ArmAs game key/auth system proposal

[Dwarden 1125]

This is my little AA game distribution/key/auth system proposal:

DISTRIBUTION:

Customer can obtain boxed DVD or buy game via online distribution system ( like direct2drive.com or Steam etc. )

both methods contain so called "game registration key" (GRK), e.g on stick in box and via email.

GRK is at least 20 characters long. (Let say if BIS generate rnd 5 millions keys that gives no chance for keygen to catch

First : OFFLINE gameplay

Boxed DVD contains only simple check for original DVD in drive and this will be removed in first game patch.

EDIT: THIS mean NO registration / activation needed /EDIT

Online distribution utilize method equal for MP gaming (read please below).

Second : ONLINE gameplay

BIS provide CENTRAL online system where customer creates his "gameowner account" and can "REGISTER" his GRK!

This account contains multiple email addresses and real name/address checkpoints to prevent account steals.

Multiple GRKs per "gameowner account" are supported too(like if You buy two copies of game You not need two "gameowner accounts").

After GRK is registered system generates "endpoint key file" and send it to email customer requested

(rest of checkpoint emails receive info that "endpoint key file" was sent to selected email).

Customer needs to place "endpoint key file" into game directory.

When connecting online game will be using this "endpoint key file" to check validity of copy via auth with master server.

GAINs:

No need for any stupid DVD / whatever protection (like securom, starforce etc)...

IF machine is hacked or IF key file is stolen, user can easily login to his "gameowner" account and simply revoke generated "endpoint key file"

and create new (this can be useful in case of HDD losses , filesystem losses etc).

YET this NOT helps in case account was globally banned for cheating (as it bans the GRK not "endpoint key file").

IDEA:

i would like to see that single GRK can support two "endpoint key files"

=> customer can play game on 2 computers with only one "game registration key" of course each with unique generated"endpoint key file".

(one of great things on UT2004 keys was that Epic gave customer such freedom).

Third : DEMO

Functions for demo are similar to retail. Single player (offline) needs no validation at all (install and play system).

For DEMO multiplayer there is need to create "gameowner account" and register there "game demo key" instead of GRK.

Again customer gets "endpoint key file" to email (unique for each customer account).

This way ban for cheating in multiplayer demo results again into loss of whole "gameowner account".

BONUS:

This way DEMO players can play w/o issues (auth/bans) on servers reachable by RETAIL players

(why create two standalone communities (demo+retail) when there can be only huge one (more players = better)).

Fourth: STORES RETURNS

Yet there is one problem to solve and that are return in policy for online stores and normal stores when customer is unhappy.

But let say customer already made "gameowner account" and registered his GRK there. What to do now?

Solution can be simple as "gameowner account" can contain "revoke GRK due to return" feature and

internal link to that store "seller account" on BIS's central system, after both parties validate the revoke & return operation,

GRK will be de-listed from used list and can be sold again by that store (linked to that "seller account".

Again this not helps if GRK was banned for cheating (stays banned) and "seller account" will be notified about blacklisted GRK blacklisted!

Summary: OUTCOME

* simple for customers

* effective (anticheat ready)

* supports all types of releases (box,online,demo)

* cheap (saves company cash from lame copy protection solutions)

Numbers and names used in text above are just to give idea not meant strict to follow.

Feel free to discuss, critize or enhance ...

[chipper 0]

a little confusing but I think I get it.

Only reason I would see this needed is if BIS fails to get a publisher ( I DOUBT THAT)

Then they could use this system.

So i vote no unless they dont get a publisher

[-kelet0r 0]

I'm glad you started a new poll Dwarden - the other thread was a mess of Steam hatred

On the topic of Digital Distribution

1 The product would be made available through a distribution software of BIS' choice similar to the EA Downloader or Valve's Steam in design but necessarily in content

2 The software would store your purchasing details while your credit card details would be linked to a randomly generated key code only and stored by BIS only and inaccessible online. Multiple online methods of payment would also be available.

3 The distribution software could be used to apply official updates automatically

4 The distribution software would not prevent the user from playing the purchased product once it has been activated without due cause as outlined in the EULA. Offline play would not require the downloader to be online.

Now how this GRK would apply to the digital users is more complicated - it is already a long standing practice in many games in existance to have a registration code

[codarl 1]

Impressive thinking boy...

However, I do not think it's allowed by law, imagine somebody hacking the Bis server that maintains wich serials are legal...

EDIT: voted "for" this btw

[strango 5]

Sounds good except for Store returns. Unless you give the stores some kind of automated system that is integrated with theirs, they won't take the time to reset the key.

[Guest Ti0n3r]

Sounds pretty good. Not perfect, but good. Voted for.

[Dwarden 1125]

Impressive thinking boy...

However, I do not think it's allowed by law, imagine somebody hacking the Bis server that maintains wich serials are legal...

EDIT: voted "for" this btw

that's no different from some thief breaking into "place whatever name of company here" HQ and steal key numbers from vault room ...

also whole concept is perfectly law valid and will pass in any modern country ...

just to made it similar (there is no difference between this and e.g. EA BF2 CD key authing / PunkBuster CD key auth etc) ...

[Dwarden 1125]

a little confusing but I think I get it.

Only reason I would see this needed is if BIS fails to get a publisher ( I DOUBT THAT)

Then they could use this system.

So i vote no unless they dont get a publisher

this was meant for both cases with and without publisher ...

only stupid publisher will be forcing anything more complicated or lame copy protection schemes ...

[hellfish6 7]

Do stores allow you to return games now? I thought you had to exchange it for another copy of the same game?

Granted, I haven't returned anything in ages, and only then it was because I had a bad installer.

[lwlooz 0]

No forced registration please.I dont feel like having a game account with all fuzzy features.I want to pay for a game engine and want my relationship with BIS to be contained from that point to providing free patches for me.

Before you call me an old-fashioned moron,I simply hate registering.

[EiZei 0]

Do stores allow you to return games now?

Not at least here. Stores have this broken shrinkwrap/seal policy, which does'nt make any sense really. Why the hell would I take a package home and suddenly decide by looking at it that it's crap?

[Dwarden 1125]

No forced registration please.I dont feel like having a game account with all fuzzy features.I want to pay for a game engine and want my relationship with BIS to be contained from that point to providing free patches for me.

Before you call me an old-fashioned moron,I simply hate registering.

I assume You not read what i wrote in proposal ! ? ...

Single player (OFFLINE) = no registration needed for retail box (needed only if You used online download delivery solution)

Multi player (ONLINE) = registration needed (best way how fight cheating)

[Dwarden 1125]

Do stores allow you to return games now? I thought you had to exchange it for another copy of the same game?

Granted, I haven't returned anything in ages, and only then it was because I had a bad installer.

Online stores get usually 14-30 days as return policy. Normal stores vary ...

[-kelet0r 0]

No forced registration please.I dont feel like having a game account with all fuzzy features.I want to pay for a game engine and want my relationship with BIS to be contained from that point to providing free patches for me.

Before you call me an old-fashioned moron,I simply hate registering.

I assume You not read what i wrote in proposal ! ? ...

Single player (OFFLINE) = no registration needed for retail box (needed only if You used online download delivery solution)

Multi player (ONLINE) = registration needed (best way how fight cheating)

that leads to a problem though - operation flashpoint was largely an offline game

having no protection whatsoever at that level against warez just doesnt cut it

a rethink of that idea is needed

maybe access to the first patch and hence no cd needed in the drive would be the incentive required

[lwlooz 0]

Oh,I want to play online like I did for the last years.My Point is,how is BIS concerned in the relationship between me and the Server I play on? Imo I want them provide the content(game) and I dont want them to play Internet-Police.I am not saying it is a bad idea,it is just another measure that is a PITA for consumers,but not for Crackers.But sure,Let BIS catch up with the rest of the industry.Thats the way it goes.In a couple of years we will have gone through 4 anal inspections before we are even allowed to brush our teeth in the morning

[-kelet0r 0]

so you would rather BIS served your every whim at their expense and at the expense of the whole community

there is a reason these protection systems aer inplace and why developers feel they have to use Starforce for example

[codarl 1]

In a couple of years we will have gone through 4 anal inspections before we are even allowed to...

For bis, I will do it all.

[Dwarden 1125]

No forced registration please.I dont feel like having a game account with all fuzzy features.I want to pay for a game engine and want my relationship with BIS to be contained from that point to providing free patches for me.

Before you call me an old-fashioned moron,I simply hate registering.

I assume You not read what i wrote in proposal ! ? ...

Single player (OFFLINE) = no registration needed for retail box (needed only if You used online download delivery solution)

Multi player (ONLINE) = registration needed (best way how fight cheating)

that leads to a problem though - operation flashpoint was largely an offline game

having no protection whatsoever at that level against warez just doesnt cut it

a rethink of that idea is needed

maybe access to the first patch and hence no cd needed in the drive would be the incentive required

uhm

any no matter how strong protection for offline game will be cracked ...

and the simple DVD in drive check until first patch is already in proposal post ...

anyway this is not about offline mode but about multiplayer (as that is going to be what most of customers waits for)

[Dwarden 1125]

so you would rather BIS served your every whim at their expense and at the expense of the whole community

there is a reason these protection systems aer inplace and why developers feel they have to use Starforce for example

i tell You what think some developers about Starforce (reworded discussion from last year):

me: so You finalizing development, what said Your publisher about any copy protection?

developer: well, we got multiple copy protection producing companies appearing on our doors, namely i remember Starforce was there last week. They asked for huge $. We send them to deep hell. After discussion with publisher we decided to invest that cash into two new artists and new coder ...

btw. they released theirs game last year and it wasn't fiasco ...

and similar opinion You find between most of developers ...

these who tends to use Starforce are naive, it's just placebo effect and it never works (You can get ANY starforce protected game on warez TODAY) ...

[-kelet0r 0]

I dont doubt that for a second

but developers feel the need to protect their games in that manner out of fear - it is like their 'shop' is constantly being burgled

and you cannot ignore the singleplayer element of the game - i wager that more will play it solely offline than online and that is no idle bet, ut2003 had more offline players than online players when it was an online multiplayer game

and having a global key registration as you are promising will not work unless you can one link it to a unique item of information either in the game, the disc or on your computer (an IP wouldnt work) and it is asked for everytime you play online

your proposal is incomplete

[Dwarden 1125]

Oh,I want to play online like I did for the last years.My Point is,how is BIS concerned in the relationship between me and the Server I play on? Imo I want them provide the content(game) and I dont want them to play Internet-Police.I am not saying it is a bad idea,it is just another measure that is a PITA for consumers,but not for Crackers.But sure,Let BIS catch up with the rest of the industry.Thats the way it goes.In a couple of years we will have gone through 4 anal inspections before we are even allowed to brush our teeth in the morning

there is minimal difference to actual system (now You have CD key stored somewhere (e.g. registry or in game directory in file) and when You join server it's checking by auth if the key is valid ...

so most of online games are already concerned what server You play on and with what (valid/not valid/banned/not banned) copy

proposed system don't use "CD key" directly and prevent's steals (Your "CD key" is generated and sent to You email after You register) ...

[Dwarden 1125]

I dont doubt that for a second

but developers feel the need to protect their games in that manner out of fear - it is like their 'shop' is constantly being burgled

and you cannot ignore the singleplayer element of the game - i wager that more will play it solely offline than online and that is no idle bet, ut2003 had more offline players than online players when it was an online multiplayer game

and having a global key registration as you are promising will not work unless you can one link it to a unique item of information either in the game, the disc or on your computer (an IP wouldnt work) and it is asked for everytime you play online

your proposal is incomplete

UT2003 got minimal protection and it was removed in future patches ... did that hurt sales at all ?

in fact i think UT2003 allows you play with more than account / key same as UT2004 ... again that not hurt sales ...

btw. what unique ID of computer You speak about? ... You already GETTING the unique key file from the master server after You register Your GRK (simplified content is generated from hash of GRK and Your account info +- some autobus data ... yet it is still enough to have that ID unique !

[-kelet0r 0]

so are you saying that you need only be authorised once and once only?

Quote[/b] ]what unique ID of computer You speak about? ... You already GETTING the unique key file from the master server after You register Your GRK (simplified content is generated from hash of GRK and Your account info +- some autobus data ... yet it is still enough to have that ID unique !

from what you are saying here i think - the unique data is not unique at all and is open to hacking

what would work better is to have Arma have a mini program generate a unique code on your computer

then when you register the game online you are assigned a new Key by the developer online

The 2 - code and key - are irrevocably linked and are confirmed everytime you connect to the multiplayer menu ingame

[JdB 151]

Look at the amount of ''keygens'' and ''public server patches'' for every game published within the last 5 years, however complicated a copy protection is, there will always be people that are smarter then the person that made the protection.

Copy protections are only usefull in frustrating people that purchase legal software with ''malfunctioning'' DVD/CD-ROM drives and applications that dissappear, guided by the idea that by purchasing a game you have no right anymore to burning a DVD/CD with any content what so ever, legal or illegal.

If you know where to search for it, there is always a solution to any problem (except for EA's existance ).

User ID's are good for banning cheaters, but there were already user ID's, though not perfect, and no option to ban the user on an ID server. That is the one of the few good things about Steam. The negative thing about that is that servers do tend to experience something refered to as ''downtime''.

[-kelet0r 0]

you can never prevent it - just minimise it

keygens do go a long way towards preventing warez

i suppose the reason for this thread was to find a good compromise that wont hurt the consumer and will minimise loss to the producer