NZ299616A - Access control with identity verification and smart key - Google Patents

Description

New Zealand No. 299616 International No. PCT/ TO BE ENTERED AFTER ACCEPTANCE AND PUBLICATION Priority dates: 05.11.1992; Complete Specification Filed: 05.11.1993 Classification:^) G06K9/78; G07C9/00; G07C11/00; G07F7/10; G07F19/00 Publication date: 19 December 1997 Journal No.: 1423 NEW ZEALAND PATENTS ACT 1953 COMPLETE SPECIFICATION Title of Invention: Secure access control system Name, address and nationality of applicant(s) as in international application form: COMS21 LIMITED, 52 Hoskins Street, Mitchell, Canberra, ACT 2911, Australia Patents Form # 5 2996 1 6 WndBt tti» prowisio** of Regulation 23 (1) the Sp»odV:aiMfi b*wi ani^M DIVISIONAL OUT OF APPLICATION #257489 ANTE-DATING REQUESTED TO 06 JUNE 1995 NEW ZEALAND Patents Act 1953 COMPLETE SPECIFICATION Title Secure Access Control System We, Coms21 Limited Address: 52 Hoskins Street, Mitchell, Canberra, ACT 2911, Australia Nationality: Australia do hereby declare the invention for which we pray that a patent may be granted to us and the method by which it is to be performed, to be particularly described in and by the following statement: PF05.JWP FEE CODE 1050 WO 94/10658 PCT/AU93/00576 » 29 9 6 1 6 l "SECURE ACCESS CONTROL SYSTEM- BACKGROUND OF INVENTION This invention relates to a secure access control 5 system.

The invention has particular but not exclusive application to a secure access control system for use in gaming establishments such as casinos and for illustrative purposes reference will be made herein to 10 such an application. However it is to be understood that this invention can be used in many other applications, such as for example restricted area security, automatic teller machines, medical records, information retrieval etc, where control of access to only authorised users is 15 important.

DESCRIPTION OF THE PRIOR ART Secure access control systems are well known. It is known to provide mechanical and electronic locks or 20 access barriers which are "releasable" when a personal identification number (PIN) is entered on a keypad by a user or when operated by use of an encoded card or key.

It is known to use such cards in conjunction with a PIN to provide access only to authorised users who can 25 enter the correct PIN. These known secure access systems provide access to remote sites aud are controlled by a centralised computer system. However if the centralised computer is inoperable at any time, the remote site facility is also inoperable.

It is also known to provide identification cards or security access devices which include memory and circuitry enabling the memory to be read from, written to or otherwise modified. Such cards can include electrically erasable programmable read only memory 35 (EEPROM) and are known in the art as " smartcards" . Such devices are disclosed in US patents 4675516, 4725924, 4727246, 4733061 and 4764666.

The use of coin actuated gaming and amusement ^VO 94/10658 PCT/A U93/00576 2996 1 6 machines is well known. The administrative, labour and logistical problems associated with the management of the very large coin or token holdings in casinos and fun parlours has led to a requirement for gaming machines 5 which are "cashless" in the sense that they are operated by a card or other device whereby the gaming machine is coin-freed. Australian patents 511904 and 613484 and Australian patent application 72657/91 illustrate such "cashless" equipment. The latter two disclose the use of 10 smart cards such as those described above.

The management and audit functions in casinos and fun or amusement parlours is complex because of the large turnover, the large number of machines and the vast quantity of statistical information available for 15 analysis. These functions may be performed manually by collating data manually extracted from each individual machine. However it is now not uncommon for this function to be carried out electronically either by a centralised computer facility connected to individual 20 machines by a landline as exemplified in Australian patent 542455 and Australian patent application 72657/91, or by on-site down-loading from individual machines to a transportable data collector as exemplified in Australian patents 553309 and 613484. However failure of the 25 central computer in systems using landlines can render individual machines inoperative. Furthermore in systems using on-site down-loading, security at individual machines can be compromised by the lack of a centralised control as this cannot be provided in the absence of on-30 line real time data.

SUMMARY OF THE INVENTION The present invention aims to provide a useful alternative to known secure access control systems which 35 will be reliable and efficient in use.

This invention in one aspect resides broadly in a secure access control system including:- at least one key assembly having a data processing WO 94/10658 PCT/AU93/00576 > 299616 assembly including processor mecins and data storage means for receiving identification data relevant to a user of the system; a plurality of access control assemblies adapted to 5 receive a key assembly, each access control assembly having a data processing assembly including processor means and data storage means, and interface means whereby an access control assembly can communicate with a received key assembly. 10 As used herein the expression "key assembly" includes devices for permitting access by a user to a secure access system upon correct use of the device by the user. Cards and keys are examples of key assemblies. The secure access control system may include a central 15 computer assembly, and communication means for transferring data from the access control assemblies to the central computer assembly.

In a preferred embodiment the access control assemblies include a user interface assembly operable by 20 a user to input data to the access control assembly.

The user interface assembly can include any suitable means whereby the user is able to communicate with the access control assembly and it is preferred that the user interface assembly includes input means and information 25 display means.

The input means could be a joy-stick or a mouse or a screen-based electronic pencil. Alternatively the input means can be a microphone for recording the voice instructions of a user. However it is preferred that the 30 input means includes a keypad.

In a preferred embodiment the access control assembly includes receiving means for closely receiving and releasably retaining a key assembly whereby communication is established between the access control 35 assembly and the key assembly by the interface means.

An access control assembly may verify a user's identification by comparing a PIN entered by the user with a PIN stored in the key assembly data storage means.

-O 94/10658 4 PCT/A U93/00576 2996 1 6 However it is preferred that each access control assembly-has identity verification means for verifying identification data stored in the key assembly data storage means. Tfcus the identity verification means may 5 include sensing means for sensing personal physical characteristics of a user.

The sensing means may sense a range of personal physical characteristics. Thus the sensing means may sense skin print images or finger prints as described in 10 Australian patent applications 87582/91 and 67230/90, or finger profiles as described in Australian patent application 55243/90. Alternatively the sensing means may sense voice tones. However it is preferred that the sensing means includes camera means for sensing facial 15 characteristics of a user. The facial characteristics may be interocular separation or retina identification.

The secure access control system may allow for visual verification of the identity of a user to be made and in such an arrangement the key assembly data storage 20 means stores image data representative of an image of a user's face and the access control assembly includes image display means for displaying the image.

In another aspect this invention resides broadly in an operating system for a plurality of gaming machines, 25 the operating system including a secure access control system as defined in any one of the preceding statements wherein each gaming machine includes an access control assembly as described above. It is preferred that the access control assembly includes a user interface 30 assembly as described above.

As used herein the expression "gaming machine" includes any device, assembly or apparatus operable by a user for the purpose of entertainment and gambling. Examples of gaming machines include poker machines, slot 35 machines, pinball machines, roulette tables, blackjack machines, machines for playing bingo, lotto, jeuting and other similar lottery-type games, and TV sets and video screens programmed to facilitate gambling and the playing WO 94/10658 PCT/AU93/00576 1 s 299616 of amusement games.

The gaming machines may be operable solely by coins and tokens in known manner, but it is preferred that the key assembly data storage means and the access control 5 assembly data storage means each stores credit data representative of the credit held by a designated user. In such an arrangement it is further preferred that the credit data is incremented or decremented when a financial event associated with the key assembly is 10 completed.

As used herein the expression "financial event" means any transaction which increases or decreases the credit held by a designated user of the operating system. Events which increment the credit data storage means 15 include a cash deposit and a gaming machine win by a user, and events which decrement the credit data storage means include operation of a gaming machine by a user and operation of the user interface assembly to access a paging system to provide a chargeable service to the 20 user.

In a preferred embodiment the operating system may include a paging system for transferring messages and paging signals from the gaming machines. In such an arrangement it is preferred that the user interface 25 facility includes paging means whereby a user can access the paging system.

Gaming machines for use in the operating system of this invention may be custom-built for use therewith. However to enable older machines to be used in the 30 operating system the geuning machines may include retrofit interface means for providing data transfer between an existing processor unit in an existing geuning machine and the access control assembly in the gaming machine. In the case of older machines which may not allow access to 35 the processor unit the retrofit interface means may provide data transfer between photo—optic coin sensors, solenoid switches and motors in an existing machine and the access control assembly.

O 94/10658 PCT/A U93/00576 2996 1 6 6 In a further aspect this invention resides broadly in a method of securing access, the method including providing a key assembly having a data processing assembly including processor means and data storage means 5 for receiving identification data relevant to a user having authorised access; inserting the key assembly in an access control assembly adapted to receive the key assembly and having a data processing assembly including processor means and 10 data storage means whereby communication is established between the access control assembly and the key assembly, and verifying identification data stored' in the key assembly data storage means.

In yet another aspect this invention resides broadly in a method of controlling the operation of a plurality of gaming machines linked to a central computer assembly by communication means for transferring data from the gaming machines; to the central computer assembly, the 20 method including providing users of the gaming machines with a key assembly having a data processing assembly including processor means and data storage means for receiving identification data relevant to a user and credit data 25 representative of the credit held by the user; providing an access control assembly for each gaming machine, the access control assembly being adapted to receive the key assembly and having a data processing assembly including processor means and data storage means 3 0 whereby communication is established between the access control assembly and the key assembly, and incrementing or decrementing the credit data when a financial event associated with the user is completed.

BRIEF DESCRIPTION OF THE DRAWINGS In order that this invention may be more easily understood and put into practical effect, reference will now be made to the accompanying drawings which illustrate WO 94/10658 ' PCT/AU93/00576 2996 1 6 a preferred embodiment of the invention, wherein:- FIG 1 is a simplified schematic block diagram of a secure access control system including visual identification means; FIG 2 is an illustration of a user interface assembly for use in the system of FIG 1; FIG 3 is a flow diagram illustrating a photo identification process in the control system of FIGS 1 and 2; FIG 4 is a detailed schematic block diagram of a secure access control system in accordance with the invention; FIGS 5,- 6 and 7 are schematic block diagrams of a secure access control system for a geuning establishment; 15 FIG 8 illustrates a player interface assembly for association with a gaming machine; FIG 9 is a perspective view of a key assembly and housing therefor; FIG 10 illustrates a player interface assembly 20 attached to a poker machine; FIG 11 is a flow diagram illustrating a machine playing sequence for a gaming machine connected in the control systems of FIGS 5f 6 and 7; FIG 12 is a flow diagram illustrating a machine pay 25 out sequence for a geuning machine connected in the control systems of FIGS 5, 6■ and 7; FIG 13 is a flow diagram illustrating entry of machine credit to a geuning machine connected in the control systems of FIGS 5, 6 and 7; and 30 FIG 14 is a flow diagram illustrating operation of a central crediting system connected in the control systems of FIGS 5, 6 and 7.

DETAILED DESCRIPTION OF THE INVENTION 35 A visual identification access control system in accordance with one embodiment of the present invention will now be described with reference to FIGS 1 to 3.

Visual identification access control system 11 to 94/10658 PCT/A U93/00576 2996 1 6 8 comprises a visual sensor unit 12, an interface unit 13 arranged to interface with a key assembly memory storage device 14 and a processing means 15.

Control system 11 is connected to a secure system 5 16. The secure system is one which requires identification of a user before the user is allowed access to the system. Examples include automatic teller machines connected to central data base storing bank account information, and a control system where gaming 10 devices are connected to a central controller storing account information. The visual identification system of the present invention is not limited to use with these examples.

Each user of secure system 16 is provided with a key 15 assembly memory storage device 14 which contains image information relating to the visual facial appearance of the user. The memory storage device 14 may be an "intelligent key" containing a digital processing device and memory. The memory stores the image data in digital-20 form. The interface unit 13 includes an intelligent key reader which interfaces with memory storage device 14 to obtain the digital image data from the memory. The interface unit 13 provides the processor mecins 15 with the digital image information obtained from the memory 25 device 14.

The visual sensor unit 12 includes a camera 17 containing a charge coupled device (CCD) sensor and a lens positioned to view the face of a user standing by the apparatus. The CCD obtains a visual readout of the 30 facial appearance of the user and the sensor unit 12 converts this visual readout into digital form which is transmitted to the processor unit 15.

The processor unit 15 compares the digital image information obtained from the visual sensor unit 12 with 35 the digital information obtained from the interface unit 13. If the data from units 12 and 13 corresponds, processing means 15 determines that a positive identification has been made. That is, the person with 9 2996 1 6 the key assembly memory device 14 is the same person being viewed through the lens. The processor 15 may then indicate to the secure system 16 that a positive identification has been made and the user will then be 5 allowed access to the secure system, eg to withdraw cash from a bank account.

Receiving means in the form of slot 18 is provided in unit 13 for insertion of intelligent key 14.

A keyboard 19 is also connected to the secure system 10 16. The keyboard may also be connected to the processor 15. The keyboard 19 allows a user to conduct transactions with the secure system 16. The number and type of keys provided on the* keyboard 19 will depend on the functional requirements of the secure system 16. 15 FIG 2 shows a front view of the face 21 of user interface 13. (In this embodiment the keyboard 19 forms part of the interface unit 13.) A liquid crystal display 20 is provided for conveying information to the user. For example, the display may prompt the user to take 20 necessary action to progress the identification process.

In this embodiment the user is also provided with a PIN number which is entered by keyboard 22 before access to the secure system 16 is enabled. The use of both a PIN number and the visual identification technique 25 increases the security of the system.

In use, the display 20 can prompt the user to insert the key 14 into the slot 18. The user will then be asked to input the PIN number on the keyboard 22. If the PIN number is correct, the apparatus will proceed to the 30 visual identification stage. A switch 23 is provided to cause the camera 17 to be activated to take a frame. The switch 23 may be activated by the user. A frame is taken by the CCD unit, converted to digital and transferred to the processor unit 15. The lighting conditions at the 35 site are then altered (darker or lighter) and a second frame is taken by the CCD unit. A light sensor 24 is provided to detect lighting conditions. This frame is also converted to digital and transferred to the 0 94/10658 ' ' PCT/ A U93/00576 2996 16 processor unit 15. The change of light conditions ensures that the diameter of the pupil of the eye of the user will change. This is a test to ensure that the face is that of a real person and not a photograph. The 5 processor will determine whether the pupil diameter has changed and if there has been no change, access to the secure system 16 will be denied. If pupil identification has changed the visual identification process will proceed.

The image stored in the key and obtained by interface unit 13 is transferred to the processor means 15. A comparison is then carried out between the image from the unit 12 and the image from the interface unit 13.

The flow chart of FIG 3 is illustrative of the above process.

FIG 4 is a detailed schematic block diagram of a secure access control system in accordance with the invention- A kay assembly, user carriable device or 2 0 memory storage device 25 includes data processing assembly 26 having a central processor or digital processing device 27 and data storage means 28 for storing identification data 29 and image data 30. Interface 31 provides communication between key assembly 25 and an access control assembly 33.

Access control assembly 33 includes a data processing assembly 44, user interface assembly or interface unit 45, receiving means 38 for receiving key assembly 25, and identity verification means 39.

Data processing assembly 44 is controlled by a central processor 34 and includes data storage means 35.

User interface assembly 45 includes input means in the form of keypad 36 and information display means 37 in the form of a liquid crystal display as previously described.

Receiving means or keyslot 38 includes an interface 32 for providing communication with key assembly 25. Identity verification means 39 in the form of processor means adapted to compare information is associated with a WO 94/10658 ' ' PCT/AL'93/00576 1 „ 2996 16 sensing means, sensor or visual sensing unit in the form of a camera 40 as previously described. Image display means 46 in the form of a video screen is provided at the access control assembly 33 to display a screen picture of 5 the face of the legitimate holder of the key assembly 25. Interface means 41 is adapted to provide communication between access control assembly 33 and other access control assemblies and a central computer assembly or control unit 42 via communication bus 43.

A gaming establishment control system which incorporates an operating system in accordance with em embodiment of the present invention will now be described with reference to FIGS 5 to 14.

With reference to FIGS 5 and 6, the control system 15 comprises a central computer 42 for controlling operations of the system. A communication system generally designated by reference numeral 43 connects the central computer 42 to peripheral units. A plurality of gaming machines 49 are connected to the control system. 20 Poker machines incorporate counters 54 for counting the number of credits input to a machine and taken out of the machine during a predetermined playing period and for monitoring sundry other machine operations, switches 55 controlled by a keyboard for operation of the machine and 25 coin in/out meters 56 which provide a number of pulses when coins are input or taken out of the machine. Conventional poker machines are coin operated and prizes may be paid out in coins at the machine. This embodiment of the present invention enables operation of poker 30 machines without the need to insert coins. Further, no coin pay out is necessary when a prize is won.

A large geuning establishment may have many hundreds of poker machines. All these poker machines may be connected in the control system of the present embodiment 35 of the invention. The control system includes an access control assembly 57 associated with each poker machine 49. Each access control assembly 57 is connected in a loop format in which each assembly for each poker machine O 94/10658 PCT/AU93/00576 ' 299616 12 is connected. The loop is connected to the central computer 42. Serial data lines are used for the loop communication system. Two serial data communication lines are employed, ona for carrying data and the other 5 being supervisory. Depending on how many machines 49 are to be connected in the control system, a plurality of loops may be employed.

The control system also incorporates a number of other types of terminals, apart from the gaming device 10 access control assemblies 57, which are also connected to the central computer by the communication system 43.

These include remote cash register units 58, remote auto-teller units 59, and credit/debit terminals 60.

The central computer 42 is also connected to a 15 paging system 52 having CPU control unit 61 and paging transmitter 62. These provide a paging service. The computer is also connected to computer controlled signs 63, which may be for the purpose of advertising, providing linked jackpot information etc.

The system constitutes a complete control system for monitoring operation of the gaming establishment. Transactions with each machine 49 can be monitored by the central computer 42. In addition, financial transactions at other points in the establishment, such as at the bar 25 or restaurant, can also be monitored by the central computer. The paging function enables services to be provided to users of the machine 49 without the users needing to leave their seat by the machine. Keyboard means such as keys 53 as described with reference to FIGS 30 7 and 8 and associated with the access control assembly 57 are actuable to instigate a paging function to call a service operator to attend to the needs of the user, depending upon the key actuated on the user assembly 45.

Gaming machines for use in the operating system of 35 this invention may be custom-built for use therewith. As seen in FIGS 6 and 7, to enable older machines to be used in the operating system the gaming machines 49 have a retrofit interface board 50 which includes adaptor WO 94/10658 PCT/AU93/00576 29 9 6 1 6 13 circuits specific to a given machine for providing data transfer between an existing processor unit and access control assembly 57. Some older machines do not allow access to the processor unit and interface board 50 5 provides data transfer between photo-optic coin sensors, solenoid switches and motors and access control assembly 57.

FIG 8 illustrates a user interface unit 64 to be mounted on each machine 49 as shown in FIG 10. The unit 10 64 is operable by the user on insertion into the key slot 65 of an intelligent key 25 containing a micro processor and memory store. Key slot 65, which with key 25 is illustrated in perspective view in FIG 9, is installed in user interface unit 64 with an upwards inclination so 15 that the drinks of users if accidentally spilled, will not collect in the slot. It will of course be realised that the interface unit may be built into the gaining machine and that in the case of video machines, the display means can be the video screen.

To obtain access to the machine 49, the user inserts intelligent key 25 into the key slot 65 and enters the PIN number by actuation of the appropriate keys on the keyboard 66. The intelligent key 25 contains in its memory credit information indicating the amount of credit 25 available to the owner of the key for playing the machines 49. Whether the player has enough credit on the key will be checked by the unit 64 and if approved the player will be allowed to play machine 49. The player may play the machine with any amount of credit available 30 on the key 25. As credit is entered to play the machine it is debited from the key 25. Winnings are credited to the memory store on the key.

The control system will also "double check" the credit on the key with account information for the user 35 held on data base by the central computer 42. This check is preferably carried out before play commences. If there is an inconsistency between the account on central data base and the credit shown on the key, the user will O 94/10658 PCT/AU93/00576 2996 14 be asked to report to an office of the gaining establishment and will not be allowed to play the machine.

The user's account on the central computer 42 may 5 also be updated in response to playing the geuning machine 49. If a user's account or key has no credit, credit may be obtained at a change box having debit/credit unit 60. If the user deposits money at the change box it will be credited to both key and account by tha debit/credit unit 10 60. The player can then proceed to play a machine.

The central computer 42 may also obtain other transaction information from the machines 49. Any information required for audit purposes may be obtained by the central computer 42 in this manner. There is no 15 need for an operator to physically attend a machine except in cases of malfunction. The central computer 42 continually polls the machines for data.

If a user requires a service function or a drink at the machine, the appropriate button 53 on the keyboard is 20 pressed and a service operator will be paged by the paging system. The central computer 42 detects that a paging operation is required and causes the paging CPU 61 to cause a paging transmission via paging transmitter 62 to page a designated operator by a remote paging unit. 25 The designated operator can then approach the user to carry out the required service. If a drink or other service is to be provided which will cost the user money, the user may pay for it by debiting credits from his key. This can be done at the user interface unit 64. 3 0 Any number of desired paging functions can be carried out by the paging CPU 61. The paging system is responsive not only to users, and a facility is provided for automatically paging service operators in some circumstances.

For example, if a key is accidentally left in machine 49 after a predetermined time the service operators are paged with an appropriate message. If credits are accidentally left on a machine the attendant WO 94/10658 PCT/AU93/00576 2996 1 6 will again be paged with an appropriate message after the elapse of a given time without machine activity. The attendant can then clear the machine by inserting an operator key and entering a code. The computer 42 will 5 be updated with the member's new credit. This will cause a discrepancy between the member's key and the credit in the central computer, and the next time the member plays a machine the display 37 will signal to the member to check at the change box. The key credit can then be 10 updated by the cashier.

In order to obtain cash the user utilises a change box or reception 60. Money can be collected from the change box and the key credit will be debited.

Key reader units 58 are provided at the bar, 15 restaurant and at other locations to enable a user to use a key to obtain other services. These units axe also connected to the central computer 42 to update account inf ormation.

Auto-tellex* units 59 axe also provided and may have 2 0 a facility for visual identification in accordance with the first aspect of the present invention.

FIG 7 is a detailed schematic block diagram of an operating system for a number of gaining machines 49 utilising a secure access control system 57 in accordance 25 with the invention. A key assembly, user carriable device or memory storage device 25 includes data processing assembly 26 having a central processor or digital processing device 27 and data storage means 28 for storing identification data 29, image data 30 and 30 credit data 47. Interface 31 provides communication between key assembly 25 and access control assembly 57.

Access control assembly 57 includes a data processing assembly 44, user interface assembly or interface unit 45, receiving means 38 for receiving key 35 assembly 25, and identity verification means 39. Access control assembly 57 can be connected to a gaming function 51 by a retrofit interface unit 50 as previously described. £0 94/10658 PCT/ 2W6 16 16 Data processing assembly 44 is controlled by a central processor 34 and includes data storage means 35 for storing credit data 47 and gaming machine data 48. A user interface assembly 45 includes input means in the 5 form of keypad 36, information display means 37 in the form of a liquid crystal display and paging means or buttons 53 as previously described. Receiving means or keyslot 38 includes an interface 32 for providing communication with key assembly 25. Identity verification means 39 in the form of processor means is adapted to compare information. Interface means 41 is adapted to provide communication between access control assembly 33 and communication bus 43' for communication with other access control assemblies and a central 15 computer assembly or control unit 42 and to a paging system 52.

It will be realised that a cashless system can be provided in accordance wits the invention in which the intelligent key contains an electronic photo ID facility, 20 key number, user function (member, attendant, operator), user details (name, address) and transaction details.

The key holder has a PIN code which is not accessible to operators. Transactions are stored and reported by key number and not by member name. The key 25 can be used for different clubs with the data of one club not being accessible by other clubs. The key is thus extremely secure and cannot be copied.

Key readers are provided on each machine, at each entrance with monitors for photo ID check, at each payout 30 area optionally with an ID monitor, at each bar service area, at reception area with camera for new membership, and at automatic tellers with reader/writer/earnera.

FIGS 11 to 14 are self-explanatory flow charts showing machine playing sequence, machine pay out 35 sequence, entry of credit into the machine and operation of the central crediting system. The following brief summaries outline operation of the system in a club or casino and should be read in conjunction with FIGS 11 to PCT/A U93/00576 17 2996 1 6 14.

Credit System:- Member pays for credits at change box.

Member key inserted in reader, enters PIN number. Operator checks details and enters credit amount. Credit placed on key and key ejected.

Transaction with member, operator, amount, date logged on CPU.

Machine Player System:- Insert key in machine.

Display asks for PIN number.

Enter PIN number.

Main CPU checks details and credit.

Display asks for amount required to be entered in machine.

Enter amount.

Credit on key and CPU are updated.

Key removed.

Coin credit meter on machine incremented.

When play finished insert key in reader and press "collect" on poker machine.

Key and CPU updated with credits and machine coin credits cancelled.

Remove key.

If a key is accidentally left in a machine after a predetermined time the attendants are paged with a message indicating a key may be left in the machine. If there are no credits left on the machine at the end of play there is no need to insert the key - the machine will automatically be released after predetermined time.

A member may reserve a machine, with credits on it, and without having his key actually in the machine, and get a drink etc - the machine will not accept any other key (except an attendants) when in this mode.

If credits are accidentally left on a machine the attendant will again be paged with an appropriate IVO 94/10658 PCT/ A U93/00576 29 9 6 18 message after a time without machine activity. The attendant can then clear the machine by inserting his key and entering a code. The CPU will be updated with the members new credit. This will give 5 a discrepancy between the member * s key credit and the credit in the CPU. The next time the member plays a machine he will be asked by the display to check his credits at the change box. The key credit will then be updated by the cashier (a message with 10 the reason for the update will be given at their terminal).

Payout j- Money collected from key credit at change box, automatic teller.

. Key inserted in reader.

PIN number entered.

Credit amount checked by CPU Photo ID if required.

OK given to operator.

. Record again kept of transaction Machine Attendants:- Attendants have their own keys.

Log on/off duty can be performed.

Key inserted in machine before any service. 25 Reports:- Reports can be generated by management by selecting their own set of specifications from the database. Examples include:- - from credits entered to keys 30 Cash out - from key credits cashed in - credit on keys not claimed - key credits used at bar - cash taken at bar - all functions 35 Player Activity - types of players, machines, - cash credits used - cash taken - key credits used Cash in Cash out Key Credits Bar Cash Meter Readings Player Activity Restaurant Cash Entertainment WO 94/10658 PCT/AU93/00576 2996 16 - cash taken It will be appreciated that a secure access control system in accordance with the present invention has many advantages.

The provision of a secure intelligent user key, on- site processor storage capacity and the ability to check identity on site without the necessity to revert to a central computer, enables stand-alone operation and means there is little restriction on the number of sites which 10 can be run on a single extended network. Integration of an internal paging system enables automatic rep( trting on all important events within the system to users who are potentially concerned with an event, and provides extremely - efficient utilisation of human resources. 15 Furthermore, it offers immediate service to customers and users in casino-type installations.

The system allows for both supervisory control and data -ransfer whereby multiple facilities can be provided with minimum congestion. Electronic signs such as 20 general .information, jackpot information and advertising can be easily controlled and it is possible with the system to provide inter-establishment jackpots as well as internal j ackpots.

The secured access control system in accordance with 25 this invention also provides a facility for central updating whilst monitoring all sites, and generates virtually real time information from all sites.

The paging facilities provide automatic ordering of goods on site, jackpot information for management, 30 machine reserve reporting and indicates to staff the need to service machines. These capabilities provide significant advantages in clubs, casinos and the like.

It will be realised that a central computer failure does not cause the system to fail and that individual 35 operations can continue on-site because of the provision of on-site processor facilities and the high level security provided by the intelligent card. The central computer is updated when it comes back on-line. 0 94/10658 PCT/AU93/00576 2996 Linked jackpot facilities can only be provided satisfactorily with on-line systems and the utilisation of linked jackpots is facilitated by the present invention because of the instant automatic paging 5 facilities which are available if problems occur. Provision of such a system is desirable for the smooth operation of linked jackpots.

It will also be realised that the system according to the present invention overcomes certain problems of 10 the prior art and in particular provides for the automatic update of player records and so does not rely on a player having to hand in a key in order for the centralised computer to access information for collation and analysis. This is one disadvantage with the system 15 outlined in Australian patent application 72657/91 because of the fact that it is usual for players at casinos to lose their credit and there is thus often little incentive for a player to return a key to a central location.

Furthermore, by providing a system in which individual debits are incremented each time a machine is played, the system of this invention overcomes disadvantages of earlier "cashless" systems in which the total amount of credit is downloaded into the machine 25 when the player's card is inserted in the machine and read by the card reader. This is of particular significance if, as is usual, regulatory authorities require an electro-mechanical counter to be maintained in machines even if operation is controlled by a CPU. The 30 downloading of a large number of credits, for example when a relatively large cash deposit is made when a card is inserted into a small value machine, means that such a counter can fail due to excessive mechanical wear or the machine is either ineffective or substantially inoperable 35 for the tdLme taken for the machine to increment the total number of credits.

Furthermore, intelligent processors in known systems do not contain player credit information and it is WO 94/10658 PCT/AU93/00576 21 29 9 6 necessary that the player's card be accessed in order to obtain such information. Security is thereby compromised because the card and the machine do not both contain updated credit records and the card itself can be 5 subjected to electronic tampering.

The invention thus provides a practical "cashless" casino operating system which is able to support a very large number of gaming machines without the need to provide a high powered and expensive central computer 10 system.

It will of course be realised that whilst the above has been given by way of an illustrative example of this invention, all such and other modifications and variations hereto, as would be apparent to persons 15 skilled in the art, are deemed to fall within the broad scope and ambit of this invention as is hereinafter claimed. 22 2996 1 6

Claims (8)

1. A secure access control system including at least one key assembly having a data processing 5 assembly including processor means and data storage means controlled by said processor means to store data relating to the use of a key assembly by a user thereof, said data storage means receiving and storing visual identification image data representative of a visibly identifiable 10 physical feature of a user's body for distinguishing a user authorised to use said key assembly; at least one access control assembly adapted to receive a key assembly, said access control assembly having a data processing assembly including processor 15 means and data storage means, and visual identity verification means for visual verification of the actual visibly identifiable physical feature of the user of a key assembly by comparison with the image of said visibly identifiable physical feature stored in said key assembly 20 data storage means, and interface means whereby an access control assembly can communicate with a received key assembly; whereby use of said key assembly by an unauthorised user is detectable. 25

2. A secure access control system as claimed in claim 1, wherein said visual identity verification means includes optical sensing means for optically sensing said actual visibly identifiable physical feature, and a 30 comparator for comparing said stored visual identification image data with data representative of the image of said actual visibly identifiable physical feature sensed by said optical sensing means. 35

3. A secure access control system as claimed in claim 1, wherein said visual identity verification means includes image display means for displaying the visibly identifiable physical feature stored as image data in 29 9 6 1 6 23 said key assembly data storage means, whereby an operator of the secure access control system can visually compare the displayed image with the actual physical feature of the user of the key assembly.

4. A secure access control system as claimed in claim 1, wherein said key assembly data storage means stores image data representative of the face of a user. 10

5. A secure access control system as claimed in claim 1, wherein each said access control assembly includes a user interface assembly operable by a user to input data to said access control assembly. 15

6. A secure access control system as claimed in claim 5, wherein said user interface assembly includes input means and information display means.

7. A secure access control system as claimed in claim 20 6, wherein said input means includes a keypad.

8. A secure access control system as claimed in claim 1, wherein said access control assembly includes receiving means for closely receiving and releasably 25 retaining a said key assembly whereby communication is established between said access control assembly and said key assembly by said interface means. 9 A secure access control system as claimed in claim 30 l, said control system including a central computer assembly, and communication means for transferring data from said access control assemblies to said central computer 5 assembly. 6H)• Jaa«s U Piper & Co Attornsym Fori C<—nt 1 1 END OF CLAIMS