JP2012157660A - Management system, and managing device - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a management system and a managing device for precisely detecting a change of an integrated circuit in a shipping stage.SOLUTION: The management system 1 includes: a first output device for outputting identification information of an integrated circuit that an integrated circuit manufacturer writes to the integrated circuit manufactured by the integrated circuit manufacturer; a second output device for outputting device information of a game device including the identification information of the integrated circuit used for the game device; and the managing device including an acquisition tool member of acquiring the identification information of the integrated circuit outputted from the first output device and the device information outputted from the second output device, and a collator of collating the identification information of the integrated circuit with the identification information of the integrated circuit included in the device information acquired by the acquisition tool member.

Description

  The present invention relates to a management system and a management device for managing a gaming device and an integrated circuit used in the gaming device.

  Examples of the gaming device include gaming machines such as pachinko machines, pachislot machines, card game machines, and peripheral devices (card units, etc.) installed and used together with the gaming machines. Such a gaming apparatus is equipped with an integrated circuit such as an IC chip for controlling the operation of the gaming apparatus.

  Here, the integrated circuit of the gaming device may be replaced with, for example, an integrated circuit (unauthorized integrated circuit) that causes the gaming device to perform an illegal operation.

  As a countermeasure against the replacement of the integrated circuit as described above, Patent Document 1 discloses that the card unit stores the chip ID stored in the main board of the pachinko machine from the corresponding pachinko machine via the existing display data signal line. The acquired chip ID is transmitted to the center management apparatus via the on-site management apparatus, and the center management apparatus transmits a normal chip ID in which the chip ID transmitted from the card unit is stored in advance. A technique for verifying whether or not they match is disclosed. The regular chip ID is supplied from a gaming machine manufacturer that manufactures pachinko machines.

  In such a technique, it is possible to detect that the main control board has been replaced, that is, that an integrated circuit such as an IC chip has been replaced, by checking the chip ID.

JP 2010-162425 A

  Incidentally, in general, the integrated circuit and the gaming device are manufactured by different manufacturers. Specifically, an integrated circuit manufacturer manufactures an integrated circuit and ships it to a gaming device manufacturer. The gaming device manufacturer mounts the integrated circuit shipped from the integrated circuit manufacturer on the board of the gaming device, and manufactures the gaming device.

  In consideration of the above-mentioned facts, while the integrated circuit manufacturer is shipped to the gaming device manufacturer (hereinafter referred to as the shipping stage), the integrated circuit is replaced, and the illegal integrated circuit is used for gaming by the gaming device manufacturer. There is also the possibility of being mounted on the device.

  Here, in the technology of Patent Document 1, since a regular chip ID is supplied from a gaming machine manufacturer, if the integrated circuit shipped to the gaming machine manufacturer is an illegal one that has been replaced in the first place, May be supplied as a regular chip ID. For this reason, it has been difficult for the technique of Patent Document 1 to detect the replacement of the integrated circuit at the shipping stage.

  The present invention has been made based on such a background, and an object of the present invention is to provide a management system and a management apparatus that can detect replacement of an integrated circuit at the shipment stage.

(1) In order to achieve the above object, the management system of the present invention provides:
The integrated circuit manufactured by the integrated circuit manufacturer manufactured by an integrated circuit manufacturer (for example, the chip control unit 100) and an integrated circuit manufacturer (for example, the card unit manufacturer 600) manufactured by the gaming device manufacturer (for example, the card unit manufacturer 600). A management system for managing a gaming device (for example, card unit 20) equipped with a circuit,
A first output device that outputs identification information (for example, communication control serial ID) of the integrated circuit written by the integrated circuit manufacturer to the integrated circuit manufactured by the integrated circuit manufacturer (for example, communication control serial in step B2). A chip maker computer 110) for transmitting the ID;
Device information of the gaming device manufactured by the gaming device maker, including the identification information of the integrated circuit used in the gaming device (for example, communication control serial A second output device (for example, an IC writer 610 for transmitting the shipment information in step B12) that outputs the shipment information including the ID);
Acquisition means for acquiring the identification information of the integrated circuit output from the first output device and the device information output from the second output device (for example, receiving a communication control serial ID after step B2) The control unit 311) that receives the shipping information after step B15, and the collating unit that collates the integrated circuit identification information acquired by the acquiring unit with the integrated circuit identification information included in the device information. (For example, the control unit 311 for collating both communication control serial IDs in step B16), and a management device (for example, the key management center server 310),
Is provided.

  According to the configuration, the identification information written by the integrated circuit manufacturer and the identification information included in the device information of the gaming device manufactured by the gaming device manufacturer are collated by the collating means of the management device. If the integrated circuit is replaced with an illegal integrated circuit at the time of shipment of the integrated circuit, the identification information to be collated does not become the identification information for the same integrated circuit. The result is that it is not circuit identification information. On the other hand, when there is no replacement, the collation result is that both pieces of identification information are identification information of the same integrated circuit. In this way, since the presence / absence of replacement of the integrated circuit can be known by the verification, the management system having the verification means can detect the replacement at the shipping stage of the integrated circuit.

(2) Moreover, in order to achieve the said objective, the management apparatus which concerns on this invention is a management apparatus in the management system of said (1), for example,
The integrated circuit manufactured by the integrated circuit manufacturer manufactured by an integrated circuit manufacturer (for example, the chip control unit 100) and an integrated circuit manufacturer (for example, the card unit manufacturer 600) manufactured by the gaming device manufacturer (for example, the card unit manufacturer 600). A management device (for example, key management center server 310) for managing a gaming device (for example, card unit 20) equipped with a circuit,
Identification information (for example, communication control serial ID) of the integrated circuit written by the integrated circuit manufacturer in the integrated circuit manufactured by the integrated circuit manufacturer, and the device of the gaming device manufactured by the gaming device manufacturer Information (for example, shipping information including a communication control serial ID) of the gaming device including the identification information of the integrated circuit used in the gaming device (for example, shipping information) Included in the integrated circuit identification information and the device information acquired by the acquisition means, the control unit 311) which receives the communication control serial ID after step B2 and receives the shipping information after step B15. Collating means for collating the identification information of the integrated circuit (for example, the control unit 311 for collating both communication control serial IDs in step B16) ,
Is provided.

  According to the configuration, as in the case of (1), since the presence or absence of replacement of the integrated circuit can be known by the collation, the replacement at the shipping stage of the integrated circuit can be detected.

(3) In the management system of (1), for example,
If the identification information in the verification by the verification means is the identification information of the same integrated circuit, the management device uses the device information including the identification information for authentication information (for example, provisional information). As information, a recording unit (for example, a control unit 311 that stores shipping information as temporary information in step B17) for recording in a storage unit (for example, storage unit 312) is provided.

  According to such a configuration, when the identification information is the identification information of the same integrated circuit by collation, the device information including the identification information is recorded. Is recorded in the storage unit as authentication information used for authentication. For this reason, authentication using unauthorized identification information is prevented, and accuracy of detection of replacement of an integrated circuit is ensured.

(4) In the management system of (3), for example,
The device information includes identification information (for example, unit serial ID) of the gaming device.

  As a result, if this device information is recorded as authentication information, the relationship between the integrated circuit and the gaming device is also known from this authentication information, and the regular integrated circuit is mounted on the regular gaming device in later authentication. You can also confirm that

(5) In the management system of either (3) or (4), for example,
The gaming device manufactured by the gaming device manufacturer is installed in a game hall (for example, a game hall 500),
The device information (for example, unit serial ID) is recorded in the integrated circuit of the gaming device in the manufacturing process of the gaming device (for example, writing in step B11),
The management device acquires the device information recorded in the integrated circuit of the gaming device installed in the game hall (for example, the control unit 311 that receives a unit serial ID after step D2) and acquires the device information. A second collation unit for collating the device information with the device information recorded in the storage unit (for example, a control unit 311 for retrieving temporary information using the unit serial ID as a key after step D2); Prepare.

  According to such a configuration, since the device information is stored in the integrated circuit, it is possible to integrate the gaming devices installed in the game hall by collating the device information (an example of authentication of the integrated circuit). It is possible to detect whether the circuit is legitimate, that is, the replacement of the integrated circuit of the gaming apparatus installed in the game arcade. If the integrated circuit is replaced, in the verification of the device information, the integrated circuit identification information included in the device information is not information of the same integrated circuit. Replacement of the integrated circuit for the gaming device is detected.

(6) In the management system of any one of (1), (3) to (5), for example,
The integrated circuit is a set of integrated circuits (for example, main control chip 13 and payout control chip 11 of Modification 2),
The device information output from the second output device includes, as the identification information, identification information of each of a set of integrated circuits determined at the stage of manufacturing the gaming device and mounted on the gaming device ( For example, see Modification 2.

  The integrated circuit of the gaming device may be used as a pair, but according to the above configuration, the identification information of the pair of integrated circuits is included in the device information output from the second output device. Thus, any integrated circuit can be combined in the manufacturing stage of the gaming apparatus, and each piece of identification information of the combined integrated circuit can be used as device information. Therefore, any integrated circuit can be combined and mounted on the gaming device without checking the combination at the manufacturing stage of the gaming device. Therefore, the complexity of the manufacturing operation of the gaming apparatus due to the confirmation of the combination is suppressed.

(7) Moreover, in order to achieve the said objective, the program which concerns on this invention is a program for functioning a computer as a management apparatus of (2), for example,
The integrated circuit manufactured by the integrated circuit manufacturer manufactured by an integrated circuit manufacturer (for example, the chip control unit 100) and an integrated circuit manufacturer (for example, the card unit manufacturer 600) manufactured by the gaming device manufacturer (for example, the card unit manufacturer 600). A gaming device (for example, card unit 20) equipped with a circuit, and a computer (for example, key management center server 310) for managing
Identification information (for example, communication control serial ID) of the integrated circuit written by the integrated circuit manufacturer in the integrated circuit manufactured by the integrated circuit manufacturer, and the device of the gaming device manufactured by the gaming device manufacturer Information (for example, shipping information including a communication control serial ID) of the gaming device including the identification information of the integrated circuit used in the gaming device (for example, shipping information) Included in the integrated circuit identification information and the device information acquired by the acquisition means, the control unit 311) which receives the communication control serial ID after step B2 and receives the shipping information after step B15. Collating means for collating the identification information of the integrated circuit (for example, the control unit 311 for storing the shipping information as temporary information in step B17);
To function as.

  According to the configuration, as in the case of (1), since the presence or absence of replacement of the integrated circuit can be known by the collation, the replacement at the shipping stage of the integrated circuit can be detected.

It is a figure which shows an example of the whole flow in embodiment of this invention. It is a block diagram which shows the structure of the card unit and pachinko machine in embodiment of this invention. It is a block diagram which shows the structure of the management system which concerns on embodiment of this invention. It is a block diagram which shows the structure of the key management center server which comprises the management system of FIG. It is a block diagram which shows the structure of the security center server which comprises the management system of FIG. It is a block diagram which shows the structure of the chip maker computer which comprises the management system of FIG. FIG. 4 is a block diagram showing a configuration of an IC writer used in a gaming machine manufacturer that constitutes the management system of FIG. 3. It is a block diagram which shows the structure of the game machine maker computer which comprises the management system of FIG. It is a block diagram which shows the structure of the IC writer used by the card unit maker which comprises the management system of FIG. It is a block diagram which shows the structure of the card unit maker computer which comprises the management system of FIG. It is a block diagram which shows the structure of the high-order server which comprises the management system of FIG. It is a figure which shows an example of the work flow for collating the integrated circuit mounted in a card unit in a manufacture stage. It is a figure which shows an example of the work flow for collating the integrated circuit mounted in a pachinko machine in a manufacture stage. It is a figure which shows an example of the operation | movement in the manufacture stage of the management system of FIG. It is a figure which shows an example of the operation | movement in the manufacture stage of the management system of FIG. It is a figure which shows an example of the operation | movement in the manufacture stage of the management system of FIG. It is a figure which shows an example of the operation | movement in the manufacture stage of the management system of FIG. It is a figure which shows an example of the operation | movement at the time of the operation confirmation of the management system of FIG. It is a figure which shows an example of the operation | movement in the installation stage of the management system of FIG. It is a figure which shows an example of the operation | movement in the installation stage of the management system of FIG. It is a figure which shows an example of the operation | movement in the installation stage of the management system of FIG. It is a figure which shows an example of the operation | movement in the installation stage of the management system of FIG. It is a figure which shows an example of the operation | movement in the operation stage (at the time of a high-order server online) of the management system of FIG. It is a figure which shows an example of the operation | movement in the operation stage (at the time of a high-order server online) of the management system of FIG. It is a figure which shows an example of the operation | movement in the operation stage (at the time of a high-order server offline) of the management system of FIG. It is a figure which shows an example of the operation | movement in the replacement | exchange stage of the pachinko machine of the management system of FIG. It is a figure which shows an example of the operation | movement in the replacement | exchange stage of the card unit of the management system of FIG.

  An embodiment of the present invention will be described in detail with reference to FIG.

(Embodiment)
(Outline of management system 1)
The management system 1 according to the present embodiment includes an integrated circuit (a payout control chip 11, a main control chip 13, a main control unit 21, and a later-described integrated circuit) that are respectively mounted on a gaming device (a pachinko machine 10 or a card unit 20). The communication control IC 23) is a system for authenticating and managing whether or not it is legitimate. Specifically, as shown in FIG. 1, the management system 1 includes a manufacturing stage of the pachinko machine 10 or the card unit 20, an installation stage or replacement stage of the pachinko machine 10 or the card unit 20, a pachinko machine 10 or a card unit. In each of the 20 operation stages, it is authenticated whether or not the integrated circuit mounted in the pachinko machine 10 or the card unit 20 is valid. Based on such authentication, the management system 1 detects an unauthorized replacement of the integrated circuit (or a control board on which the integrated circuit is mounted) (so-called replacement to the back ROM, etc.).

  The manufacturing stage is a stage from when each integrated circuit is manufactured until it is mounted on the pachinko machine 10 or the card unit 20 and shipped. The integrated circuit is mainly manufactured by an integrated circuit manufacturer (chip manufacturer 100) and shipped to the gaming machine manufacturer 200 and the card unit manufacturer 600. That is, the integrated circuit and the gaming device are manufactured by different manufacturers. The gaming machine manufacturer 200 and the card unit manufacturer 600 mount the integrated circuit shipped by the integrated circuit manufacturer (chip manufacturer 100) on the pachinko machine 10 and the card unit 20, and manufacture and ship them.

  The installation stage means that the pachinko machine 10 or the card unit 20 shipped from the gaming machine manufacturer 200 or the card unit manufacturer 600 is installed in the gaming hall 500 of the pachinko shop when the pachinko shop (amusement hall 500) is newly opened. It is a stage.

  The replacement stage is, for example, a stage in which the pachinko machine 10 or the card unit 20 in the game hall 500 is replaced when the pachinko machine 10 or the card unit 20 is rearranged in the already opened game hall 500.

  The operation stage is a stage in which the pachinko machine 10 and the card unit 20 are in operation when the game hall 500 is in operation (that is, a normal operation stage for allowing the user to play a game).

(Pachinko machine 10)
The pachinko machine 10 is arranged at a predetermined position for each model or the like on the game island in the pachinko parlor (amusement hall 500). In the present embodiment, the pachinko machine 10 is a so-called CR-type pachinko machine (in particular, a so-called sealed pachinko machine here). The user plays a game with the pachinko machine 10. The user plays a game by driving a pachinko ball, which is a game medium, into a game area of the pachinko machine 10 in a game played by the pachinko machine 10.

  The pachinko machine 10 is provided with a game nail, a winning opening, a display device, and the like, and includes a game board that forms the game area and a housing that houses the game board (not shown). As shown in FIG. 2, a payout control chip 11 and a main control chip 13 are provided. In the present embodiment, the payout control chip 11 and the main control chip 13 are configured as one package and are mounted on a substrate provided in the pachinko machine 10.

  The payout control chip 11 includes a processing unit 11a including a CPU (Central Processing Unit), a storage unit 11b including a ROM (Read Only Memory) and a RAM (Random Access Memory), and a communication unit 11c including an input / output port. And comprising.

  The storage unit 11b stores predetermined information in addition to the program. The communication unit 11c is used when the processing unit 11a communicates with the outside of the payout control chip 11. The processing unit 11a performs a predetermined process according to the program stored in the storage unit 11b. For example, the processing unit 11a exchanges information regarding the lending of pachinko balls with the card unit 20 (main control unit 21) via the communication unit 11c, thereby performing ball lending processing (visitor ball lending processing, member unit balls). (Loan processing and membership fraction lending processing). In addition, the processing unit 11a performs processing described later. Note that the processing unit 11a performs processing using information stored in the storage unit 11b or using information obtained by communicating with the communication control IC 23 or the main control chip 13 via the communication unit 11c. .

  The main control chip 13 includes a processing unit 13a including a CPU, a storage unit 13b including a ROM and a RAM, and a communication unit 13c including an input / output port.

  The storage unit 13b stores predetermined information in addition to the program. The communication unit 13c is used when the processing unit 13a communicates with the outside of the main control chip 13. The processing unit 13a performs predetermined processing according to the program stored in the storage unit 13b. For example, the processing unit 13a causes each unit of the pachinko machine 10 to perform an effect operation related to a game performed by the pachinko machine 10 (for example, opening / closing a winning opening of the game board and displaying an image on a display device). In addition, the processing unit 13a performs processing described later. The processing unit 13a performs processing using information stored in the storage unit 13b or using information obtained by communicating with the payout control chip 11 via the communication unit 13c.

(Card unit 20)
The card unit 20 is arranged corresponding to the pachinko machine 10 (here, adjacent to the left side of the pachinko machine 10). The card unit 20 performs ball lending management, card balance management, and the like. The card unit 20 includes various lamps such as a usable display lamp indicating whether or not the card is usable, a card insertion slot, a card reader / writer for reading a card inserted into the card insertion slot, and the like. As shown in FIG. 2, the main control unit 21 and a communication control IC 23 are provided. The main control unit 21 is mounted on the control board together with the communication control IC 23.

  The communication control IC 23 includes a processing unit 23a including a CPU, a storage unit 23b including a ROM and a RAM, and a communication unit 23c including an input / output port.

  The storage unit 23b stores predetermined information in addition to the program. The communication unit 23c is used when the processing unit 23a communicates with the outside of the communication control IC 23. The processing unit 23a performs a predetermined process according to the program stored in the storage unit 23b. For example, the processing unit 23a relays communication between the main control unit 21 and the payout control chip 11 and performs processing described later. The processing unit 23a uses the information stored in the storage unit 23b, or uses information obtained by communicating with the main control unit 21 and the payout control chip 11 via the communication unit 23c. Do.

  The main control unit 21 includes a processing unit 21a including a CPU, a storage unit 21b including a ROM and a RAM, and a communication unit 21c including an input / output port.

  The storage unit 21b stores predetermined information in addition to the program. The communication unit 21c is used when the processing unit 21a communicates with the outside of the main control unit 21. The processing unit 21a performs predetermined processing according to the program stored in the storage unit 21b. For example, the processing unit 21a exchanges information regarding the lending of pachinko balls with the pachinko machine 10 (payout control chip 11) through the communication unit 21c and the communication control IC 23, thereby performing the above-described ball operation. Perform lending processing. In addition, the processing unit 21a controls a card reader / writer and the like to read / write information from / to the card, turn on a lamp, etc., and perform a ball lending process to a host server 510 described later via the communication unit 21c. The obtained sales information or the like is transmitted, or processing described later related to authentication or the like is performed. Note that the processing unit 21a uses information stored in the storage unit 21b, or uses information obtained by communicating with the communication control IC 23, an upper server 510, which will be described later, or the like via the communication unit 21c. I do.

(Configuration of management system 1)

  As shown in FIG. 3, the management system 1 includes a key management center server 310, a security center server 410, a chip maker computer 110, an IC writer 210, a gaming machine maker computer 220, an IC writer 610, and a card unit maker. The computer 620, the high-order server 510, the card unit 20, and the pachinko machine 10 are provided. Each of the key management center server 310, the security center server 410, and the upper server 510 functions as an example of a management device that manages the integrated circuit.

  The key management center server 310, the security center server 410, the chip maker computer 110, the IC writer 210, the IC writer 610, the host server 510, the card unit 20, and the pachinko machine 10 are connected to a network N such as the Internet. These devices can communicate with each other as appropriate. In order to prevent leakage of information, each device may be connected to a dedicated line and communicate with an external device as appropriate.

  The IC writer 210 and the gaming machine manufacturer computer 220 are connected to be communicable with each other. The card unit manufacturer computer 620 and the IC writer 610 are connected so as to communicate with each other. The host server 510 and the card unit 20 (main control unit 21) are connected to be communicable with each other.

(Key management center server 310)
The key management center server 310 is, for example, a general server computer, and is installed outside the game hall 500 (outside the pachinko store) and managed by the key management center 300 (for example, operated by the card unit manufacturer 600). ing. As will be described later, the key management center server 310 performs authentication key management, authentication, and the like.

  As shown in FIG. 4, the key management center server 310 includes a storage unit 312, a control unit 311, an input / output unit 313, and a system bus 314 that connects the units to each other.

  The storage unit 312 includes a main storage unit 315 and an auxiliary storage unit 316. The main storage unit 315 includes a RAM and the like, and is used as a work area for a CPU to be described later. The auxiliary storage unit 316 includes a nonvolatile memory such as a ROM, a magnetic disk, and a semiconductor memory. The auxiliary storage unit 316 stores information, parameters, programs, and the like necessary for the control unit 311 to perform processing.

  The control unit 311 includes a CPU and the like. The control unit 311 operates according to a program stored in the auxiliary storage unit 316. Although described later in detail, the control unit 311 performs authentication key management, authentication, and the like.

  The input / output unit 313 has a serial interface connected to the network N or an analog interface for transmitting and receiving analog signals. The control unit 311 transmits / receives information to / from other devices via the input / output unit 313. The input / output unit 313 is controlled by the control unit 311 and includes a display unit that displays a predetermined screen, an input unit that receives an input operation from the user, and that supplies a signal corresponding to the received operation to the control unit 311. You may prepare.

(Security Center Server 410)
Returning to FIG. 3, the security center server 410 is, for example, a general server computer, and is installed outside the game hall 500 and operated by a security center 400 (for example, an organization established by the gaming machine manufacturer 200). ). The security center server 410 performs authentication and the like as will be described later.

  As shown in FIG. 5, the security center server 410 includes a storage unit 412, a control unit 411, an input / output unit 413, and a system bus 414 that interconnects the above units.

  The storage unit 412 includes a main storage unit 415 and an auxiliary storage unit 416. The main storage unit 415 includes a RAM and the like, and is used as a work area for a CPU described later. The auxiliary storage unit 416 includes a nonvolatile memory such as a ROM, a magnetic disk, and a semiconductor memory. The auxiliary storage unit 416 stores information, parameters, and programs necessary for the control unit 411 to perform processing.

  The control unit 411 includes a CPU and the like. The control unit 411 operates according to a program stored in the auxiliary storage unit 416. Although described in detail later, the control unit 411 performs authentication and the like.

  The input / output unit 413 has a serial interface connected to the network N or an analog interface for transmitting and receiving analog signals. The control unit 411 transmits / receives information to / from other devices via the input / output unit 413. The input / output unit 413 includes a display unit that is controlled by the control unit 411 to display a predetermined screen, an input unit that receives an input operation from the user, and that supplies a signal corresponding to the received operation to the control unit 411. You may prepare.

(Chip maker computer 110)
Returning to FIG. 3, the chip maker computer 110 is, for example, a general computer, installed outside the amusement hall 500, and managed by the chip maker 100. The chip manufacturer computer 110 transmits information, writes information, and the like.

  As shown in FIG. 6, the chip maker computer 110 includes a storage unit 112, a control unit 111, an input / output unit 113, and a system bus 114 that interconnects the above units.

  The storage unit 112 includes a main storage unit 115 and an auxiliary storage unit 116. The main storage unit 115 includes a RAM and the like, and is used as a work area for a CPU to be described later. The auxiliary storage unit 116 includes a nonvolatile memory such as a ROM, a magnetic disk, and a semiconductor memory. The auxiliary storage unit 116 stores information, parameters, and programs necessary for the control unit 111 to perform processing.

  The control unit 111 includes a CPU and the like. The control unit 111 operates by operating according to a program stored in the auxiliary storage unit 116. Although described in detail later, the control unit 111 performs transmission of information, writing of information, and the like.

  The input / output unit 113 has a serial interface connected to the network N or an analog interface for transmitting and receiving analog signals. The control unit 111 transmits / receives information to / from other devices via the input / output unit 113. The input / output unit 113 includes a display unit that is controlled by the control unit 111 to display a predetermined screen, an input unit that receives an input operation from the user, and that supplies a signal corresponding to the received operation to the control unit 111. You may prepare.

  The input / output unit 113 includes a predetermined input unit such as a keyboard and a mouse and an output unit such as a monitor for displaying the input information, and various types of information are input / output. Various information is input to and output from the control unit 111 via the input / output unit 113.

(IC writer 210)
Returning to FIG. 3, the IC writer 210 is, for example, a reader / writer that reads / writes information. The IC writer 210 is shipped from the chip maker 100 and is delivered and installed in the gaming machine maker 200 outside the game hall 500. The IC writer 210 writes programs and various information.

  As shown in FIG. 7, the IC writer 210 includes a storage unit 212, a control unit 211, an input / output unit 213, a writing / reading unit 215, and a system bus 214 that interconnects the above units. .

  The storage unit 212 includes a main storage unit 205 and an auxiliary storage unit 207. The main storage unit 205 includes a RAM and the like, and is used as a work area for a CPU described later. The auxiliary storage unit 207 includes a nonvolatile memory such as a ROM, a magnetic disk, and a semiconductor memory. The auxiliary storage unit 207 stores information, parameters, and programs (including programs to be written) necessary for the control unit 211 to perform processing.

  The control unit 211 includes a CPU and the like. The control unit 211 operates according to a program stored in the auxiliary storage unit 207. As will be described in detail later, the control unit 211 writes a program and various information.

  The input / output unit 213 has a serial interface connected to the network N or an analog interface for transmitting and receiving analog signals. The input / output unit 213 has a serial interface connected to the gaming machine manufacturer computer 220 or an analog interface for transmitting and receiving analog signals. The control unit 211 transmits / receives information to / from other devices via the input / output unit 213. The input / output unit 213 includes a display unit that is controlled by the control unit 211 to display a predetermined screen, an input unit that receives an input operation from a user, and that supplies a signal corresponding to the received operation to the control unit 211. You may prepare.

  The writing / reading unit 215 reads / writes information between the main control chip 13 and the payout control chip 11. The writing / reading unit 215 writes programs and various information under the control of the control unit 211.

(Game machine manufacturer computer 220)
Returning to FIG. 3, the gaming machine manufacturer computer 220 is, for example, a general computer, and is installed outside the game hall 500 and managed by the gaming machine manufacturer 200. The gaming machine manufacturer computer 220 outputs predetermined information.

  As shown in FIG. 8, the gaming machine manufacturer computer 220 includes a storage unit 222, a control unit 221, an input / output unit 223, and a system bus 224 that connects the above units to each other.

  The storage unit 222 includes a main storage unit 225 and an auxiliary storage unit 226. The main storage unit 225 includes a RAM and the like, and is used as a work area for a CPU described later. The auxiliary storage unit 226 includes a nonvolatile memory such as a ROM, a magnetic disk, and a semiconductor memory. The auxiliary storage unit 226 stores information, parameters, and programs necessary for the control unit 221 to perform processing.

  The control unit 221 includes a CPU and the like. The control unit 221 operates according to a program stored in the auxiliary storage unit 226. Although described later in detail, the control unit 221 outputs information and the like.

  The input / output unit 223 has a serial interface connected to the network N or an analog interface for transmitting and receiving analog signals. The input / output unit 223 has a serial interface connected to the IC writer 210 or an analog interface for transmitting and receiving analog signals. The control unit 221 transmits / receives information to / from other devices via the input / output unit 223. The input / output unit 223 has a predetermined input unit such as a keyboard or a mouse. The input / output unit 223 receives input from the user and supplies the received input instruction to the control unit 221. Further, the input / output unit 223 may include a display unit that is controlled by the control unit 221 to display a predetermined screen.

(IC writer 610)
Returning to FIG. 3, the IC writer 610 is, for example, a reader / writer that reads / writes information. The IC writer 610 is shipped from the chip maker 100 and is delivered and installed in the card unit maker 600 outside the game hall 500. The IC writer 610 writes programs and various information.

  As shown in FIG. 9, the IC writer 610 includes a storage unit 612, a control unit 611, an input / output unit 613, a writing / reading unit 615, and a system bus 614 that interconnects the above-described units. .

  The storage unit 612 includes a main storage unit 605 and an auxiliary storage unit 606. The main storage unit 605 includes a RAM and the like, and is used as a work area for a CPU described later. The auxiliary storage unit 606 includes a nonvolatile memory such as a ROM, a magnetic disk, and a semiconductor memory. The auxiliary storage unit 606 stores information, parameters, and programs (including programs to be written) necessary for the control unit 611 to perform processing.

  The control unit 611 includes a CPU and the like. The control unit 611 operates according to a program stored in the auxiliary storage unit 606. As will be described in detail later, the control unit 611 writes programs and various information.

  The input / output unit 613 has a serial interface connected to the network N or an analog interface for transmitting and receiving analog signals. The input / output unit 613 has a serial interface connected to the card unit manufacturer computer 620 or an analog interface for transmitting and receiving analog signals. The control unit 611 transmits / receives information to / from other devices via the input / output unit 613. The input / output unit 613 includes a display unit that is controlled by the control unit 611 to display a predetermined screen, an input unit that receives an input operation from the user, and that supplies a signal corresponding to the received operation to the control unit 611. You may prepare.

  The writing / reading unit 615 reads / writes information with the communication control IC 23. The writing / reading unit 615 writes programs and various information under the control of the control unit 611.

(Card unit manufacturer computer 620)
Returning to FIG. 3, the card unit manufacturer computer 620 is, for example, a general computer, is installed outside the amusement hall 500, and is managed by the card unit manufacturer 600. The card unit manufacturer computer 620 outputs predetermined information.

  As shown in FIG. 10, the card unit manufacturer computer 620 includes a storage unit 622, a control unit 621, an input / output unit 623, and a system bus 624 that connects the above units to each other.

  The storage unit 622 includes a main storage unit 625 and an auxiliary storage unit 626. The main storage unit 625 is configured to include a RAM and the like, and is used as a work area of a CPU described later. The auxiliary storage unit 626 includes a nonvolatile memory such as a ROM, a magnetic disk, and a semiconductor memory. The auxiliary storage unit 626 stores information, parameters, and programs necessary for the control unit 621 to perform processing.

  The control unit 621 includes a CPU and the like. The control unit 621 operates according to a program stored in the auxiliary storage unit 626. Although described in detail later, the control unit 621 outputs information and the like.

  The input / output unit 623 has a serial interface connected to the network N or an analog interface for transmitting and receiving analog signals. The input / output unit 623 has a serial interface connected to the IC writer 610 or an analog interface for transmitting and receiving analog signals. The control unit 621 transmits and receives information to and from other devices via the input / output unit 623. The input / output unit 623 includes a display unit that is controlled by the control unit 621 to display a predetermined screen, an input unit that receives an input operation from the user, and that supplies a signal corresponding to the received operation to the control unit 621. You may prepare.

  The input / output unit 623 includes a predetermined input unit such as a keyboard and a mouse. The input / output unit 623 receives input from the user and supplies the received input instruction to the control unit 621. The input / output unit 623 is also connected to the main control unit 21. The control unit 621 also communicates with the main control unit 21 via the input / output unit 623.

(Higher server)
Returning to FIG. 3, the upper server 510 is, for example, a general computer, and is installed in a predetermined location (for example, a management office) of the pachinko parlor (amusement hall 500). It is an on-site management device that manages each of the card unit 20 and the plurality of pachinko machines 10. The host server 510 is connected to the key management center server 310 and a plurality of card units 20 installed in the game hall 500 so that they can communicate with each other. The host server 510 controls, for example, the card unit 20 in addition to counting sales information and the like transmitted from each card unit 20. The host server 510 is installed, for example, for each pachinko parlor (for each game hall 500). The host server 510 performs other processing related to authentication.

  As shown in FIG. 11, the upper server 510 includes a storage unit 512, a control unit 511, an input / output unit 513, and a system bus 514 that connects the above units to each other.

  The storage unit 512 includes a main storage unit 515 and an auxiliary storage unit 516. The main storage unit 515 includes a RAM and the like, and is used as a work area for a CPU to be described later. The auxiliary storage unit 516 includes a nonvolatile memory such as a ROM, a magnetic disk, and a semiconductor memory. The auxiliary storage unit 516 stores information, parameters, and programs necessary for the control unit 511 to perform processing.

  The control unit 511 includes a CPU and the like. The control unit 511 operates according to a program stored in the auxiliary storage unit 516. Although described in detail later, the control unit 511 performs processing related to authentication.

  The input / output unit 513 has a serial interface connected to the network N or an analog interface for transmitting and receiving analog signals. The input / output unit 513 has a serial interface connected to each card unit 20 (main control unit 21) or an analog interface for transmitting and receiving analog signals. The control unit 511 transmits / receives information to / from other devices via the input / output unit 513 and the network N (or connection line). The input / output unit 513 includes a display unit that is controlled by the control unit 511 to display a predetermined screen, an input unit that receives an input operation from a user, and that supplies a signal corresponding to the received operation to the control unit 511. You may prepare.

  The above is the configuration of the management system 1 according to the present embodiment.

  Next, the operation of the management system 1 will be described with reference to the drawings for each of the manufacturing stage, the installation stage, the operation stage, the pachinko machine 10 replacement stage, and the card unit 20 replacement stage. It should be noted that an algorithm used for encryption communication performed using encryption and decryption keys such as a delivery key, a write key, a temporary authentication key, a main authentication key, and a session key described later is arbitrary. For example, a common key encryption method such as a DES (Data Encryption Standard) method or an AES (Advanced Encryption Standard) method is used.

(Manufacturing stage)
First, in order to facilitate understanding of the manufacturing stage, an outline of the manufacturing stage will be described.

  As shown in FIG. 12, the communication control IC 23 mounted on the card unit 20 is manufactured by the chip manufacturer 100, and IC information is written in the manufactured communication control IC 23 (step S101).

  The chip manufacturer 100 ships the communication control IC 23 in which the IC information is written to the card unit manufacturer 600 (step S102).

  The chip manufacturer 100 registers the IC information (information for identifying the communication control IC 23) written in the communication control IC 23 in the key management center 300 (step S103).

  Then, the card unit manufacturer 600 further writes unit information and the like in the shipped communication control IC 23, and manufactures the card unit 20 on which the written communication control IC 23 is mounted (step S104).

  The card unit maker 600 ships the manufactured card unit 20 to a pachinko parlor (game room 500), which is a shipping destination (step S105).

  Further, the card unit manufacturer 600 sends the IC information of the communication control IC 23 mounted on the manufactured card unit 20, the unit information of the card unit 20 (information for identifying the card unit 20), and the like as shipment information. Is registered in the key management center 300 (step S106).

  The key management center 300 collates the IC information included in the shipping information registered by the card unit manufacturer 600 with the IC information registered by the chip manufacturer 100, and when both are identification information for identifying the same communication control IC 23 (for example, If both IC information is the same information), it is determined that the communication control IC 23 is valid, and the shipping information registered by the card unit manufacturer 600 is registered as temporary information for later authentication. (Step S107).

  The above-described IC information is information including a communication control serial ID, which will be described later, and a manufacturer code. The unit information described above is information including a unit serial ID described later.

  On the other hand, the main control chip 13 and the payout control chip 11 mounted on the pachinko machine 10 are manufactured by the chip manufacturer 100 as shown in FIG. Chip information is written (step S201).

  The chip manufacturer 100 ships the main control chip 13 and the payout control chip 11 in which the chip information is written to the gaming machine manufacturer 200 (step S202).

  The chip manufacturer 100 registers the chip information (information for identifying the main control chip 13 and the payout control chip 11) written in the main control chip 13 and the payout control chip 11 in the security center 400 (step S203).

  Then, the gaming machine manufacturer 200 further writes gaming machine information and the like on the shipped main control chip 13 and payout control chip 11, and manufactures the pachinko machine 10 on which the written main control chip 13 and payout control chip 11 are mounted. (Step S204).

  The gaming machine manufacturer 200 ships the manufactured pachinko machine 10 to a pachinko store (amusement hall 500), which is a shipping destination (step S205).

  The gaming machine manufacturer 200 also provides chip information of the main control chip 13 and the payout control chip 11 mounted on the manufactured pachinko machine 10 and gaming machine information of the pachinko machine 10 (information for identifying the pachinko machine 10). Etc.) are registered in the security center 400 as shipping information (step S206).

  The security center 400 collates the chip information included in the shipping information registered by the gaming machine manufacturer 200 with the chip information registered by the chip manufacturer 100 (step S207), and both identify the same main control chip 13 and payout control chip 11 (For example, when both chip information is the same information), it is determined that the main control chip 13 and the payout control chip 11 are valid and registered from the gaming machine manufacturer 200. The shipped information is registered in the key management center 300 for verification in the installation stage and the replacement stage of the pachinko machine 10 (step S208).

  The above-described chip information is information including a chip ID and a manufacturer code of the main control chip 13 to be described later, and a chip ID and a manufacturer code of the payout control chip 11. The above gaming machine information is information including the model code of the main control chip 13 and the model code of the payout control chip 11.

(Manufacturing stage of pachinko machine 10)
Next, details of the operation and the like of the management system 1 in the manufacturing stage of the pachinko machine 10 will be described with reference to FIGS. 14 and 15. 14 and 15, information surrounded by a solid line indicates information stored before, and information surrounded by a broken line indicates information stored during processing. Further, in the collation described below, for example, when both pieces of information indicate the same content (for example, they are identified as the same) because both pieces of information to be collated are the same information, the collation is performed. If the result is collation OK and the same information is not identified because the information to be collated is not the same information, the collation result is NG.

  The auxiliary storage unit 116 of the chip maker computer 110 has a chip ID of the main control chip 13 (chip ID (main control chip in the figure)) and a maker code of the main control chip 13 (manufacturer code (main control in the figure)). Chip)), a chip ID of the payout control chip 11 (chip ID (payout control chip) in the figure), a manufacturer code of the payout control chip 11 (manufacturer code (payout control chip) in the figure), a delivery key, The communication address (not shown) of the IC writer 210 is stored. These pieces of information are stored in the auxiliary storage unit 116, for example, when the user operates the chip maker computer 110.

  The chip ID of the payout control chip 11 is identification information for uniquely identifying the payout control chip 11, and is composed of, for example, a combination of alphanumeric characters unique to each payout control chip 11.

  The manufacturer code of the payout control chip 11 is identification information for uniquely identifying the gaming machine manufacturer 200 to which the payout control chip 11 is shipped, and is unique for each gaming machine manufacturer 200, for example, a combination of alphanumeric characters. .

  The chip ID of the main control chip 13 is identification information for uniquely identifying the main control chip 13, and is composed of, for example, a combination of alphanumeric characters unique to each main control chip 13.

  The manufacturer code of the main control chip 13 is identification information for uniquely identifying the gaming machine manufacturer 200 to which the main control chip 13 is shipped, and is unique for each gaming machine manufacturer 200, for example, a combination of alphanumeric characters. .

  The delivery key is used for encrypted communication and serves as a key for encryption and decryption.

  The communication address of the IC writer 210 is an address for specifying a communication partner during communication.

  The chip ID and the manufacturer code of the main control chip 13 are associated with each other, and the chip ID and the manufacturer code of the payout control chip 11 are associated with each other and stored in the auxiliary storage unit 116. That is, each manufacturer code identifies the gaming machine manufacturer 200 to which the main control chip 13 and the payout control chip 11 identified by each chip ID are shipped. Further, these information and the delivery key are stored in the auxiliary storage unit 116 in association with each IC writer 210. Each of these pieces of associated information (hereinafter referred to as first authentication information) is, for example, for each communication address of the IC writer 210, that is, for each shipping destination of the payout control chip 11 and the main control chip 13. It is tabulated. Since the payout control chip 11 and the main control chip 13 are normally mass-produced, the first authentication information includes a plurality of chip IDs. Here, a manufacturer code is associated with each of the plurality of chip IDs and stored in the auxiliary storage unit 116. Further, since the IC writer 210 is also manufactured for each manufacturer, for example, there are a plurality of pieces of first authentication information. In the following description, it is assumed that the chip ID and the manufacturer code are associated with each other as appropriate.

  Further, in the auxiliary storage unit 226 of the gaming machine manufacturer computer 220, the type code of the payout control chip 11, the type code of the main control chip 13, the game hall information for identifying the game hall 500, and the main control chip 13 (not shown). And programs for operating the payout control chip 11, data, and the like are stored. These are stored in the auxiliary storage unit 226 when the user operates the gaming machine manufacturer computer 220 or the like.

  The model code of the payout control chip 11 (in the drawing, the model code (payout control chip)) is identification information for uniquely identifying the pachinko machine 10 on which the payout control chip 11 is mounted, and is unique for each pachinko machine 10. For example, it consists of a combination of alphanumeric characters.

  The model code of the main control chip 13 (in the figure, the model code (main control chip)) is identification information for uniquely identifying the pachinko machine 10 on which the main control chip 13 is mounted, and is unique for each pachinko machine 10. For example, it consists of a combination of alphanumeric characters.

  In the present embodiment, the payout control chip 11 and the main control chip 13 are packaged into one and mounted on the pachinko machine 10, so that these model codes have the same contents.

  The game hall information is information for identifying a pachinko parlor (game room 500) to which the pachinko machine 10 equipped with the payout control chip 11 and the main control chip 13 is shipped.

  As shown in FIG. 14, the chip maker 100 manufactures an IC writer 210 and ships it to the gaming machine maker 200 (step A1). The auxiliary storage unit 207 of the IC writer 210 stores a manufacturer code, a delivery key, and the like stored in the auxiliary storage unit 116 of the chip maker computer 110, and also stores a write key, a communication address (not shown), and the like. The manufacturer code or the like naturally corresponds to the first authentication information, and the manufacturer code is information for identifying the gaming machine manufacturer 200 to which the IC writer 210 is shipped. The manufacturer codes of the payout control chip 11 and the main control chip 13 are common.

  Note that the write key is used for encrypted communication and serves as a key for encryption and decryption.

  On the other hand, the control unit 111 of the chip manufacturer computer 110 acquires the first authentication information, which is stored in the auxiliary storage unit 116 and is tabulated for each communication address of the IC writer 210, together with the communication address. And transmitted to the security center server 410 (step A2). When the control unit 411 of the security center server 410 receives the first authentication information and the communication address from the chip maker computer 110, the control unit 411 stores the first authentication information in the auxiliary storage unit 416 using the received communication address as a key. Store.

  Further, the chip manufacturer 100 manufactures the main control chip 13 and the payout control chip 11 and ships them to the gaming machine manufacturer 200 (step A3).

  In the storage unit 13b of the main control chip 13, a chip ID for identifying itself (an ID having the same contents as the chip ID included in the first authentication information) and a manufacturer that is the shipping destination of the main control chip 13 are stored. A manufacturer code to be identified (a code having the same content as the manufacturer code included in the first authentication information) is stored.

  In the storage unit 11 b of the payout control chip 11, a chip ID for identifying itself (an ID having the same contents as the chip ID included in the first authentication information) and a manufacturer that is the shipping destination of the payout control chip 11 are stored. A manufacturer code to be identified (a code having the same content as the manufacturer code included in the first authentication information) is stored.

  The storage unit 13 b of the main control chip 13 and the storage unit 11 b of the payout control chip 11 store the same write keys as those stored in the auxiliary storage unit 207 of the IC writer 210.

  Next, the control unit 221 of the gaming machine manufacturer computer 220 uses the program code for operating the main control chip 13 and the payout control chip 11, the type code of the main control chip 13, the type code of the payout control chip 11, and the game hall information. The control unit 211 of the IC writer 210 transmits the model code of the main control chip 13, the model code of the payout control chip 11, and the game hall information transmitted from the gaming machine manufacturer computer 220 together with the data and the like. The program is stored in the auxiliary storage unit 207 together with programs and data for operating the main control chip 13 and the payout control chip 11 (step A4). These programs, data, and the like are recorded in the IC writer 210 for each game hall information and for each model code. In the processing described later, the model code of the main control chip 13 and the model code of the payout control chip 11 recorded in the IC writer 210 are the same information.

  Next, the control unit 211 of the IC writer 210 reads the manufacturer code of the main control chip 13 stored in the arbitrarily selected main control chip 13 among the main control chips 13 shipped from the chip manufacturer 100 to assist It collates with the manufacturer code of the main control chip 13 stored in the storage unit 207 (step A5).

  The reading is performed by the control unit 211 communicating with each other via the writing / reading unit 215 and the processing unit 21a communicating with each other via the communication unit 21c. Specifically, in this communication, the control unit 211 transmits a maker code transmission request to the processing unit 21a. When the processing unit 21a receives the transmission request, the control unit 211 stores the maker code stored in the storage unit 21b. 211. As a result, reading is performed. Note that the communication at this time is performed by encrypted communication using the write key stored in both as a key. Note that this reading is the same for reading other information and reading with the payout control chip 11, and the details are omitted in the following description.

  When the collation result is the collation OK, the control unit 211 reads the chip ID of the main control chip 13 from the main control chip 13 (step A6). In the case of verification OK, the main control chip 13 is a chip to which the IC writer 210 writes information, and is a legitimate one that has not been replaced before being delivered to the gaming machine manufacturer 200 or the like. . In this case, the control unit 211 performs the following processing.

  When the collation result is the collation OK, the control unit 211 stores the model code of the main control chip 13 stored in the auxiliary storage unit 207 together with the program, data, etc. for operating the main control chip 13 as described above. Write to the selected main control chip 13 (step A7).

  The writing is performed by the control unit 211 communicating with each other via the writing / reading unit 215 and the processing unit 21a communicating with each other via the communication unit 21c. Specifically, in this communication, the control unit 211 transmits a model code, a program, data, and the like together with a storage request to the processing unit 21a, and the processing unit 21a transmits the model code, a program, data, and the like, When the storage request is received, the received model code, program, data, and the like are stored in the storage unit 21b. As a result, writing is performed. Note that the communication at this time is performed by encrypted communication using the write key stored in both as a key. This writing is the same for writing other information and writing with the payout control chip 11, and the details are omitted in the following description.

  After writing and reading as described above, the control unit 211 of the IC writer 210 stores the chip ID, manufacturer code, and model code of the main control chip 13 in the auxiliary storage unit 207 in association with each other. As a result, information (chip ID, manufacturer code, and model code) regarding the arbitrarily selected main control chip 13 recorded in the IC writer 210 and the arbitrarily selected main control chip 13 are recorded. The information related to the main control chip 13 (chip ID, manufacturer code, and model code) corresponds.

  Note that if the collation result of the collation is collation NG, the control unit 211 stops the processing subsequent to step A6 via the input / output unit 213 and the like, and performs a predetermined notification process (for example, the input / output unit 213). Display to the display device included in the display device, display a buzzer included in the input / output unit 213, etc.). In the case of collation NG, since there is a high possibility that the main control chip 13 has been replaced, such processing is performed to notify the user that the replacement has been performed. In addition, since such a notification process is the same also when it becomes collation NG in subsequent collation, description is abbreviate | omitted.

  Next, the control unit 211 of the IC writer 210 reads the maker code of the payout control chip 11 stored in the arbitrarily selected payout control chip 11 among the payout control chips 11 shipped from the chip maker 100 to assist It collates with the manufacturer code of the payout control chip 11 stored in the storage unit 207 (step A8).

  When the collation result by the collation is the collation OK, the control unit 211 reads the chip ID of the payout control chip 11 from the payout control chip 11 (step A9). In the case of collation OK, the payout control chip 11 is a chip to which the IC writer 210 writes information and is a legitimate one that is not replaced before being delivered to the gaming machine manufacturer 200 or the like. In this case, the control unit 211 performs the following processing.

  When the collation result is the collation OK, the control unit 211 stores the model code of the payout control chip 11 stored in the auxiliary storage unit 207 together with the program, data, etc. for operating the payout control chip 11 as described above. Write to the selected payout control chip 11 (step A10).

  After writing and reading as described above, the control unit 211 of the IC writer 210 stores the chip ID, manufacturer code, and model code of the payout control chip 11 in the auxiliary storage unit 207 in association with each other. As a result, information (chip ID, manufacturer code, and model code) related to the arbitrarily selected dispensing control chip 11 recorded in the IC writer 210 and the arbitrarily selected dispensing control chip 11 are recorded. The information related to the payout control chip 11 (chip ID, manufacturer code, and model code) corresponds.

  Note that a series of processing such as writing and reading by the IC writer 210 as described above is performed by a plurality of main control chips 13 and a plurality of payout control chips 11 (a plurality of main IDs identified by the chip ID of the first authentication information). This is performed for the control chip 13 and the plurality of payout control chips 11). For this reason, the IC writer 210 records a plurality of pieces of information about the payout control chip 11 and information about the main control chip 13. Note that the manufacturer code and the model code of these information have the same contents.

  In addition, in the manufacturing process of the pachinko machine 10, the gaming machine manufacturer 200 mounts the main control chip 13 and the payout control chip 11 in which the above information is written on the control board of the pachinko machine 10 or the like. As a result, the main control chip 13 and the payout control chip 11 are mounted on the gaming machine 10. The main control chip 13 and the payout control chip 11 are naturally mounted on the pachinko machine 10 that is identified by the model code stored therein.

  Next, as shown in FIG. 15, the control unit 211 of the IC writer 210 stores information on the payout control chip 11, information on the main control chip 13, and game hall information (these information) stored in the auxiliary storage unit 207. Are collectively referred to as shipping information) and transmitted to the security server 410 together with its own communication address (step A11). The control unit 411 of the security server 410 acquires the delivery key of the first authentication information associated with the same communication address as the received communication address from the auxiliary storage unit 416 and receives it using the acquired delivery key. The shipping information is decrypted and stored in the auxiliary storage unit 416.

  The control unit 411 collates each chip ID and each manufacturer code included in the shipping information recorded in the auxiliary storage unit 416 with each chip ID and each manufacturer code included in the first authentication information (step) A12). That is, each corresponding information is collated.

  When the collation result for all information is collation OK, the control unit 411 indicates that the main control chip 13 or the payout control chip 11 is valid because there is no exchange of chips. Determine. In this case, the subsequent processing is continued.

  On the other hand, in cases other than the above, that is, when the collation result is collation NG for at least some information, the control unit 411 stops the subsequent processing and, for example, the IC writer 210 via the input / output unit 413. A notification request is transmitted. When the control unit 211 of the IC writer 210 receives such a notification request, the input / output unit 213 is used to perform the notification process as described above to notify the user that the replacement has been performed. In the case of collation NG, since there is a high possibility that the main control chip 13 has been replaced, such processing is performed to notify the user that the replacement has been performed.

  If it is determined in step A12 that the verification is OK, the control unit 411 transmits the shipping information stored in the auxiliary storage unit 416 to the key management center server 310 as registration information used for subsequent verification (chip authentication). (Step A13). When receiving the registration information, the control unit 311 of the key management center server 310 stores the received registration information in the auxiliary storage unit 316.

  The pachinko machine 10 manufactured as described above is shipped to a predetermined pachinko store (amusement hall 500 (amusement hall identified by the gaming hall information recorded in the IC writer 210)).

  According to the above processing, the chip ID, the manufacturer code, and the like are collated, so that the payout control chip 11 and the main control chip 13 can be replaced until these chips are manufactured and shipped, or in a pachinko machine. It is detected until the machine 10 is manufactured.

(Manufacturing stage of card unit 20)
Next, details of the operation and the like of the management system 1 in the manufacturing stage of the card unit 20 will be described with reference to FIGS. 16 and 17. In the same manner as described above, in FIGS. 16 and 17, information surrounded by a solid line indicates previously stored information, and information surrounded by a broken line indicates information stored during processing. Further, in the collation described below, for example, when both pieces of information indicate the same content (for example, they are identified as the same) because both pieces of information to be collated are the same information, the collation is performed. If the result is collation OK and the same information is not identified because the information to be collated is not the same information, the collation result is NG.

  The auxiliary storage unit 116 of the chip manufacturer computer 110 stores a communication control serial ID, a temporary authentication key, a key version, a writer ID, a manufacturer code, a delivery key, and a communication address of the IC writer 610 (not shown). ) Is stored.

  The communication control serial ID is identification information for uniquely identifying the communication control IC 23, and is formed of a combination of, for example, alphanumeric characters unique to each communication control IC 23.

  The temporary authentication key is used for encrypted communication and serves as a key for encryption and decryption.

  The key version is information representing the key version of the temporary authentication key (or a real authentication key described later).

  The writer ID is identification information for uniquely identifying the IC writer 610, and is composed of, for example, a combination of alphanumeric characters unique to each IC writer 610.

  The manufacturer code is identification information for uniquely identifying the card unit maker 600 to which the communication control IC 23 is shipped, and is made up of, for example, a combination of alphanumeric characters unique to each card unit maker 600.

  Similar to the above, the delivery key is used for encrypted communication, and serves as a key for encryption and decryption.

  The communication control serial ID of the communication control IC 23 and the manufacturer code are stored in the auxiliary storage unit 116 in association with each other. That is, the manufacturer code identifies the shipping card unit manufacturer 600 of the communication control IC 23 identified by the communication control serial ID. Further, these information and the delivery key are stored in the auxiliary storage unit 116 in association with each IC writer 610. Therefore, each piece of associated information (hereinafter referred to as second authentication information) is tabulated for each communication address of the IC writer 610, that is, for each shipping destination of the communication control IC 23, for example. ing. Since the communication control IC 23 is normally mass-produced, the second authentication information includes a plurality of communication control serial IDs. Here, a manufacturer code is associated with each of the plurality of communication control serial IDs and stored in the auxiliary storage unit 116. Further, since the IC writer 610 is manufactured for each manufacturer, for example, a plurality of pieces of second authentication information are also present. In the following description, it is assumed that the communication control serial ID and the manufacturer code are associated with each other as appropriate.

  The auxiliary storage unit 626 of the card unit manufacturer computer 620 stores a unit serial ID and a program or data (not shown) for operating the communication control IC 23 and the main control unit 21.

  The unit serial ID is identification information for uniquely identifying the card unit 20 and the main control unit 21, and is composed of, for example, a combination of alphanumeric characters unique to the card unit 20 and the main control unit 21.

  As shown in FIG. 16, the chip manufacturer 100 manufactures an IC writer 610 and ships it to the card unit manufacturer 600 (step B1). The auxiliary storage unit 606 of the IC writer 610 stores a key version, a writer ID, a manufacturer code, a delivery key, and the like that are stored in the auxiliary storage unit 116 of the chip maker computer 110, a writing key, a communication address (not shown), and the like. Is stored. Naturally, the manufacturer code is information for identifying the card unit manufacturer 600 to which the IC writer 610 is shipped.

  Note that the write key is used for encrypted communication, as described above, and serves as a key for encryption and decryption.

  The delivery key stored in the IC writer 210 and the delivery key stored in the IC writer 610 have different contents. The write key stored in the IC writer 210 and the write key stored in the IC writer 610 have different contents.

  On the other hand, the control unit 111 of the chip manufacturer computer 110 acquires the second authentication information, which is information tabulated for each communication address of the IC writer 610, from the auxiliary storage unit 116 together with the communication address, and inputs and outputs The data is transmitted to the key management center server 310 via the unit 113 and the network N (step B2). Upon receiving the second authentication information and the communication address, the control unit 311 of the key management center server 310 stores the second authentication information in the auxiliary storage unit 316 using the supplied communication address as a key. .

  Specifically, the control unit 311 uses the supplied communication address as a key, and among the second authentication information, the temporary authentication key, the key version, the writer ID, and the manufacturer code, and the IC writer information. Is stored in the auxiliary storage unit 316. Also, the control unit 311 stores the temporary authentication key and the communication control serial ID in the second authentication information as temporary information in the auxiliary storage unit 316 using the supplied communication address as a key. Note that the control unit 311 stores the delivery key included in the supplied second authentication information in the auxiliary storage unit 316 for encrypted communication with the IC writer 610.

  Furthermore, the chip manufacturer 100 manufactures the communication control IC 23 and ships it to the card unit manufacturer 600 (step B3).

  Next, the control unit 611 of the IC writer 610 encrypts the key version, the writer ID, and the manufacturer code stored in the auxiliary storage unit 606 with the delivery key, and transmits the encrypted key version to the key management center server 310. The control unit 311 of the key management center server 310 acquires the key version, writer ID, and manufacturer code transmitted from the IC writer 610 and decrypts them with the delivery key.

  The control unit 311 of the key management center server 310 obtains the acquired key version, writer ID, and manufacturer code, and the key version, writer ID, and manufacturer code stored as IC writer information in the auxiliary storage unit 316. , Respectively (step B5).

  When the collation result is collation NG in step B5, the control unit 311 of the key management center server 310 stores the temporary authentication key included in the IC writer information stored in the auxiliary storage unit 316 in the auxiliary storage unit 316. The encrypted delivery key is encrypted and transmitted to the IC writer 610. Upon receiving the temporary authentication key transmitted from the key management center server 310, the control unit 611 of the IC writer 610 decrypts the received temporary authentication key with the delivery key and stores it in the auxiliary storage unit 606 (step B6).

  Next, the control unit 621 of the card unit manufacturer computer 620 transmits the unit serial ID to the IC writer 610 and the main control unit 21 together with programs and data. The control unit 611 of the IC writer 610 stores the unit serial ID transmitted from the card unit manufacturer computer 620, the program and data for operating the communication control IC 23, and the like in the auxiliary storage unit 606, respectively. Further, the processing unit 21a of the main control unit 21 stores the unit serial ID transmitted from the card unit manufacturer computer 620, the program and data for operating the main control unit 21 in the storage unit 21b (step B7). .

  Subsequently, as shown in FIG. 17, the control unit 611 of the IC writer 610 performs communication control serial ID and manufacturer code stored in the communication control IC 23 arbitrarily selected from the communication control ICs 23 shipped from the chip manufacturer 100. And stores the communication control serial ID in the auxiliary storage unit 606 (step B8).

  The reading is performed by the control unit 611 communicating with each other through the writing / reading unit 615 and the processing unit 23a through the communication unit 23c. Specifically, in this communication, the control unit 611 transmits a transmission request for the communication control serial ID and the manufacturer code to the processing unit 23a. When the processing unit 23a receives this transmission request, the storage unit 23b stores the transmission request. The communication control serial ID and manufacturer code are transmitted to the control unit 611. As a result, reading is performed. Note that the communication at this time is performed by encrypted communication using the write key stored in both as a key. Since this reading is the same for reading other information, details are omitted in the following description.

  Next, the control unit 611 collates the manufacturer code read from the communication control IC 23 with the manufacturer code stored in the auxiliary storage unit 606 (step B9). If the collation result is OK, the control unit 611 uses the temporary authentication key, the key version, and the writer ID stored in the auxiliary storage unit 606, a program for operating the communication control IC 23, The data is written in the arbitrarily selected communication control IC 23 together with data and the like (step B10). In the case of verification OK, the communication control IC 23 is an IC to which the IC writer 610 writes information, and is a legitimate one that is not replaced before delivery to the card unit manufacturer 600 or the like. In this case, the control unit 611 performs the subsequent processing.

  The writing is performed by the control unit 611 communicating with each other via the writing / reading unit 615 and the processing unit 23a communicating with each other via the communication unit 23c. Specifically, in this communication, the control unit 611 transmits a temporary authentication key, a key version, a writer ID, a program, data, and the like together with a storage request to the processing unit 23a. Upon receipt of the authentication key, key version, writer ID, program, data, etc., and storage request, the received temporary authentication key, key version, writer ID, program, data, etc. are stored. Stored in the unit 23b. As a result, writing is performed. Note that the communication at this time is performed by encrypted communication using the write key stored in both as a key. Since this writing is the same for writing other information, details are omitted in the following description.

  Further, when the collation result is OK, the control unit 611 writes the unit serial ID stored in the auxiliary storage unit 606 into the arbitrarily selected communication control IC 23 (step B11).

  Next, the control unit 611 of the IC writer 610 gives a write instruction to instruct the main control unit 21 arbitrarily selected from the main control units 21 manufactured by the card unit manufacturer 600 to write information. (Step B12). Then, the processing unit 23a of the communication control IC 23 obtains the write instruction transmitted from the IC writer 610, and reads the unit serial ID from the arbitrarily selected main control unit 21 in response thereto.

  Next, the processing unit 23a of the communication control IC 23 collates the read unit serial ID with the unit serial ID stored in the storage unit 23b (step B13).

  When the collation result is the collation OK, the processing unit 23a is configured such that the arbitrarily selected main control unit 21 is a chip to which the communication control IC 23 writes information, and the card unit manufacturer 600 Since it is a legitimate one that has not been replaced before delivery, etc., the processing unit 23a performs the following processing.

  If the verification result is OK, the processing unit 23a arbitrarily selects the temporary authentication key, the key version, the writer ID, and the manufacturer code stored in the storage unit 23b. Writing to the main control unit 21 (step B14).

  After writing and reading as described above, the control unit 611 of the IC writer 610 associates the key version, writer ID, manufacturer code, communication control serial ID, and unit serial ID for the communication control IC 23 with auxiliary storage. Stored in the unit 606. Thereby, information (key version, writer ID, manufacturer code, communication control serial ID, and unit serial ID) related to the arbitrarily selected communication control IC 23 stored in the IC writer 610 and the arbitrarily selected The information (key version, writer ID, manufacturer code, communication control serial ID, and unit serial ID) related to the communication control IC 23 stored in the communication control IC 23 corresponds.

  In addition, when the collation result of the collation is collation NG, the control unit 611 stops the processing after step B10 and performs a predetermined notification process (for example, the input / output unit 613) via the input / output unit 613 or the like. Display to the display device included in the display device, display a buzzer included in the input / output unit 613, etc.). In the case of collation NG, since there is a high possibility that the communication control IC 23 has been replaced, such processing is performed to notify the user that the replacement has been performed. In addition, since such processing is the same also in the case of collation NG in subsequent collation, description is abbreviate | omitted.

  Note that a series of processing such as writing and reading by the IC writer 610 as described above is performed on a plurality of communication control ICs 23 (a plurality of communication control ICs 23 identified by the communication control serial ID of the second authentication information). Done. Therefore, a plurality of pieces of information related to the communication control IC 23 are recorded in the IC writer 610. The plurality of temporary authentication keys, the key version, the writer ID, and the manufacturer code have the same contents.

  Next, the control unit 611 of the IC writer 610 stores a key version, a writer ID, a manufacturer code, a communication control serial ID, and a unit serial ID stored in the auxiliary storage unit 606. Is transmitted to the key management center server 310 together with its own communication address (step B15). The control unit 311 of the key management center server 310 acquires a delivery key associated with the same communication address as the received communication address from the auxiliary storage unit 316, and decrypts the received shipping information using the acquired delivery key. And stored in the auxiliary storage unit 316.

  The control unit 311 collates the communication control serial ID included in the shipping information stored in the auxiliary storage unit 316 with the communication control serial ID included in the temporary information (step B16).

  The control unit 311 determines that the communication control IC 23 is legitimate because the communication control IC 23 has not been exchanged or the like if the collation result for each information is collation OK. To do. In this case, the subsequent processing is continued.

  On the other hand, in cases other than the above, that is, in the case of the collation result NG, the control unit 311 stops the subsequent processing and transmits a notification request to the IC writer 610 via the input / output unit 313, for example. When receiving the notification request, the control unit 611 of the IC writer 610 performs the notification processing as described above using the input / output unit 613 to notify the user that the replacement has been performed. In the case of collation NG, since there is a high possibility that the communication control IC 23 has been replaced, such notification processing is performed to notify the user that the replacement has been performed.

  If the control unit 311 determines that the verification is OK in step B16, the shipping information stored in the auxiliary storage unit 316 is stored in the auxiliary storage unit 316 as temporary information used for subsequent verification (verification of the communication control IC 23). The provisional information being updated is updated (step B17).

  The unit serial ID, the communication control serial ID, the key version, the writer ID, the manufacturer code, and the temporary authentication key stored in the storage unit 23b of the communication control IC 23 by the above processing are stored as the first information in the storage unit 23b. The unit serial ID, key version, writer ID, maker code, and temporary authentication key stored in the storage area and stored in the storage section 21b of the main control section 21 are also stored in the first storage area of the storage section 21b as temporary information. Shall be stored.

  According to the above processing, the communication control IC 23 and the main control unit 21 are replaced by checking the communication control serial ID, the manufacturer code, and the like until the communication control IC 23 is manufactured and shipped. , Until the card unit 20 is manufactured.

(When checking operation)
Next, before the manufacturing stage is completed and the process proceeds to the installation stage, an operation check is performed to check whether or not communication between the main control unit 21 mounted on the card unit 20 and the communication control IC 23 is normally performed. The process in the case of performing will be described with reference to FIG. This operation check is performed by the card unit manufacturer 600. Further, in the collation described below, for example, when both pieces of information indicate the same content (for example, they are identified as the same) because both pieces of information to be collated are the same information, the collation is performed. If the result is collation OK and the same information is not identified because the information to be collated is not the same information, the collation result is NG.

  For example, when an operation confirmation card is inserted into the card unit 20, the main control unit 21 detects this and starts operation. Then, the processing unit 21a of the main control unit 21 starts communication with the processing unit 23a of the communication control IC 23.

  Through this communication, the processing unit 21a requests the processing unit 23a to transmit the unit serial ID. When receiving the request, the processing unit 23a transmits the unit serial ID included in the temporary information stored in the storage unit 23b to the processing unit 21a. The processing unit 21a receives the transmitted unit serial ID. As described above, the processing unit 21a communicates with the processing unit 23a and acquires the unit serial ID from the communication control IC 23. The processing unit 21a collates the acquired unit serial ID with the unit serial ID included in the temporary information stored in the storage unit 21b (step C1).

  When the collation result is OK, the processing unit 21a, from the communication control IC 23, uses the same method as when the unit serial ID is acquired, and the key version and writer ID included in the temporary information. , And obtain the manufacturer code. The processing unit 21a checks the acquired key version, writer ID, and manufacturer code against the key version, writer ID, and manufacturer code included in the temporary information stored in the storage unit 21b (step C2). .

  When the collation result for each piece of information is a collation OK, the processing unit 21a notifies the processing unit 23a of information indicating that the collation is OK.

  When the processing unit 21a notifies the verification OK and the processing unit 23a is notified of the verification OK, both use the temporary authentication key stored in the mutual storage units 21b and 23b as an encryption / decryption key. The encrypted communication is started (step C3). Thereafter, the processing unit 21a and the processing unit 23a perform encrypted communication using the temporary authentication key.

  The processing unit 21a determines that the communication control IC 23 may not be valid if the verification OK condition is not satisfied in the verification in step C2 or C3 and the verification is not determined as OK (that is, Since the communication control IC 23 may have been replaced), the subsequent processing is stopped and, for example, the lamp of the card unit 20 is turned on to notify that the communication control IC 23 may not be valid. (Informing process).

  Next, when the encryption communication is started, the processing unit 21a encrypts and transmits a session key request indicating a request for transmitting a session key to the communication control IC 23 with a temporary authentication key (step C4). When receiving the session key request from the main control unit 21, the processing unit 23a decrypts the received session key request with the temporary authentication key. Then, the processing unit 23a uses the temporary authentication key as a session that is an encryption key with a preset algorithm (for example, a method of calculating a logical sum of a random number and a key; the same applies to the algorithm hereinafter). A key is generated, stored in the storage unit 23b, and transmitted to the processing unit 21a (step C5).

  The processing unit 21a of the main control unit 21 acquires the session key transmitted from the communication control IC 23 and stores it in the storage unit 21b. Then, the main control unit 21 and the communication control IC 23 start encryption communication that performs encryption and decryption using a session key (step C6).

  Thereafter, the main control unit 21 and the communication control IC 23 perform processing necessary for operation confirmation while performing encrypted communication using a session key (for example, ball lending processing, Process to turn on the lamp).

  Through the processing as described above, it is possible to check the operation of the card unit 20 before shipment. In particular, in this operation check, a temporary authentication key is used for encrypted communication. As will be described later, since this temporary authentication key is used after being exchanged for the real authentication key, even if this temporary authentication key is leaked, the security of subsequent encrypted communication using the real authentication key is maintained. Will be drunk.

(Installation stage)
Next, details of the operation and the like of the management system 1 in the installation stage will be described with reference to FIGS. In the same manner as described above, in FIGS. 19 to 22, information surrounded by a solid line indicates information stored before, and information surrounded by a broken line indicates information stored during processing. In the collation described below, for example, when both pieces of information indicate the same contents (for example, they are identified as the same) because both pieces of information to be collated are the same information, etc. When the collation result is OK, and the same information is not identified because the two pieces of information to be collated are not the same information, the collation result is NG.

  As shown in FIG. 19, the processing unit 21a of the main control unit 21 is triggered when a card for normal operation is inserted into the card unit 20 and the power of the card unit 20 is turned on (for example, the card unit 20 and the card unit 20). (When the pachinko machine 10 is newly installed in the amusement hall and turned on), the unit serial ID included in the temporary information stored in the storage unit 21b is used to request transmission of this information described later. Is transmitted to the upper server 510 together with the authentication key request (step D1). It should be noted that the chips 11 and 13 in the pachinko machine 10 also start operating when the power of the pachinko machine 10 is turned on, as with the card unit 20.

  Subsequently, when the main control unit 21 transmits the authentication request and the unit serial ID, the control unit 511 of the upper server 510 receives the unit serial ID having the same content as the transmitted unit serial ID as an auxiliary to the upper server 510. It is determined whether or not it is stored in the storage unit 516. Here, since this card unit 20 is first installed in the game hall 500, the unit serial ID is not stored in the auxiliary storage unit 516. For this reason, the control unit 511 determines that the unit serial ID is not stored. For the case where the control unit 511 determines that the unit serial ID is stored, see the operation stage described later.

  When the control unit 511 determines that the unit serial ID is not stored, the control unit 511 stores the unit serial ID transmitted from the main control unit 21 in the auxiliary storage unit 516, and also performs main control together with the unit serial ID and the unit serial ID. The authentication request transmitted from the unit 21 is transmitted to the key management center server 310 (step D2).

  When the control unit 311 of the key management center server 310 receives the unit serial ID and the authentication request transmitted from the host server 510, the control unit 311 supports the temporary information including the unit serial ID indicating the same content as the unit serial ID. Search from the storage unit 316. When the temporary information is present, the control unit 311 uses the temporary authentication key included in the temporary information to authenticate and decrypt the authentication key in encrypted communication according to a predetermined algorithm (this key is Used in later cryptographic communication. When the control unit 311 generates the authentication key, the key version indicating the key version of the authentication key, the unit serial ID of the temporary information stored in the auxiliary storage unit 316, the communication control serial ID, the writer ID, The manufacturer code is stored in the auxiliary storage unit 316 as this information (step D3).

  The control unit 311 of the key management center server 310 performs a predetermined process when there is no temporary information as a result of the search. For example, the key management center server 310 transmits information indicating that temporary information does not exist to the upper server 510. When the host server 510 receives this information, for example, the control unit 511 notifies (displays) that fact via the input / output unit 513.

  By the above search, the unit serial ID is collated, and the replacement of the main control unit 21 before the card unit 20 is installed in the game hall 500 is detected.

  Next, as illustrated in FIG. 20, the processing unit 311 of the key management center server 310 transmits the main information stored in the auxiliary storage unit 316 to the upper server 510. Then, the control unit 511 of the upper server 510 receives this information transmitted from the upper server 510 and stores it in the auxiliary storage unit 516 (step D4).

  Subsequently, the control unit 511 of the upper server 510 transmits the received main information to the main control unit 21 (step D5).

  When the processing unit 21a of the main control unit 21 receives the main information transmitted from the host server 510, the processing unit 21a collates the temporary information stored in the storage unit 21b. This temporary information is information stored in the first storage area of the storage unit 21b. That is, the processing unit 21a collates the received main information with the information stored in the first storage area of the storage unit 21b.

  In the collation, the processing unit 21a includes a unit serial ID, a communication control serial ID, a key version, a writer ID, a manufacturer code, and a main authentication key included in the received main information, and the contents of each of the storage unit 21b. The unit serial ID, communication control serial ID, key version, writer ID, maker code, and temporary authentication key stored in one storage area are collated. In the verification, since the verification is performed using the main authentication key and the temporary authentication key, the verification for this information is verification NG. At this time, the processing unit 21a has information stored in the first storage area of the storage unit 21b (here, temporary information), and the processing unit 21a has a temporary storage stored in the first storage area of the storage unit 21b. The information is stored (transferred) in the second storage area of the storage unit 21b, and the received main information is stored in the first storage area (step D6).

  Next, the processing unit 21 a of the main control unit 21 starts communication with the processing unit 23 a of the communication control IC 23. In this communication, the processing unit 21a requests the processing unit 23a to transmit predetermined information. When the processing unit 23a receives this request, the processing unit 21a receives the unit serial ID, the communication control serial ID, the key version, and the writer ID among the temporary information stored in the first storage area of the storage unit 23b. Send to. The processing unit 21a of the main control unit 21 receives the unit serial ID, the communication control serial ID, the key version, and the writer ID transmitted from the communication control IC 23.

  The processing unit 21a receives the received unit serial ID, communication control serial ID, manufacturer code, and writer ID information, and the unit serial ID and communication control serial ID stored in the first area of the storage unit 21b. The manufacturer code and the writer ID are collated with each other (step D7).

  Specifically, when at least a part of each piece of information is a verification NG, there is a possibility that the communication control IC 23 may be replaced, so that the processing unit 21a is similar to the notification process described above in order to notify that fact. Perform the process.

  In step D7, when the collation result is OK for each information, the processing unit 21a stores the temporary information stored in the first storage area of the storage unit 23b of the communication control IC 23 in the second storage area. The instruction is transmitted to the processing unit 23a of the communication control IC 23 together with the main information stored in the first storage area of the storage unit 21b. Upon receiving this instruction, the processing unit 23a stores the temporary information stored in the first storage area of the storage unit 23b in the second storage area (step D8), and stores the received main information in the first storage area. Then, the storage unit 21a is notified of completion of storage (that is, registration completion of this information).

  When receiving the registration completion notification, the processing unit 21 a transmits an initialization instruction to the communication control IC 23. When the processing unit 23a of the communication control IC 23 receives the initialization instruction, the processing unit 23a receives information necessary for processing performed by the communication control IC 23 to cause the user to play a game at the game hall 500 (for ball rental processing). The parameters to be used are initialized (step D10). When the initialization is completed, the processing unit 23a notifies the processing unit 21a to that effect.

  When receiving the notification of the end of initialization, the processing unit 21a transmits the unit serial ID included in this information stored in the first storage area to the processing unit 23a via the communication unit 21c. The processing unit 23 a of the communication control IC 23 receives the unit serial ID transmitted from the main control unit 21. The processing unit 23a collates the received unit serial ID with the unit serial ID stored in the first storage area (step D11). When the collation result is NG, the processing unit 23a transmits that fact to the processing unit 21a. When the processing unit 21a receives this NG message, there is a possibility that the communication control IC 23 may be replaced. Therefore, the processing unit 21a performs the same process as the above-described notification process to notify the fact.

  When the collation result in step D11 is OK, the processing unit 23a transmits the communication control serial ID included in the information stored in the first storage area of the storage unit 23b to the processing unit 21a.

  When receiving the communication control serial ID, the processing unit 21a collates the received communication control serial ID with the communication control serial ID included in the information stored in the first storage area of the storage unit 21b (step S21). D12). If the collation result is NG, the processing unit 21a may be replaced with the communication control IC 23. Therefore, the processing unit 21a performs the same processing as the notification processing described above to notify that.

  If the collation is OK in step D12, the processing unit 21a obtains the key version, writer ID, and manufacturer code included in this information stored in the first storage area of the storage unit 21b. Send to. The processing unit 23a receives these pieces of information transmitted from the processing unit 21a, and receives the received information and the key version, writer ID, and the information included in the main information stored in the first storage area of the storage unit 23b. The manufacturer code is collated with each other (step D13).

  In step D13, when the collation for at least one of these pieces of information is NG, the processing unit 23a transmits that fact to the processing unit 21a. When the processing unit 21a receives this NG message, there is a possibility that the communication control IC 23 may be replaced. Therefore, the processing unit 21a performs the same process as the above-described notification process to notify the fact.

  In step D13, when the collation for these pieces of information is OK, the processing unit 23a transmits that fact to the processing unit 21a. In the case of verification OK, it is confirmed that the communication control IC 23 is valid.

  When the processing unit 23a of the communication control IC 23 notifies the verification OK and the processing unit 21a of the main control unit 21 is notified of the verification OK, both of them receive the authentication keys stored in the mutual storage units 21b and 23b. The encryption communication used as the encryption / decryption key is started (step D14). Thereafter, the processing unit 21a and the processing unit 23a perform encrypted communication using this authentication key.

  The processing unit 21a transmits information transmission requests (registration information transmission requests) stored in the storage units 13b and 11b of the main control chip 13 and the payout control chip 11 to the processing unit 23a (step D15).

  When receiving the registration information transmission request, the processing unit 23a transmits this transmission request to the processing unit 11a of the payout control chip 11 (step D16).

  When receiving the registration information transmission request, the processing unit 11a of the payout control chip 11 transmits this transmission request to the processing unit 13a of the main control chip 13 (step D17).

  When receiving the registration information transmission request, the processing unit 13a of the main control chip 13 transmits the chip ID, manufacturer code, and model code for the main control chip 13 stored in the storage unit 13b to the processing unit 11a. (Step D18).

  When the processing unit 11a of the payout control chip 11 receives the chip ID, the manufacturer code, and the model code for the main control chip 13 transmitted from the main control chip 13, the information is stored in the storage unit 11b. The chip ID, the manufacturer code, and the model code for the payout control chip 11 being sent are transmitted as registration information to the processing unit 23a of the communication control IC 23 (step D19).

  When the processing unit 23a receives the registration information transmitted from the payout control chip 11, the processing unit 23a stores the received registration information in the storage unit 23b. The processing unit 23a transmits the registration information stored in the storage unit 23b to the processing unit 21a of the main control unit 21 (Step D20).

  The processing unit 21a receives the registration information transmitted from the communication control IC 23 and stores it in the received storage unit 21b. Then, the processing unit 21a transmits the registration information stored in the storage unit 21b to the upper server 510 together with a verification request for requesting verification of registration information (step D21).

  When receiving the registration information and the verification request transmitted from the main control unit 21, the control unit 511 of the upper server 510 includes the game hall information stored in advance in the auxiliary storage unit 516 in the received registration information. Then, the control unit 511 collates the registration information including the game hall information with the registration information stored in the auxiliary storage unit 516. That is, the control unit 511 determines whether the registration information has already been stored in the auxiliary storage unit 516. If the registration information has not been stored (in the case of verification NG), the control unit 511 controls the key management center server 310 together with the verification request. (If it has been stored (for verification OK), refer to the operation stage). The game hall information is information for specifying the pachinko parlor (game hall 500) in which the upper server 510 is installed, and is stored in the upper server 510. In this verification, the information included in both pieces of registered information is verified, and the control unit 311 determines that the verification is OK when all the information is OK. In this case, the verification is NG.

  When the control unit 311 of the key management center server 310 receives the registration information and the verification request transmitted from the host server 510, the control unit 311 collates the transmitted registration information with the registration information stored in the auxiliary storage unit 316 ( Step D22).

  In this collation, each information included in both pieces of registered information is collated, and when the control unit 311 is collation OK for all the information, the collation OK collation result is collated for at least a part of each information. If it is NG, the verification result of verification NG is transmitted to the upper server 510 (step D23). Note that, in the collation stored in the auxiliary storage unit 316, the control unit 311 may narrow down the registration information to be collated using the game hall information as a key, and collate each piece of information. As a result, the processing load on the control unit 311 is reduced.

  When the control unit 511 of the higher-level server 510 acquires the verification result transmitted by the key management center server 310, the control unit 511 performs processing according to the verification result.

  When the collation result is collation OK, the control unit 511 stores the registration information in which the gaming machine information is included in the registration information received in step D21 in the auxiliary storage unit 516 as registration information used for later collation. At the same time, the verification result of verification OK is transmitted to the processing unit 21a of the main control unit 21 (step D24).

  In addition, when the collation result in step D22 is collation OK, the control part 311 may transmit the registration information which concerns on the collation to the high-order server 510 with the collation result (step D23). When the received collation result is collation OK, the control unit 511 stores the received registration information in the auxiliary storage unit 516 as registration information used for subsequent collation, and performs main control on the collation OK collation result. You may transmit to the process part 21a of the part 21 (step D24).

  If the collation result is collation NG, the control unit 511 deletes the registration information because the registration information received in step D21 is invalid registration information. Then, the control unit 511 transmits the verification result of verification NG to the processing unit 21 a of the main control unit 21.

  Next, when receiving the verification result of verification OK, the processing unit 21a of the main control unit 21 transmits a session key request indicating a request for transmitting a session key to the processing unit 23a of the communication control IC 23 (step D25). ). Note that the registration information stored in the storage unit 21b in step D20 is left without being deleted for later verification. When the processing unit 23a receives the session key request from the main control unit 21, the processing unit 23a uses the authentication key of the information stored in the first storage area of the storage unit 23b as an encryption key with a preset algorithm. A session key is generated, stored in the storage unit 23b, and transmitted to the processing unit 21a (step D26).

  The processing unit 21a of the main control unit 21 acquires the session key transmitted from the communication control IC 23 and stores it in the storage unit 21b. Then, the main control unit 21 and the communication control IC 23 start encryption communication that performs encryption and decryption using a session key (step D27).

  Thereafter, the main control unit 21 and the communication control IC 23 perform a process for causing the card unit 20 to perform a normal operation when the pachinko store (game room 500) is operated, while performing encrypted communication using a session key.

  When the processing unit 21a receives verification NG as a verification result, there is a possibility that at least one of the payout control chip 11 or the main control chip 13 of the pachinko machine 10 has been replaced. The processing unit 21a performs the same process as the notification process. In this case, the processing unit 21a deletes the registration information stored in the storage unit 21b in step D20.

As described above, in this embodiment, replacement of the chip of the pachinko machine 10, the communication control IC 23, and the like can be detected by collating various kinds of information. Further, since the upper server 510 makes a verification request for registration information to the key management center server 310 only when the registration information is not stored in itself, the verification requests from many upper servers 510 are suppressed, and the key management is performed. The processing load on the center server 310 is reduced. Further, since the upper server 510 stores the same main information and provisional information as those stored by the key registration management sensor server 310, the information is managed by the upper server 510 as genuine information regarding each chip, IC, and the like. It will be.

(Operation stage)
Next, details of the operation and the like of the management system 1 in the operation stage will be described with reference to FIGS. Here, the case where the upper server 510 is online and the case where it is offline will be described separately. In the same manner as described above, in FIGS. 23 to 25, information surrounded by a solid line indicates previously stored information, and information surrounded by a broken line indicates information stored during processing. In the collation described below, for example, when both pieces of information indicate the same contents (for example, they are identified as the same) because both pieces of information to be collated are the same information, etc. When the collation result is OK, and the same information is not identified because the two pieces of information to be collated are not the same information, the collation result is NG.

(When the host server is online)
First, a case where the host server 510 is in an online state at the operation stage will be described with reference to FIGS.

  When the power of the card unit 20 is turned on (for example, when the game hall 500 starts operating, the pachinko machine 10 is also turned on at the same time), the main control unit 21 The processing unit 21a determines whether or not communication with the higher level server 510 is possible, and when it is determined that communication is possible, that is, when the higher level server 510 is in an online state, the book stored in the storage unit 21b. The unit serial ID included in the information is transmitted to the upper server 510 together with the authentication key request, which is information for requesting transmission of the information described later (step E1). The case where the upper server 510 is in an offline state will be described later.

  Upon receiving the unit serial ID and the main authentication request transmitted from the main control unit 21, the control unit 511 of the upper server 510 searches the main information including the unit serial ID stored in the auxiliary storage unit 516, and When there is information, this information stored in the auxiliary storage unit 516 is transmitted to the main control unit 21. Then, the processing unit 21a of the main control unit 21 receives the main information transmitted from the upper server 510 (step E2).

  The control unit 511 of the upper server 510 performs a predetermined process when this information is not found by the search. For example, the control unit 511 of the upper server 510 notifies (displays, etc.) that this information is not present via the input / output unit 513.

  When the processing unit 21a of the main control unit 21 receives the main information transmitted from the host server 510, the processing unit 21a collates the main information stored in the storage unit 21b. This information is information stored in the first storage area of the storage unit 21b. That is, the processing unit 21a collates the received main information with the information stored in the first storage area of the storage unit 21b.

  In the collation, the processing unit 21a stores the unit serial ID, the communication control serial ID, the key version, the writer ID, the manufacturer code, and the main authentication key included in the received main information in the first storage area of the storage unit 21b. The stored unit serial ID, communication control serial ID, key version, writer ID, manufacturer code, and main authentication key are collated (step E3).

  Here, in the collation, it is assumed that all the information included in both pieces of information is collation OK. After the pachinko machine 10 and the card unit 20 are installed in the game hall 500, for example, when the authentication key is leaked, the authentication key (required) of the information stored in the auxiliary storage unit 516 of the upper server 510 is necessary. The key version and the writer ID (in this case, the writer ID is information indicating the update) may be updated accordingly. In this case, the collation in step E3 is a collation NG. The update method is arbitrary. Here, the following description will be given assuming that the information has not been updated (the case where the information has been updated, that is, the case where the collation in step E3 is collation NG will be described later).

  The processing unit 21a transmits the unit serial ID included in the information stored in the first storage area to the processing unit 23a via the communication unit 21c. The processing unit 23 a of the communication control IC 23 receives the unit serial ID transmitted from the main control unit 21. The processing unit 23a collates the received unit serial ID with the unit serial ID stored in the first storage area (step E4). When the collation result is NG, the processing unit 23a transmits that fact to the processing unit 21a. When the processing unit 21a receives this NG message, there is a possibility that the communication control IC 23 may be replaced. Therefore, the processing unit 21a performs the same process as the above-described notification process to notify the fact.

  Thereafter, the processing unit 23a and the processing unit 21a perform the processing from step E5 to E8 while communicating with each other, and these steps correspond to the above steps D12 to D15. For this reason, the description of the processing from Steps E5 to E8 (including the description of the processing between the steps) is in accordance with the description in Steps D12 to D15 (including the description of the processing between the steps).

  After the process of step E8, the processing unit 21a performs the process of step E9 together with the payout control chip 11 and the main control chip 13. This process corresponds to the processes of steps D16 to D19. For this reason, the description of the process of E9 (including the description of the process between steps, etc.) conforms to the description in the steps D16 to D19 (including the description of the process between the steps).

  After the process of step E9, the processing unit 23a of the communication control IC 23 performs the process of step E10. This process corresponds to the process of step D20. For this reason, the description of the process in step E10 (including the description of the process between steps) is in accordance with the description in step D20 (including the description of the process between steps).

  Next, the processing unit 21a of the main control unit 21 performs the process of step E11, and this process corresponds to the process of step D21. For this reason, the description of the process of step E11 (including the description of the process between steps and the like) conforms to the description of the step D21 (including the description of the process between the steps and the like).

  When the control unit 511 of the host server 510 receives the registration information and the verification request transmitted from the main control unit 21, the received registration information includes the game hall information stored in advance in the auxiliary storage unit 516. Then, the control unit 511 collates the registration information including the game hall information with the registration information stored in the auxiliary storage unit 516. In the case of collation NG, it is assumed that the collation is OK here, referring to the processing after step D22, the processing of step G5 described later, and the like. In this case, the fact that collation is OK is transmitted as a collation result to the processing unit 21a of the main control unit 21 (step E12).

  When the processing unit 21a receives the collation result of the collation OK, the processing unit 21a performs the processing from step E13 to step E15 together with the processing unit 23a. These processing correspond to steps D25 to D27. For this reason, the description of the processing from Step E13 to Step E15 (including the description of the processing between the steps) is in accordance with the description of Step D25 to D27 (including the description of the processing between the steps).

  According to the above processing, when the upper server 510 is online, authentication using the upper server 510 is performed. As described above, since the registration information and the main information stored in the upper server 510 are the same as the information stored in the key management center server 310, the validity is guaranteed. For this reason, even if it is collation in this upper level server 510, the accuracy of authentication of each chip, IC, etc. is secured. Further, the configuration of the upper server 510 and the card unit 20 can be formed using conventional infrastructure.

  Here, in the collation in step E3, the case where the collation result is collation NG for at least a part of the information included in the both pieces of information (that is, when the information is updated) will be described with reference to FIG. .

  Normally, the manufacturer code, unit serial ID, and communication control serial ID included in this information are not changed because they are not information related to the main control unit 21 or information related to the authentication key. What can be considered in the update here is the authentication key (the writer ID and the key version may be updated accordingly).

  In such a case, the processing unit 21a moves the main information stored in the first storage area of the storage unit 21b to the second storage area and stores it. At this time, the temporary information or the main information stored in the second storage area is overwritten. And the process part 21a stores this information transmitted from the high-order server 510 in a 1st storage area (step E90).

  Thereafter, the processing unit 21a encrypts the main authentication key newly recorded in the second storage area and transmits the main information stored in the first storage area to the processing unit 23a of the communication control IC 23 (step E92). Upon receiving the encrypted main information, the processing unit 23a moves (overwrites) the main information including the main authentication key stored in the first storage area of the storage unit 23b to the second recording area. The main information is decrypted with the main authentication key of the main information transferred to the second recording area, and the decrypted main information is stored as new main information in the first storage area of the storage unit 23b (step E93).

  Thereafter, the processing unit 21a performs the processing after E4 together with the processing unit 23a and the like.

  According to such processing, when the authentication key is updated, encryption communication is performed with the immediately preceding authentication key, so that the authentication key can be easily updated. Further, when the authentication key is leaked by setting the key version and the authentication key as a set, the leaked authentication key can be easily found based on the key version of the authentication key.

(Operation stage (when the host server is offline))
Next, a case where the upper server 510 is in an offline state at the operation stage will be described with reference to FIG.

  When the power of the card unit 20 is turned on, the processing unit 21a of the main control unit 21 determines whether or not communication with the upper server 510 is possible, and when it is determined that communication is impossible, that is, When the upper server 510 is in an offline state, the processing unit 21a of the main control unit 21 determines whether this information is stored in the first area of the storage unit 21b (Step F1).

  When it is determined that the information is stored, the processing unit 21a communicates the unit serial ID included in the information stored in the first storage area, as in the case where the upper server 510 is online. The data is transmitted to the processing unit 23a via the unit 21c. The processing unit 23 a of the communication control IC 23 receives the unit serial ID transmitted from the main control unit 21. The processing unit 23a collates the received unit serial ID with the unit serial ID stored in the first storage area (step F2). When the collation result is NG, the processing unit 23a transmits that fact to the processing unit 21a. When the processing unit 21a receives this NG message, there is a possibility that the communication control IC 23 may be replaced. Therefore, the processing unit 21a performs the same process as the above-described notification process to notify the fact. If it is determined that this information is not stored, the processing unit 21a waits without performing processing until the higher-level server 510 is in an online state. When the upper server 510 shifts to the online state, the processing unit 21a performs the above-described processing.

  Thereafter, the processing unit 23a and the processing unit 21a perform the processing from steps F3 to F5 while communicating with each other, and these steps correspond to the above-described steps D12 to D14. For this reason, the description of the processing of steps F3 to F5 (including the description of processing between steps and the like) conforms to the description of steps D12 to D14 (including the description of processing between steps and the like).

  Subsequently, in this case, the processing unit 21a of the main control unit 21 determines whether or not registration information is stored in the storage unit 21b (step F6).

  When it is determined that the registration information is stored, the processing unit 21a is stored in the storage units 13b and 11b of the main control chip 13 and the payout control chip 11 as in the case where the upper server 510 is in the online state. Information transmission request (registration information transmission request) is transmitted to the processing unit 23a (step F7).

  After the process of step F7, the processing unit 21a performs the process of step F8 together with the payout control chip 11 and the main control chip 13. This process corresponds to the processes of steps D16 to D19. For this reason, the description of the process of F8 (including the description of the process between the steps) conforms to the description in the steps D16 to D19 (including the description of the process between the steps).

  When receiving the registration information transmitted from the payout control chip 11, the processing unit 23a of the communication control IC 23 stores the received registration information in the storage unit 23b. The processing unit 23a transmits the registration information stored in the storage unit 23b to the processing unit 21a of the main control unit 21 together with a verification request for requesting verification of registration information (step F9).

  When the processing unit 21a of the main control unit 21 receives the registration information and the verification request transmitted from the communication control IC 23, the processing unit 21a compares the registration information with the registration information stored in the storage unit 21b. That is, the processing unit 21a determines whether the registration information has already been stored in the storage unit 21b. If the registration information is not stored (in the case of verification NG), there is a possibility that the main control chip 13 and the payout control chip 11 may be replaced. Therefore, in order to notify that effect, the processing unit 21a performs the same process as the notification process.

  On the other hand, when the registration information is already stored in the storage unit 21b (in the case of collation OK), the processing unit 21a performs the processing from step F10 to step F12 together with the processing unit 23a. Corresponds to D27. For this reason, the description of the processing from Step F10 to Step F12 (including the description of the processing between the steps) is in accordance with the description of Step D25 to D27 (including the description of the processing between the steps).

  According to the above processing, even when the upper server 510 is in an offline state, appropriate verification is performed using previously registered information, and the management system 1 indicates that the upper server 510 is in an offline state. If it is, authentication can be performed.

(Replacement stage of pachinko machine 10)
Next, in the replacement stage of the pachinko machine 10, the management system 1 for determining whether or not each of the integrated circuit mounted on the card unit 20 and the integrated circuit mounted on the pachinko machine 10 is valid. Will be described with reference to FIG.

  As shown in FIG. 26, in the replacement stage of the pachinko machine 10, the process of determining whether or not the integrated circuit mounted on the card unit 20 is valid is the operation stage and the host server 510 is online. It is the same as in some cases. Specifically, the integrated circuit mounted on the card unit 20 is valid in the same manner as in steps E1 to E7, steps E80 and E82, steps E90, E92, and E93 in FIGS. It is determined whether or not.

Next, a process for determining whether or not the integrated circuit mounted on the pachinko machine 10 is valid will be described.
First, the processing unit 21a of the main control unit 21 transmits a registration information transmission request to the communication control IC 23 (step G1).

  Then, when the processing unit 23a of the communication control IC 23 receives the registration information transmission request, the processing unit 23a together with the main control chip 13 and the payout control chip 11 from step D16 in FIG. Processing similar to D19 (including processing between steps) is performed to obtain registration information of the pachinko machine 10 from the payout control chip 11 of the pachinko machine 10 (step G2).

  Subsequently, the processing unit 23a of the communication control IC 23 transmits the acquired registration information of the pachinko machine 10 to the processing unit 21a of the main control unit 21 (step G3). When the processing unit 21a receives the registration information of the pachinko machine 10 transmitted from the communication control IC 23, the processing unit 21a stores the acquired registration information of the pachinko machine 10 in the storage unit 21b. To the control unit 511.

  When receiving the registration information and the verification request transmitted from the main control unit 21, the control unit 511 of the upper server 510 includes the game hall information stored in advance in the auxiliary storage unit 516 in the received registration information. Then, the control unit 511 collates the registration information including the game hall information with the registration information stored in the auxiliary storage unit 516. That is, the control unit 511 determines whether the registration information has already been stored in the auxiliary storage unit 516. Note that here, the pachinko machine 10 is a new one that has been replaced, and the registration information about the pachinko machine 10 is not stored in the host server 510. It transmits to the control part 311 of the management center server 310 (step G5).

  In the management system 1, the processing performed after step G6 is the same as the processing in steps E12 to E15, and therefore the description (including processing between steps) includes steps E12 to E15 (including processing between steps). )).

  According to the above processing, when the pachinko machine 10 is replaced, the upper server 510 does not store the registration information of the replaced pachinko machine 10, so the key management center server 310 is inquired and the key management is performed. The center server 310 performs collation. For this reason, even when the pachinko machine 10 is replaced, appropriate registration and verification are performed, and the management system 1 can cope with the replacement of the pachinko machine 10.

(Replacement stage of card unit 20)
Next, details of the operation and the like of the management system 1 in the replacement stage of the card unit 20 will be described with reference to FIG. In the same manner as described above, in FIG. 27, information surrounded by a solid line indicates information stored before, and information surrounded by a broken line indicates information stored during processing. Further, in the collation described below, for example, when both pieces of information indicate the same content (for example, they are identified as the same) because both pieces of information to be collated are the same information, the collation is performed. If the result is collation OK and the same information is not identified because the information to be collated is not the same information, the collation result is NG.

  As shown in FIG. 27, the processing unit 21a of the main control unit 21 sets a unit serial ID included in the temporary information stored in the storage unit 21b, which will be described later, when the power of the card unit 20 is turned on. Along with the authentication key request, which is information for requesting transmission of this information, it is transmitted to the upper server 510 (step H1).

  Subsequently, when the authentication request and the unit serial ID are transmitted from the main control unit 21, the control unit 511 of the upper server 510 has the same unit serial ID as the unit serial ID transmitted to the auxiliary storage unit 516 of the upper server 510. It is determined whether the serial ID is stored. Here, since the card unit 20 is being replaced, the card unit 20 is first installed in the game arcade 500. Therefore, the unit serial ID corresponding to the card unit 20 is not stored in the auxiliary storage unit 516. For this reason, the control unit 511 determines that the unit serial ID is not stored.

  When the control unit 511 determines that the unit serial ID is not stored, the control unit 511 stores the unit serial ID in the auxiliary storage unit 516, and transmits the unit serial ID and the transmitted authentication request to the key management center. It transmits to the server 310 (step H2).

  When the control unit 311 of the key management center server 310 receives the unit serial ID and the main authentication request transmitted from the host server 510, the control unit 311 searches for temporary information including the unit serial ID stored in the auxiliary storage unit 316. If there is temporary information, this authentication key that is encrypted and decrypted in encrypted communication according to a predetermined algorithm based on the temporary authentication key included in the temporary information (this key is used in later encrypted communication) Is generated. When the control unit 311 generates the authentication key, the key version indicating the version of the authentication key, the unit serial ID of the temporary information stored in the auxiliary storage unit 316, the communication control serial ID, the writer ID, and the manufacturer The code is stored in the auxiliary storage unit 316 as this information (step H3).

  The control unit 311 of the key management center server 310 performs a predetermined process when there is no temporary information as a result of the search. For example, the key management center server 310 transmits information indicating that temporary information does not exist to the upper server 510. When the host server 510 receives this information, for example, the control unit 511 notifies (displays) that fact via the input / output unit 513.

  Next, the control unit 311 of the key management center server 310 transmits this information stored in the auxiliary storage unit 316 to the upper server 510. Then, the control unit 511 of the upper server 510 receives this information transmitted from the upper server 510 and stores it in the auxiliary storage unit 516 (step H4).

  The processing after step H4 corresponds to the processing of steps D5 to D14. For this reason, the description of the process after step H4 (including the description of the process between steps and the like) conforms to the description of the steps D5 to D14 (including the description of the process between the steps and the like).

  In addition, the process of determining whether or not the integrated circuit mounted on the pachinko machine 10 is valid in the replacement stage of the card unit 20 corresponds to the processes of steps D15 to D27. Therefore, in this case, the description of the process for determining whether or not the integrated circuit mounted on the pachinko machine 10 is valid (including the description of the process between steps, etc.) Including explanation of processing between steps).

  According to the processing as described above, when the card unit 20 is replaced, the upper server 510 does not store the main information of the replaced card unit 20, so an inquiry is made to the key management center server 310 to perform key management. The center server 310 performs collation. For this reason, even when the card unit 20 is replaced, appropriate registration and verification are performed, and the management system 1 can cope with replacement of the card unit 20.

  The above is the detailed operation in each stage of the management system 1.

(Summary of this embodiment)
As described above, the management system 1 according to the present embodiment makes a determination by checking whether the integrated circuit mounted on the card unit 20 or the pachinko machine 10 is valid for each stage. According to this configuration, since collation is performed at each stage, detection and countermeasures such as replacement of an integrated circuit can be performed at each stage according to the collation result.

(Other)
In the present embodiment, with the above-described configuration, the management system 1 allows the integrated circuit manufacturer (here, the chip manufacturer 100) to manufacture an integrated circuit (here, the communication control IC 23) and the gaming device manufacturer (here, the card). A management system for managing a gaming device (here, card unit 20) mounted by the integrated circuit manufacturer and manufactured by the unit manufacturer 600),
A first output device that outputs identification information (here, communication control serial ID) of the integrated circuit written by the integrated circuit manufacturer to the integrated circuit manufactured by the integrated circuit manufacturer (here, communication is performed in step B2). A chip maker computer 110) for transmitting the control serial ID;
Device information of the gaming device manufactured by the gaming device maker, including device information of the gaming device including the identification information of the integrated circuit used in the gaming device (here, communication control) A second output device (in this case, an IC writer 610 for transmitting the shipment information in step B12) for outputting the shipment information including the serial ID);
Acquisition means for acquiring the identification information of the integrated circuit output from the first output device and the device information output from the second output device (here, the communication control serial ID is obtained after step B2). The control unit 311) that receives and receives the shipping information after step B15) and collation that collates the identification information of the integrated circuit acquired by the acquisition unit and the identification information of the integrated circuit included in the device information A management device (here, key management center server 310) comprising means (here, the control unit 311 for collating both communication control serial IDs in step B16);
It is a management system with

  The integrated circuit may be the main control chip 13. In this case, the gaming machine manufacturer is a gaming machine manufacturer 200. The gaming apparatus is a pachinko machine 10. The identification information is the chip ID of the main control chip 13. The first output device is a gaming machine manufacturer computer 220 that transmits the chip ID of the main control chip 13 in step A2. The device information is shipping information including the chip ID of the main control chip 13. The second output device is an IC writer 210 that transmits shipping information including a chip ID in step A11. The acquisition means is a control unit 411 that receives the chip ID of the main control chip 13 after step A2 and receives shipping information after step A11. The collating means is a control unit 411 that collates both chip IDs in step A12. The management device is a security center server 410.

  The integrated circuit may be a payout control chip 11. In this case, the gaming machine manufacturer is a gaming machine manufacturer 200. The gaming apparatus is a pachinko machine 10. The identification information is the chip ID of the payout control chip 11. The first output device is a gaming machine manufacturer computer 220 that transmits the chip ID of the payout control chip 11 in step A2. The device information is shipping information including the chip ID of the payout control chip 11. The second output device is an IC writer 210 that transmits shipping information including a chip ID in step A11. The acquisition means is a control unit 411 that receives the chip ID of the payout control chip 11 after step A2 and receives shipping information after step A11. The collating means is a control unit 411 that collates both chip IDs in step A12. The management device is a security center server 410.

  According to the above configuration, the identification information written by the integrated circuit manufacturer and the identification information included in the device information of the gaming device manufactured by the gaming device manufacturer are verified by the verification unit of the management device. If the integrated circuit is replaced with an illegal integrated circuit at the time of shipment of the integrated circuit, the identification information to be collated does not become the identification information for the same integrated circuit. The result is that it is not circuit identification information. On the other hand, when there is no replacement, the collation result is that both pieces of identification information are identification information of the same integrated circuit. In this way, since the presence / absence of replacement of the integrated circuit can be known by the verification, the management system having the verification means can detect the replacement at the shipping stage of the integrated circuit. Note that the security center server 410 and the key management center server 310 can perform notification according to the result of the collation, and can notify the fact when the replacement of the integrated circuit at the shipping stage is detected.

  In the present embodiment, according to the above configuration, the management device (here, the key management center server 310) allows the identification information in the collation by the collation unit to be the identification information of the same integrated circuit. Recording means (here, in step B17) that records the device information including the identification information as authentication information (here, temporary information) used for authentication of the integrated circuit in the storage unit (here, storage unit 312). It includes a control unit 311) that stores shipping information as temporary information.

  According to such a configuration, in the manufacturing stage, when the identification information is the identification information of the same integrated circuit by collation, the device information including this identification information is recorded. Therefore, the device including the regular identification information is recorded. The information is recorded in the storage unit as authentication information (in this case, temporary information) used for subsequent authentication. For this reason, authentication using unauthorized identification information is prevented, and accuracy of detection of replacement of an integrated circuit is ensured.

  In the present embodiment, according to the above configuration, the device information includes the identification information of the gaming device (here, when the integrated circuit is the communication control IC 23, the unit serial ID, and the integrated circuit is the main control chip 13 or the payout). In the case of a control chip, the information includes each type code). Therefore, the management system 1 is a device that includes identification information (here, a type code or a unit serial ID) of the gaming device in the manufacturing stage. Information is recorded as authentication information. According to this configuration, the relationship between the integrated circuit and the pachinko machine 10 and the card unit 20 is also known from the authentication information, and it can be confirmed that the authorized integrated circuit is mounted on the authorized gaming device in later authentication. .

  Further, in the present embodiment, with the above configuration, the gaming device manufactured by the gaming device manufacturer is installed in a game arcade (here, the game venue 500), and at least a part of the device information (here, When the integrated circuit is the communication control IC 23, the unit serial ID, and when the integrated circuit is the main control chip 13 or the payout control chip, each type code) is used for the integration of the gaming device in the manufacturing process of the gaming device. The management apparatus records at least one of the device information recorded in the circuit (here, writing in step B11, step A7, and step A10) and recorded in the integrated circuit of the gaming device installed in the game hall. (In this case, the unit serial ID is received after step D2, or the registration information is received after step D21.) Control unit 311), a second collation unit for collating at least a part of the acquired device information with the device information recorded in the storage unit (here, the unit serial ID is keyed after step D2). And a control unit 311) for searching for temporary information or for collating registered information in step D22. In this embodiment, the unit serial ID and each type code, which are information other than the identification information in the device information, are recorded in the integrated circuit of the gaming device in the manufacturing process of the gaming device. However, the identification information of the device information may also be recorded on the integrated circuit using the IC writer 610, the IC writer 210, or the like in the manufacturing process of the gaming device. In this case, for example, identification information is recorded in advance in the IC writer 610, the IC writer 210, etc., and the identification information is also written in the integrated circuit when the unit serial ID and each type code are written.

  According to such a configuration, since the device information is stored in the integrated circuit at the manufacturing stage, the gaming device installed in the game room 500 by checking the device information (an example of authentication of the integrated circuit) That is, it is possible to detect whether the integrated circuit of the game device installed in the game arcade 500 is a regular one. If the integrated circuit is replaced, in the verification of the device information, the integrated circuit identification information included in the device information is not information of the same integrated circuit. Replacement of the integrated circuit for the gaming device is detected.

In the present embodiment, with the above configuration, the management system 1 allows the integrated circuit (here, the main control chip 13 or the payout control chip 11) manufactured by the integrated circuit manufacturer (here, the chip manufacturer 100) to be used for gaming. A management system for managing a gaming device (here, pachinko machine 10) mounted by the integrated circuit manufacturer and manufactured by a device manufacturer (here, gaming machine manufacturer 200). ,
A first output device that outputs identification information (here, chip ID) of the integrated circuit written by the integrated circuit manufacturer to the integrated circuit manufactured by the integrated circuit manufacturer (here, the chip ID is inputted in step A2). A chipmaker computer 110) for transmitting,
Device information of the gaming device manufactured by the gaming device manufacturer, including gaming device information (here, chip ID) including the identification information of the integrated circuit used in the gaming device A second output device (in this case, the IC writer 210 that transmits the shipment information in step A11),
Acquisition means for acquiring the identification information of the integrated circuit output from the first output device and the device information output from the second output device (here, the chip ID is received after step A2) , A control unit 411 that receives the chip ID after step A11), and a collation unit that collates the integrated circuit identification information acquired by the acquisition unit with the integrated circuit identification information included in the device information. Here, the control unit 411 for collating both chip IDs in step A12) and the output unit for outputting the device information including the identification information in which the identification information is the identification information of the same integrated circuit in the collation by the collating unit ( Here, a control unit 411 that transmits shipping information as registration information in step A13), a first management device (here, the security center server 41). A),
The device information output by the output unit of the first management device is acquired (here, the control unit 311 that receives shipping information after step A13), and the acquired device information is used for authentication of the integrated circuit. The authentication information to be used is recorded in the storage unit (here, the storage unit 312) (here, the control unit 311 that stores the shipping information after step A13). The second management device (here, the key management center server 310). )When,
It has become.

  According to the above configuration, when the identification information is the identification information of the same integrated circuit by the collation, the device information including the identification information is recorded by the second management device as authentication information used for subsequent authentication. Therefore, the device information including the regular identification information is recorded in the storage unit. For this reason, in the authentication of the subsequent integrated circuit, the authentication based on the unauthorized integrated circuit identification information is prevented, so that the unauthorized integrated circuit replaced at the shipment stage is prevented from being detected. The replacement of the integrated circuit can be detected with high accuracy.

  Further, in the present embodiment, with the above configuration, the gaming device manufactured by the gaming device manufacturer is installed in a game arcade (here, the gaming venue 500), and at least a part of the device information is Recorded in the integrated circuit of the gaming device in the manufacturing process of the gaming device (here, writing in step A7, step A10), the second management device is the gaming device installed in the gaming hall The device information recorded in the integrated circuit is acquired (here, the control unit 311 that receives the registration information in step D22), and the acquired device information and the device information recorded in the storage unit are obtained. It further includes collating means for collation (here, the control unit 311 that performs collation in step D22). In the present embodiment, each type code, which is information other than the identification information in the device information, is recorded in the integrated circuit of the gaming device in the manufacturing process of the gaming device. The identification information may also be recorded on the integrated circuit using the IC writer 210 or the like in the manufacturing process of the gaming device. In this case, for example, identification information is recorded in advance in the IC writer 210 or the like, and the identification information is also written in the integrated circuit when each type code is written.

  In the present embodiment, the device information is stored in the integrated circuit according to the above configuration, so that the game device installed in the game hall can be verified by verifying the device information (an example of authentication of the integrated circuit). It is possible to detect whether the integrated circuit is legitimate, that is, the replacement of the integrated circuit of the gaming device installed in the game arcade. If the integrated circuit is replaced, in the verification of the device information, the integrated circuit identification information included in the device information is not information of the same integrated circuit. Replacement of the integrated circuit for the gaming device is detected. Furthermore, since authentication using authentication information is performed only by one of the two management devices, and identification information is verified by the other, processing is performed by the first management device and the second management device. The access load to the management apparatus can be reduced.

In the present embodiment, the management system 1 has the above configuration.
A writing device (in this case, writing information to an integrated circuit (communication control IC 23) mounted in a gaming device (here, card unit 20) manufactured by a gaming device manufacturer (here, card unit manufacturer 600). An IC writer 610), and a management device (here, key management center server 310) that preliminarily stores identification information (here, IC information) of the integrated circuit,
The integrated circuit is manufactured by an integrated circuit manufacturer (here, chip manufacturer 100) and shipped from the integrated circuit manufacturer to the gaming device manufacturer (here, shipment of the communication control IC 23 in step B3),
The writing device is used by a gaming device manufacturer (here, shipment of the IC writer 610 in step B1),
Storage means (here, storage unit 612) for storing the information (here, writer ID, temporary authentication key, key version);
Writing means for writing the information stored in the storage means into the integrated circuit (here, the control unit 611 for writing in step B10);
Reading means for reading the identification information of the integrated circuit stored in the integrated circuit (here, the control unit 611 for reading in step B8);
Output means for outputting the identification information read by the reading means (here, a control unit 611 that transmits shipping information in step B15),
The management device
A collating unit (in this case, a control unit 311 that performs collation in step B16) that collates the identification information output by the output unit and the identification information stored in the management device is provided. This management apparatus performs processing according to the result of collation.

  The integrated circuit may be the main control chip 13. In this case, the gaming machine manufacturer is a gaming machine manufacturer 200. The gaming apparatus is a pachinko machine 10. The identification information is the chip ID of the main control chip 13. The writing device is an IC writer 210. The management device is a security center server 410. The information written in the IC writer 210 is a model code of the main control chip 13. The storage means is the storage unit 212. The writing means is the control unit 211 that performs writing in step A7. The reading means is the control unit 211 that performs reading in step A6. The output means is the control unit 211 that transmits shipping information in step A11. The collating means is a control unit 411 that collates both chip IDs in step A12.

  The integrated circuit may be a payout control chip 11. In this case, the gaming machine manufacturer is a gaming machine manufacturer 200. The gaming apparatus is a pachinko machine 10. The identification information is the chip ID of the payout control chip 11. The writing device is an IC writer 210. The management device is a security center server 410. The information written in the IC writer 210 is a model code of the payout control chip 11. The storage means is the storage unit 212. The writing means is the control unit 211 that performs writing in step A10. The reading means is the control unit 211 that performs reading in step A9. The output means is the control unit 211 that transmits shipping information in step A11. The collating means is a control unit 411 that collates both chip IDs in step A12.

  According to such a configuration, in the manufacturing stage, according to the configuration, the identification information of the integrated circuit read by the gaming device manufacturer is collated with the identification information stored in the management device. When both are not information for identifying the same control circuit, it can be seen from this result whether the integrated circuit has been replaced at the shipping stage. As described above, this collation system can detect the replacement of the integrated circuit at the shipping stage. Also, the identification information transmitted from the IC writers 210 and 610 and the identification information registered in the key management center server 310 or the security center server 410 are collated, and both identification information is the identification information of the same integrated circuit by the collation. When the device information including the identification information is recorded, the device information including the regular identification information is used as authentication information (temporary information, registration information) for subsequent authentication. Recorded in the security center server 410. For this reason, authentication using unauthorized identification information is prevented, and accuracy of detection of replacement of an integrated circuit is ensured.

  In this embodiment, the information written by the writing means is stored in the information recorded in the storage means (here, the IC writer 610 shipped in step B1) by the integrated circuit manufacturer. The manufacturer code, the model code stored in the IC writer 210 shipped in step A1, and the like).

  If the information includes information recorded by the integrated circuit manufacturer, the recorded information can also be written directly to the integrated circuit by the integrated circuit manufacturer. However, by deliberately writing the information into the integrated circuit with a writing device by a gaming device manufacturer, the information is illegally performed from the integrated circuit at the shipping stage of the integrated circuit (unauthorized reading, information Falsification, etc.) is prevented. This is because the information is not written in the integrated circuit at the shipping stage. As a result, information on the integrated circuit at the shipping stage can be protected.

Further, in this embodiment, with the above configuration, the output means outputs the information written by the writing means and the identification information read by the reading means as output information (here, in step B15). A control unit 611) for transmitting shipping information;
The collation unit acquires the output information output by the output unit (here, the control unit 311 that receives shipping information after step B15);
When the identification information indicates the same integrated circuit as a result of collation by the collating means, the management device uses at least a part of the information included in the output information as authentication information for authentication of the integrated circuit. Recording means (here, the control unit 311 for storing the shipping information as temporary information in step B17).

  With such a configuration, since the authentication information is authentication information for a gaming device equipped with an authentic integrated circuit, authentication using the authentication information is accurate authentication, and the integrated circuit The presence or absence of replacement can be confirmed.

Further, in the present embodiment, with the above configuration, the gaming device includes a plurality of control units (here, the main control unit 21 and the communication control IC 23) that perform cryptographic communication with each other, and a gaming field (here, the gaming field 500). ) A gaming device (here, card unit 20) installed in
Each of the plurality of control units is
A first encryption communication key (here, a temporary authentication key) is stored in advance, and a second encryption communication key (here, a book) supplied after the gaming device is installed in the game hall. Storage means (here, storage unit 21b, storage unit 23b) for storing the authentication key)
If the storage means does not store the second encryption communication key when performing the encryption communication, the other control unit and the encryption are used using the first encryption communication key. When communication is performed (here, processing unit 21a and processing unit 23a that perform cryptographic communication with each other with a temporary authentication key after step C3), and the storage unit stores the second cryptographic communication key , Communication means for performing the cryptographic communication with the other control unit using the second cryptographic key (here, processing unit 21a and processing unit 23a performing cryptographic communication with each other after step D14). It has become a thing.

  According to the above configuration, since the key used for the encryption communication is different before and after the gaming device is installed in the game hall, it is assumed that the key was stolen before the installation, and the safety of the encryption communication after the installation is assumed. Is secured. In other words, the gaming device having the above-described configuration has high encryption communication security.

  In the present embodiment, the second encryption communication key is generated based on the first encryption communication key by the above configuration (see step D3 here). In particular, the second encryption key is generated by an external device (here, the key management center server 310) using a random number or the like.

  Thus, the second encryption communication key can be easily generated, and the convenience of encryption is increased.

In the present embodiment, the gaming device (here, the card unit 20) is configured as described above.
A gaming device (here, card unit 20) having at least one of a first control unit (here main control unit 21) and a second control unit (here communication control IC 23) capable of cryptographic communication with each other. ) And
The first control unit includes a first storage area and a second storage area for storing keys used for encrypted communication (here, the main authentication key or the temporary authentication key) (here, FIG. 24). See the first storage area and the second storage area of the main control unit 21),
The second control unit includes a first storage area for storing a key (here, a real authentication key or a temporary authentication key) used for encrypted communication (here, the first control unit 23 included in the communication control IC 23 of FIG. 24). Storage area),
The first control unit and the second control unit perform the encrypted communication using a key stored in the first storage area (here, encrypted communication after step E7),
When the first control unit obtains a new key from the outside (in this case, a management device such as the host server 510), the key stored in the first storage area is stored in the second storage area. Newly stored (here, recording of this information in step E90), the acquired new key is stored in the first storage area, and the newly stored key is used in the second storage area Encrypted and transmitted to the second control unit (here, transmission of this information in step E92),
In response to receiving the new key from the first control unit, the second control unit stores the encrypted new key received from the first control unit in the first storage. It is decrypted using the key stored in the area and newly stored in the first storage area (here, recording of this information in step E93).

  According to the above configuration, even if it is necessary to change this key due to leakage of the key currently used, the new key is encrypted with the key recorded in the second storage area. And transmitted from the first control unit to the second control unit, so that a new key can be safely shared between the two control units. For this reason, the security of encryption communication is maintained. Furthermore, this new key is simply encrypted with another key stored in the first control unit and the second control unit at that time, and is transferred from the first control unit to the second control unit. Supplied. In this way, the gaming device having the above-described configuration can maintain the safety of encryption communication by simple processing even if the key used for encryption communication leaks.

  Further, in the present embodiment, with the above configuration, the key stored in advance in the first storage area has been used in the past as the key for the encrypted communication (here, step in FIG. 24). (See processing of E90 and E93).

  According to such a configuration, a new key can be easily and reliably transferred from the first control unit to the second control unit by using the keys used in the first control unit and the second control unit. Can be sent safely to.

In the present embodiment, the second control unit further includes a second storage area according to the configuration described above.
In response to receiving the new key from the first control unit, the second control unit newly stores the key stored in the first storage area in the second storage area. Then, the key newly stored in the second storage area is used for decryption of the new key as the key stored in the first storage area (here, in FIG. (See step E93).

  By doing so, the previously used key can be stored in the second storage area in each of the first control unit and the second control unit. For example, the key is subsequently stored in the second storage area. Encrypted communication with a key is also possible.

In this embodiment, the collation system (here, the management system 1) is configured as described above.
A second game that communicates with the management device (here, the host server 510), the first gaming device (here, the pachinko machine 10), and the first gaming device, and with the management device. Device (here, card unit 20),
The first gaming device includes an integrated circuit (here, the main control chip 11 and the payout control chip 13) that controls the operation of the first gaming device,
The integrated circuit stores its own identification information (here, chip ID),
The second gaming device includes control means (here, the main control unit 21 and the communication control IC 23) capable of communicating with the integrated circuit and capable of communicating with the management device,
The management device includes storage means (here, a storage unit 512) that stores the identification information of the integrated circuit as verification information for verification.
The control means acquires the identification information from the integrated circuit (here, a process of receiving a chip ID (registration information) in step E9),
When the management device and the control means are communicable (here, when the host server is online in FIG. 23), the control means stores the acquired identification information and transmits it to the management device. Processing (here, processing for transmitting a chip ID (registration information) in step E11) is performed, and the management device collates with the verification information stored in advance as the identification information transmitted from the first control means. (Here, verification of chip ID (registration information) performed after step E11),
When the management device and the first control unit cannot communicate (here, when the host server is offline in FIG. 25), the control unit stores the acquired identification information in the first process. And a second process (here, verification of chip ID (registered information) performed after step F9).

  According to the above configuration, when the management device is online, the management device can detect the replacement of the integrated circuit by collating the identification information. When the management device is offline, the management device is previously recorded in the control means. Since the collation is performed using the identification information, the replacement of the integrated circuit can be detected (if the collation result is not for the same integrated circuit, it is understood that the integrated circuit has been replaced). As described above, according to the verification system, it is possible to detect the replacement of the integrated circuit even when the gaming device and the management device are unable to communicate with each other.

In the present embodiment, according to the configuration described above, the control means stores in advance identification information (here, a unit serial ID) of the control means,
In the management device, the identification information of the control means is stored in advance as second verification information (here, the unit serial ID of this information) (here, refer to this information of the upper server 510 in FIG. 23),
The control means transmits the identification information of the control means to the management device (here, transmission of the unit serial ID in step E1),
The management device collates the identification information of the control means transmitted from the control means with the second collation information stored in advance (here, the search performed by the control unit 511 after step E1), and If the identification information and the second verification information identify the same control means, notify the control means that they match (here, transmission of this information in step E2),
The control means performs the first process or the second process (here, the process after E8) when the management device is notified of the match.

  As a result of the collation, the identification information of the integrated circuit is exchanged after confirming the replacement of the control means, so the safety of this exchange is ensured.

In the present embodiment, the collation system has the above configuration.
A first device (here, the host server 510), a gaming device (here, the card unit 20) that communicates with the first device, and a second device (here, that communicates with the first device) A key management center server 310),
The gaming device includes an integrated circuit (here, the main control unit 21) that controls the operation of the gaming device,
The integrated circuit stores its own identification information (here, unit serial ID),
The first device stores first identification means (here, storage information) for storing the identification information of the integrated circuit as collation information (here, identification information included in the information, see the upper server 510 in FIG. 27). Part 512),
The second device stores the identification information of the integrated circuit of the newly manufactured gaming device as the verification information (here, the identification information included in this information, see the key management center server 310 in FIG. 27). Second storage means (here, storage unit 312),
The integrated circuit transmits the identification information to the first device (here, the process of step H1),
The first device transmits the identification information to the second device when the verification information indicating the same integrated circuit as the identification information transmitted from the integrated circuit is not recorded in the first storage unit. (In this case, the process of step H2), the second device uses the verification information stored in the second storage means and the identification information transmitted from the first device. Collation (here, the temporary information including the unit serial ID performed after step H3) is notified, and the collation result is notified to the first device (here, transmission of this information in step H4). .

  The integrated circuit may be a payout control chip 11. In this case, the gaming device is a pachinko machine 10. In the above embodiment, the pachinko machine 10 communicates with the second device via the card unit 20 as a result. The identification information is the chip ID of the payout control chip 11. The collation information stored in the first storage means is identification information included in the registration information (here, refer to the upper server 510 in FIG. 26). The collation information stored in the second storage means is identification information included in the registration information (here, refer to the key management center server 310 in FIG. 26). The step of transmitting the identification information performed by the first device to the second device corresponds to the process of step G5. The step of collating the verification information with the identification information corresponds to a verification process performed after step G5. The step of notifying the first apparatus of the collation result corresponds to the collation result transmission process in step G6.

  According to the above configuration, in the first device, when the verification information that matches the identification information transmitted from the integrated circuit is not recorded in the first storage means, the verification information and the identification information of the second device. Are matched. Then, when the gaming apparatus is legitimate and new (when newly installed or replaced), the identification information and the verification information identify the same integrated circuit in the verification result here. Thereby, even if there is a new installation or replacement of the gaming apparatus, appropriate verification is performed. As a result, erroneous detection of replacement of the integrated circuit is suppressed, and replacement of the integrated circuit can be detected appropriately.

  In the present embodiment, according to the above configuration, when the first device has collation information that matches the identification information transmitted from the integrated circuit recorded in the first storage unit, Processing according to the effect (here, transmission of this information in step E2 or transmission of the collation result in step E12) is performed.

  With such a configuration, during normal times when there is no new installation or replacement of a gaming device, the first device performs collation, thereby reducing the processing burden on the second device in detecting the replacement of the integrated circuit. The

  In the present embodiment, according to the above configuration, the first device is configured such that the verification information that matches the identification information transmitted from the integrated circuit is not recorded in the first storage unit, and When the collation result notified from the second device indicates that the collation information and the identification information are the same integrated circuit, the identification information is used as the collation information in the first storage. Are recorded in the means (here, the process of step H4 and the process performed after step G6). The identification information may be received from the second device, or may be received from the gaming device.

  Thus, after the gaming device is installed, authentication is performed in the first device, so that the processing load on the second device is reduced.

(Modification)
The present invention (and the configuration described elsewhere) is not limited to the above-described embodiment, and various modifications and applications are possible. The modification is illustrated below. The following modifications are applied individually or in combination.

(Modification 1)
In the above-described embodiment, the case where the integrated circuit mounted on the pachinko machine 10 and the card unit 20 which are gaming devices installed in the game hall is authenticated by the management system has been described. However, the present invention is not necessarily limited thereto. . For example, the game hall 500 is not limited to a pachinko parlor, but may be a casino, a game center, or the like. Further, the gaming apparatus is not limited to the pachinko machine 10 but may be any gaming apparatus equipped with one or more integrated circuits such as a slot machine, a game machine, or peripheral devices thereof.

  The slot machine is, for example, after a predetermined number of bets are set for one game on a predetermined game medium, and then the player operates the start lever to start variable display of identification information by the variable display device. When the player operates a stop button provided corresponding to each variable display device, the variable display of identification information is stopped within a predetermined maximum delay time from the operation timing, and all variable displays are performed. When a winning occurs according to the display result derived and displayed when the variable display of the device is stopped, a predetermined game medium predetermined according to the winning is paid out, and a specific winning occurs, a predetermined game state is determined. This is a gaming machine configured to give a player a game value.

  The slot machine is arranged at a predetermined position for each model or the like on the game island in the pachinko parlor (game room 500). Similarly to the pachinko machine 10, the slot machine also includes a payout control chip (chip that performs a process of paying out game media and the like) and a main control chip (a chip that controls the variable display device, controls the effects of the game state, etc.). There is a case to prepare. In this case, the present invention can be applied as in the above embodiment.

(Modification 2)
In the above embodiment, the case where the main control chip 13 and the payout control chip 11 are formed in one packaged device has been described. However, the main control chip 13 and the payout control chip 11 are separately packaged. It may be. In this case, for example, the IC writer 210 reads / writes information from / to each of the main control chip 13 and the payout control chip 11. The reading / writing of information with respect to the main control chip 13 and the reading / writing of information with respect to the payout control chip 11 may be performed at different timings. In this case, the main control chip 13 is mounted on the game board side of the pachinko machine 10, and the payout control chip 11 is mounted on the housing side of the pachinko machine 10. For example, if the type code is different between the game board and the case, the type code recorded on the main control chip 13 and the type code recorded on the payout control chip 11 are different. Other handling is basically the same as in the above embodiment. Thus, the integrated circuit is a set of integrated circuits (here, the main control chip 13 and the payout control chip 11), and the device information output from the second output device is used as identification information as a gaming device. (Here, the pachinko machine 10) can be included in the identification information of each set of integrated circuits determined at the manufacturing stage and mounted on the gaming device.

  Even in such a case, as described above, the identification information (chip ID and the like) of the main control chip 13 and the payout control chip 11 that are the pair of integrated circuits is output from the IC writer 210 (the above-described information). As described above, the information is read and transmitted from the integrated circuit by the IC writer 210), so that the main control chip 13 and the payout control chip 11 are combined in the manufacturing stage of the pachinko machine 10, and the combined main control is performed. Each identification information about the chip 13 and the payout control chip 11 can be used as device information (shipment information). That is, the integrated circuit of the gaming device may be used in a pair, but according to the above configuration, the identification information of the pair of integrated circuits is included in the device information output from the second output device. . Thus, any integrated circuit can be combined in the manufacturing stage of the gaming apparatus, and each piece of identification information of the combined integrated circuit can be used as device information. Therefore, any integrated circuit can be combined and mounted on the gaming device without confirming the combination at the manufacturing stage of the gaming device. Therefore, it is possible to suppress the manufacturing work of the gaming apparatus by checking the combination from becoming complicated.

(Modification 3)
The main control unit 21 may also be packaged and manufactured by the chip manufacturer 100. In this case, for example, the main control unit 21 may be shipped from the chip manufacturer 100 and predetermined information may be written by the IC writer 600.

(Modification 4)
Also, the security center server 410 may be used in the management of the communication control IC 23. In this case, for example, the second authentication information is registered in the security center server 410 instead of the key management center server 310, and the registered information is the shipping information supplied from the IC writer 610 in the security center server 410. Matched. If the verification is OK, the security center server 410 transmits the shipping information to the key management center server 310 and registers it.

(Modification 5)
Further, the security center server 410 may not be used in the management of the main control chip 13 and the payout control chip 11. In this case, for example, the first authentication information or the like is registered in the key management center server 310, and the registered information is collated with shipping information supplied from the IC writer 210 by the key management center server 310. And the key management center server 310 memorize | stores the shipping information as registration information, when collation is OK.

(Modification 6)
In the above embodiment, a case has been described where communication is performed between the key management center server 310 and the IC writer 610 in the manufacturing stage, and IC writer information verification and communication control serial ID verification are performed. is there. The key management center server 310 encrypts the IC writer information stored in the auxiliary storage unit 316 with a delivery key and outputs it to a removable medium such as an SD card, and the IC writer 610 stores the IC writer stored in the removable medium. The IC writer information may be verified by reading the writer information.

(Modification 7)
Further, the IC writer 610 outputs the shipping information stored in the auxiliary storage unit 606 to a removable medium such as an SD card, and the key management center server 310 reads the shipping information stored in the removable medium. The communication control serial ID may be verified.

  According to the configurations of the modification examples 6 and 7, even when the key management center server 310 is in an off-line state, it is possible to collate IC writer information and collate shipping information.

(Modification 8)
Further, in the above-described embodiment, an example in which the chip maker computer 110 writes information to each integrated circuit in the manufacturing stage is shown, but this is an example. A method for writing information to each integrated circuit is arbitrary, and for example, the information may be written in a manufacturing process in which the integrated circuit is manufactured.

(Modification 9)
In the above-described embodiment, an example of determining replacement of an integrated circuit has been described. However, when it is determined that replacement has been performed (in the case of collation NG), the main control unit 21 of the card unit 20 The operation of the pachinko machine 10 may be stopped by controlling the main control chip 13 and the payout control chip 11 of the pachinko machine 10 via the communication control IC 23. That is, in the present invention, a predetermined process may be performed according to the collation.

(Modification 10)
In the above-described embodiment, the case where the integrated circuit mounted on the pachinko machine 10 is verified by the security center server 410 and the integrated circuit mounted on the card unit 20 is verified by the key management center server 310 in the manufacturing stage. However, this is an example. For example, the integrated circuit mounted on the pachinko machine 10 may be verified by the key management center server 310, and the integrated circuit mounted on the card unit 20 may be verified by the security center server 410. The integrated circuit mounted in each of the pachinko machine 10 and the card unit 20 may be verified by one authentication center having the respective functions in the management center server 310.

(Modification 11)
Moreover, you may perform encryption communication suitably also in the communication between components which is not referred to above in encryption communication. For example, a key for encryption communication may be set in the communication control IC 23 and the payout control chip 11 (stored in the storage unit), and encryption communication may be performed using this key during communication. When performing encrypted communication, a key is set for both parties performing the communication.

(Modification 12)
In the above embodiment, the encryption communication is performed using the common key. However, the encryption communication may be communication using a public key and a secret key. In this case, a public key and a secret key are set as appropriate between components that perform encrypted communication. Other encryption methods are arbitrary, and encryption is performed by various methods.

(Modification 13)
The program stored in the storage unit of each device constituting the management system 1 may be downloaded via the network N.

(Modification 14)
Note that at least a part of the control unit and the processing unit of each device configuring the management system 1 may be configured by a dedicated circuit for performing at least a part of the above-described processing.

(Modification 15)
In addition, although the above information collation is performed by one device, it may be performed by the other device as appropriate. For example, the collation in step D11 or the like may be performed by the main control unit 21.

DESCRIPTION OF SYMBOLS 1 Management system 10 Pachinko machine 11 Discharge control chip 11a Processing part 11b Storage part 11c Communication part 13 Main control chip 13a Processing part 13b Storage part 13c Communication part 20 Card unit 21 Main control part 21a Processing part 21b Storage part 21c Communication part 23 Communication Control IC
23a processing unit 23b storage unit 23c communication unit 100 chip maker 110 chip maker computer 111 control unit 112 storage unit 113 input / output unit 114 system bus 115 main storage unit 116 auxiliary storage unit 200 game machine manufacturer 205 main storage unit 207 auxiliary storage unit 210 IC writer 211 control unit 212 storage unit 213 input / output unit 214 system bus 215 write / read unit 220 game machine manufacturer computer 221 control unit 222 storage unit 223 input / output unit 224 system bus 225 main storage unit 226 auxiliary storage unit 300 key management center 310 key Management center server 311 Control unit 312 Storage unit 313 Input / output unit 314 System bus 315 Main storage unit 316 Auxiliary storage unit 400 Security center 410 Security center server Bar 411 Control unit 412 Storage unit 413 Input / output unit 414 System bus 415 Main storage unit 416 Auxiliary storage unit 500 Game hall 510 Host server 511 Control unit 512 Storage unit 513 Input / output unit 514 System bus 515 Main storage unit 516 Auxiliary storage unit 600 Card unit manufacturer 605 Main storage unit 606 Auxiliary storage unit 610 IC writer 611 Control unit 612 Storage unit 613 Input / output unit 614 System bus 615 Write / read unit 620 Card unit manufacturer computer 621 Control unit 622 Storage unit 623 Input / output unit 624 System bus 625 Main storage unit 626 Auxiliary storage unit

Claims (2)

A management system that manages an integrated circuit manufactured by an integrated circuit manufacturer and a gaming device that is manufactured by the gaming device manufacturer and that includes the integrated circuit manufactured by the integrated circuit manufacturer,
A first output device for outputting identification information of the integrated circuit written by the integrated circuit manufacturer to the integrated circuit manufactured by the integrated circuit manufacturer;
A device information of the gaming device manufactured by the gaming device manufacturer, wherein the device information of the gaming device including the identification information of the integrated circuit used in the gaming device is output. An output device;
An acquisition means for acquiring the identification information of the integrated circuit output from the first output device and the device information output from the second output device; and the identification of the integrated circuit acquired by the acquisition means A management device comprising: collation means for collating information and identification information of the integrated circuit included in the device information;
A management system comprising: A management device for managing an integrated circuit manufactured by an integrated circuit manufacturer, and a gaming device manufactured by the gaming device manufacturer and equipped with the integrated circuit manufactured by the integrated circuit manufacturer,
The integrated circuit identification information written by the integrated circuit maker into the integrated circuit manufactured by the integrated circuit maker and the device information of the gaming device manufactured by the gaming device manufacturer. An acquisition means for acquiring device information of the gaming device including the identification information of the integrated circuit used in the device;
Collation means for collating the identification information of the integrated circuit acquired by the acquisition means and the identification information of the integrated circuit included in the device information;
A management apparatus comprising:

Images