JP2007098023A - Game medium dispensing device, sales management device, computer program, and sales management system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To shift a consumption tax on a system, to obtain a right taxation certification and to dispense with excessive amount investment for every change of a consumption tax rate so as to cope with the present consumption tax and in preparation for the revision of the consumption tax rate anticipated in the future. <P>SOLUTION: This game medium dispensing device 1 is composed of: a cash discrimination machine 11 for discriminating supplied cash and outputting generated counting data; a data malicious change prevention device 13 which takes output from the cash discrimination machine in a form of branching from input to a hall computer 3 in equipment, accumulates the counting data for a prescribed period, and thereafter imparts electronic signature to the counting data and outputs it based on an instruction from a management controller; and the management controller 5 for transmitting the counting data with the electronic signature output from the data malicious change prevention device to the computer (sales management server 6) of a third party system operated outside of the equipment via a communication network 7. <P>COPYRIGHT: (C)2007,JPO&INPIT

Description

  The present invention manages sales of game balls or medals used for such games in game stores where game machines such as pachinko machines and slot machines are installed, and prevents unauthorized accounting operations such as sales tampering. The present invention relates to a game medium lending device, a sales management device, a computer program, and a sales management system.

  Conventionally, game stores that provide games using pachinko machines, slot machines, etc. have been provided with game media lending devices that lend game balls or medals to customers, and the sales of each game medium lending device are aggregated to increase the sales in the store. Recorded results. However, with this method, there is a possibility that sales data may be tampered with by arbitrary operations of store operators or malicious exploitation of store employees, and accounting transparency at stores is lacking. It was.

  Against this background, in recent years, a mechanism has been proposed and widely introduced by third parties (card sales and management companies) to capture sales at each gaming store, using a payment system using prepaid cards as the technical foundation. (See, for example, Patent Documents 1 and 2). In other words, according to this mechanism, when a card sales / management company sells a prepaid card at a game store, the sales amount is captured by the merchant, and from the game store side, the actual amount of game media lent to the customer By charging the card sales / management company for the amount based on the transaction, the transaction between the two is settled. As a result, accounting for an objective and transparent game store intervening by a third party is performed.

On the other hand, if the consumption tax on the game fee is taxed as an external tax and is collected at the game store, for example, in the case of a pachinko machine, it is currently rented as 4 yen / ball, so the number of balls lent per 100 yen is 25 However, since the current consumption tax rate is 5%, there are 24 actual loans. For this reason, it is necessary to change the setting of the number of lent balls to 24 and make the player recognize that the number of lent balls is 24. However, in a control device installed inside a normal pachinko machine, the number of balls lent out per 100 yen is fixedly set at 25, so basically no consumption tax is introduced. There are circumstances. Also, when changing the lending unit price, it was very difficult to manage.
On the other hand, a ball game machine has been proposed that allows the number of game balls to be lent according to the introduction of consumption tax, and allows the player to easily recognize the number of loans when the consumption tax is introduced. (For example, see Patent Document 3). In addition, a system for accurately collecting indirect tax and managing information in a game hall has been proposed (see, for example, Patent Document 4).

Japanese Patent Laid-Open No. 2001-232008 JP 2000-202144 A JP 2003-33555 A JP 2002-143522 A

  Incidentally, in the above-described settlement system using a prepaid card, a magnetic recording type card medium is generally employed. However, with this recording method, even if the read data cannot be analyzed, the amount data may be tampered illegally simply by copying and writing the data itself to another magnetic card. If the card is counterfeited, not only accurate sales are prevented, but also there is a risk that a tremendous monetary damage may be caused to the game store and the card sales / management company.

  On the other hand, consumption tax is basically structured to be taxed at a tax rate determined for sales. Therefore, the higher the sales, the higher the taxable amount. However, the actual consumption tax is calculated by subtracting the sum of the consumption tax already paid, such as the consumption tax on the purchase of premiums (cost of sales) from the consumption tax on sales. Because of the value, the large number of declarations is determined by the difference. The price of one ball in the current tax system is about 3.81 yen at the current tax rate of 5%. In other words, it can be said that 0.19 yen corresponding to the difference rented out as 4 yen / ball is a consumption tax on the main unit price and has already been borne by the player.

  The biggest merit of introducing the foreign tax system is that the unit price that is strong to the player's consciousness of 4 yen / ball can be kept as close as possible. On the other hand, in the internal tax system in which the main unit price fluctuates each time the tax rate changes, there is a risk that the fluctuation of the main unit price may not be accurately communicated to the player each time. If this is done, the result of strongly planting the gap with the main unit price will not be invited. What is most scary is that the decline in the price of the main body due to the increase in the consumption tax rate will lead to a chilling phenomenon.

The present invention has been made in view of the various circumstances described above, and allows a third party to record and manage accurate sales so that accounting for gaming stores can be made transparent. An object is to provide an apparatus, a computer program, and a sales management system.
In addition, in preparation for responding to the current consumption tax and for the revision of the expected consumption tax rate, it is possible to pass the consumption tax on the system, obtain a valid tax certificate, and change the consumption tax rate. Another object of the present invention is to provide a game medium lending device, a sales management device, a computer program, and a sales management system that do not require excessive capital investment every time. It is another object of the present invention to provide a game medium lending device, a sales management device, a computer program, and a sales management system that can easily cope with changes in the rental ball unit price.

  In order to solve the above-described problems, the game medium lending device of the present invention identifies a cash that has been inserted, outputs a generated count data, and outputs the cash identifier to a hall computer in the facility. A data falsification preventing device that fetches the input data in a branched form from the input to the data, accumulates the count data for a predetermined period, outputs a digital signature based on a command from the management controller, and outputs the data falsification preventing device. The management controller that transmits the counting data with the electronic signature to a third-party computer operated outside the facility via a communication network.

  Also, in the present invention, the data falsification preventing device is configured such that when information relating to a change in the game medium lending coefficient corresponding to the number of game media lent out for a predetermined amount is set, the data falsification preventing device is configured to perform the first through the management controller. After the communication with the computer of the three party organization and the approval is obtained, the setting is validated.

  Further, in the present invention, the data falsification preventing apparatus stores, in addition to the count data, data related to the change history of the game medium lending coefficient in a nonvolatile memory that is detachably mounted from the data falsification preventing apparatus. It is characterized by doing.

  The present invention also provides a data falsification preventing device that identifies cash inserted into a game medium lending device, captures generated count data, accumulates the count data for a predetermined period, and then outputs an electronic signature. The provided game medium lending device is a sales management device connected via a communication network and operated by a third party, and communicates with the game medium lending device to uniquely identify the game medium lending device. A data registration unit for registering information and public encryption key information of the data falsification preventing device, and obtaining the count data from the data falsification device and performing a cryptographic operation based on the registered public encryption key information, A data authentication unit that authenticates the integrity and the authenticity of the transmission source; and a sales data generation unit that generates sales data based on the count data when authentication by the data authentication unit is established; An abnormality notifying unit for notifying the outside when an abnormality is detected as a result of statistical processing of sales data generated by the sales data generating unit, or when authentication by the data authentication unit is not established; , Provided.

  In addition, the present invention identifies and counts the cash inserted into the game medium lending device, captures the generated count data, stores the count data for a predetermined period, and then outputs the data with an electronic signature. A game medium lending device provided with a prevention device is a computer program used for a sales management device connected via a communication network and operated by a third party, and communicates with the game medium lending device, Information for uniquely identifying a medium lending machine and processing for registering public encryption key information of the data falsification preventing device, and obtaining the count data from the data falsification device and encrypting based on the registered public encryption key information A process of performing an operation to authenticate the integrity of the data and the authenticity of the transmission source, a process of generating sales data based on the count data when the authentication is established, As a result of statistical processing of the sales data to be made, abnormality if it is detected, or the authentication is characterized in that to execute a process of performing abnormality notification to the outside, to the computer when not satisfied.

  In addition, the sales management system of the present invention identifies and counts the cash inserted into the game medium lending device, fetches the generated count data from the input to the hall computer in the facility, and the count data Game data lending device provided with a data falsification preventing device that outputs an electronic signature based on a command from the management computer, and count data with an electronic signature output from the data falsification preventing device And the hall computer and the management controller are connected via a communication network, communicate with the game medium lending device, and transmit the game to the sales management device of a third party operated outside the facility. A data registration unit for registering information for uniquely identifying a medium lending machine, and public encryption key information of the data falsification preventing apparatus; A data authentication unit that obtains the count data from the tampering device and performs cryptographic computation based on the registered public encryption key information to authenticate the integrity of the data and the authenticity of the transmission source, and the authentication by the data authentication unit is established A sales data generation unit that generates sales data based on the count data, and a case where an abnormality is detected as a result of statistical processing of the sales data generated by the sales data generation unit, or authentication by the data authentication unit And the sales management device including an abnormality notification unit for notifying the outside when abnormality is not established.

  According to the present invention, the accounting of a game store can be made transparent by recording and managing accurate sales by a third party. In addition, in preparation for responding to the current consumption tax and for the revision of the expected consumption tax rate, it is possible to pass the consumption tax on the system, obtain a valid tax certificate, and change the consumption tax rate. Excessive capital investment can be eliminated every time. In addition, it is possible to easily cope with a change in the lending unit price.

  FIG. 1 is a diagram showing an example of a system configuration of a sales management system according to an embodiment of the present invention. Here, there is a system in which a game medium lending device 1 that lends game balls used when playing a pachinko machine according to the amount of inserted cash (banknotes or coins) is connected to each other via a communication network 7. Illustrated.

The game medium lending device 1 is provided adjacent to a plurality of pachinko machines (not shown) arranged in parallel on the game island of the hall. The pachinko machine is paired with the game medium lending device 1 adjacent to the left side when viewed from the front, and when a player inserts banknotes or coins, a game ball having the number of balls corresponding to the amount of money is inserted. Is dispensed from the ball dispensing nozzle to the tray of the pachinko machine.
Each game medium lending device 1 is detachably attached to an attachment frame installed on the base of the game island. Further, as will be described later, a relay board on which a non-volatile memory is mounted is provided in advance in the mounting frame, and when the game medium lending device 1 is mounted on the mounting frame, the game medium lending apparatus 1 and the relay board Are electrically connected.

  On the back side of each game medium lending device 1, a bill transport device that transports a bill inserted and received as a genuine note to a bill collection device (not shown) provided at the end of the game island, and each game medium lending device 1 and 2 are provided at upper and lower predetermined positions, respectively, for transferring coins received as regular coins to a coin collecting device (not shown). For this reason, each game medium lending device 1 identifies the bills and coins that have been inserted and received, and generates the banknote / coin discriminator 11 that generates the cash count data, and the sphere corresponding to the bills / coins that have been identified and counted. A lending unit 12 for lending is built in.

The game medium lending device 1 also includes a data falsification preventing device 13 that gives an electronic signature to the data counted as described above. It is assumed that an IC card 14 in which a secret key necessary for assigning a public encryption key type electronic signature is registered is mounted inside the data falsification preventing apparatus 13.
The data falsification preventing device 13 is supplied in a form that can be incorporated into the game medium lending device 1.

Each game medium lending device 1 is connected to a hall computer 3 installed in a hall management room via an island controller 2 for each island of the hall. The hall computer 3 is provided with a protective device (firewall) so that a computer other than the sales management server 6 or an information terminal cannot access the local communication network of the hall. As a result, unauthorized access to the game medium lending device 1 or the like in the hall or data manipulation is prevented, and safety is ensured.
The data exchanged between the hall computers 3 and the sales management server 6 via the communication network 7 is encrypted and cannot be decrypted by any other third party.

On the other hand, the data falsification preventing device 13 incorporated in each game medium lending device 1 is connected to the management controller 5 which is a relay (router) via the hub 4. The management controller 5 transmits the count data with the electronic signature output from the data falsification preventing device 13 to the sales management server 6 which is a computer of a third party operated outside the facility via the communication network 7. If the configuration of the management controller 5 is broadly divided into functions, the management controller 5 includes a communication control unit that relays commands and an operation unit (all not shown) that generate commands, as will be described later.
Here, the communication network 7 is an IP (Internet Protocol) network, a private line network, a public line network, or a telephone network, and any of these line networks may be used, or a combination thereof may be used. Also good.

  In the embodiment of the present invention, the pachinko machine is connected to the gaming medium lending device 1 arranged adjacent to the pachinko machine so that data communication is possible, and data relating to the gaming state from the pachinko machine side is transmitted to the gaming medium lending device 1. The configuration that is transferred to the hall computer 3 is described. However, the present invention is not limited to this. For example, the present invention is also applied to a system in which each pachinko machine directly sends data to the hall computer 3 without going through each game medium lending device 1. be able to.

FIG. 2 is a block diagram showing an internal configuration of the game medium lending device according to the embodiment of the present invention.
As shown in FIG. 2, the game medium lending device 1 according to the embodiment of the present invention includes a bill / coin discriminator 11 as a cash discriminator, a lending unit 12, and a data falsification preventing device 13. Since the banknote / coin discriminator 11 and the lending unit 12 have been described with reference to FIG. 1, the description here is omitted to avoid duplication.

  The data falsification preventing device 13 discriminates and counts the cash inserted into the game medium lending device 1 with the money / coin discriminator 11 and sends the generated count data to the hall computer 3 (island controller 2) in the facility. The data is fetched in a branched form from the input, and the count data is accumulated for a predetermined period, and then an electronic signature is given based on a command from the management controller 5 and is output.

The BB device main body 131 is composed of a computing device that performs cryptographic computation, and is a device for giving an electronic signature to cash count data, and is referred to herein as a BB (black box). Inside, an IC card 14 in which a secret key necessary for giving an electronic signature of a public encryption key system is registered is installed. As a result, the encryption key information and the calculation device are a black box and a tamper-proof security device. Are protected by multiple IC cards 14.
The count data output by the BB device main body 131 is supplied to the sales management server 6 operated by a third party through the management controller 5 and is also supplied to and stored in the nonvolatile memory mounted on the relay board 133. The

The control board 132 has a built-in CPU, and includes a ROM and a RAM, which are semiconductor memories, an external device interface circuit, a serial communication control unit (both not shown), and a display circuit such as an LED (Light Emitted Diode). It is connected to the board via an internal bus printed and wired.
The CPU executes arithmetic processing according to a system program stored in advance in the ROM and controls the operation of the BB device main body 131.

The control board 132 is wired to the bill / coin discriminator 11 and the lending unit 12 via an external device interface circuit. The CPU acquires the status signals of these devices via the external device interface circuit, and also controls the number of game balls lent to the lending unit main body 122 via the lending control board 121 of the lending unit 12. Is sent to the bill / coin discriminator 11.
The serial communication control unit has a serial communication interface that complies with a communication standard such as RS232C, and is connected to a relay board 133 provided on the attachment frame 210 side so as to enable serial communication. Thus, the CPU can write and read data stored in the nonvolatile memory mounted on the relay board 133 via the serial communication control unit. Further, the CPU performs an abnormality notification described later by turning on a display circuit such as an LED.

The BB device main body 131 includes the ID of the BB device, count data, game medium lending count change history data (data related to consumption tax rate and taxation method), an abnormality detection flag, and an electronic signature of the BB for the current time. Each of the above data elements is transmitted to the sales management server 6 of the third party organization successfully last time, and is output in a form including the “difference” from the time of aggregation.
As a result, even if transmission cannot be performed normally due to a communication failure or the like, the third-party organization can acquire the difference from the previous aggregation, so that sales related data after the previous time can be grasped. It is assumed that no data is accumulated in the management controller 5 installed in the hall.

Hereinafter, an operation of the game medium lending device according to the embodiment of the present invention will be described. When the bill / coin discriminator 11 identifies that the bill inserted from the bill slot provided on the front panel of the game medium lending device 1 is a genuine note of a thousand yen bill, the deposit information is transmitted to the control board 132. Is done. The control board 132 transmits to the lending control board 121 of the lending unit 12 a command signal for lending a number of game balls corresponding to the amount of money that has been inserted.
For example, when the number of lent balls set on the control board 121 of the lending unit 12 is 25 per hundred yen, the control board 121 rents 250 game balls when the amount of money thrown is 1,000 yen. A command signal is transmitted to the lending unit main body 122. As a result, the lending unit main body 122 discharges the number of game balls indicated by the received command signal from a ball dispensing nozzle (not shown). Note that the number of game balls actually lent out by the lending unit main body 122 is counted by a ball payout sensor built in the lending unit main body 122, and the count signal is sent to the control board 212.

Next, the operation of the network system including the game medium lending device 1 will be described with reference to the operation sequence diagram shown in FIG. Here, a method for changing the number of game media to be lent is shown.
Note that the address of the game medium lending device 1 used in the local communication network laid in the hall is stored in advance in a non-volatile memory mounted on the relay board 133 of the attachment frame. When the apparatus 1 is mounted on the mounting frame by replacement work or the like, the control board 132 automatically reads an address from the nonvolatile memory and is set in the control board 132. The machine table number may be stored in the nonvolatile memory, and an address on the network may be used based on the machine table number.

Usually, the management controller 5 (communication control unit) issues a coefficient data transmission command to the game medium lending device 1 (step S31), and the game medium lending device 1 that has received the command sends a digital signature to prevent falsification. The processed coefficient data is transmitted to the sales management server 6 of the third party organization via the management controller 5 (communication control unit) (steps S32 and S33).
On the other hand, when the management controller 5 (operation unit) changes the setting of the lending setting number (coefficient) that is the number of game balls to be rented per unit amount by the gaming medium lending device 1 of the hall, the lending setting number change request A signal is transmitted to the sales management server 6 via the communication network 7 (step S34). For example, when the game medium lending apparatus 1 is replaced, the hall manager inputs a predetermined command to the management controller 5 (operation unit) as necessary. It is transmitted by doing.

  Upon receiving this request signal, the sales management server 6 approves the setting, and returns data on the new set number of rented balls to the management controller 5 (operation unit) that transmitted the request signal (step S35). Here, the sales management server 6 centrally manages, for example, the set number of game balls to be rented in a hall of the same series or a hall where information management is entrusted to the data center. For example, the consumption tax rate is changed. As a result, when it becomes necessary to change the setting of the number of game balls to be rented, the number of game balls to be rented out to the game medium lending device 1 of each hall is changed all at once according to the start date when the consumption tax rate is changed Data can also be sent.

When the management controller 5 (operation unit) receives data related to the new number of set gaming balls from the sales management server 6, the header information includes message information, message length, destination (transmission destination), transmission source, and command information. A setting command including information such as setting contents and setting values is generated and output to the game medium lending apparatus 1.
The setting command for setting the number of lending of all the game medium lending devices 1 in the hall recognizes that this command is a command for changing various setting values of each game medium lending device 1 in the message information column. A predetermined code is embedded, and the number of bytes indicating the size of this command is embedded in the message length column. Also, information indicating all the addresses of all game medium lending devices 1 in the hall is collectively displayed in the destination address column, the IP address of the hall computer 3 is set in the transmission source column, and the lending setting number is set in the setting contents. The information indicating the fact and the setting value are each embedded with information on the new lending setting number transmitted from the sales management server 6.

The management controller 5 (operation unit) transmits the data configuration setting command to the game medium lending device 1 through the local communication network in the hall (step S36).
When the game medium lending device 1 receives the lending number setting command, the gaming medium lending device 1 resets the lending ball number indicated in the command. The new lending ball number reset here is stored as lending coefficient change history data in the BB device main body 131 of the data falsification preventing device 13 built in the game medium lending device 1. Thereafter, the management controller 5 (communication control unit) issues a coefficient data transmission command to the game medium lending device 1 (step S37), and the game medium lending device 1 that has received the command sends a digital signature to prevent falsification. The processed coefficient data is transmitted to the sales management server 6 of the third party organization via the management controller 5 (communication control unit) (steps S38 and S39).

  In the above-described embodiment of the present invention, the example in which the hall computer 3 generates a setting command and changes the setting of the number of lent balls for each game medium lending device 1 has been described. The management computer (not shown) installed separately generates such setting commands and sends them to each game media lending device 1 in accordance with changes in the consumption tax rate, etc., so that the number of lending balls can be changed simultaneously. You may make it do. In this case, the above-described processes of S34 to S39 are performed in accordance with the lending number setting change notification transmitted from the management computer to the game medium lending device 1, and the change issued from the game medium lending device to the management computer as a response thereto. It changes to an end notification.

FIG. 4 is a block diagram showing the internal configuration of the sales management apparatus according to the embodiment of the present invention. The sales management apparatus of the present invention is mounted on the sales management server 6 shown in FIG.
The sales management apparatus according to the embodiment of the present invention includes a data registration unit 61, a count data reception unit 62, a data authentication unit 63, a sales related data generation unit 64, a statistical processing unit 65, an abnormality notification unit 66, It consists of a parameter DB (Data Base) 67 and a sales related data DB 68.

The sales management server 6 is connected to the hall computer 3 and the management controller 5 via a communication network 7. The data registration unit 61 communicates with the game medium lending device 1 and registers information (ID) for uniquely identifying the game medium lending device 1 and the public encryption key information of the data falsification preventing device 13 in the parameter DB 66.
The count data receiving unit 62 receives count data that has been subjected to falsification prevention processing output from the data falsification prevention device 13, and the data authentication unit 63 acquires the count data and registers the public encryption registered in the parameter DB 66. Cryptographic operation is performed based on the key information to authenticate the integrity of the data and the authenticity of the sender.

  The sales data generation unit 64 generates sales data based on the count data and stores it in the sales related data DB 68 when the authentication by the data authentication unit 63 is established. In addition, the statistical processing unit 65 performs statistical processing on sales data and determines trends and the like. Further, the abnormality notifying unit 66 is external when an abnormality is detected as a result of statistical processing of the sales data generated by the sales related data generating unit 64 or when the authentication by the data authentication unit 63 is not established. An error notification is sent to

FIG. 5 is a flowchart cited for explaining the operation of the sales management server 6 as the sales management apparatus according to the embodiment of the present invention, and also shows the processing procedure of the computer program according to the embodiment of the present invention.
The operation of the sales management server 6 shown in FIG. 4 will be described in detail below with reference to the flowchart shown in FIG.

First, manufacturing related data is registered by the manufacturing vendor of the data falsification preventing device 13 (BB device). Here, the corresponding public encryption key information is registered together with the BB-ID of the BB device main body 131 (step S51). Further, a predetermined procedure to be performed when the data falsification preventing device 13 is installed in the hall is waited (step S52), and the installation registration of the BB device main body 131 is also performed. Here, registration such as the number of balls set for lending is performed. All of these contents are captured by the data registration unit 61 and stored in the parameter DB 66 (step S53).
Subsequently, the count data receiving unit 62 receives the count data (data with an anti-tampering process with an electronic signature) transmitted from the data theft alteration device 13 (BB device main body 131) via the management controller 5 and the communication network 7. Then, the data is supplied to the data authentication unit 63 (step S54).

The data authentication unit 63 executes a predetermined cryptographic calculation process based on the public encryption key information registered in the parameter DB 67 (step S55), and thus the falsification prevention processed count data transmitted from each data falsification prevention device 13 is executed. And the data integrity and the authenticity of the data source are determined (steps S56 and S57).
Here, the determination results are derived purely from mathematical processing.

Specifically, an electronic certificate (person's name, gender, address, date, effective organization, etc.) is transmitted together with the count data via the communication network 7 and received by the count data receiving unit 62. Here, the electronic certificate is used by the data authentication unit 63 to verify that the electronic signature is correct. That is, the authenticity of the data transmission source (that the data tampering device 13 (the BB device main body 131 having a certain BB-ID) has transmitted) is proved if the electronic signature can be decrypted with the public key in the electronic certificate. The electronic signature is created with a private key registered in the IC card 14, and can be decrypted only with the public key that is the only pair with the private key.
In addition, the integrity of data (not tampered) can be proved by comparing the electronic signature decrypted with the public key in the electronic certificate with the received data. The electronic signature is created based on the count data at the time of transmission. If the count data is falsified during transmission, the content obtained by decrypting the electronic signature on the receiving side does not match the received count data.

If the above authentication by the data authentication unit 63 is established, the sales data generation unit 64 generates sales related data based on the count data that has been subjected to the falsification prevention processing (step S58). Here, sales related data for the current transmission (daily data is basically expected if there is no communication abnormality) can be obtained by paying attention to the difference from the previous aggregation processing.
Next, based on a predetermined determination rule, the business operation validity (or disturbance element detection) of the hall seen from the sales data generated by the sales related data generation unit 64 is determined (step S59). Here, the statistical processing unit 65 executes statistical processing to detect a short-term abnormality in a numerical value on the business day (or the business period to be transmitted this time), and to detect a numerical value seen as a trend retroactively. , And detection of medium- to long-term transition trends.

The sales data generated by the sales related data generating unit 64 and the sales data statistically processed by the statistical processing unit 65 are accumulated and stored in the sales related data DB 68 (step S60).
In the processes of steps S56, S57, and S59, if an abnormality is detected, a predetermined rule is applied to prompt further investigation of intentional abnormality (injustice) and accidental abnormality (disturbing elements such as noise). Based on this, an abnormality detection notification is sent to the vendor in which the data falsification preventing device 13 (BB device main body 131) is installed (step S61). This notification is performed by the abnormality notification unit 66 lighting an LED or the like driven by the control board 132 of the data falsification preventing device 13. However, specific data is not disclosed to the vendor at this point.

  In the above-described embodiment of the present invention, not only the game medium lending device 1 that lends a game ball used when playing a pachinko machine according to the insertion of cash, but also slot machines (pachislot machines) and other game machines are used. The present invention can also be applied to a game medium lending apparatus 1 that lends game media such as medals, and a lending machine that lends game media as electronic value information that can be used for games called credits instead of things. In addition to cash, for example, it is also applied to CR (Card Reader) lending machines that lend the above-mentioned game media within the range of frequencies stored in IC cards, etc., and the card frequency (number of credits) exchange rate for cash Alternatively, the present invention can also be applied to a change in setting of the number of payouts with respect to the card frequency (credit number).

In addition, a third-party organization can present an audit certificate that guarantees the validity of the total data of the halls given to a public organization (judicial system, national tax, etc.) as required. The details of the information to be disclosed are stipulated by a third-party organization, but are only left of the audit certificate and do not necessarily directly relate to the disclosure of the counting data.

  As described above, according to the present invention, the sales management server 6 or the hall computer 3 transmits a command for changing the setting of the number of loans to each game medium lending device 1 to change the setting of the number of loans all at once. Therefore, it is possible to eliminate the complexity of the setting work that has conventionally been performed individually by workers. In addition, since the sales management server 6 of the third party organization centrally manages and remotely sets the number of game media lending devices 1 in each hall, the number of game media lent by the hall side is unfairly changed to increase the ability to attract customers. Unfair business competition can be prevented.

In addition, according to the present invention, accounting of a game store can be made transparent by recording and managing accurate sales by a third party. In addition, in preparation for responding to the current consumption tax and for the revision of the expected consumption tax rate, it is possible to pass the consumption tax on the system, obtain a valid tax certificate, and change the consumption tax rate. Excessive capital investment can be eliminated every time. In addition, it is possible to easily cope with a change in the lending unit price.
In addition, accounting from the consumption tax rate change is possible under the approval of a third party organization by setting from the local (hall), and even if the game media lending device 1 is replaced, it is mounted on the relay board 133. Since the set number of lending (game medium lending coefficient) remains in the non-volatile memory, it is not necessary to reset it.

It is a figure which shows an example of the system configuration | structure of the sales management system in connection with this invention embodiment. It is a block diagram which shows the internal structure of the game media rental apparatus concerning this invention embodiment. It is the operation | movement sequence diagram quoted in order to demonstrate operation | movement of the game media rental apparatus concerning embodiment of this invention. It is a block diagram which shows the internal structure of the sales management apparatus concerning embodiment of this invention. It is the flowchart quoted in order to demonstrate operation | movement of the sales management apparatus concerning embodiment of this invention.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 ... Game media rental apparatus, 2 ... Island controller, 3 ... Hall computer, 4 ... Hub, 5 ... Management controller, 6 ... Sales management server, 7 ... Communication network, 11 ... Banknote / coin discriminator, 12 ... Rental unit, DESCRIPTION OF SYMBOLS 13 ... Data falsification prevention apparatus, 14 ... IC card, 133 ... Relay board (nonvolatile memory), 61 ... Data registration part, 62 ... Count data reception part, 63 ... Data authentication part, 64 ... Sales data generation part, 65 ... Statistical processing unit, 66 ... abnormality notification unit

Claims (6)

A cash discriminator for identifying input cash and outputting generated count data;
Data falsification prevention that captures the output of the cash identification machine in a form that branches from the input to the hall computer in the facility, accumulates the count data for a predetermined period, and then outputs an electronic signature based on a command from the management controller Equipment,
The management controller that transmits the count data with an electronic signature output from the data falsification preventing apparatus via a communication network to a third party computer operated outside the facility,
A game medium lending device comprising: The data falsification preventing device includes:
When information related to the change of the game media lending coefficient corresponding to the number of game media lent out for a predetermined amount is set, approval is obtained by communicating with the third party computer via the management controller. The game medium renting apparatus according to claim 1, wherein the setting is validated after the game. The data falsification preventing device includes:
The data relating to the change history of the game medium lending coefficient in addition to the count data is stored in a nonvolatile memory that is detachably mounted on the data falsification preventing device. Game media lending device. A game medium lending device provided with a data falsification preventing device that identifies cash inserted into a game medium lending device, captures generated count data, accumulates the count data for a predetermined period, and outputs an electronic signature. Is a sales management device connected via a communication network and operated by a third-party organization,
A data registration unit that communicates with the gaming medium lending device, uniquely identifies the gaming medium lending machine, and registers the public encryption key information of the data falsification preventing device;
A data authentication unit that obtains the count data from the data alteration device and performs a cryptographic operation based on the registered public encryption key information, and authenticates the integrity of the data and the authenticity of the transmission source;
When authentication by the data authentication unit is established, a sales data generation unit that generates sales data based on the count data;
As a result of statistical processing of the sales data generated by the sales data generation unit, when an abnormality is detected or when the authentication by the data authentication unit is not established, ,
A sales management device characterized by comprising: A game medium lending device provided with a data falsification preventing device that identifies cash inserted into a game medium lending device, captures generated count data, accumulates the count data for a predetermined period, and outputs an electronic signature. Is a computer program used for a sales management device connected via a communication network and operated by a third-party organization,
Processing for communicating with the game medium lending device, registering information for uniquely identifying the game medium lending machine, and public encryption key information of the data falsification preventing device;
A process of obtaining the count data from the data tampering device and performing a cryptographic operation based on the registered public encryption key information to authenticate the integrity of the data and the authenticity of the transmission source,
A process of generating sales data based on the count data when the authentication is established;
As a result of performing statistical processing of the generated sales data, when an abnormality is detected, or when the authentication is not established, processing for notifying the outside,
A computer program that causes a computer to execute. The cash entered into the game medium lending device is identified and counted, and the generated count data is taken in a form branched from the input to the hall computer in the facility, and after the count data is accumulated for a predetermined period, the management computer A game medium lending device having a data falsification preventing device that outputs an electronic signature based on the command of
A management controller that transmits count data with an electronic signature output from the data falsification preventing device to a sales management device of a third party operated outside the facility;
The hall computer and the management controller are connected via a communication network, communicate with the game medium lending device, uniquely identify the game medium lending machine, and public encryption key information of the data falsification preventing device. A data registration unit for registering, a data authentication unit for obtaining the count data from the data falsification device and performing a cryptographic operation based on the registered public encryption key information, and authenticating the integrity of the data and the authenticity of the transmission source, When an authentication is established by the data authentication unit, an abnormality is detected as a result of performing a statistical process on the sales data generated by the sales data generation unit that generates sales data based on the count data. Or the sales management comprising an abnormality notifying unit for notifying the outside when the authentication by the data authenticating unit is not established Equipment,
A sales management system characterized by comprising

Images