JP2008110119A - Game machine monitoring system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a game machine monitoring system capable of detecting fraudulence such as "spoofing" as controlling a put-out chip from other places than a main chip. <P>SOLUTION: The number of game balls to be put out based on a put-out control command is output as put-out control information from the main chip, in which a user program for controlling the game machine is stored and which outputs the put-out control command for putting out game balls in response to the entrance of a game ball when the game ball enters a winning hole. The number of game balls to be put out based on a dispensed ball put-out signal is output from the put-out chip, which executes the put-out control on reception of the put-out control command from the main chip or the dispensed ball put-out signal from a dispensed ball unit. The number of game balls to be put out based on the put-out control is output as a put-out count information from a put-out device for putting out game balls based on the put-out control from the put-out chip. Whether the fraudulence is performed in the game machine or not is determined by comparing the put-out information based on the put-out control information, dispensed ball put-out information and put-out count information. <P>COPYRIGHT: (C)2008,JPO&INPIT

Description

  The present invention belongs to the field of gaming machines, and is a gaming machine monitoring system that monitors fraud by mutually authenticating several circuits inside a gaming machine used for pachinko gaming machines, revolving gaming machines, etc. About.

Patent Document 1 proposes monitoring a gaming machine control means using a local operating network chip (LON chip).
In Patent Document 2, mutual authentication communication is performed between a main chip and a sub chip (or an I / O chip), and when any chip is illegally exchanged, the operation of the chip is stopped, or the outside is notified. It has been proposed to do.
Patent Document 3 proposes that a gaming monitoring control device is provided as a first-stage monitoring control device inside a gaming machine, and further, an integrated monitoring control device is provided at a subsequent stage of the external monitoring control device.
JP-A-11-28285 JP 2004-89701 A JP 2004-215714 A

Just by performing mutual authentication communication between two circuits inside a gaming machine, a fraudulent act called “spoofing” that uses a communication between those two circuits and loads a device that performs unauthorized control in a different place It was difficult to detect.
An object of the present invention is to provide a gaming machine monitoring system capable of detecting fraud such as “spoofing” or the like for controlling a payout chip from a place other than a main chip.

  In order to solve such a problem, the gaming machine monitoring system according to the present invention stores a user program for controlling a gaming machine including a jackpot lottery and receives a winning game ball and pays out a gaming ball corresponding to the winning prize. A main chip for outputting a payout control command, a payout chip for performing payout control in response to a payout control command from the main chip or a lending ball payout signal from a lending ball unit, and a game ball by payout control from the payout chip A game machine monitoring system for monitoring a gaming machine, wherein the main chip outputs the number of game balls to be paid out by a payout control command as payout control information, and the payout chip is a rental ball The number of game balls to be paid out by the payout signal is output as lending ball payout information, and the payout device pays out by the payout control. Outputs the number as a payout count information, by comparing the payout information based on the payout control information and rental ball payout information and payout count information, it is to determine whether fraud is made to the gaming machine.

  The invention described in claim 2 is the gaming machine monitoring system according to claim 1, wherein the gaming machine includes payout control information from the main chip, lending ball payout information from the payout chip, and the payout device. The payout count information is input, and a monitoring device for storing the input information as payout information is provided.

  The invention described in claim 3 is the gaming machine monitoring system according to claim 2, wherein the monitoring device compares payout information stored in the monitoring device to determine whether or not the gaming machine has been cheated. It is characterized by judging.

  The invention described in claim 4 is the gaming machine monitoring system according to claim 3, wherein the monitoring device sends a stop command to the main chip and / or the payout chip based on a comparison result of payout information. It is characterized by this.

  The invention described in claim 5 is the gaming machine monitoring system according to claim 3, wherein the monitoring device is configured to supply power to the main chip and the payout chip based on a comparison result of payout information. Then, a power supply stop command is sent.

  The invention described in claim 6 is the gaming machine monitoring system according to claim 3, wherein the monitoring device includes a communication circuit that exists outside the gaming machine and communicates with an external device that manages the gaming machine, Based on the comparison result of the payout information, an abnormality is reported to the external device.

  A seventh aspect of the present invention is the gaming machine monitoring system according to any one of the second, third, fourth, fifth, or sixth aspect, wherein the monitoring device includes at least one of the main chip or the payout chip. Mutual authentication communication is performed.

  The invention described in claim 8 is the gaming machine monitoring system according to any one of claims 2, 3, 4, 5 or 6, wherein the monitoring device is at least one of the main chip or the payout chip. A chip-specific ID number is stored in advance, and a chip-specific ID number is read from at least one of the main chip or the payout chip, checked against a pre-stored ID number, and based on the verification result, the gaming machine is illegal. It is characterized by determining whether or not an act has been made.

  The invention described in claim 9 is the gaming machine monitoring system according to claim 6, wherein the monitoring device reads and reads a chip-specific ID number from at least one of the main chip or the payout chip. An ID number is output to the external device, and the external device is connected to a database that stores the ID number of each chip, and collates the ID number input from the monitoring device with the ID number read from the database. And issuing a stop command for each chip to the monitoring device based on the collation result of the ID number.

  The invention described in claim 10 is the gaming machine monitoring system according to claim 6 or 9, wherein the monitoring device performs mutual authentication communication with the external device.

  The invention described in claim 11 is the gaming machine monitoring system according to claim 2, wherein the monitoring device includes a matching machine for checking whether or not the gaming machine is cheating outside the gaming machine. And a communication circuit for performing the communication, and outputting payout information to a collator, wherein the collator includes a circuit for comparing the input payout information and a display unit for displaying the comparison result. It is.

  According to the present invention, it is possible to detect a fraudulent act in which a chip is illegally exchanged or controlled by a spoofed part at an early stage, and damage can be minimized.

  Hereinafter, embodiments of the present invention will be described. FIG. 1 is a conceptual diagram of the present invention. The basis of the present invention is a monitoring device that checks whether fraud has been performed based on three types of information: payout control information from the main chip, lending ball payout information from the payout chip, and payout count information from the payout device. It is to monitor by. Whether or not mutual authentication between the monitoring device and the main chip, mutual authentication between the monitoring device and the payout chip, and whether or not ID verification of each chip is performed, or an external device such as a hall computer or a host computer There may be variations such as whether or not there is a relationship with the device and confirmation by a collator.

  Hereinafter, five examples that may be useful will be described from Example 1 to Example 5.

  Hereinafter, Example 1 will be described with reference to FIGS. 2, 3, 4, 5, 6, 7 and 8. FIG. 2 is a block diagram showing the entire hardware configuration. The gaming machine 102 mainly includes a main board 110, a payout board 111, a monitoring device 106, and a power supply circuit 114, and realizes a game in cooperation with the rental ball unit 103. The lending ball unit 103 includes a card reader or cash reader 119 and a lending ball unit control circuit 120.

  The main board 110 is a board having the main chip 104, and the main chip 104 stores a gaming machine control program and controls the gaming machines shown below. When a ball enters the winning opening, which is a general winning opening, a winning signal is received from the winning sensor 115 and a payout control command is output to the payout chip 105 on the payout board 111 so as to pay out the winning ball. When a ball enters a start port called a start chucker, a start signal from the start sensor 116 is received and a big hit lottery is performed. Depending on the game, the start chucker and the winning opening may be the same, but in that case, the winning ball is paid out together with the big win lottery. When the jackpot is confirmed, a big prize opening command (solenoid drive) is output to the big prize opening 117 to open the big prize opening. At this time, in response to the big winning signal from the big winning opening 117, a payout control command is outputted to the payout chip 105 so as to pay out the winning ball. Various control signals are output to the symbol display, sound control, lamp control, etc. 112 in order to control control components such as symbol display, sound, lamp, etc. in addition to winning and jackpot control. The main chip 104 has a mutual authentication circuit that stores an ID number (hereinafter referred to as main ID) unique to the chip, and performs mutual authentication with the monitoring device 106. If a mutual authentication circuit in the main chip 104 is inconvenient for mutual authentication with the monitoring device 106, the mutual authentication circuit outputs a stop command and stops the main chip 104 itself. In addition, it can also stop itself in response to a stop command from the monitoring device 106. The self-stop here means that the main chip does not perform normal operation based on the gaming machine control program, such as CPU reset, CPU HALT stop command execution, program LOOP processing, etc. Is not limited. Further, the main chip 104 not only sends a payout control command to the payout chip 105 but also sends payout control information to the monitoring device 106 and is used for payout information comparison by the monitoring device 106.

  The payout board 111 is a board having a payout chip 105, and the payout chip 105 controls the lending of balls to the player and the payout of prize balls during the game. When a player pushes the lending ball switch 118 and receives a lending ball SW signal, a lending ball request signal is issued to the lending ball unit control circuit 120, and the lending unit control circuit 120 lends the ball to the player. A lending ball payout signal is output. When the payout chip 105 receives the lending ball payout signal, it issues payout control to the payout device 113 and drives the motor to pay out the lending ball. At this time, the lending ball payout information is sent to the monitoring device 106 as information paid out by the instruction of the lending ball unit. The payout of the winning ball during the game is based on a payout control command from the main chip 104, paying out control to the payout device 113, and driving the motor to pay out the winning ball. When the payout device pays out a ball by lending a ball or paying out an award ball, the payout device 113 sends a payout count signal that counts how many balls are paid out to the payout chip 105, and the monitoring device 106 is also the same. Is sent as payout count information. The payout count information is the number of balls paid out by the actual payout device 113 obtained from a device capable of counting balls such as a counter attached to the payout device 113. The payout chip 105 has a mutual authentication circuit having a payout ID storage circuit, and performs mutual authentication with the monitoring device 106. The mutual authentication circuit in the payout chip 105 outputs a stop command by itself and stops the payout chip 105 by itself when the mutual authentication becomes inconvenient. In addition, it can also stop itself in response to a stop command from the monitoring device 106.

  The monitoring device 106 has a monitoring device control unit that executes mutual authentication and payout information comparison. The payout information comparison is realized by comparing the payout control information from the main chip 104, the lending ball payout information actually paid out by the payout chip 105, and the payout count information of the payout device 113. When an abnormality occurs in the payout information comparison, a power supply stop command can be issued to the power supply circuit 114 to stop the power supply. The power supply circuit 114 may be included in the monitoring device 106, or may be configured to include the monitoring device 106 in the power supply circuit 114. By integrating, the monitoring device 106 supplies power without issuing a power supply stop command. Can be stopped. Further, a chip stop command can be sent to the main chip 104 and the payout chip 105. The stop command may be a simple signal output, but it is desirable that the stop command is encryption information negotiated between both devices. Furthermore, the monitoring device 106 can also report an abnormality to the external management device 107 or the host computer 109.

  FIG. 3 is a block diagram illustrating a circuit configuration of the monitoring device control unit. The bus of the monitoring device CPU 106a, which is the central processing unit of the monitoring device control unit, has a RAM 106b, a timer circuit 106c, a ROM 106d, each payout information storage circuit 106e, an encryption / decryption circuit 106f, an input / output circuit 106g, an external communication circuit 106h, and a stop. Main ID storage circuit 106j, mutual authentication communication circuit 106k, payout ID storage circuit 106l, random number generation circuit (for mutual authentication) 106m, monitoring device ID storage circuit 106n, random value storage circuit 106o used for mutual authentication together with the command transmission circuit 106i Is connected. The timer circuit 106c gives a timing for comparing each payout information. Each payout information storage circuit 106e stores the payout control information acquired from the main chip 104 by the input / output circuit 106h, the lending ball payout information acquired from the payout chip 105, and the payout count information acquired from the payout device 113. The encryption / decryption circuit encrypts or decrypts data as appropriate in communication with the outside and communication in mutual authentication. The input / output circuit 106g acquires the above-described three payout information. The external communication circuit h issues an abnormality report to the external management device 107 or the host computer 109. The stop command output circuit i outputs a power stop command to the power circuit 114 and a stop command to the main chip 104 or the payout chip 105.

  The monitoring device control unit 106 has a configuration for performing mutual authentication with the main chip 104 and the payout chip 105. Mutual authentication is performed by exchanging mutual ID numbers. The main ID storage circuit 106j stores the ID of the main chip 104. The payout ID storage circuit 106 l stores the ID of the payout chip 105. The monitoring device ID storage circuit 106n stores the ID of the monitoring device 106 itself. The random number generation circuit (for mutual authentication) 106m generates a random value used in the mutual authentication communication, and the random value storage circuit 106o stores the generated random value. The mutual authentication communication circuit 106k performs communication with the mutual authentication circuit of the main chip 104 and communication with the mutual authentication circuit of the payout chip 105. It should be noted that a general communication technology is used for a protocol related to mutual authentication and is not described in detail, but a specific example is disclosed in Japanese Patent Application Laid-Open No. 2004-89701 filed previously by the applicant. Yes.

  FIG. 4 is a block diagram showing a circuit configuration of the main chip 104. The main CPU 104a, which is the central processing unit of the main chip 104, has a payout control information storage circuit 104b, a timer circuit 104c, a boot RAM 104d, a watchdog timer circuit 104e, a boot ROM 104f, an illegal address execution prohibition circuit 104g, a user RAM 104h, a security A check circuit 104i, a user ROM 104j, and an input / output circuit 104k are connected. The user ROM 104j stores a game machine control program for controlling the game machine. The security check circuit 104i checks whether or not the program stored in the user ROM 104j is legitimate, and stops the main CPU 104a when the legitimate program is stored. The input / output circuit 104 k sends a payout control command to the payout chip 105. In response to a winning signal or the like, various control signals (such as symbol display) are output. The payout control information storage circuit 104b stores the payout control command output during the game via the bus. The reset circuit 104l is an external system reset signal, a user reset signal, a signal from the watchdog timer circuit 104e, a signal from the illegal address execution prohibition circuit 104g, a signal from the identification circuit 104m of the mutual authentication circuit, and a monitoring device. In response to the stop command, a reset signal is sent to the main CPU 104a. The clock circuit 104m receives the external clock signal and gives the clock signal to the main CPU 104a.

  The main chip 104 has a mutual authentication circuit for performing mutual authentication with the monitoring device 106. The bus of the main authentication CPU 104n of the mutual authentication circuit has a communication circuit 104o, a stop command output circuit 104p to its own chip, and monitoring. Device ID storage circuit 104q, random number generation circuit (for mutual authentication) 104r, monitoring timer 104s, random value storage circuit 104t, encryption / decryption circuit 104u, main ID storage circuit 104v, stop command read circuit 104w, payout control information read circuit 104x The payout control information output circuit 104y is connected. The main CPU 104n stores a control program and includes a working memory. In this embodiment, “CPU” is adopted, but it may be realized by a logic circuit. The communication circuit 104o executes communication with the monitoring device 106. The stop command reading circuit 104p receives the stop command from the monitoring device, and the stop command output circuit 104p transmits the stop command to the reset circuit 104l. The payout control information reading circuit 104x reads the payout control information from the payout control information storage circuit 104b, and the payout control information output circuit y transmits the payout control information to the monitoring device 106. In this way, the mutual authentication circuit independently outputs the payout control information from the main CPU 104n, so that the payout control information is sent to the monitoring device without imposing a load on the main CPU 104n that controls the actual game. Can do.

  FIG. 5 is a block diagram showing a circuit configuration of the payout chip. Formally, it is almost the same as the circuit configuration of the main chip shown in FIG. However, the signals output from the input / output circuit 105k are the payout command to the payout device 113, the lending ball payout information to the monitoring device 106, and the lending ball request signal to the lending unit control circuit 120, and the input signal is , A lending ball SW signal from the lending ball switch 118, a lending ball payout signal from the lending ball unit control circuit 120, a payout count signal from the payout device 113, and a payout control command from the main chip 104 are different. . In the main chip, the payout control information storage circuit 104b stores payout control information during the game, whereas in the payout chip 105, the lending ball payout information storage circuit 105b receives the lending ball payout signal received from the lending ball unit 103. Are sequentially stored as lending ball payout information. The difference in the mutual authentication circuit is that a payout ID storage circuit 105v, a lending ball payout information reading circuit 105x, and a lending ball payout information output circuit 105y are connected to the bus of the payout authentication CPU 105n. The lending ball payout information reading circuit 105x reads lending ball control information from the lending ball control information storage circuit 104b, and the lending ball payout information output circuit 105y transmits the lending ball payout information to the monitoring device 106. The lending ball payout information may be transmitted by a pulse each time it is generated, or may be transmitted by an integrated value by a counter or the like.

  FIG. 6 is a flowchart showing the processing contents of the monitoring apparatus CPU 106a. When the power is turned on, the timer circuit 106c is set (S1101), and a mutual authentication process between the main chip 104 and the monitoring device 106 is executed (S1102). If mutual authentication is established with the main chip 104 (YES in S1103), next, mutual authentication processing between the payout chip 105 and the monitoring device 106 is executed (S1104). When mutual authentication is established with the payout chip 105 (YES in S1105), payout control information (A) from the main chip 104, and rental ball payout information that is information that the payout chip 105 pays out in accordance with an instruction from the rental ball unit. (B) The payout count information (C) from the payout device 113 is stored as A, B, and C, respectively (S1106, S1107, S1108). When the accumulated information is compared and it is confirmed that C ≦ A + B (YES in S1109), the idle time is waited (S1110), and the process returns to S1101. Here, C ≦ A + B should be strictly equal to C = A + B, but some time lag is allowed, and if the values of C and A + B are too far apart, the comparison result is NG. It may be configured. When mutual authentication with each chip cannot be obtained (no in S1103, no in S1105) and when the comparison result of each accumulated information is abnormal (no in S1109), the main chip 104 and the payout chip 105 from the monitoring device 106. A CPU stop command is issued (S1114, S1115), an abnormality report is output to the external hall computer 107 or the host computer 109 (S1116), and a power supply stop command is issued to the power supply circuit 114 (S1117).

  FIG. 7A is a flowchart showing the processing contents of the main CPU (CPU in the main chip), and FIG. 7B is a flowchart of the mutual authentication circuit of the main chip. It is assumed that the mutual authentication circuit and the circuit including the main CPU that controls the game move independently of each other. In FIG. 7A, when the main chip 104 is powered on or an external system reset occurs, a security check is performed (S1201). The security check here is to compare a game machine control program (user program) stored in the user ROM 104j with a security code written in advance and determine whether or not the user program is authentic, If it is determined that there is no problem in this security check (YES in s1202), the main CPU 104a is controlled in accordance with the user program to realize a normal gaming operation (S1203). If it is determined in the security check that the user program is not genuine (NO in S1202), the main CPU 104a stops. In FIG. 7B, when the main chip 104 is powered on, a mutual authentication process between the main chip and the monitoring device is executed (S1251). If mutual authentication is established (Yes in S1252), the payout control information is read from the payout control information storage circuit 104b (S1253), and the payout control information is output to the monitoring device 106 (S1254). In the payout control information storage circuit 104b on the main chip 104 side, payout control information is written according to a user program stored in the user ROM 104j. Next, it is checked whether or not there is a stop command from the monitoring device 106 (S1255). If there is a stop command, the stop command output circuit 104p outputs a stop command to the reset circuit 104l (S1256). If not, the process returns to S1251. In this flowchart, mutual authentication and payout control information are output sequentially from power-on, but mutual authentication and payout control information may be output in accordance with an instruction at an arbitrary timing from the monitoring device.

  FIG. 8A is a flowchart showing the processing contents of the payout CPU (CPU in the payout chip), and FIG. 8B is a flowchart of the mutual authentication circuit of the payout chip. In FIG. 8A, when the power of the payout chip 104 is turned on or an external system reset occurs, a security check is performed (S1301). If it is determined that there is no problem in the security check (YES in S1302), the payout CPU 105a is controlled according to the program, and a normal payout operation is realized (S1203). If the security check determines that the program is not legitimate (NO in S1302), the payout CPU 105a stops. In FIG. 8B, when the power is turned on, first, mutual authentication processing between the payout chip 105 and the monitoring device 106 is executed (S1351), and if mutual authentication is established (yes in S1352), the lending payout information storage circuit The lending ball payout information is read from 105b (S1353), and the lending ball payout information is output to the monitoring device 106 (S1354). In the lending ball payout information storage circuit 105b on the payout chip 105 side, lending ball payout information is written according to the user program stored in the user ROM 105j. Next, it is checked whether or not there is a stop command from the monitoring device 106 (S1355). If there is a stop command, the stop command output circuit 105p outputs a stop command to the reset circuit 105l (S1356). If there is no stop command, the process returns to S1351.

Since the first embodiment is configured as described above, the monitoring device is configured such that mutual authentication with the monitoring device cannot be performed for the act of illegally exchanging the main chip, and there is no payout control information from the main chip. The monitoring device receives a situation in which such a fraud occurs and outputs a report to the outside, a stop command to each chip, or shuts off the power supply.
Even when the payout chip is illegally exchanged, the monitoring apparatus can recognize that mutual authentication with the monitoring device cannot be performed as in the case of the main chip and that there is no lending payout information from the payout chip.
When the monitoring device itself is replaced with an illegal product or is illegally removed, the main chip and the payout chip are recognized because mutual authentication is not established with the main chip and the payout chip, and each chip stops itself.
Further, in the first embodiment, among the three configurations of the main chip, the payout chip, and the monitoring device, the two configurations such as the main chip and the payout chip, or the monitoring device and the main chip (or the payout chip) are illegally exchanged. It is possible to recognize such cases.
Furthermore, when control by the impersonation part is performed and one or both of the main chip and the payout chip are operating as fake, the information that the game ball is paid out is recognized by comparing and monitoring, and the monitoring device Reports to the outside, sends a stop command to each chip, and shuts off the power.
As described above, in the configuration of the first embodiment, even when any of the three CPUs is illegally exchanged or when the control is performed by the spoofing part, the illegal act can be found and dealt with.

  Next, Example 2 will be described with reference to FIGS. 9, 10, 11, 12, 13, 14, and 15.

  FIG. 9 is a block diagram showing the entire hardware configuration. Although most of the hardware configuration is the same as that of the first embodiment shown in FIG. 2, there are mainly the following three points. First, mutual authentication is not performed between the payout chip 205 and the monitoring device 206. Second, the monitoring device control unit has an ID communication circuit, and sends ID information of each chip to an external device. Thirdly, the external management device 207 or the host computer 209 has an external device control unit, acquires chip ID information inside the gaming machine, and is registered in the gaming machine management server 221. If the comparison is impossible, each chip stop command for stopping the gaming machine is issued. Note that the external management device 207 generally called a hall computer and the host computer 209 installed outside the game hall may be a personal computer having a communication circuit with the monitoring device, and no special circuit is required. Further, the installation location of the gaming machine management server 221 may be either inside or outside the game room depending on the situation, and may be configured to be built in the external management device 207 or the host computer 209.

  FIG. 10 is a block diagram illustrating a circuit configuration of the monitoring device control unit. A difference from the first embodiment is that an ID communication circuit 206i is provided, and main ID information output from the main chip and payout ID information output from the payout chip are acquired, and the external management device 207 or Sending to the host computer 209. At this time, the monitoring device ID may also be sent to the external management device 207 or the host computer 209 as each ID information. In the second embodiment, the monitoring device not only issues a stop command itself, but also the external communication circuit 206h receives a stop command from the external management device 207 or the host computer 209, and the stop command transmission circuit 206j is the main chip. It is also possible to output a stop command to the payout chip and the power supply circuit.

  FIG. 11 is a block diagram showing a circuit configuration of the main chip. The difference from the first embodiment is that the ID information of the main chip stored in the main ID storage circuit 204v is delivered to the monitoring device 206 via the communication circuit 204o. In the description of the invention, the main ID communication by mutual authentication communication and the main ID communication used for comparison of ID numbers are distinguished. However, the main ID is output to the monitoring device 206 and the main ID storage circuit 206l. Since there is no difference in storing them in the actual configuration, it is not necessary to distinguish them in the actual configuration.

  FIG. 12 is a block diagram showing a circuit configuration of the payout chip. The difference from the first embodiment is that there is no need for mutual authentication, and there is a lending ball information circuit for outputting lending ball payout information to the monitoring device instead of a mutual authentication circuit. In the configuration of the lending ball information circuit, the lending ball payout information reading circuit 205t reads out the lending ball payout information stored in the lending ball payout information storage circuit 205b, and outputs it to the monitoring device 206 via the lending ball payout information output circuit. Is the same as in the first embodiment, but in the second embodiment, since the payout ID number needs to be compared and confirmed by the external management device 207 or the host computer 209, the payout ID stored in the payout ID storage circuit 205r. Is output to the monitoring device 206 via the communication circuit 205o.

  FIG. 13 is a flowchart showing the processing contents of the monitoring device CPU. When the power is turned on, the main ID information and the payout ID information are acquired and each ID information is output to an external device (external management device 207 or host computer 209) outside the gaming machine (S2101, S2102, and S2103). If there is no chip stop command as a result of the ID collation in the external device (S2104), a timer is set (S2105), and mutual authentication processing between the main chip and the monitoring device is executed (S2106). When mutual authentication is established between the main chip and the monitoring device (Yes in S2107), the payout control information from the main chip 204, the lending ball payout information from the payout chip 205, and the payout count information from the payout device 213 are respectively displayed as A and B. , C (S2108, S2109, S2110). When the accumulated information is compared and it is confirmed that C ≦ A + B (yes in S2111), the idle time is waited (S2112), and the process returns to S2101. When there is a chip stop command from the external device (no in S2104), when mutual authentication between the main chip and the monitoring device cannot be obtained (no in S2107), or when the comparison result of each accumulated information is abnormal (no in S2111) ) Outputs a stop command from the monitoring device to each chip (S2113, S2114), reports an abnormality to the external device (S2115), and issues a power supply stop command to the power supply circuit (S2116).

  FIG. 14A is a flowchart showing the processing contents of the main CPU (CPU in the main chip), and FIG. 14B is a flowchart of the mutual authentication circuit of the main chip. It is assumed that the mutual authentication circuit and the circuit including the main CPU that controls the game move independently of each other. In FIG. 14A, when the main chip 204 is powered on or an external system reset occurs, a security check is performed (S2201). The security check here is to determine whether or not the gaming machine control program (user program) stored in the user ROM 204j is genuine, and when it is determined that there is no problem in this security check (S2202). In step S2203, the main CPU 204a is controlled in accordance with the user program and realizes a normal gaming operation. If the security check determines that the user program is not genuine (NO in S2202), the main CPU 204a stops. In FIG. 14B, when the main chip 204 is powered on, main ID information is output to the monitoring device 206 (S2251). Subsequently, a mutual authentication process between the main chip and the monitoring device is executed (S2252). When mutual authentication is established (Yes in S2253), the payout control information is read from the payout control information storage circuit 204b (S2254), and the payout control information is output to the monitoring device 206 (S2255). Next, it is checked whether or not there is a stop command from the monitoring device 206 (S2256). If there is a stop command, the stop command output circuit 204p outputs a stop command to the reset circuit 204l (S2257). If not, the process returns to S2252.

  FIG. 15A is a flowchart showing the processing contents of the payout CPU (CPU in the payout chip), and FIG. 15B is a flowchart of the mutual authentication circuit of the payout chip. In FIG. 15A, when the dispensing chip 204 is powered on or an external system reset occurs, a security check is performed (S2301). If it is determined that there is no problem in the security check (Yes in S2302), the payout CPU 205a is controlled in accordance with the program to realize a normal payout operation (S2203). If the security check determines that the program is not legitimate (no in S2302), the payout CPU 205a stops. In FIG. 15B, when the power is turned on, ID information is first output to the monitoring device 206 (S2351). Subsequently, the lending ball payout information is read from the lending ball payout information storage circuit 205b (S2352), and the lending ball payout information is output to the monitoring device 206 (S2353). Next, it is checked whether or not there is a stop command from the monitoring device 206 (S2354). If there is a stop command, the stop command output circuit 205p outputs a stop command to the reset circuit 205l (S2355). If there is no stop command, the process returns to S2352.

Since the second embodiment is configured as described above, it is not possible to perform mutual authentication with the monitoring device for the act of illegally exchanging the main chip, there is no payout control information from the main chip, and the main ID. Is not legitimate, and the monitoring device recognizes that such a fraud has occurred, and outputs a notification to the outside, a stop command to each chip, or shuts off the power supply.
When the payout chip is illegally exchanged, the monitoring device can recognize that the payout ID is not genuine and that there is no lending ball payout information from the payout chip.
When the monitoring device itself is replaced or illegally removed, the main chip recognizes that mutual authentication with the main chip is not established, and each chip stops itself.
In the second embodiment, it is also possible to recognize a case where the main chip and the payout chip or the monitoring device and the payout chip are exchanged illegally. When the monitoring device and the main chip are exchanged, communication between the external management device or the host computer and the monitoring device is not established, so that external recognition is possible.
Further, when the control by the spoofing part is performed, the monitoring device can recognize the information by comparing and monitoring the information on the game balls paid out as in the first embodiment.
As described above, even in the configuration of the second embodiment, even when any of the three CPUs is illegally exchanged or when control is performed using a spoofing part, the illegal act can be found and dealt with.

  Next, Embodiment 3 will be described with reference to FIGS. 16, 17, 18, 19, 20, 21, and 22. FIG.

  FIG. 16 is a block diagram showing the entire hardware configuration. Although it is similar to the overall configuration of the second embodiment, the difference from the second embodiment is that there is no mutual authentication between the monitoring device 306 and the main chip 304, and that the monitoring device 306 and the external management device 307 (or host computer). 309) is performing mutual authentication.

  FIG. 17 is a block diagram illustrating a circuit configuration of the monitoring device control unit. This is substantially the same as that of the second embodiment, except that the partner with which the monitoring device performs mutual authentication is not the main chip but the external device (external management device 307 or host computer 309). Therefore, the external device ID necessary for mutual authentication with the external device is stored in the external device ID storage circuit 306o.

  FIG. 18 is a block diagram showing a circuit configuration of the main chip 304. The difference from the second embodiment is that there is no need for mutual authentication, and therefore there is a payout control information circuit for outputting payout control information to the monitoring device instead of a mutual authentication circuit. In the configuration of the payout control information circuit, the payout control information read circuit 304t reads out the payout control information stored in the payout control information storage circuit 304b and outputs it to the monitoring device 306 via the payout control information output circuit 304v. Although it is the same as Example 2, in Example 3, since it is necessary to compare and confirm the main ID number by the external management device 307 or the host computer 309, the main ID stored in the main ID storage circuit 304r is used as a communication circuit. It is configured to output to the monitoring device 306 via 304o.

  FIG. 19 is a block diagram showing a circuit configuration of the payout chip. This is substantially the same as that of the second embodiment.

  FIG. 20 is a flowchart showing the processing contents of the monitoring device CPU. When the power is turned on, the main ID information and the payout ID information are acquired and each ID information is output to an external device (external management device 207 or host computer 209) outside the gaming machine (S3101, S3102, and S3103). If there is no chip stop command as a result of ID collation in the external device (S3104), a timer is set (S3105), and mutual authentication processing between the external device and the monitoring device is executed (S3106). When mutual authentication is established between the external device and the monitoring device (Yes in S3107), the payout control information from the main chip 304, the lending ball payout information from the payout chip 305, and the payout count information from the payout device 313 are respectively A and B. , C (S3108, S3109, S3110). When the accumulated information is compared and it is confirmed that C ≦ A + B (yes in S3111), the idle time is waited (S3112), and the process returns to S3101. When there is a chip stop command from the external device (no in S3104), when mutual authentication between the external device and the monitoring device cannot be obtained (no in S3107), or when the comparison result of each accumulated information is abnormal (no in S3111) ) Outputs a stop command from the monitoring device to each chip (S3113, S3114), reports an abnormality to the external device (S3115), and issues a power supply stop command to the power supply circuit (S3116).

  FIG. 21A is a flowchart showing the processing contents of the main CPU (CPU in the main chip), which is the same as the flowchart of the second embodiment. FIG. 21B is a flowchart of the main chip payout control information circuit. It is assumed that the payout control information circuit and the circuit including the main CPU that controls the game move independently of each other. In FIG. 21B, when the main chip 304 is powered on, main ID information is output to the monitoring device 306 (S3251). Subsequently, the payout control information is read from the payout control information storage circuit 304b (S3252), and the payout control information is output to the monitoring device 306 (S3253). Next, it is checked whether or not there is a stop command from the monitoring device 306 (S3254). If there is a stop command, the stop command output circuit 304p outputs a stop command to the reset circuit 304l (S3255). If not, the process returns to S3252.

  FIG. 22 is a flowchart showing the processing contents of the payout CPU. The content is the same as the flowchart of the second embodiment. 21 and 22, the main chip and the monitoring device, and the payout chip and the monitoring device do not perform mutual authentication.

Since the third embodiment is configured as described above, there is no payout control information from the main chip for the act of illegally exchanging the main chip, and the main ID is not a regular monitoring device. The monitoring device receives a situation in which such a fraud occurs and outputs a report to the outside, a stop command to each chip, or shuts off the power supply.
When the payout chip is illegally exchanged, the monitoring device can recognize that the payout ID is not genuine and there is no lending ball payout information from the payout chip.
When the monitoring device itself is replaced with an illegal product or is illegally removed, the external device can recognize that mutual authentication is not established with the external device. However, in this case, since the communication between the monitoring device and the external device is not possible, the hall machine is stopped by an employee in the hall or another communication circuit for stopping the main chip is required. .
In the third embodiment, among the three configurations of the main chip, the payout chip, and the monitoring device, the two configurations such as the main chip and the payout chip, or the monitoring device and the main chip (or the payout chip) are illegally exchanged. It is possible to recognize such cases.
Further, when the control by the spoofing part is performed, the monitoring device can recognize the information by comparing and monitoring the information on the game balls paid out as in the first and second embodiments.
As described above, even in the configuration of the third embodiment, even when any of the three CPUs is illegally exchanged or when control is performed using a spoofing part, the illegal act can be found and dealt with.

  Next, Example 4 will be described with reference to FIGS. 23, 24, 25, 26, 27, 28 and 29. FIG.

  FIG. 23 is a block diagram showing the entire hardware configuration. The fourth embodiment is characterized in that an external device such as an external management device or a host computer is not required. The monitoring device control unit performs ID verification of the main chip 404 and the payout chip 405 and performs mutual authentication between the main chip 404 and the monitoring device 406.

  FIG. 24 is a block diagram illustrating a circuit configuration of the monitoring device control unit. The configuration is almost the same as that of the second embodiment, including the configuration for performing mutual authentication with the main chip 404, except that it does not have an external communication circuit for performing communication with an external device.

  FIG. 25 is a block diagram showing a circuit configuration of the main chip. The configuration is the same as that of the second embodiment.

  FIG. 26 is a block diagram showing a circuit configuration of the payout chip. The configuration is the same as in the second and third embodiments.

  FIG. 27 is a flowchart showing the processing contents of the monitoring device CPU. Although it is similar to that of the third embodiment, in the third embodiment, ID collation is performed in the external device, whereas in the fourth embodiment, ID collation is performed in the monitoring device. When the power is turned on, main ID information and payout ID information are acquired (S4101, S4102). The acquired ID of each chip is compared with the ID of each chip stored in advance in the main ID storage circuit 406k and the payout ID storage circuit in the monitoring device, and if it is determined as a regular ID number as a result of the verification (S4103) Yes), a timer is set (S4104), and a mutual authentication process between the main chip and the monitoring device is executed (S4105). If mutual authentication is established between the main chip and the monitoring device (yes in S4106), the payout control information from the main chip 404, the lending ball payout information from the payout chip 405, and the payout count information from the payout device 413 are respectively A and B. , C (S4107, S4108, S4109). When the accumulated information is compared and it is confirmed that C ≦ A + B (yes in S4110), the idle time is waited (S4111), and the process returns to S4101. When it is determined that the ID number of each chip is invalid (no in S4103), when mutual authentication between the main chip and the monitoring device cannot be obtained (no in S4106), there is an abnormality in the comparison result of the accumulated information. At some time (no in S4110), the monitoring device outputs a stop command to each chip (S4112, S4113), and issues a power supply stop command to the power supply circuit (S4114).

  FIG. 28 is a flowchart showing the processing contents of the main CPU. It is the same as that of Example 2.

  FIG. 29 is a flowchart showing the processing contents of the payout CPU. Same as Example 2 and Example 3.

Since the fourth embodiment is configured as described above, it is possible to deal with illegal chip replacement and control by impersonation parts by using a discovery command, a stop command, power shutdown, etc. without using an external device. Has characteristics.
For the act of illegally exchanging the main chip, the monitoring device recognizes that mutual authentication with the monitoring device is not possible, there is no payout control information from the main chip, and the main ID is not genuine, The monitoring device outputs a stop command to each chip or shuts off the power supply in response to the situation where such a fraud occurs.
When the payout chip is illegally exchanged, the monitoring device can recognize that the payout ID is not genuine and that there is no lending ball payout information from the payout chip.
When the monitoring device itself is replaced or illegally removed, the main chip recognizes that the mutual authentication with the main chip is not established, and the main chip stops itself.
In the fourth embodiment, it is also possible to recognize a case where the main chip and the payout chip or the monitoring device and the payout chip are exchanged illegally.
Further, when the control by the spoofing part is performed, the monitoring device can recognize the information by paying out the game balls as in the first, second, and third embodiments.
As described above, even in the configuration of the fourth embodiment, even if any of the three CPUs is illegally exchanged or controlled by a spoofing part, the illegal act can be found and dealt with.

  Next, Example 5 will be described with reference to FIGS. 30, 31, 32, 33, 34, 35, 36, 37 and 38. FIG.

  FIG. 30 is a block diagram showing the entire hardware configuration. The fifth embodiment is characterized in that the portable collator 521 confirms whether or not the payout information stored in the monitoring device 506 has an appropriate value. The collator 521 is not used for continuous monitoring, but is used for temporary check-up, and displays the collation result on a simple display screen.

  FIG. 31 is a block diagram illustrating a circuit configuration of the monitoring device control unit. An input / output circuit 506h to which the payout control information from the main chip 504, the lending ball payout information from the payout chip 505, the payout count information from the payout device 513 are input, and the payout information storage for storing the input payout information as needed. In response to a payout information information read command from the circuit 506e and the collator 521, an external communication circuit 506f that outputs each payout information stored in each payout information storage circuit 506e to the collator 521 is provided.

  FIG. 32 is a block diagram showing a circuit configuration of the main chip 504. Since the main chip in the fifth embodiment is not required to have a configuration in which the main CPU 504a is stopped in response to mutual authentication with the monitoring device 506, output of a main ID number to the monitoring device 506, or a stop command from the monitoring device, In addition to the configuration for playing a game, the payout control information reading circuit 504p reads out the payout control information stored in the payout control information storage circuit 504b and outputs it to the monitoring device 506 via the payout control information output circuit 504r. Just do it.

  FIG. 33 is a block diagram showing a circuit configuration of the payout chip 505. Since the payout chip according to the fifth embodiment is not necessarily required to have the configuration of stopping the payout CPU 504a in response to mutual authentication with the monitoring device 506, output of a payout ID number to the monitoring device 506, and a stop command from the monitoring device. In addition to the payout configuration, the lending ball payout information read circuit 505p reads out the lending ball payout information stored in the lending ball payout information storage circuit 505b, and outputs it to the monitoring device 506 via the lending ball payout information output circuit 505r. What is necessary is just to have a structure.

  FIG. 34 is a block diagram showing a circuit configuration of the collator 521. A RAM 521b, a timer circuit 521c, a ROM 521d, each payout information storage circuit 521e, a communication circuit 521f, and an input / output circuit 521g are connected to the bus of the collator CPU 521a which is a central processing unit of the collator. Each payout information storage circuit 521e stores each payout information input from the monitoring device 506 via the communication circuit 521f. The communication circuit 521f outputs a payout information read command for reading each payout information from the monitoring device 506 and receives each payout information output from the monitoring device 506. The input / output circuit 521g receives an input from a verification switch for starting verification, and outputs a verification result display signal to the verification result display unit.

  FIG. 35 is a flowchart showing the processing contents of the monitoring device CPU. The monitoring device accumulates the payout control information from the main chip 504, the lending ball payout information from the payout chip 505, and the payout count information from the payout device 513 in each payout information storage circuit 506e (S5101, S5102). , S5103), when there is a payout information read command from the collator 521 (yes in S5104), each payout information is output to the collator 521 (S5105). If there is no payout information read command from the collator, the process returns to S5101.

  FIG. 36A is a flowchart showing the processing contents of the main CPU (CPU in the main chip), which is the same as the flowchart of the second embodiment. FIG. 36B is a flowchart of the payout control information circuit of the main chip. It is assumed that the payout control information circuit and the circuit including the main CPU that controls the game move independently of each other. 36B, when the main chip 504 is powered on, the payout control information is read from the payout control information storage circuit 504b (S5251), and the payout control information is output to the monitoring device 506 (S5252).

  FIG. 37A is a flowchart showing the processing contents of the payout CPU (CPU in the payout chip), which is the same as the flowcharts of the second, third, and fourth embodiments. FIG. 37B is a flowchart of the lending ball information circuit of the payout chip. A lending ball information circuit that outputs lending ball payout information and a circuit including a payout CPU that controls payouts move independently of each other. In FIG. 37B, when the power of the payout chip 505 is turned on, the lending ball payout information is read from the lending ball payout information storage circuit 505b (S5351), and the lending ball payout information is output to the monitoring device 506 (S5352).

  FIG. 38 is a flowchart showing the processing contents of the collator. When the power is turned on and the collation start switch is turned on (yes in S5401), a payout information read command is output to the monitoring device 506 (S5402). When each piece of payout information is input from the monitoring device 506 (yes in S5403), they are stored (S5404), and the payout information is compared in the collator 521 (S5405). If the result of the comparison is appropriate, “collation result OK” is displayed on the collation result display section (S5406). If the comparison result is not appropriate, “matching result NG” is displayed on the matching result display section (S5407). If there is no input of each payout information (No in S5403), “communication error” is displayed on the collation result display section.

  Since the fifth embodiment is configured as described above, it is possible to find out fraudulent behavior by checking payout information with a simple procedure without requiring installation of a large-scale external device or host computer.

  As described above, five embodiments are shown. However, the embodiment of the present invention is not limited to this, and includes combinations of the five embodiments and applications within the scope that can be assumed by those skilled in the art. For example, in the fourth embodiment that does not require an external device, the collation result may be confirmed externally from the monitoring device. Further, in the fifth embodiment in which only the payout information can be verified by the collator, the ID number of each chip may be verified together.

  As described above, the present invention can provide a monitoring system for detecting an illegal act of a gaming machine. The present invention can be applied to many gaming machines.

It is a block diagram showing the concept of this invention. FIG. 1 is a block diagram illustrating an entire hardware configuration (first embodiment). FIG. 3 is a block diagram illustrating a circuit configuration of a monitoring device control unit (first embodiment). 1 is a block diagram illustrating a circuit configuration of a main chip (first embodiment). FIG. FIG. 3 is a block diagram illustrating a circuit configuration of a payout chip (Example 1). 7 is a flowchart illustrating processing contents of a monitoring device CPU (Example 1). 5 is a flowchart showing the processing contents of a main CPU (CPU in the main chip) (Example 1). It is a flowchart which shows the processing content of payout CPU (CPU in a payout chip) (Example 1). FIG. 12 is a block diagram illustrating an entire hardware configuration (second embodiment). (Example 2) which is a block diagram which shows the circuit structure of the monitoring apparatus control part. FIG. 6 is a block diagram illustrating a circuit configuration of a main chip (second embodiment). (Example 2) which is a block diagram which shows the circuit structure of a payout chip | tip. It is a flowchart which shows the processing content of monitoring apparatus CPU (Example 2). 7 is a flowchart illustrating processing contents of a main CPU (second embodiment). It is a flowchart which shows the processing content of payout CPU (Example 2). FIG. 10 is a block diagram illustrating an entire hardware configuration (third embodiment). (Example 3) which is a block diagram which shows the circuit structure of the monitoring apparatus control part. FIG. 9 is a block diagram illustrating a circuit configuration of a main chip (third embodiment). (Example 3) which is a block diagram which shows the circuit structure of a payout chip | tip. It is a flowchart which shows the processing content of monitoring apparatus CPU (Example 3). FIG. 10 is a flowchart illustrating processing contents of a main CPU (third embodiment). FIG. It is a flowchart which shows the processing content of payout CPU (Example 3). FIG. 10 is a block diagram illustrating an entire hardware configuration (fourth embodiment). (Example 4) which is a block diagram which shows the circuit structure of the monitoring apparatus control part. FIG. 9 is a block diagram illustrating a circuit configuration of a main chip (Example 4). (Example 4) which is a block diagram which shows the circuit structure of a payout chip | tip. It is a flowchart which shows the processing content of monitoring apparatus CPU (Example 4). 10 is a flowchart illustrating processing contents of the main CPU (fourth embodiment). It is a flowchart which shows the processing content of payout CPU (Example 4). FIG. 10 is a block diagram illustrating the entire hardware configuration (Example 5). (Example 5) which is a block diagram which shows the circuit structure of the monitoring apparatus control part. FIG. 10 is a block diagram illustrating a circuit configuration of a main chip (Example 5). (Example 5) which is a block diagram which shows the circuit structure of a payout chip | tip. (Example 5) which is a block diagram which shows the circuit structure of a collation machine control part. It is a flowchart which shows the processing content of monitoring apparatus CPU (Example 5). FIG. 10 is a flowchart illustrating processing contents of a main CPU (fifth embodiment). FIG. It is a flowchart which shows the processing content of payout CPU (Example 5). It is a flowchart which shows the processing content of a collator (Example 5).

Explanation of symbols

102, 202, 302, 402, 502 Gaming machine 103, 203, 303, 403, 503 Rental ball unit 104, 204, 304, 404, 504 Main chips 105, 205, 305, 405, 505 Payout chips 106, 206, 306 , 406, 506 Monitoring device 107, 207, 307 External management device 109, 209, 309 Host computer 110, 210, 310, 410, 510 Main board 111, 211, 311, 411, 511 Delivery board 114, 214, 314, 414 Power supply circuit 221, 321 Game machine management server 521 Verification machine

Claims (11)

A main chip that stores a user program for controlling the gaming machine, outputs a payout control command for paying out a game ball corresponding to the winning after receiving a winning game ball,
A payout chip that performs payout control in response to a payout control command from the main chip or a lending ball payout signal from the lending ball unit;
A gaming machine monitoring system comprising a payout device for paying out a game ball by payout control from the payout chip, and monitoring a gaming machine,
The main chip outputs the number of game balls to be paid out by a payout control command as payout control information,
The payout chip outputs the number of game balls to be paid out by a lending ball payout signal as lending ball payout information,
The payout device outputs the number of game balls to be paid out by payout control as payout count information,
A gaming machine monitoring system characterized by determining whether or not a gaming machine has been cheated by comparing payout information based on payout control information, lending ball payout information, and payout count information. The gaming machine monitoring system according to claim 1, wherein
Monitoring that stores payout control information from the main chip, lending ball payout information from the payout chip, and payout count information from the payout device, and stores the input information as payout information in the gaming machine A gaming machine monitoring system comprising a device. A gaming machine monitoring system according to claim 2,
The gaming machine monitoring system, wherein the monitoring device compares payout information stored in the monitoring device to determine whether or not the gaming machine has been cheated. A gaming machine monitoring system according to claim 3,
The gaming machine monitoring system, wherein the monitoring device sends a stop command to the main chip and / or the payout chip based on a comparison result of payout information. A gaming machine monitoring system according to claim 3,
The gaming machine monitoring system, wherein the monitoring device sends a power supply stop command to a power supply circuit that supplies power to the main chip and the payout chip based on a comparison result of payout information. A gaming machine monitoring system according to claim 3,
The monitoring device is provided outside the gaming machine and includes a communication circuit that communicates with an external device that manages the gaming machine, and an abnormality is detected with respect to the external device via the communication circuit based on a comparison result of payout information. A gaming machine monitoring system characterized by reporting. A gaming machine monitoring system according to any one of claims 2, 3, 4, 5 or 6,
The gaming machine monitoring system, wherein the monitoring device performs mutual authentication communication with at least one of the main chip or the payout chip. A gaming machine monitoring system according to any one of claims 2, 3, 4, 5 or 6,
At least one of the main chip or the payout chip stores a chip-specific ID number,
The monitoring device stores in advance at least one chip-specific ID number of the main chip or the payout chip, and reads a chip-specific ID number from at least one of the main chip or the payout chip and stores it in advance. A gaming machine monitoring system characterized by collating with an ID number and determining whether or not the gaming machine has been cheated based on the collation result. The gaming machine monitoring system according to claim 6,
At least one of the main chip or the payout chip stores a chip-specific ID number,
The monitoring device reads a chip-specific ID number from at least one of the main chip or the payout chip, and outputs the read ID number to the external device,
The external device is connected to a database that stores the ID number of each chip, collates the ID number input from the monitoring device with the ID number read from the database, and based on the ID number verification result A gaming machine monitoring system which issues a stop command for each chip to the monitoring device. A gaming machine monitoring system according to claim 6 or 9, wherein
The gaming machine monitoring system, wherein the monitoring device performs mutual authentication communication with the external device. A gaming machine monitoring system according to claim 2,
The monitoring device includes a communication circuit that communicates with a matching machine that checks whether or not the gaming machine is cheating outside the gaming machine, and outputs payout information to the matching machine via the communication circuit. ,
The game machine monitoring system, wherein the verification machine includes a circuit for comparing input payout information and a display unit for displaying a comparison result.

Images