Encrypted Tech Syncs Online Crime Game And Fun Brain Games For Anti-Cheat Authorization

uCity Online Crime Game is trying out some new in-house encryption PHP tech to sync with it's sister site, uCity Fun Brain Game, for Anti-Cheat Authorization

California (I-Newswire) October 26, 2012 - Since uCity Online Crime Game has "Tomb Raiding" with doors that require puzzles and riddles, a solution was needed to access the existing content on uCity Fun Brain Games, and return with authorization.

This technology applies to eCommerce sites that want to verify the approved return from the PayPal site, or coupon sites that want to verify the completed return from a sponsor site. Currently, hackers and savvy users can circumvent this process by manipulating packet header information or just exploiting an early return.

The objective is for the partner site to securely return true / false information in an encrypted message back to the sync site. Either they paid, or they didn't. Either they Won, or they didn't.

While difficult, hackers have shown the ability to circumvent SSH (https://). Regardless, this is a financially expensive solution for a small business.

In the case of uCity Online Crime Game, the goal was not to rewrite existing PHP code, or import a shared in-house PHP library. In cases like PayPal, shared code isn't an option.

uCity uses a PGP public key esque method, but doesn't requre PGP or GNUpg to be loaded onto either server. An encryped code is delivered to the partner site, the partner decodes it, encrypts is again in a second key, and returns it with authorization. This is all in a way so the codes change every use. PHP keeps the spcific methods serverside.

Either site can see if they are being Brute Force or Man-in-the-Middle attacked.

In the case of uCity Online Crime Game and uCity Fun Brain Games, it provides a Anti-Cheat system to encourage a Fair Play World Record board. uCity plans to license this sw technology.

Hackers, whom uCity has all the respect in the world for, can always crush your site by a DDNS, which brings down your server, but doesn't access your data.