EP3520069A1 - System und verfahren für einen verbraucher zur wiedergabe einer vielzahl von virtuellen soforttickets, die auf einen mikroprozessor geladen wurden, der dem verbraucher physisch bereitgestellt wird - Google Patents

System und verfahren für einen verbraucher zur wiedergabe einer vielzahl von virtuellen soforttickets, die auf einen mikroprozessor geladen wurden, der dem verbraucher physisch bereitgestellt wird

Info

Publication number
EP3520069A1
EP3520069A1 EP17784777.9A EP17784777A EP3520069A1 EP 3520069 A1 EP3520069 A1 EP 3520069A1 EP 17784777 A EP17784777 A EP 17784777A EP 3520069 A1 EP3520069 A1 EP 3520069A1
Authority
EP
European Patent Office
Prior art keywords
microprocessor
gambling
tickets
virtual instant
ticket
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Withdrawn
Application number
EP17784777.9A
Other languages
English (en)
French (fr)
Inventor
Gavin Shenker
David Wentker
Mike Lindelsee
Gabriel Wachob
Kenneth E. Irwin, Jr.
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Tapcentive Inc
Original Assignee
Tapcentive Inc
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Priority claimed from US15/284,449 external-priority patent/US20170024962A1/en
Application filed by Tapcentive Inc filed Critical Tapcentive Inc
Publication of EP3520069A1 publication Critical patent/EP3520069A1/de
Withdrawn legal-status Critical Current

Links

Classifications

    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06QINFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q50/00Information and communication technology [ICT] specially adapted for implementation of business processes of specific business sectors, e.g. utilities or tourism
    • G06Q50/34Betting or bookmaking, e.g. Internet betting
    • GPHYSICS
    • G07CHECKING-DEVICES
    • G07FCOIN-FREED OR LIKE APPARATUS
    • G07F17/00Coin-freed apparatus for hiring articles; Coin-freed facilities or services
    • G07F17/32Coin-freed apparatus for hiring articles; Coin-freed facilities or services for games, toys, sports, or amusements
    • G07F17/3202Hardware aspects of a gaming system, e.g. components, construction, architecture thereof
    • G07F17/3216Construction aspects of a gaming system, e.g. housing, seats, ergonomic aspects
    • G07F17/3218Construction aspects of a gaming system, e.g. housing, seats, ergonomic aspects wherein at least part of the system is portable
    • GPHYSICS
    • G07CHECKING-DEVICES
    • G07FCOIN-FREED OR LIKE APPARATUS
    • G07F17/00Coin-freed apparatus for hiring articles; Coin-freed facilities or services
    • G07F17/32Coin-freed apparatus for hiring articles; Coin-freed facilities or services for games, toys, sports, or amusements
    • G07F17/3202Hardware aspects of a gaming system, e.g. components, construction, architecture thereof
    • G07F17/3223Architectural aspects of a gaming system, e.g. internal configuration, master/slave, wireless communication
    • GPHYSICS
    • G07CHECKING-DEVICES
    • G07FCOIN-FREED OR LIKE APPARATUS
    • G07F17/00Coin-freed apparatus for hiring articles; Coin-freed facilities or services
    • G07F17/32Coin-freed apparatus for hiring articles; Coin-freed facilities or services for games, toys, sports, or amusements
    • G07F17/3241Security aspects of a gaming system, e.g. detecting cheating, device integrity, surveillance
    • GPHYSICS
    • G07CHECKING-DEVICES
    • G07FCOIN-FREED OR LIKE APPARATUS
    • G07F17/00Coin-freed apparatus for hiring articles; Coin-freed facilities or services
    • G07F17/32Coin-freed apparatus for hiring articles; Coin-freed facilities or services for games, toys, sports, or amusements
    • G07F17/3244Payment aspects of a gaming system, e.g. payment schemes, setting payout ratio, bonus or consolation prizes
    • GPHYSICS
    • G07CHECKING-DEVICES
    • G07FCOIN-FREED OR LIKE APPARATUS
    • G07F17/00Coin-freed apparatus for hiring articles; Coin-freed facilities or services
    • G07F17/32Coin-freed apparatus for hiring articles; Coin-freed facilities or services for games, toys, sports, or amusements
    • G07F17/3286Type of games
    • G07F17/329Regular and instant lottery, e.g. electronic scratch cards

Definitions

  • gaming systems methodologies that provide methods of playing new gaming opportunities, particularly more customized and interactive games.
  • these gaming methodologies should allow for flexibility and creativity for game designers to tailor games to a wide variety of small targeted segments previously not served by existing gaming offerings, thereby appealing to a broader base of consumers.
  • gaming system that allows for secure, offline, gameplay so as to not require players to have or maintain a connection to the Internet in order to participate in gaming.
  • Digital, interactive gaming solutions to date that are designed for personal devices such as phones, laptops and the like, require a constant connection to the Internet because all of the gaming routines reside in online servers.
  • Gaming system providers to date have assumed that the only way to secure gaming systems in conjunction with personal computing devices is to implement all gaming software in server- based systems that include extensive physical and logical security protections.
  • FIG. 1 is a block diagram of a secure gambling microprocessor in accordance with an embodiment
  • FIG. 2 is a block diagram illustrating the operable interconnections between a gambling management system, and at least one secure gambling microprocessor in accordance with an embodiment
  • FIG. 3 is a flowchart of a set-up of a secure gambling microprocessor in accordance with an embodiment
  • FIG. 4 is a flowchart of the set-up of a Customer account in the gambling
  • FIG. 4A is a block diagram of a representative example of traditional, prior art lottery- type instant ticket games as logistically arranged with respect to existing lottery activation and validation systems;
  • FIG. 4B is a block diagram providing a schematic graphical overview of a general embodiment as applied to segregating predetermined output arrays within the secure gambling microprocessor of FIG. 1 in accordance with an embodiment
  • FIG. 5 is a flowchart for unloading of value and other data from a secure gambling microprocessor at the end of a gaming session in accordance with an embodiment
  • FIG. 5 A is a flowchart for unloading of value and other data from a secure gambling microprocessor at the end of a gaming session to a prior art (legacy) lottery instant ticket validation system in accordance with an embodiment
  • FIG. 5B is a flowchart for unloading of value and other data from a secure gambling microprocessor at the end of a gaming session to a prior art (legacy) lottery instant ticket validation system where winning or losing status was determined by a local Random Number Generator (RNG) local to the secure gambling microprocessor that is in accordance with an embodiment.
  • RNG Random Number Generator
  • the electronic computing device/system manipulates and transforms data represented as physical (electronic) quantities within the circuits, electronic registers, memories, logic, and/or components and the like of the electronic computing device/system into other data similarly represented as physical quantities within the electronic computing device/system or other electronic computing devices/systems.
  • a distributed gaming system based on tamper resistant secure packages where remote network management of the secure package is provided to support changing gaming routines, purse management and reporting on gaming operations particular to this type of technology implementation is described.
  • a system for gambling operations that include a central gambling management system and one or more consumer electronic devices that can serve as gambling devices for offline gaming.
  • the consumer electronic devices are converted to gambling devices by including a tamper-resistant microprocessor having firmware with gambling code and a purse stored thereon, the tamper-resistant microprocessor running secure gaming software to govern all offline gaming-related routines and communications with the central gambling management system.
  • Examples of computing devices include, but are not limited to, mobile phones, tablet computers, personal computers, home entertainment systems, etc.
  • gambling refers to activities such as, but not limited to, Casino gaming, wagering, lottery operations and the like.
  • the system includes means for deploying the secure gambling microprocessor in a variety of form factors for use with the consumer electronic devices.
  • Example secure gambling microprocessor form factors include, but are not limited to, smart cards, microSD cards, SIM cards, accessories connected via an input output (I/O) port, and embedded microprocessors included within the devices.
  • the system also includes means for activating a secure microprocessor, means for loading gaming routines to a secure microprocessor, means for modifying gaming routines in a secure microprocessor, means for securely linking a microprocessor to a specific consumer electronic device, means for establishing a user account in a secure microprocessor, means for loading value to a secure microprocessor, means for unloading value from a secure microprocessor, means for logging gaming results in a secure microprocessor, means for transferring gaming results from a secure
  • microprocessor to the central gambling management system, and means for deactivating a secure microprocessor.
  • One embodiment involves a centrally managed gambling management system and one or more secure gaming engines deployed in a variety of form factors, and a typical consumer computing device that includes a graphic user interface (GUI) and specialized application software designed to interact with the secure gambling microprocessor and the gambling management system 200 (FIG. 2).
  • GUI graphic user interface
  • the combination of secure gambling microprocessor and mobile device enables offline gaming as previously described.
  • the computing device may be a mobile device such as a laptop, tablet or phone; in another embodiment, the computing device may be a less mobile device such as desktop, tower, or the like.
  • the secure gambling microprocessor is embedded in a closed loop prepaid gift card issued by a state lottery or casino.
  • the secure gambling microprocessor is embedded in a hotel key card that hotel guests use to gain access to their room and may also use the card for loyalty or real money gaming during a stay or after they leave a hotel property.
  • the microprocessor is embedded in a casino players' club card where prepaid funds are loaded onto the card for use with existing casino gaming systems such as slot machines and such funds can also be used to wager on games contained within the gambling microprocessor.
  • the secure gambling microprocessor is embedded in an open loop prepaid debit or General Purpose Reloadable (GPR) card issued by a state lottery or casino and also branded by a payment association (e.g., Visa, MasterCard, Discover, American Express).
  • GPR General Purpose Reloadable
  • the open loop embedded embodiment being preferred because both wagers and winnings may be paid for or loaded onto the associated card account.
  • FIG. 1 a block diagram of an embodiment of a secure gambling microprocessor 100 is shown.
  • One embodiment of secure gambling microprocessor 100 includes Power 101, a Central Processing Unit (CPU) 102, a Random Number Generator (RNG) 103, a connection for an external Clock 104, a Cryptographic Coprocessor (CPT) 105, an I/O port 106, Random Access Memory (RAM) 107, Electrically Erasable Programmable Read Only Memory (EEPROM) 108, and Read Only Memory (ROM) 109.
  • the software for gaming operations can be stored and run from ROM 109 or EEPROM 108 and would rely on the support of the RNG 103 and CPT 105 for many of the operations.
  • secure gambling microprocessor 100 is a dedicated computer on a chip or microprocessor for carrying out cryptographic operations, embedded in a packaging with multiple physical security measures, which give it a degree of tamper resistance.
  • secure microprocessors may be used herewith.
  • SmartMX designed by NXP is a microprocessor having data encryption capabilities.
  • I/O port 106 is a communications interface for secure gambling microprocessor 100 such as a contact interface according to ISO/IEC 7816, contactless interface according to ISO/IEC 14443A, serial input and output (half-duplex), USB, HDMI or other interfaces.
  • RNG 103 uses a cryptographic hash function to approach a uniform distribution of bits from a non-uniformly random source.
  • RNG 103 is a pseudo-RNG (PRNG) such as a Linear Congruential Generator (LCG) or Mersenner Twister, /dev/random is one example of a file that serves as a pseudorandom number generator.
  • PRNG pseudo-RNG
  • LCG Linear Congruential Generator
  • Mersenner Twister /dev/random is one example of a file that serves as a pseudorandom number generator.
  • CPT 105 is implemented on a high-security, tamper resistant
  • CPT 105 is a high-speed 3-DES coprocessor (64-bit parallel), a high-speed AES coprocessor (128-bit parallel), a PKI (RSA, ECC) coprocessor FameXE (32-bit parallel) such as found on a SmartMX by NXP.
  • RSA RSA, ECC
  • FXE 32-bit parallel
  • CPU 102 is hardware within a computer that carries out the instructions of a computer program by performing the basic arithmetical, logical, and input/output operations of the system.
  • Two components of CPU 102 are the arithmetic logic unit for performing arithmetic and logical operations, and the control unit for extracting instructions from memory and decoding and executing them, calling on the arithmetic logic unit when necessary.
  • CPU 102 may be multiprocessor, multi-core processors, and the like.
  • the communication protocol to the microprocessor may be either ISO-7816 contact, ISO- 14443 contactless, or both.
  • secure gambling microprocessor 100 may include more or fewer components.
  • the components described in secure gambling microprocessor 100 may be substituted for other components that provide similar operational capabilities. That is, there are many other options for implementations of the secure gambling microprocessor 100 that could involve other types of processors (micro or otherwise), modules, computing platforms or the like.
  • Gambling Management System 200 may be either ISO-7816 contact, ISO- 14443 contactless, or both.
  • FIG. 2 an embodiment of a gambling management system 200 is shown as part of a network accessible system that includes a human readable management interface such as a Web Browser (not shown in FIG. 2) used to set up and control gaming operations taking place in the secure gambling microprocessor 100 and associated mobile devices 201-204.
  • a human readable management interface such as a Web Browser (not shown in FIG. 2) used to set up and control gaming operations taking place in the secure gambling microprocessor 100 and associated mobile devices 201-204.
  • FIG. 2 also includes a plurality of mobile computing devices 201 - 204, and a plurality of secure gambling microprocessors l OOa-l OOd.
  • each of the plurality of secure gambling microprocessors lOOa-lOOd are coupled with a different one of the plurality of mobile devices 201 -204 to provide a plurality of secure standalone gambling platforms.
  • gambling management system 200 is communicatively coupled with one or more of the plurality of secure stand-alone gambling platforms to maintain gambling integrity.
  • gambling management system 200 includes a gambling routine provider module 215 that contains a number of gambling games such as poker, blackjack, and the like for a number of different user platforms.
  • Gambling management system 200 also includes a purse management module 220 used to manage a purse or monetary amount, and a gambling operation reporter module 225 that is used to review gaming activity for fairness of operation and to avoid fraud.
  • gambling management system 200 also includes standard network data communications 210 interfaces (e.g., TCP/IP) to support communications with secure gambling microprocessor 100 and mobile devices 201 -204.
  • standard network data communications 210 interfaces e.g., TCP/IP
  • gambling routine provider module 215 dispenses predetermined arrays of plays where the outcome (i.e., winning or losing status) of each game was determined in advance by a separate secure process.
  • This embodiment has the advantage of utilizing external, possibly third party, gaming systems that have potentially already been approved by applicable regulator and government agencies, thereby reducing the outcome (i.e., winning or losing status) of each game was determined in advance by a separate secure process.
  • gambling management system 200 will also include a dedicated security component such as a Hardware Security Module 21 1 (HSM) that is responsible for cryptographic key storage and operations in support of secure communication between the gambling management system 200 and the secure gambling microprocessor 100 and to secure the various management operations that are initiated within the gambling management system 200 and carried out in the secure gambling microprocessor 100.
  • HSM Hardware Security Module 21 1
  • the secure channel communication between the secure gambling microprocessor 100 and the gaming management system may be over a wired or wireless network. In another embodiment, the secure channel communication may be over a mobile network, or the like.
  • set up of secure gambling microprocessor 100 by the gambling management system 200 involves in part, the identification of which secure gambling microprocessor 100 will be used in the gaming operation, determining which games will be playable on secure gambling microprocessor 100, which game options will be supported on each, which mobile devices will be used in conjunction with each secure gambling microprocessor 100, and then activating the secure gambling microprocessor 100 by securely transmitting all associated gambling management data thereto.
  • the secure gambling microprocessor 100 includes software operating in a tamper-resistant microprocessor.
  • the microprocessors are capable of running multiple, secure, software applications.
  • the secure gambling microprocessor 100 software is responsible for all offline gaming routines including possible storage of predetermined winning and losing status on a game by game basis as well as secure communication with the gambling management system 200.
  • the security and integrity of the software operations in the microprocessor is maintained through cryptographic operations that take place within the tamper-resistant microprocessor.
  • the security model for this invention relies on "end-to-end” security between the gambling management system 200 and secure gambling microprocessor 100 where the authenticity and integrity of all communication can be verified by either "end” (gambling management system 200 or secure gambling microprocessor 100).
  • the data channel can also be encrypted end-to-end if required. This protection helps mitigate potential fraud involving the transmission of gambling management data to a secure gambling microprocessor 100 that was not created by the gambling management system 200 and similarly protects against fraud involving the transmission of gaming data from a secure gambling microprocessor 100 to the gambling management system 200 that did not originate from a secure gambling
  • microprocessor 100 implements end-to-end communication security via cryptographic operations such as HSM 211 , which provides a secure channel.
  • non-secure functions related to the user interface are
  • mobile applications such as those that are designed for the Android or iOS operating systems 201 through 204 are used to create the user interface for gaming.
  • the mobile applications then interact with the secure gambling microprocessor 100 via application programming interfaces.
  • application programming interfaces are also used for any communication between the mobile application and secure gambling microprocessor 100 as required to support communication of management data between the gambling management system 200 and secure gambling microprocessor 100 as described below.
  • mobile device 201 illustrates an implementation in which secure gambling microprocessor 100a interacts with mobile device 201 via an ISO-14443 contactless interface and antenna.
  • Mobile device 202 illustrates another implementation in which secure gambling microprocessor 100b is a component in a microSD package.
  • Mobile device 203 provides yet another example implementation in which secure gambling microprocessor 100c utilizes an I/O port of the mobile device 203.
  • the I/O port may be an audio jack, USB (Universal Serial Bus) port, HDMI (High-Definition Multimedia Interface) port, or the like which acts as the communications interface between mobile device 203 and secure gambling microprocessor 100c.
  • Mobile device 204 illustrates yet another embodiment wherein the secure gambling microprocessor lOOd is an embedded microprocessor such as a SIM (Subscriber Identity Module) card or chip integrated as a part of the mobile device 204 circuitry.
  • SIM Subscriber Identity Module
  • secure gambling microprocessor 100a in combination with mobile device 201 illustrates an implementation where the secure gambling microprocessor 100a communicates via contactless with mobile device 201.
  • secure gambling microprocessor 100a includes an integrated ISO-14443 contactless communications interface and antenna, or the like.
  • secure gambling microprocessor 100a is capable of communication with a mobile device 201 or other device that supports ISO-14443, Near Field Communication (NFC) protocols, Bluetooth, or the like.
  • NFC Near Field Communication
  • mobile device 201 is used to transmit gambling management data from the gambling management system 200 to secure gambling microprocessor 100a by first transmitting the data to a mobile application on the mobile device 201 via the mobile device's Cellular or Wi-Fi radio communications interface. The mobile device 201 then uses its NFC communications interface to transmit the data to secure gambling microprocessor 100a.
  • the user interface for gaming is implemented as a mobile application.
  • the mobile device could be a mobile phone, tablet computer, laptop computer, notebook computer, personal digital assistant, or the like.
  • mobile device 201 may be running an operating system that includes support for NFC.
  • gaming takes place by executing the mobile application and ensuring that the secure gambling microprocessor 100a is in proximity to mobile device 201 to support communication between mobile device 201 and secure gambling microprocessor 100a via the NFC to ISO-14443 interfaces.
  • the secure gambling takes place by executing the mobile application and ensuring that the secure gambling microprocessor 100a is in proximity to mobile device 201 to support communication between mobile device 201 and secure gambling microprocessor 100a via the NFC to ISO-14443 interfaces.
  • the secure gambling takes place by executing the mobile application and ensuring that the secure gambling microprocessor 100a is in proximity to mobile device 201 to support communication between mobile device 201 and secure gambling microprocessor 100a via the NFC to ISO-14443 interfaces.
  • the secure gambling takes place by executing the mobile
  • microprocessor 100a is embedded in a plastic card (e.g., debit card or GPR card), proximity communicating with mobile device 201 via NFC.
  • a plastic card e.g., debit card or GPR card
  • secure gambling microprocessor 100b in combination with mobile device 202 illustrates an implementation where the secure gambling microprocessor 100b is a tamper-resistant microprocessor in an insertable package such as, a microSD package.
  • secure gambling microprocessor 100b is inserted into the mobile device's microSD slot. Once in the slot, the I/O interface of the secure gambling microprocessor 100 uses the contact interface of the microSD card to communicate with the mobile device.
  • mobile device 202 is used to transmit gambling management data from the gambling management system 200 to secure gambling microprocessor 100b by first transmitting the data to a mobile application on mobile device 202 via the mobile device's cellular or Wi-Fi radio communications interface. Mobile device 202 then uses its microSD interface to transmit the data to secure gambling microprocessor 100b.
  • the user interface for gaming is implemented as a mobile application.
  • mobile device 202 could be a tablet computer, mobile phone or the like running an operating system that includes support for a microSD card. Gaming takes place by executing the mobile application on mobile device 202 that then interacts with secure gambling microprocessor 100b via the microSD communications interface.
  • secure gambling microprocessor 100c in combination with mobile device 203 illustrates an implementation that involves the packaging of a tamper- resistant secure gambling microprocessor 100c in an accessory device that can then be inserted into a mobile device 203 I/O port.
  • This accessory device includes circuitry that enables communication between secure gambling microprocessor 100c I/O port and mobile device 203, using the I/O interface.
  • the I/O port may be an audio jack, an HDMI jack, a USB jack or other communications port.
  • mobile device 203 is used to transmit gambling management data from the gambling management system 200 to secure gambling microprocessor 100c by first transmitting the data to a mobile application on mobile device 203 via the mobile device's cellular or Wi-Fi radio communications interface. The mobile device then uses the mobile device's I/O port interface to transmit the data to secure gambling microprocessor 100c.
  • the user interface for gaming is implemented as a mobile application.
  • mobile device 203 could be a tablet computer, mobile phone or the like, running an operating system that includes support for an I/O port accessory. Gaming takes place by executing the mobile application on mobile device 203 that then interacts with secure gambling microprocessor 100c via the I/O port.
  • secure gambling microprocessor 100c via the I/O port.
  • secure gambling microprocessor lOOd in combination with mobile device 204 illustrates yet another implementation that involves more permanent integration of secure gambling microprocessor l OOd in mobile device 204 in comparison with the previous examples.
  • Examples of this implementation include use of the tamper-resistant Subscriber Identity Module (SIM) of a mobile device to host the secure gambling
  • SIM Subscriber Identity Module
  • microprocessor 100 software Another variation of this implementation could involve hosting of the secure gambling microprocessor 100 software in a tamper-resistant microprocessor that is included as a part of the main circuitry of mobile device 204.
  • mobile device 204 is used to transmit gambling management data from the gambling management system 200 to secure gambling microprocessor l OOd by first transmitting the data to a mobile application on mobile device 204 via the mobile device's cellular or Wi-Fi radio communications interface. The mobile application then uses application programming interfaces to transmit the data to secure gambling microprocessor l OOd.
  • the user interface for gaming is implemented as a mobile application.
  • mobile device 204 could be a tablet computer, mobile phone, laptop, or the like running an operating system where the device includes a tamper-resistant microprocessor in the form of a SIM or other embedded component. Gaming takes place by executing the mobile application on mobile device 204 that then interacting with secure gambling microprocessor l OOd via application programming interfaces to secure gambling microprocessor lOOd.
  • secure gambling microprocessor 100 could be built as a standalone system in many form factors such as paper-type advertisements for a magazine, newspaper, poster, etc. Secure gambling microprocessor 100 could also be contained within items such as a key fob, plastic card (e.g., debit or credit), etc. In another embodiment, secure gambling microprocessor 100 could also be electronically integrated within larger systems such as a digital billboard system, home entertainment system, home appliance, automobile, kiosk, etc.
  • secure gambling microprocessor 100 may be implemented in a fashion similar to secure gambling microprocessor l OOd where secure gambling microprocessor 100 is integrated within a larger system that is typically responsible for data communications and can support the data communication needs of secure gambling microprocessor 100 to the gambling management system 200 and can also provide a user interface for gaming applications.
  • the mobile device 201-204 utilizes mobile operating systems such as, but not limited to, Android, iOS, Windows Phone, RIM Blackberry OS, and the like. It should also be noted that the present invention is platform and device independent. Data communication between the mobile device and gambling management system 200 is accomplished via the integrated cellular and/or Wi-Fi radios of the mobile device.
  • microprocessor 100 depends upon the type of secure gambling microprocessor package. For example, secure gambling microprocessor 100a will utilize an NFC capability in the mobile device, while communication between a mobile device and secure gambling microprocessor lOOb-lOOd would take place via an application-programming interface of the secure gambling microprocessor and application software running within the mobile device.
  • NFC NFC
  • Wi-Fi Wireless Fidelity
  • Cellular radio communication any other communications interface capable of transmitting the desired data between the subsystems may be utilized.
  • FIG. 3 a flowchart 300 of a method of setting-up secure gambling microprocessor 100 in accordance with an embodiment.
  • one embodiment utilizes a unique identifier to identify the secure gambling microprocessor 100.
  • each secure gambling microprocessor 100 will be identified by a unique identifier such as a serial number or the like that allows the gambling management system 200 to correctly and securely communicate with each secure gambling microprocessor 100.
  • the unique identifier is automatically determined by secure gambling microprocessor 100 or gambling management system 200.
  • a Casino operator interacts with the management interface of the gambling management system 200 to provide the unique identifier of secure gambling microprocessor 100.
  • one embodiment determines at least one game supported by the operating system of the mobile computing device. In one
  • the determination is performed by the gambling management system 200. In another embodiment, the determination is performed by a user such as the Casino or Lottery operator.
  • one embodiment establishes a communication channel between secure gambling microprocessor 100 and the gambling management system 200 via the computing device.
  • the gambling management system 200 uses secure gambling microprocessor 100 identifiers and internal systems such as the hardware security module 21 1 to set up Secure Channel communication between the gambling management system 200 and secure gambling microprocessor 100.
  • one embodiment transmits the at least one game to secure gambling microprocessor 100 via the secure communication channel.
  • the gambling management system 200 transmits all required software and settings to each secure gambling microprocessor 100 and sets the state of those secure gambling microprocessor 100 to active.
  • the dispensed predetermined array is compatible with lottery instant ticket shuffles and validation systems.
  • FIG. 4 a flowchart 400 of a method of establishing a customer account for the system in FIG. 2.
  • flowchart 400 may be utilized in a stand-alone format or may be used after the flowchart 300 described in FIG. 3.
  • one embodiment creates a customer account based on the unique identifier of secure gambling microprocessor 100.
  • the customer account is automatically created by gambling management system 200.
  • a Casino operator interacts with the management interface of the gambling management system 200 to create the customer account.
  • the customer gaming preference includes specifying what games (e.g., poker, blackjack, slots) and game preferences (e.g., payout table for poker, game theme) the Customer chooses, and the like.
  • the gaming preference such as a theme can vary by unique batches of secure microprocessors to support marketing arrangements.
  • a state lottery may allow individual retailers to include some unique branding in the user interface application of the game as implemented in a mobile application such as an Android application.
  • a single Android application user interface could dynamically change branding themes based on preferences set in individual gambling microprocessors during the process described in 420.
  • a state lottery may issue secure gambling microprocessors to two different retailers (retailer A and retailer B) for sale within the state.
  • Secure gambling microprocessors for retailer A include a branded theme preference specific to retailer A.
  • secure gambling microprocessors for retailer B include a branded theme preference specific to retailer B.
  • the state offers a single Android application to provide a Graphical User Interface (GUI) for interacting with the secure gambling microprocessors.
  • GUI Graphical User Interface
  • the Android application reads the game theme preference from the secure gambling microprocessors and displays in the GUI some branding specific to retailer B.
  • one embodiment determines a value of the purse. That is, how much value the Customer wishes to load to secure gambling microprocessor 100 for gambling, and which secure gambling microprocessor 100 will be used by the Customer.
  • one embodiment transmits the customer account, the at least one customer gaming preference, and the value of the purse to secure gambling microprocessor 100 via the secure communication channel HSM 111.
  • a secure channel in order to transmit the information, a secure channel is established.
  • the secure channel includes secure communications between secure gambling microprocessor 100 and mobile device 201 with which it will be used.
  • An example of this linking process would be to use some unique identifier from the mobile device 201, such as a Message Authentication Code (MAC) Address or the like, to ensure that the secure gambling microprocessor 100 is only used in conjunction with that specific mobile device.
  • MAC Message Authentication Code
  • gambling management system 200 uses secure gambling microprocessor 100 identifiers and internal systems such as the hardware security module 211 to set up secure channel communication between the gambling management system 200 and secure gambling microprocessor 100.
  • the secure channel is automatically established by gambling management system 200.
  • a Casino or Lottery operator interacts with the management interface of the gambling management system 200 to establish the secure channel.
  • gambling management system 200 transmits all required account data, game settings, link information for the mobile device, optionally arrays of plays with predetermined outcomes, and value to secure gambling microprocessor 100.
  • secure gambling microprocessor 100 can be used with its associated mobile device and mobile application for gaming in a distributed manner. That is, secure gambling microprocessor 100 will allow a user to gamble on the associated mobile device until the purse is empty without requiring the user to access gambling management system 200. In one embodiment, secure gambling microprocessor 100 does not need to contact gambling management system 200 again until the purse needs to be reloaded, a different game is selected by the user, or the user wishes to cash out.
  • a person can receive a secure gambling microprocessor 100 with a gambling game thereon.
  • the user can couple secure gambling microprocessor 100 with a computing device that includes a Graphic User Interface (GUI).
  • GUI Graphic User Interface
  • a user wishes to play blackjack for real money.
  • the user would order a blackjack secure gambling microprocessor 100.
  • the user will have a number of choices, including, but not limited to, purchasing a blackjack secure gambling microprocessor 100 with a pre-loaded purse having a pre-defined monetary amount loaded thereon, selecting a free blackjack secure gambling microprocessor 100 with an empty purse, selecting a free blackj ack secure gambling microprocessor 100 with a few introductory dollars in the purse, etc.
  • the secure gambling microprocessor 100 with a preloaded purse, once the secure gambling microprocessor 100 was communicatively coupled with the computing device, the user would be able to begin playing blackjack. In one embodiment, the blackjack secure gambling microprocessor 100 would not need to communicate with gambling management system 200 prior to the user using the secure gambling microprocessor 100 to gamble. [0074] However, if the user selected a blackjack secure gambling microprocessor 100 with an empty purse, or ran out of money in the pre-loaded purse, the user would utilize the computing device to initiate secure communications between gambling management system 200 and the blackjack secure gambling microprocessor 100.
  • gambling management system 200 would also be able to perform a number of diagnostics and evaluations, including, but not limited to, providing updates to at least a portion of the secure gambling microprocessor 100; ensuring the security of the secure gambling microprocessor 100; determining the monetary value of the purse; and authorizing transfer of additional funds from a user authorized account; e.g., a bank account, to the purse on the blackjack secure gambling microprocessor 100.
  • a user authorized account e.g., a bank account
  • the gaming management system had loaded or reloaded the purse in the blackjack secure gambling microprocessor 100, the user would be able to again play blackjack. Moreover, as described above, once the purse had a value and secure gambling microprocessor 100 is securely communicatively coupled with the computing device, the user would be able to gamble without having to maintain any connection with gambling management system 200. In one embodiment, the user could continue to gamble without communicating with gambling management system 200 until the user's purse was empty or the user wanted to cash out.
  • the user may be tired of playing blackjack or otherwise want to play a different game.
  • the user will access gambling management system 200 via the secure channel and request gambling management system 200 to add poker (or the like) to the secure gambling microprocessor 100.
  • gambling management system 200 will add the poker game to the secure gambling microprocessor 100 and the secure gambling microprocessor 100 will have both poker and blackjack.
  • gambling management system 200 will remove the blackjack game when the poker game is added.
  • gambling management system 200 may offer the user a set of games that can be added to the secure gambling microprocessor 100, or the user may select any number of games from a list of available games.
  • gambling management system 200 may contact the user with an offer to provide a new or different game to the user's secure gambling microprocessor 100.
  • periodic communication may occur between the secure gambling microprocessor and the gambling management system via the communication channel.
  • the periodic communication may include providing updates to at least a portion of the secure gambling microprocessor 100, monitoring a security of the secure gambling microprocessor 100; and determining a monetary value of the purse.
  • gambling management system 200 will not modify the purse value on the secure gambling microprocessor 100.
  • a user had 100 dollars in her purse when she decided to add a poker game to secure gambling microprocessor 100, she would have 100 dollars in her purse after the poker game was added, regardless of whether any other games were removed or not.
  • secure gambling microprocessor 100 functions only as a game starting seed(s) generator wherein actual game play simulation and interaction is conducted by non-secure software resident on the connected computing device.
  • game type selection e.g., blackjack, poker, craps
  • play is executed on the connected computing device with the starting seed(s) determining ultimately how much (if any) money is won.
  • This embodiment has the advantage of a potentially richer gaming environment due to presumably greater memory and process capabilities resident on the connected computing device in contrast to the relatively limited resources available on the secure gambling microprocessor 100 while still maintaining security against fraudulent alteration of the connected computing device's software.
  • the secure gambling microprocessor 100 Since the seed(s) that determine the game outcome are generated by the secure gambling microprocessor 100, an auditable trial is maintained of the intended game outcome that can be verified by the gambling management system 200 independent of the connected computing device. Additionally, by offloading actual game play and associated functionality to the connected computing device memory is freed in the secure gambling microprocessor 100 for storing potentially large predetermined arrays of plays where the outcome of each game was determined in advance.
  • FIG. 4A depicts a representative example of the variable human readable inventory control number 452 and the associated barcode 453 on the back 451 of a traditional printed lottery -type instant ticket. As shown in FIG. 4A, the variable printed human readable inventory control number and the associated barcode are imaged on the ticket back 451 and therefore accessible (by design) to the retailer prior to purchase of the ticket. Also presented in FIG.
  • 4A is a taxonomy of a typical instant ticket's human readable inventory control number's 452 and 453 data: starting with a three or four decimal digit game number 454 identifying the game, followed by a variable length pack number 455 (six decimal digits as shown in FIG. 4A), a one or two digit modulo check number 456, and a variable digit ticket number 457 (three decimal digits as shown in FIG. 4A) uniquely identifying the ticket in a pack.
  • the taxonomy of the instant ticket's barcode 453 data is similar to the human readable inventory control number 452 with the barcode 453 and human readable images embodying identical inventory control data 454 through 457; however, the barcode 453 can embody other data in addition to the inventory control data.
  • the instant ticket inventory control data 454 through 457 typically found on the back 451 of a lottery ticket is accessible via human readable inventory control number 452 and barcode 453 to the retailer and others prior to purchase and play of the ticket.
  • the instant ticket inventory control data 454 through 457 embodied as human readable inventory control number 452 and barcode 453 indicia are used for tracking the individual ticket through its life cycle of production, warehouse storage, shipping, pack activation by the retailer, sale, and redemption. Therefore, for security reasons against retailer pick-out, there is no cleartext win or lose information embedded in the instant ticket human readable number 452 or machine-readable barcode 453.
  • win or lose validation information is included in the machine-readable barcode 453, but this information is always encoded as ciphertext and never accessible in cleartext from an unplayed ticket.
  • the pack 458 is also the fundamental unit of activation on the overall instant ticket system 451 ⁇ i.e., there is typically no individual (ticket) level of activation, the smallest quantization of activation on a typical instant ticket system 450 is at the pack 458 level.
  • a retailer receives a new pack of tickets 458, he or she must first activate the pack 458 on the system 450 before placing the tickets on sale.
  • Pack 458 level activation thereby enables instant tickets to be shipped via common carrier since un-activated or stolen packs 458 would be automatically flagged on the system 450 with any tickets 451 in the pack 458 flagged when redemption was attempted.
  • some games may be structured such that there are a specified minimum number and/or types of winners within a pack 458.
  • the arrangement of winning tickets is not truly random, but are randomly distributed within a defined structure to ensure that all retailers receive
  • a given number of packs 458 are then arranged on the system 450 as a pool 459.
  • the purpose of a pool 459 is to reconcile all low- and mid-tier (and possibly high-tier) prizes into a predetermined prize structure. While the size of a pool 459 can vary from game-to-game it is essential that a pool 459 be sufficiently large to inhibit tracking unsold winning tickets by the public.
  • All of the produced packs 458 for a given game are logged in a digital ship file 460 by the ticket manufacturer and loaded on the system 450 prior to the game being placed on sale.
  • the ship file contains a listing of all the manufactured packs 458 identifying (typically by omission) any pack 458 numbers that were destroyed in the manufacturing process.
  • the ship file is routinely expanded with information such as: "pack ⁇ ⁇ ⁇ shipped to retailer ⁇ , "pack ⁇ ⁇ ⁇ activated," "pack ⁇ ⁇ ⁇ stolen,” etc.
  • the ship file enables logistical tracking of all manufactured packs 458 in an instant ticket game; however, the ship file 460 does not contain any win or lose information and cannot be linked (without appropriate cryptographic seeds or keys) to the validation file 461.
  • the validation file 461 contains the validation codes (not shown in FIG. 4A) for all tickets within a game with the validation codes effectively providing pointers to the prize value (if any) of a ticket 451 on the system 450.
  • the validation code is effectively inaccessible on unplayed or unsold tickets due to it being covered by a scratch-off coating.
  • the cleartext validation code is inaccessible on unplayed or unsold tickets 451.
  • the security of the system 450 is derived from the validation file 461 being unassociated with the ship file 460, as well as the physical unplayed tickets' inventory control information 452 and 453.
  • Both the ship 460 file and the validation file 461 are generated by the instant ticket manufacturer before the tickets are shipped to the lottery. All lottery logistical and validation systems 450 currently require the ship file 460 and validation file 461 to be loaded on the system 450 prior to instant tickets being shipped to retailers and placed on sale. Once loaded onto the system 450, the basic validation file 461 typically cannot be altered (other than possibly flagged additions—e.g., redeemed, stolen, etc.), thereby ensuring the integrity of the instant ticket game and its predetermined payout.
  • FIG. 4B An embodiment 475 of the present invention for reliably and securely storing large numbers of predetermined winning and losing game outcomes within the secure gambling microprocessor 100' that is compatible with legacy lottery instant ticket validation systems 450 is provided in FIG. 4B.
  • the secure gambling microprocessor 100' is, as before, networked with game management system 200' via its associated computing device 201 '.
  • the secure gambling microprocessor 100' is also networked to a legacy lottery central site validation system 477 as well as a lottery instant ticket provider 476 via their communications (Comms) systems (482 and 481 , respectively) to the management system's 200' Comms 210'.
  • Comms communications
  • This example embodiment 475 has the advantage of being compatible with existing instant ticket lottery validation 477 and production 476 systems and therefore can conduct validations and redemptions on said legacy lottery systems without the need for an external banking or purse system 220'.
  • instant ticket 451 inventory control (454 through 457--FIG 4A) and validation information is loaded from the lottery instant ticket provider's 476 (FIG.
  • the instant ticket 451 (FIG. 4A) inventory control (454 through 457) and validation information can be loaded into the secure gambling microprocessor's 100' (FIG. 4B) EEPROM 108' or Read Only Memory (ROM) 109' at the time of manufacture.
  • instant ticket data may be loaded into the secure gambling microprocessor's 100' EEPROM 108' via the management system 200' and associated computing device 20 ⁇ .
  • the preferred embodiment having the advantages of flexible instant ticket game play as well as allowing the consumer to repeatedly purchase multiple virtual instant tickets.
  • instant tickets 451 are logistically grouped in packs 458 that are units of activation on legacy lottery instant ticket systems. Multiplicities of packs 458 are then grouped into pools 459 primarily for the purpose of prize fund balancing.
  • virtual instant ticket packs 458 rather than virtual individual instant tickets 451 are loaded onto the secure gambling microprocessor's 100' (FIG. 4B) EEPROM 108' or ROM 109' at either the time of manufacturer or via the network enabled by the associated computing device 20 ⁇ and the management system 200'.
  • the secure gambling microprocessor 100' may execute multiplicities of game plays and corresponding prize awards without the need for further downloads.
  • Virtual packs 458 may be paid for in entirety or preferably the virtual pack represents the theoretical retail value of the plays loaded the secure gambling microprocessor 100' with the consumer purchasing and thereby unlocking each virtual instant ticket 451 at different times.
  • the consumer may not purchase all of the virtual instant tickets 451 within a virtual pack 458.
  • the packs 458 and tickets 451 exist in a virtual embodiment there is for all practical matters no cost associated with downloading virtual instant tickets 451 that may never be played.
  • the secure gambling microprocessor's 100' EEPROM 108' is sufficiently large, virtual pools 459 comprising multiplicities of packs 458 and tickets 451 may be loaded. This embodiment has the advantages of fewer communications downloads as well as the possible consumer psychological benefit of being able to advertise that every secure gambling microprocessor 100' is carrying or embodying the top prize.
  • microprocessor 100' does have the disadvantage of a potential security vulnerability assuming an insider gained access to the prizes awarded for a given pack or pool.
  • the security vulnerability being realized by an insider with knowledge of the sequence of the winning and losing virtual tickets 451 in a pack 458 or pool 459 possibly gaining an illicit advantage by developing an exit strategy for each secure gambling microprocessor 100' ⁇ i.e., determining the optimum time to stop playing when total winnings maximally exceed the total value paid for virtual tickets 451 purchased.
  • various countermeasures are typically employed with real world instant ticket validation systems 477 to avoid this situation, the problem remains as a theoretical security flaw.
  • downloaded virtual packs 458 or pools 459 of virtual instant tickets 451 may be shuffled within the secure gambling microprocessor 100' using the internal RNG 103' such that the play sequence of the virtual tickets 451 within a pack 458 or pool 459 would be unknown.
  • the RNG 103' would rearrange the stack of virtual tickets 451 within a pack 458 or pool 459 such that the sequence of virtual tickets dispensed for play would be unknown to anyone; however, since each shuffled virtual instant ticket 451 would still only be played once, the total amount of prizes awarded would still be as planned.
  • the pack 458 or pool 459 of virtual tickets 451 downloaded to the secure gambling microprocessor 100' would only embody prize awards for any conceivable denomination (e.g., "$ 1, $2, $3, . . . $52, $53, $54, . . . $ 107, $108, $109, . . . ") that could be won by a consumer playing a series of games where the winning or losing status was determined by the secure gambling microprocessor's 100' RNG 103'.
  • the instant ticket provider 476 would only generate instant tickets used for cashing out winnings with the legacy lottery central site 477 system.
  • the instant ticket data simply provides a game outcome that can be validated on a legacy instant ticket system and only provides an outcome prize value (if any) with not necessarily any impact on game type, game play, or number of plays.
  • Game play interaction, graphics, and style being preferably handled by the associated computing device 201 ' with the secure gambling microprocessor 100' simply determining the game's outcome either by the virtual ticket 451 pulled off of the stack or by the internal RNG 103'.
  • the essential concept being that the gambling system remains secure from malicious hacking or manipulation with all win or lose gaming decisions performed by the secure gambling microprocessor 100' while still maintaining a highly desirable feature of enabling offline gameplay
  • each instant ticket's 451 inventory control (454 through 457) and validation information has a corresponding entry in the ship 460 and validation file 461 that identifies the ticket's 451 status (e.g., activated, stolen) in the ship file 460 and its winning or non-winning value in the validation file 461.
  • the ship 460' and validation 461 ' files are generated by the instant ticket provider 476 at the time of game generation where winning values are pseudorandomly assigned to inventory and validation codes 478.
  • downloaded virtual instant tickets 451 , packs 458, and pools 459 statuses can be tracked by the lottery central site 477 throughout the secure gambling microprocessor's 100' lifecycle.
  • this tracking process also allows the secure gambling microprocessors 100' to be placed on sale within easy reach of the consumer (e.g., on display pegs in an aisle) since the secure gambling microprocessor 100' would be essentially worthless unless its downloaded virtual instant ticket 451 , pack 458, or pool 459 has been registered as activated on the lottery central site 477 ship 460" and validation 461 " files.
  • FIG. 5 a flowchart 500 of a method of unloading the value or other data for the system in FIG. 2.
  • flowchart 500 may be utilized in a stand-alone format or may be used after one or more of flowcharts 300 and 400 described in FIGS. 3 and 4 respectively.
  • a user decides to "cash out” from gaming, which entails transferring the value from the purse of secure gambling microprocessor 100 to the gambling management system 200.
  • flowchart 500 is utilized when the user wants to cash out the purse.
  • the user would utilize the computing device to initiate secure communications between gambling management system 200 and the blackjack secure gambling
  • Gambling management system 200 would determine the size of the purse and provide the funds from the purse to the user in one of a number of payment methods. For example, gambling management system 200 may deposit the funds back into the user's bank account; cut the user a check, or the like.
  • one embodiment determines the purse value at secure gambling microprocessor 100.
  • gambling management system 200 may automatically identify which secure gambling microprocessor 100 will have its value unloaded and the amount requested by the Customer to be unloaded.
  • a Casino or Lottery operator interacts with the management interface of the gambling management system 200 to identify which secure gambling microprocessor 100 will have its value unloaded and the amount requested by the Customer to be unloaded.
  • one embodiment transmits the purse value to gambling management system 200 via the secure communications channel 211.
  • the gambling management system 200 uses the secure gambling microprocessor 100 identifiers and internal systems such as the hardware security module to set up secure channel communication between the gambling management system 200 and secure gambling microprocessor 100.
  • one embodiment transmits the requested value unload along with optional log data from the gaming session back to the gambling management system 200.
  • optional confirmation of the validity of the purse value is performed by gambling management system 200.
  • one embodiment authorizes payment from gambling management system 200 to the user.
  • the customer has completed gaming with secure gambling microprocessor 100, and the secure gambling microprocessor 100 belongs to the Casino, the Customer's account may also be removed from the secure gambling microprocessor 100 so that a different Customer may use it.
  • the secure gambling microprocessor 100 belongs to the Customer, the account will remain on the secure gambling microprocessor 100 for future use.
  • the entire mobile device may be reusable.
  • a user may be at a casino and want to play blackjack in his room, at a lunch table, pool side, or the like, but may not have a computing device.
  • the user would go to the cashier's cage and request a mobile device, such as a tablet or the like, with a secure gambling microprocessor 100 coupled therewith.
  • the secure gambling microprocessor 100 on the mobile device would be loaded with the blackjack game and an amount of money added to the purse.
  • a mobile device may have more than one player's account thereon.
  • a first user may have an account on a secure gambling microprocessor 100 on a mobile device that includes a number of games and a purse.
  • a number of additional users may also have an account on the same secure gambling microprocessor 100 on the same mobile device.
  • a first user has his own login to his account and has a purse with a 5,000.00 dollar value.
  • a second user also has her own login to her account on the same device with the same secure gambling microprocessor 100 and she has a purse with a 25,000.00 dollar value.
  • An ⁇ ⁇ user also has a login to an account on the same device with the same secure gambling microprocessor 100 and has a purse with a 2,000.00 dollar value.
  • the games may also be different for one or more user's account on the same device with the same secure gambling microprocessor 100.
  • the first user may only have a blackj ack game
  • the second user may only have a roulette game
  • the nth user may have access to a number of games.
  • the user would then take the mobile device to his room or other location, and play blackjack. When the user was done playing, he would return the mobile device to the cashier's cage.
  • the blackjack secure gambling microprocessor 100 would communicate with the gaming management system to determine the value of the user's purse. In one embodiment, the determining would also include the gaming management system ensuring the security of the blackjack secure gambling microprocessor 100 and the purse contents thereon. If the user had money in the purse, the user would be paid.
  • the secure gambling microprocessor 100 would be returned to default and the mobile device would await the next user.
  • one embodiment determines the prize value at secure gambling microprocessor 100' wherein the payout for a predetermined game occurs in conjunction with a legacy lottery central site 477 system.
  • the payout process starts at the conclusion of a winning game that outcome was predetermined by a virtual instant ticket 451 downloaded to the secure gambling microprocessor 100' when the prize value for the winning game previously played is retrieved from EEPROM 108' memory 551.
  • the secure gambling microprocessor 100' notates in its memory that the virtual instant ticket 451 has been successfully played with its validation code transmitted (552 and 553) to the associated computing device 20 ⁇ .
  • the associated computing device 201 ' then displays the validation code 554 both in a human readable form and in a barcode format that is compatible with legacy lottery terminal scanners. If the associated computing device 201 ' is a desktop computer or some other nonportable device, the validation code may be printed with the hardcopy presented for validation.
  • the validation code is presented for redemption at a legacy lottery retailer the validation code is keyed into the terminal by the retailer or preferably scanned in by decoding the validation barcode 555.
  • the validation code is transmitted to the legacy lottery central site 477 where the code is verified with the ship 460" and validation 461" files to ensure that it represents a legitimate winner, the winning amount, has not been previously redeemed, and that the virtual instant ticket 451 is from an activated pack 458 that has not been stolen.
  • the consumer has the option to use his or her winnings to purchase additional plays on the gaming environment with the winnings.
  • the consumer would elect to roll over his or her winnings into new game play.
  • the logistical tracking of the purchasing of additional plays would be maintained by either the purse management module 220' (FIG. 4B) or entirely within the EEPROM 108' of the secure gambling microprocessor 100'.
  • another embodiment determines the payout value at secure gambling microprocessor 100' wherein the payout may be an accumulation of multiple plays (e.g., determined by RNG 103') in conjunction with a legacy lottery central site 477 system.
  • the payout may be an accumulation of multiple plays (e.g., determined by RNG 103') in conjunction with a legacy lottery central site 477 system.
  • this embodiment 575 is virtually identical to the previous embodiment (550) with the exception of the initial step 576.
  • the consumer elects to cash out 576 at any given time; hence the consumer's total prize winnings can be a variable between a minimum value (e.g., $1) and some theoretical maximum value (e.g., $500).
  • a virtual pack 458 or pool 459 would have been downloaded to the secure gambling microprocessor 100' before the redemption process begins.
  • This virtual pack 458 or pool 459 would embody an array of virtual instant tickets 451 with each ticket awarding a different prize level in the predefined range (e.g., ticket "001 " pays $1 , ticket “002" pays $2, ticket “003" pays $3 . . . ) such that there would be one validation code associated with a virtual pack 458 or pool 459 that would equate to the payout value at the time the consumer elected to cash out. Therefore, the lottery central site 477 would process one validation per pack 458 or pool 459 that would provide the proper payout value to the consumer.
  • the secure gambling microprocessor 100' After the cash out value has been determined the secure gambling microprocessor 100' notates in its memory that the virtual instant ticket 451 has been successfully played with its validation code transmitted (577 and 578) to the associated computing device 20 ⁇ .
  • the associated computing device 201 ' displays the validation code 559 both in a human readable form and in a barcode format that is compatible with legacy lottery terminal scanners. If the associated computing device 201 ' is a desktop computer or some other nonportable device, the validation code may be printed with the hardcopy presented for validation. When the validation code is presented for redemption at a legacy lottery retailer the validation code is keyed into the terminal by the retailer or preferably scanned in by decoding the validation barcode 580.
  • the validation code is transmitted to the legacy lottery central site 477 where the code is verified with the ship 460" and validation 461" files to ensure that it represents a legitimate winner, the winning amount, has not been previously redeemed, and that the virtual instant ticket 451 is from an activated pack 458 that has not been stolen. Assuming the validation code passes all required tests at the central site 477, it is logged as paid 580 with a message transmitted back to the retailer instructing him or her to pay the consumer the cash out winnings 582.
  • the Lottery Central Site 477 notifies the Management System 200' of all interactions involving individual secure gambling microprocessors 100' so that the Management System 200' can stay synchronized with the Lottery Central Site 477 and the Management System 200' can opportunistically perform additional operations with the secure gambling processor 100' by using the Computing Device 20 ⁇ to relay messages to the secure gambling processing 100' from time to time.
  • One example of such opportunistic operations would be to send a message to the secure gambling microprocessor 100' that confirms that specific winning tickets have been redeemed.
  • This communication does not provide any additional security advantage over the processes previously described, but it does enable the Computing Device to communicate with the secure gambling microprocessor 100' and display in the Graphical User Interface of the Computing Device 201 ', the state of which winnings have been redeemed and to allow an update message from the Management System 200' to be received by the secure gambling microprocessor 100' indicating which specific winnings have been redeemed
  • the present technology may be described in the general context of computer- executable instructions, such as program modules, being executed by a computer.
  • program modules include routines, programs, objects, components, data structures, etc., that perform particular tasks or implement particular abstract data types.
  • the present technology may also be practiced in distributed computing environments where tasks are performed by remote processing devices that are linked through a communications network.
  • program modules may be located in both local and remote computer-storage media including memory-storage devices.

Landscapes

  • General Physics & Mathematics (AREA)
  • Physics & Mathematics (AREA)
  • Engineering & Computer Science (AREA)
  • Business, Economics & Management (AREA)
  • Economics (AREA)
  • Marketing (AREA)
  • General Engineering & Computer Science (AREA)
  • Health & Medical Sciences (AREA)
  • Computer Security & Cryptography (AREA)
  • General Health & Medical Sciences (AREA)
  • Human Resources & Organizations (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Primary Health Care (AREA)
  • Strategic Management (AREA)
  • Tourism & Hospitality (AREA)
  • General Business, Economics & Management (AREA)
  • Theoretical Computer Science (AREA)
  • Management, Administration, Business Operations System, And Electronic Commerce (AREA)
EP17784777.9A 2016-10-03 2017-10-02 System und verfahren für einen verbraucher zur wiedergabe einer vielzahl von virtuellen soforttickets, die auf einen mikroprozessor geladen wurden, der dem verbraucher physisch bereitgestellt wird Withdrawn EP3520069A1 (de)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
US15/284,449 US20170024962A1 (en) 2013-07-09 2016-10-03 Secure distributed gambling
PCT/US2017/054726 WO2018067442A1 (en) 2016-10-03 2017-10-02 System and method for allowing a consumer to play a plurality of virtual instant tickets that are loaded onto a microprocessor and that is physically provided to the consumer

Publications (1)

Publication Number Publication Date
EP3520069A1 true EP3520069A1 (de) 2019-08-07

Family

ID=60117797

Family Applications (1)

Application Number Title Priority Date Filing Date
EP17784777.9A Withdrawn EP3520069A1 (de) 2016-10-03 2017-10-02 System und verfahren für einen verbraucher zur wiedergabe einer vielzahl von virtuellen soforttickets, die auf einen mikroprozessor geladen wurden, der dem verbraucher physisch bereitgestellt wird

Country Status (3)

Country Link
EP (1) EP3520069A1 (de)
CA (1) CA3044462A1 (de)
WO (1) WO2018067442A1 (de)

Family Cites Families (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2015006513A1 (en) * 2013-07-09 2015-01-15 Tapcentive, Inc. Distributed generation of a coupon
US9911274B2 (en) * 2013-07-09 2018-03-06 Tapcentive, Inc. Secure distributed gambling using stand-alone gambling platforms formed by independently operating coupled pairs of gambling microprocessors and mobile computing devices
US20150356821A1 (en) * 2014-06-06 2015-12-10 Zuunda Inc. System and method of prize distribution in an on-line game

Also Published As

Publication number Publication date
WO2018067442A1 (en) 2018-04-12
CA3044462A1 (en) 2018-04-12

Similar Documents

Publication Publication Date Title
US10593153B2 (en) System and method for allowing a consumer to play a plurality of virtual instant tickets that are loaded into a microprocessor and that is physically provided to the consumer
CA2874813C (en) System and method for play of a network-based lottery game
US20050170881A1 (en) Portable gaming device for viewing wagering results
US20100173691A1 (en) System and method for a lottery game
US20140141866A1 (en) Method for Integration of Closed and Open Loop Debit Systems with an Internet Gaming System
US11263869B2 (en) Process for allowing a consumer to play and redeem digitall pull-tab tickets using a NFC chip or tag that stores inventory control numbers, and an ancillary device that facilitates communication between the NFC chip or tag and a remote gaming server which provides game outcomes to the ancillary device for display thereon
CA2887407C (en) System and method for implementing internet-based games wherein a plurality of different games share a common prize structure
CA2887387C (en) A system for implementing internet-based games with a core platform, game modules, and protected game outcome generator
CA2887417C (en) A system and method for implementing play of internet-based games
EP3520069A1 (de) System und verfahren für einen verbraucher zur wiedergabe einer vielzahl von virtuellen soforttickets, die auf einen mikroprozessor geladen wurden, der dem verbraucher physisch bereitgestellt wird
AU2013328257B8 (en) A system for implementing internet-based games with a core platform, game modules, and protected game outcome generator

Legal Events

Date Code Title Description
STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: UNKNOWN

STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: THE INTERNATIONAL PUBLICATION HAS BEEN MADE

PUAI Public reference made under article 153(3) epc to a published international application that has entered the european phase

Free format text: ORIGINAL CODE: 0009012

STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: REQUEST FOR EXAMINATION WAS MADE

17P Request for examination filed

Effective date: 20190503

AK Designated contracting states

Kind code of ref document: A1

Designated state(s): AL AT BE BG CH CY CZ DE DK EE ES FI FR GB GR HR HU IE IS IT LI LT LU LV MC MK MT NL NO PL PT RO RS SE SI SK SM TR

AX Request for extension of the european patent

Extension state: BA ME

DAV Request for validation of the european patent (deleted)
DAX Request for extension of the european patent (deleted)
STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: THE APPLICATION IS DEEMED TO BE WITHDRAWN

18D Application deemed to be withdrawn

Effective date: 20191128