative solutions, investing on average 20% of its revenue in Research and Development. It remains the only company in the lottery industry with full proof of integrity / 100% fraud detection technology.

Recent News

solutions

Draw system solutions

Gaming solutions

Shared values of all system solutions:

Differences between the system solutions:

Benefits of connectivity and automation:

Additional Options (Add-ons):

certifications

integrity assurance

Play & draw solutions

Play solutions

Connected/ Automated System

Hybrid System

Isolated/ Remote System

Offline/ Standalone System

differentiators

company

product

history