JP2013042807A - Game system and game device - Google Patents

Abstract

PROBLEM TO BE SOLVED: To solve the problem of trouble in an operation that, while performing acquisition processing of a main authentication key in order to ensure high security, main operation processing can not be totally performed when the main authentication key cannot be obtained.SOLUTION: A game system performs an equipment authentication sequence by using a board initial key between a CU control part and an SC, performs a board information acquisition sequence for acquiring a board authentication key by using the board initial key when the authentication is OK, executes business telegram communication with a game machine through the use of the board authentication key when the board authentication key is obtained, and permits execution of the business telegram communication with the game machine using the board initial key for only a predetermined period when the board authentication key is not obtained.

Description

  The present invention relates to a gaming system and gaming equipment including first control means and second control means connected to be communicable with the first control means.

  Conventionally, there has been a technique in which mutual authentication processing is performed between a plurality of chips provided in a gaming machine using mutual authentication information (Patent Document 1).

JP 2004-89701 A

  In this conventional system, the actual operation processing of the game control associated with the actual game is executed on the condition that it is proper as a result of performing mutual authentication by performing cryptographic communication using an encryption key between chips. It is configured as follows.

  However, since this operation process is performed by clearing one security check called mutual authentication between chips, the operation process is executed illegally if the security of mutual authentication between chips is broken. As a result, there was a drawback that high security could not be maintained.

  Therefore, on the condition that the result of mutual authentication processing is appropriate, a process of acquiring the authentication key for executing the operation process is performed, and when the authentication key is acquired by the process, the authentication key is obtained. It is conceivable to perform control so that this operation process is executed.

  However, in such a configuration, if the authentication key cannot be acquired as a result of the acquisition process of the authentication key, it is expected that there will be an operational problem that the operation process cannot be performed.

  The present invention has been conceived in view of such circumstances, and its purpose is to perform the operation when the authentication key cannot be acquired while performing the acquisition process of the authentication key to ensure high security. It also solves an operational problem that processing cannot be performed at all.

Specific examples of means for solving the problems and their effects

(1) The present invention relates to first control means (CU control unit 323 or CU3, P stand 2, jet counter, POS terminal, etc.) and second control means connected to be communicable with the first control means ( A gaming system provided with a security chip 325b, or CU3, P stand 2, jet counter, POS terminal, etc.
Mutual authentication processing means (device authentication sequence in FIG. 123) for performing mutual authentication processing between the first control means and the second control means using a temporary operation key (substrate initial key);
An authentication key acquisition unit (substrate information acquisition sequence in FIGS. 123 and 127) for performing processing for acquiring the authentication key (substrate authentication key) on the condition that the authentication result by the mutual authentication processing unit is appropriate;
This operation processing means (business message communication with the gaming machine of FIG. 124) for executing the operation processing using the authentication key acquired by the authentication key acquisition means;
Temporary operation processing means for executing temporary operation processing using the temporary authentication key when the authentication key cannot be acquired as a result of processing by the authentication key acquiring means (FIG. 123: board serial ID authentication) The communication key exchange sequence (FIG. 130) is executed using the substrate initial key without executing the sequence and the device authentication sequence.

  According to the above configuration, since the process for obtaining the authentication key is executed on the condition that the mutual authentication process is performed using the temporary authentication key and the authentication result is appropriate, high security can be ensured. It becomes possible. In addition, when the authentication key cannot be acquired as a result of the acquisition process of the authentication key, a temporary operation process is executed using the temporary authentication key. It is possible to prevent inconveniences that cannot be achieved at all.

  (2) In the gaming system of (1) above, the temporary operation processing means executes the temporary operation processing only within a predetermined period (for example, operation is limited to two days).

  According to the above configuration, since the temporary operation process is executed only within a predetermined period, the temporary operation process in an unstable state when the authentication key cannot be obtained is allowed indefinitely. Can reduce security problems.

  (3) In the gaming system according to (1) or (2), the authenticating key acquisition means identifies the server (key management server 800) storing the authenticating key in association with the identifying number. A number (substrate serial number) is transmitted to obtain the authentication key corresponding to the identification number (FIG. 127).

  According to the above configuration, the authentication key is stored in the server in association with the identification number, and the authentication key corresponding to the identification number is acquired by transmitting the identification number to the server. This authentication key can be acquired only if the authentication key is stored in the server in association with the identification number, and the authentication key can be acquired only when the authorized identification number registered with the authentication key is sent. Security is ensured.

(4) The gaming system according to (3) further includes a server (key management server 800) that stores the authentication key in association with the identification number,
The server receives information including an identification number (substrate serial ID) used for the apparatus shipped by a manufacturer that manufactures the apparatus that acquires and stores the main authentication key and the main authentication key. The main authentication key is stored in association with the included identification number (the board authentication key is stored in association with the board serial ID).

  According to the above configuration, the server receives the information including the identification number used for the device shipped by the manufacturer that manufactured the device that acquires and stores the authentication key and the authentication key, and is included in the information In order for the server to store this authentication key in association with the identification number, this authentication key can be acquired from the server only for legitimate devices shipped by the manufacturer, and devices other than the legitimate device shipped by the manufacturer can obtain this authentication key. Security can be secured by preventing inconvenience that can be acquired as much as possible.

(5) Another aspect of the present invention is the first control means (CU control unit 323 or CU3, P stand 2, jet counter, POS terminal, etc.) A gaming device (CU3, P table 2, jet counter, POS terminal, etc.) equipped with 2 control means (security chip 325b or CU3, P table 2, jet counter, POS terminal, etc.),
Mutual authentication processing means (device authentication sequence in FIG. 123) for performing mutual authentication processing between the first control means and the second control means using a temporary operation key (substrate initial key);
An authentication key acquisition unit (substrate information acquisition sequence in FIGS. 123 and 127) for performing processing for acquiring the authentication key (substrate authentication key) on the condition that the authentication result by the mutual authentication processing unit is appropriate;
This operation processing means (business message communication with the gaming machine of FIG. 124) for executing the operation processing using the authentication key acquired by the authentication key acquisition means;
Temporary operation processing means for executing temporary operation processing using the temporary authentication key when the authentication key cannot be acquired as a result of processing by the authentication key acquiring means (FIG. 123: board serial ID authentication) The communication key exchange sequence (FIG. 130) is executed using the substrate initial key without executing the sequence and the device authentication sequence.

  According to the above configuration, since the process for obtaining the authentication key is executed on the condition that the mutual authentication process is performed using the temporary authentication key and the authentication result is appropriate, high security can be ensured. It becomes possible. In addition, when the authentication key cannot be acquired as a result of the acquisition process of the authentication key, a temporary operation process is executed using the temporary authentication key. It is possible to prevent inconveniences that cannot be achieved at all.

  (6) In the gaming machine of the above (5), the temporary operation processing means executes the temporary operation processing only within a predetermined period (for example, operation is limited to 2 days).

  According to the above configuration, since the temporary operation process is executed only within a predetermined period, the temporary operation process in an unstable state when the authentication key cannot be obtained is allowed indefinitely. Can reduce security problems.

  (7) In the gaming machine of the above (5) or (6), the authentication key acquisition means determines the identification number for the server (key management server 800) storing the authentication key in association with the identification number. (Substrate serial number) is transmitted to obtain the authentication key corresponding to the identification number (FIG. 127).

  According to the above configuration, the authentication key is stored in the server in association with the identification number, and the authentication key corresponding to the identification number is acquired by transmitting the identification number to the server. This authentication key can be acquired only if the authentication key is stored in the server in association with the identification number, and the authentication key can be acquired only when the authorized identification number registered with the authentication key is sent. Security is ensured.

It is a front view which shows a card unit and a pachinko machine. It is a rear view of a pachinko machine. It is a front view for demonstrating the circulation mechanism of a game ball. It is a rear view for demonstrating the circulation mechanism of a game ball. It is a block diagram which shows the control circuit used for a card unit and a pachinko machine. It is explanatory drawing for demonstrating the notification process at the time of detecting abnormality as a result of mutual authentication. It is a figure which shows the structure of the flame | frame used by the communication performed between a card unit and a pachinko machine. It is explanatory drawing for demonstrating the various data memorize | stored in the card unit side and the pachinko machine side, and its transmission / reception. It is explanatory drawing explaining the outline of the command and response which are transmitted / received between a card unit and a pachinko machine. It is explanatory drawing for demonstrating the content of a status information request | requirement. It is explanatory drawing for demonstrating the content of a CU state. It is explanatory drawing for demonstrating the content of a status information response. It is explanatory drawing for demonstrating the content of a status information response. It is explanatory drawing explaining the meaning of various numbers of balls, and the content of the confirmation point. It is explanatory drawing explaining the content of each bit of the game machine state 1. FIG. It is explanatory drawing explaining the content of each bit of the game machine state 2. FIG. It is explanatory drawing explaining the content of the classification information in game information. It is explanatory drawing explaining the content of the prize ball information in game information. It is explanatory drawing for demonstrating the content of the card insertion notification. It is explanatory drawing for demonstrating the content of a card insertion response. It is explanatory drawing for demonstrating the content of the card return notification. It is explanatory drawing for demonstrating the content of a card return response. It is explanatory drawing for demonstrating the content of a recovery request. It is explanatory drawing for demonstrating the content of the recovery process of a pachinko machine. It is explanatory drawing for demonstrating the content of the recovery response. It is explanatory drawing for demonstrating the content of a communication start request | requirement. It is explanatory drawing for demonstrating the content of a communication start response. It is explanatory drawing for demonstrating the content of the communication termination request. It is explanatory drawing for demonstrating the content of the communication end response. It is explanatory drawing for demonstrating the content of a communication test request | requirement. It is explanatory drawing for demonstrating the content of a communication test response. It is a figure which shows the aspect of transmission / reception of the command and response between a card unit and a pachinko machine. It is a figure which shows an example of a process when a communication disconnection is detected by the card unit side. It is a figure which shows an example of a process at the time of detecting a communication disconnection by the pachinko machine side. It is a figure which shows an example of a process with the card unit and the pachinko machine at the time of power activation. It is a figure which shows an example of a process with a card unit and a pachinko machine when a card is inserted in a card unit. It is a figure which shows an example of a process with the card unit and the pachinko machine at the time of money_receiving | payment to the inserted card | curd. It is a figure which shows an example of a process with a card unit and a pachinko machine when lending a ball from the prepaid balance of the inserted card. It is a figure which shows an example of a process with a card unit and a pachinko machine when paying out a lot of balls and paying out a stored ball. It is a figure which shows an example of a process with a card unit and a pachinko machine when subtracting a part of game ball. It is a figure which shows an example of a process with a card unit and a pachinko machine when subtracting all the game balls. It is a figure which shows an example of a process with a card unit and a pachinko machine when returning the inserted card | curd. It is a figure which shows an example of a process with a card unit and a pachinko machine in case a count operation is prompted when the return operation of the inserted card is detected. It is a figure which shows an example of a process with a card unit and a pachinko machine when collect | recovering the inserted card | curd automatically. It is a figure which shows an example of a process with the card unit and the pachinko machine in a big hit. It is a figure which shows an example of a process with a card unit and a pachinko machine when counting operation is detected during a game. It is a figure which shows an example of a process when there exists a power supply disconnection and a communication circuit disconnection before transmitting a command from a card unit to a pachinko machine. It is a figure which shows an example of a process when there exists a power supply disconnection and a communication circuit disconnection, and the command from a card unit to a pachinko machine has not reached | attained. It is a figure which shows an example of a process when there exists a power supply disconnection and a communication circuit disconnection, and the response from a pachinko machine to a card unit has not yet reached. It is a figure which shows an example of a process when the response from a pachinko machine to the card unit has not yet reached. It is a figure which shows an example of a process when there exists a power supply disconnection and a communication circuit disconnection, and the command of the addition request | requirement from a card unit to a pachinko machine has not reached | attained. It is a figure which shows an example of a process when there exists a power supply disconnection and a communication circuit disconnection, and the response of the addition response from a pachinko machine to a card unit has not reached | attained. FIG. 10 is a diagram illustrating an example of processing when power is disconnected and a communication circuit is disconnected before transmitting a command from the card unit to the pachinko machine, and a communication partner after restoration is inconsistent. FIG. 10 is a diagram illustrating an example of processing when there is a power cut and a communication circuit disconnection, and a command from the card unit to the pachinko machine has not yet reached, and communication partners after restoration do not match. FIG. 10 is a diagram illustrating an example of processing when there is a power cut and a communication circuit disconnection, and a response from the pachinko machine to the card unit has not yet reached, and communication partners after restoration do not match. FIG. 10 is a diagram illustrating an example of processing when there is a power cut and a communication circuit disconnection, and an addition request command from the card unit to the pachinko machine has not yet reached, and the communication counterparts after restoration do not match. FIG. 10 is a diagram showing an example of processing when there is a power interruption and a communication circuit disconnection and the response of the addition response from the pachinko machine to the card unit has not yet reached, and the communication counterpart after the restoration is inconsistent. It is a figure which shows an example of a process at the time of the game ball addition result abnormality at the time of ball lending, holding ball payout, and saving ball payout. It is a figure which shows an example of the possession ball sharing process performed between a card unit and a pachinko machine. It is a figure which shows an example of the wagon service process performed between a card unit and a pachinko machine. It is the figure which showed the example of a combination of the structure of the system for games. It is a flowchart for demonstrating the process of the system for games when a game ball is more than predetermined number. It is a screen figure of a display device when a ball sharing process is performed. It is a screen figure of a display device when a ball sharing process is performed. It is a screen figure of a display device when a ball sharing process is performed. It is a screen figure of the indicator when a ball sharing process is performed. It is a screen figure of the indicator when a ball sharing process is performed. It is a screen figure of the indicator when a ball sharing process is performed. It is a screen figure of the indicator when a ball sharing process is performed. It is a screen figure of the indicator when a wagon service is performed. It is a screen figure of the indicator when a wagon service is performed. It is a screen figure of the indicator when a wagon service is performed. It is a screen figure of the indicator when a wagon service is performed. It is a screen figure of the indicator when a wagon service is performed. It is a screen figure of the indicator when a wagon service is performed. It is a screen figure of the indicator when a wagon service is performed. It is a block diagram which shows the relationship with the game board and game frame (front frame) of a pachinko machine about fraud detection processing. It is a figure for demonstrating the information transmitted from the main control board with respect to the information request | requirement of a payout control board, in order to perform a fraud detection process. It is a flowchart which shows control of the fraud detection process at the time of power activation. It is a flowchart showing the fraud detection process in a game. It is an example of the dollar box display performed with the indicator of a card unit. It is a flowchart for demonstrating the operation process of the re-play button of FIG. It is a flowchart for demonstrating the operation process of a count button. It is a figure which shows an example of the display of count operation. It is a flowchart for demonstrating control of the payout control part and CU control part by a radio wave sensor. It is explanatory drawing explaining the outline of the command and response transmitted / received between CU control part and SC. It is explanatory drawing for demonstrating the content of the board | substrate connection request | requirement. It is explanatory drawing for demonstrating the content of a board | substrate connection response. It is explanatory drawing for demonstrating the content of the board | substrate shipping key request | requirement. It is explanatory drawing for demonstrating the content of a board | substrate shipment key response. It is explanatory drawing for demonstrating the content of the board | substrate serial ID authentication request | requirement 1. FIG. It is explanatory drawing for demonstrating the content of the board | substrate serial ID authentication response 1. FIG. It is explanatory drawing for demonstrating the content of the board | substrate serial ID authentication request | requirement 2. FIG. It is explanatory drawing for demonstrating the content of the board | substrate serial ID authentication response 2. FIG. It is explanatory drawing for demonstrating the content of the apparatus authentication request | requirement 1. FIG. It is explanatory drawing for demonstrating the content of the apparatus authentication response 1. FIG. It is explanatory drawing for demonstrating the content of the apparatus authentication request | requirement 2. FIG. It is explanatory drawing for demonstrating the content of the apparatus authentication response 2. FIG. It is explanatory drawing for demonstrating the content of the board | substrate authentication result notification. It is explanatory drawing for demonstrating the content of a board | substrate authentication result response. It is explanatory drawing for demonstrating the content of a board | substrate inquiry information request | requirement. It is explanatory drawing for demonstrating the content of a board | substrate inquiry information response. It is explanatory drawing for demonstrating the content of the board | substrate information notification. It is explanatory drawing for demonstrating the content of the board | substrate information notification response. It is explanatory drawing for demonstrating the content of the gaming machine chip inquiry information request. It is explanatory drawing for demonstrating the content of the gaming machine chip inquiry information response. It is explanatory drawing for demonstrating the content of the gaming machine chip collation result notification. It is explanatory drawing for demonstrating the content of the gaming machine chip collation result response. It is explanatory drawing for demonstrating the content of an operation | movement information request | requirement. It is explanatory drawing for demonstrating the content of an operation information response. It is explanatory drawing for demonstrating the content of the operation information notification result. It is explanatory drawing for demonstrating the content of the operation information notification result response. It is explanatory drawing for demonstrating the content of a counter information request | requirement. It is explanatory drawing for demonstrating the content of a counter information response. It is explanatory drawing for demonstrating the content of a communication key request | requirement. It is explanatory drawing for demonstrating the content of a communication key response. It is explanatory drawing for demonstrating the content of a board | substrate state request | requirement. It is explanatory drawing for demonstrating the content of a board | substrate state response. It is a figure which shows the aspect of transmission / reception of the command and response between CU control part and SC. It is a figure which shows an example of the process which a CU control part inquires to a high-order apparatus, and notifies to SC as a result. It is a figure which shows an example of a process when a communication line disconnection is detected by the CU control part side. It is a figure which shows an example of another process when a communication line disconnection is detected by the CU control part side. It is a figure explaining the power-on / normal start-up process of a CU control part. It is a figure explaining another process at the time of power activation and normal start-up of a CU control part. It is a figure explaining the process of power activation and factory collection of a CU control part. It is a figure explaining the process in the case of turning on the power supply of a gaming machine again. It is a figure explaining the process in the case of acquiring board | substrate information. It is a figure explaining the process of a gaming machine chip information authentication sequence. It is a figure explaining the processing of a game machine communication start and the sequence of a gaming machine Ready. It is a figure explaining the process of a communication key exchange sequence. It is a figure explaining the process of the authentication sequence of board | substrate serial ID. It is a figure explaining the process of a device authentication sequence. It is a figure explaining the process of an authentication abnormality sequence. It is a figure explaining the process of the sequence at the time of abnormality detection. (A) (b) is a figure which shows the counter used for encryption and decryption of SE2 mode, (c) is explanatory drawing explaining the structure of block cipher encryption by SE2 mode. It is explanatory drawing explaining the mechanism of the block cipher decoding by SE2 mode. It is a figure which shows the encryption communication in the normal time when the receiving side which received the encryption communication text is decoded appropriately. It is a figure which shows the process at the time of abnormality when the response from a CU communication control part to a main control part does not arrive. It is a figure which shows the process at the time of abnormality when the command from a main control part to a CU communication control part does not arrive. FIG. 139 is a diagram showing a process of a modification example when the response has not reached reach shown in FIG. 138. It is a figure which shows the modification of the process at the time of the abnormality which a command has not reached | attained. (A) is a flowchart which shows the encryption process by SE2 mode, (b) is a flowchart which shows the decryption process by SE2 mode. (A) is a flowchart showing the specific control contents of the counter repair process shown in FIGS. 138 and 139, and (b) shows the specific control contents of the repair process of the modification shown in FIGS. 140 and 141. It is a flowchart. It is a figure for demonstrating the aspect of transmission / reception of the command and response between the security chip 325b and the communication control IC 325a. It is a figure for demonstrating the process when the communication disconnection is detected by SC325b side. It is a figure explaining the process of the authentication sequence of communication control IC325a. It is a figure explaining the process of a security information update sequence. It is a figure explaining the process of the sequence of the authentication abnormality of communication control IC325a. It is a figure for demonstrating the counter operation | movement of the decoding process by SE2 mode. It is a perspective view which shows the state which opened the front door of the slot machine. It is explanatory drawing for demonstrating the various data memorize | stored in each of a card unit and a slot machine, and its transmission / reception aspect.

Hereinafter, embodiments of the present invention will be described with reference to the drawings.
<Configuration of pachinko machine>
First, the configuration of the pachinko machine according to the present embodiment will be described with reference to FIG. A plurality of game islands (not shown) arranged in the amusement hall are provided with enclosed circulation pachinko machines (hereinafter abbreviated as game machines, pachinko machines, or P machines) 2 as examples of game machines. Note that a card unit (hereinafter also abbreviated as CU) 3 as an example of a gaming device is installed in a one-to-one correspondence with the pachinko machine 2 at a side position on a predetermined side of the pachinko machine 2. Yes.

  The pachinko machine 2 encloses a pachinko ball as an example of a game medium inside, and when the player operates the hitting operation handle 25, the firing motor 18 (see FIG. 2) is driven to make one shot of the enclosed ball. The game board 26 is configured so that it can be played one by one in the game area 27 in front of the game board 26. Specifically, a touch sensor is provided around the batting operation handle 25, and the player's hand touches the touch sensor while the player is operating the batting operation handle 25, and the player's hand. Is detected by the touch sensor, and the firing motor 18 is driven. In this state, the hitting momentum is adjusted in accordance with the amount of rotation of the hitting operation handle 25 by the player, and the ball is shot into the game area 27.

  The pachinko balls enclosed in the pachinko machine 2 are generally configured by plating hard chrome on the surface of a pachinko ball main body such as a steel ball or a stainless steel ball. However, instead of this chrome plating, a hard material such as diamond-like carbon (DLC) that is excellent in lubricity, wear resistance, and surface smoothness may be coated. The coated diamond-like carbon thin film preferably has a Vickers hardness of about 7000 Hv and a hardness similar to that of diamond.

  Furthermore, as another example of the pachinko ball body, instead of steel balls and stainless steel balls, SUS304 steel material defined in JISG4305 or JISG4304 is used, for example, manufactured into a spherical shape having a diameter of about 11.0 mm. Also good. The mass is preferably 5.4 g or more and 5.7 g or less.

  In addition, the surface of the pachinko ball thus manufactured may be subjected to hard chrome plating instead of the material such as diamond-like carbon (DLC) described above. Since chromium is a non-magnetic metal material, there is no possibility that illegal induction to a winning opening by a magnet will be performed even if the surface of a pachinko ball is plated.

  In addition, SUS304 has the chemical component of the mass percentage shown below as prescribed | regulated by GISG4305 or GISG4304.

  C: 0.08% or less, Si: 1.00% or less, Mn: 2.00% or less, P: 0.045% or less, S: 0.030% or less, Ni: 8.00 to 10.50% , Cr: 18.00 to 20.00%. The rest other than these components is iron and inevitable impurities.

  The pachinko balls may be austenitic stainless steel (for example, SUS305) other than SUS304. This austenitic stainless steel is steel specified by JISG0203. Furthermore, the pachinko ball may be a metal other than austenitic stainless steel, such as aluminum.

  When a pachinko ball is manufactured using such a non-magnetic metal material, the pachinko ball can be prevented from illegal acts that illegally guide the pachinko ball launched into the game area 27 to various winning holes using a magnet. Since it is a nonmagnetic material but a metal material, the pachinko ball can be detected by a conventional proximity switch.

  In addition, as a means to prevent fraudulent acts that illegally guide pachinko balls to various winning holes using a magnet, for example, a magnet detection sensor is provided in a gaming machine, and abnormality detection is performed by detecting abnormality when detecting the magnetic force by the magnet. However, in this case, a magnet detection sensor must be provided in the gaming machine, which causes a disadvantage of increasing the cost of the gaming machine. However, in the case of using pachinko balls made of a nonmagnetic metal material, the above-described disadvantage of cost increase does not occur.

  The pachinko machine 2 shown in FIG. 1 is a so-called first type of pachinko machine, and a variable display device (also referred to as a special symbol) 278 is provided in the center of the game area 27. In addition, the game area 27 is provided with a plurality of types of winning holes through which the inserted pachinko balls can be won. In the game area 27 shown in FIG. 1, one large winning opening (variable winning ball apparatus) 271, three normal winning holes 272, 273, 274 and three start winning holes 275, 276, 277 are shown. ing. In particular, the start winning opening 276 is configured by an electric tulip that can be changed between a first state (for example, an open state) that is advantageous to the player and a second state (for example, a closed state) that is disadvantageous to the player. .

  The variable display device 278 variably displays based on the detection signal of the start winning ball won in each start winning opening 275, 276, 277. When the display result of the variable display device is a combination of specific identification information (for example, a glance), a big hit state is established and the big prize opening 271 is opened.

  In addition, since the display result of the variable display device is a combination of predetermined special identification information (for example, a combination of probability variation symbols such as 777) out of a combination of jackpot symbols (grooves), the probability variation big hit state is A probability variation state (probability variation state) in which the occurrence probability of the jackpot is improved after the occurrence of the jackpot state is generated.

  The pachinko balls that have been driven into the game area 27 are won at any of the winning openings or are collected at the out opening 145 (see FIG. 2) without winning. The pachinko balls won in the winning opening and the pachinko balls collected in the out mouth 145 are returned again to the hitting ball launch position through the collection path in the pachinko machine 2. Then, when the player operates the hitting operation handle 25, the pachinko ball at the hitting position is again shot into the game area 27.

  A display 54 is provided at a position below the game area 27 in the pachinko machine 2. The display 54 is composed of a liquid crystal display device, and displays a display screen as will be described later with reference to FIGS. 63 to 76 or 84 to the player.

  Further, a counting button 28 is provided at the left position of the hitting operation handle 25 in the pachinko machine 2 for counting the game balls to the holding balls. As will be described in detail later, when the count button 28 is pressed once, for example, 100 balls are counted from the game balls to the holding balls, and when pressed for a long period of time (long press), the game balls currently held are considered. Then, the number of game balls is counted from the number of balls corresponding to the number of balls pressed.

  Thus, since the counting button 28 is provided on the P table side, the operability of the player sitting facing the P table can be improved as compared with the case where the counting button 28 is provided on the CU side.

<Configuration of card unit>
Next, the configuration of the card unit according to the present embodiment will be described with reference to FIG. This card unit 3 is a visitor card (also referred to as a general card) having a prepaid function, which is a game recording medium issued to a general player who has not registered as a member, or a member who has registered as a member in the game hall. Receive a membership card, which is a game recording medium issued to a player. Visitor card or membership card is an IC card.

  The card unit 3 that has received these cards has a function of converting the game value (for example, the card balance, the number of possessed balls, or the number of accumulated balls) owned by the player specified by the record information of the card into “game ball data”. Have In the pachinko machine 2, a ball game equivalent to the number of balls specified by the data of game balls is made possible. That is, “game ball data” is data indicating the number of remaining fireable shots. In the following description, “game ball data” is simply referred to as “game ball” in the same manner as a stored ball and a holding ball.

  On the front side of the card unit 3, a bill insertion slot 302 for inserting bills, a protruding portion 305 formed to project forward from the front side of the device, and a card insertion / discharge port for inserting a membership card or a visitor card 309 etc. are provided. A membership card or a visitor card inserted into the card insertion / discharge port 309 is received by a card reader / writer (not shown), and information recorded on the card is read.

  In the protrusion 305 described above, on the surface facing the player, the display 312 and the membership card ID recorded on the membership card (also simply referred to as the card ID) and the membership card when the membership card is received. An infrared signal is received by the IR photosensitive unit 320 from a replay button 319 for executing a replay game using the number of stored balls specified by the ID and a remote control (not shown) possessed by an attendant of the game hall, and an electronic signal An IR light receiving unit is provided for converting to and outputting.

  The display 312 displays the prepaid balance (also referred to as card balance or simply balance) recorded on the inserted game recording medium (card), but can display the number of game balls and other various information. In addition, the surface is configured with a transparent touch panel, and various operations can be input by touching various display items displayed on the display unit of the display 312 with a finger.

  When the replay button 319 is operated, if the number of possessed balls acquired by the player is recorded on the inserted card, a part of the number of possessed balls is withdrawn and converted into a game ball, and the converted game ball is converted into a converted game ball. Based on this, it is possible to play a game with the pachinko machine 2. On the other hand, if the inserted card is a membership card and the number of possession balls is not recorded and the storage ball is recorded in the hall management computer, etc., a part of the storage ball is withdrawn and becomes a game ball. It is converted and the game by the pachinko machine 2 becomes possible. That is, when both the stored ball and the holding point are stored in association with the inserted card, the holding ball is withdrawn preferentially.

  Here, the “storing ball” is a game medium deposited in a game hall, and is generally managed by a hall management computer or other management computer installed in the game hall.

  “Number of possessed balls” is the number of balls that the player possesses as a result of the player playing the game with the gaming machine on the card, and the number of balls that have not yet been deposited in the game hall That is. Generally, the number of balls that the player has acquired on the day of the game hall is called “mochidama”, and the number of balls that the player has acquired before the previous day and that has been deposited in the amusement hall is “save ball”. Say.

  The “game ball” is data on the number of balls that can be fired by the gaming machine. As described above, this data is generated in exchange for withdrawing the balance of the prepaid card, holding balls, or storing balls.

  Note that the number of possessed balls may be managed by a management device for managing the number of possessed balls set in the game hall. In short, the difference between “sold balls” and “mochidama” is the number of balls that have been deposited in the amusement hall as a result of a storage operation for depositing in the amusement hall, or is still deposited in the amusement hall. It is a point whether it is the number of balls of the stage which is not.

  In the present embodiment, the stored ball data is not directly recorded on the member card, but is stored in association with the member card number in an upper server such as a hall management computer, and the corresponding stored ball can be searched based on the member card number. ing. On the other hand, Mochitama records directly on the card. However, the present invention is not limited to this, and both may be stored in the upper server in association with the card number. In the case of a visitor card, Mochitama is recorded directly on the visitor card. However, the present invention is not limited to this, and the holding ball may be stored in the upper server in association with the card number. When the host server stores the data in association with the card number, data that can specify the time stored in the host server may be written on the card (member card, visitor card) and discharged. Also, the prepaid balance is directly written on a card (member card, visitor card) and discharged.

  Note that the timing for storing the holding ball in a card (member card, visitor card) or a higher-level server is stored in a fixed period, for example, in real time whenever the counting button 28 is operated and the counting process is performed. Or when storing the card in a batch.

  The banknote inserted into the banknote insertion slot 302 is taken in by a currency discriminator (not shown), and its authenticity and banknote type are identified.

  A ball lending button (also referred to as a lending button) 321 and a return button 322 are further provided on the front side of the card unit 3. The ball lending button 321 is a button for performing an operation (conversion operation to a game ball) for withdrawing the balance recorded on the inserted card and using it in a game by the pachinko machine 2. The return button 322 is operated when the player finishes the game, and the number of game balls determined at the end of the game on the inserted card (the number of balls at the time of card insertion-the number of conversions to game balls + counting operation) This is an operation button for memorizing and discharging the number of possessed balls counted by.

<Pachinko ball circulation route>
2 is a rear view of the pachinko machine 2, FIG. 3 is a front view for explaining the circulation mechanism of the game balls, and FIG. 4 is a rear view for explaining the circulation mechanism of the game balls. With reference to FIG. 2 to FIG. 4, the circulation path of the enclosed circulation type pachinko balls will be mainly described.

  The game board holding frame 95 of the pachinko machine 2 is provided with a rotation lever 100 for attaching the game board. By rotating the rotation lever 100, the game board 26 can be attached and detached. The pachinko machine 2 according to the present embodiment can be divided into a gaming board 26 and other gaming machine frames as described above. In particular, the gaming board 26 is different for each model of pachinko machine developed by each company, while the gaming machine frame is a common common frame regardless of the model. For this reason, it is sufficient for the game store to replace only the game board when replacing a new stand.

  All winning balls that are won from a winning opening provided in the game area 27, a variable winning ball apparatus, etc. are collected by the winning ball collecting cover member 144 and guided to the collection ball passing path 901. On the other hand, the out ball that has entered the out port 145 also flows down the out ball flow path 702. The out ball flow path 702 is provided with an out ball detection switch 701, and a ball flowing down the out ball flow path 702 is detected.

  On the other hand, the foul balls flow down the foul ball return path 151 and flow down from the foul ball return port 150 through the foul ball return path 902 and the recovery ball passage path 901. In the middle of the foul ball return path 151, a foul ball detection switch 33 for detecting a foul ball flowing down is provided.

  The out ball flowing down the out ball flow path 702 enters the recovery ball passage path 901, flows down together with the winning ball and the foul ball, and enters the ball collection path 189. A firing ball detection switch 903 is provided in the middle of the recovery ball passage route, and all balls in which the winning ball, the out ball and the foul ball merge are detected.

  Further, a 50 replenishment detection switch (also referred to as a game ball shortage detection switch) 904 is provided at an intermediate position on the downstream side of the shot ball detection switch 903. The 50 replenishment detection switch 904 is for detecting whether or not the number of pachinko balls built in the pachinko machine 2 has reached a predetermined number (50). On the other hand, the above-described shot ball detection switch 903 collects and detects all the pachinko balls that have been shot into the game area 27. When the number of pachinko balls detected by the detection switch 903 becomes equal, it is detected that all the pachinko balls that have been driven into the game area 27 have been collected.

  The fired ball detection switch 903 having such a role is also used for detecting that the number of encapsulated balls built in the pachinko machine 2 exceeds a predetermined number (50). That is, when a predetermined number (50) of pachinko balls are enclosed in the pachinko machine 2, the last 50th pachinko balls of the enclosed balls that are stopped in a non-operating state in which no game is being performed are displayed. The position is configured to be located between the 50 replenishment detection switch 904 and the firing ball detection switch 903.

  As a result, when more than a predetermined number (50) of pachinko balls are enclosed in the pachinko machine 2, the pachinko balls that are parked in a state where they are not being played will exceed the detection position of the firing ball detection switch 903. The fired ball detection switch 903 is always in a ball detection state, thereby making it possible to detect that the number of encapsulated balls is too large. On the other hand, if the number of encapsulated balls is less than the predetermined number (50), the pachinko balls that are parked in the non-game state are located downstream of the detection position of the 50 replenishment detection switch 904, and the replenishment 50 The individual detection switch 904 enters a non-detection state where no ball is detected. As a result, it is possible to detect that the number of encapsulated balls is too smaller than the predetermined number (50).

  The pachinko balls that have flowed down the ball collection path 189 enter a transport device 190 for transporting the pachinko balls upward. The conveyance device 190 includes a conveyance screw 190b that is rotated by the conveyance motor 40, and the pachinko ball is conveyed upward by the rotation of the conveyance screw 190b. The conveying device 190 is further provided with a pair of left and right polishing members 913 that polish the pachinko balls by contacting the pachinko balls in the middle of conveyance, and the surface of the pachinko balls is polished while being conveyed upward. The The polishing member 913 is rotated by the driving force of the polishing motor 193a to polish the pachinko balls.

  A ball raising switch (lower) 41b is provided in the vicinity of the pachinko ball entrance of the transport device 190, and a pachinko ball entering the transport device 190 is detected. On the other hand, a pachinko ball conveyed upward by the conveying device 190 and discharged from the conveying device 190 is detected by a ball raising switch (upper) 41a. The detected pachinko ball flows down to the rectifier 916. The rectifier 916 is for supplying pachinko balls one by one to the ball launch position. When the player operates the hitting operation handle 25, the firing motor 18 is driven and the hitting hammer 920 is intermittently swung. One pachinko ball that has been supplied to the launch position by the rectifier 916 is ejected by the hitting hammer 920 and the pachinko ball is driven into the game area 27.

  The rectifier 916 is provided with a rectifier solenoid 916a and a ball feed member 916b that swings up and down by the driving force of the rectifier solenoid 916a in order to supply pachinko balls one by one to the ball firing positions by the hitting hammer 920. Yes. The ball feed member 916b has a U-shape as shown in FIG. 2, and receives one pachinko ball that has flowed down, and in this state, the rectifier solenoid 916a is excited to drive the ball by its driving force. The member 916b swings downward. Then, the received pachinko ball is supplied to the ball hitting position. When the hitting hammer 920 bounces the supplied pachinko ball, the pachinko ball is driven into the game area 27.

  The hitting hammer 920 is biased by a spring in the hitting direction of the hitting ball, and the hitting hammer 920 is moved in the direction opposite to the hitting direction (back swing direction) by the action of a cam that is rotated by the driving force of the firing motor 18. It is swung. Then, when the predetermined amount of rocking is performed, the cam action is released and the hitting hammer 920 is rocked in the driving direction by the biasing force of the spring, so that the pachinko ball is bullet-launched. The spring urging in the hitting direction can be adjusted by rotating the hitting operation handle 25 by the player, whereby the hitting momentum can be adjusted.

  A ball removal portion 915 is provided between the rectifier 916 and the ball raising switch (upper) 41a. The ball removal portion 915 is provided with a ball removal motor 915a. When a game attendant operates a ball removal switch 922 provided on the relay board 921, the ball removal motor 915a rotates by a predetermined amount, and the enclosed ball can be extracted out of the path.

  The ball raising switch (upper) 41 a is used for the on / off control of the conveyance motor 40 by the detection signal. In a state where the hitting operation by the hitting operation handle 25 is not performed and the hitting ball is not shot, the rectifier 916 does not perform the ball feeding operation, so that the pachinko balls conveyed upward by the conveying device 190 flow down at the rectifier 916. Is stopped and stopped. When the pachinko ball to be stopped reaches the detection position of the ball raising switch (upper) 41a, a ball detection signal is constantly output from the ball raising switch (upper) 41a. When the continuous output state of such a ball detection signal continues for a predetermined time (for example, several milliseconds), the driving of the transport motor 40 is stopped and the transport of the ball upward is stopped.

  On the other hand, when the player rotates the hitting operation handle 25 to fire the hitting ball, the rectifier 916 executes a ball feeding operation. As a result, the ball that has stopped and stopped at the rectifier 916 is stopped. The ball detection signal is not output from the ball raising switch (upper) 41a. Then, the drive of the conveyance motor 40 is started and a ball is conveyed. Since the number of balls raised per unit time by driving the conveyance motor 40 is controlled to be larger than the number of balls firing per unit time by driving the firing motor 18, the driving of the conveyance motor 40 is started. When a little time has passed, the ball raising switch (upper) 41a again outputs a ball detection signal, and the driving of the carry motor 40 is stopped. However, since the hitting of the hit ball continues, the ball detection signal is not output again from the ball raising switch (upper) 41a. Then, the drive of the conveyance motor 40 is started and a ball is conveyed. In the operating state in which the player is performing the hitting operation, the driving and stopping of the transport motor 40 are repeated.

  The detection of game ball launching, which detects that the number of game balls has been fired into the game area 27, is detected by the change of the ball raising switch (upper) 41a from on to off. This detection is detected by a port input on the payout control board 17 (see FIG. 5) on which the payout control unit 171 is provided. Based on this detection, the payout control unit 171 subtracts “1” from the number of game balls. To do.

  The firing motor 18 is provided with a firing motor origin sensor (not shown). This firing motor origin sensor is for stopping the firing motor 18 at a predetermined origin position. The firing motor 18 stops when the player releases his / her hand from a touch link (not shown) provided on the hitting operation handle 25, and when the firing motor origin sensor detects the origin of the firing motor 18 at the time of the stop. To control the firing motor 18 to stop.

  In addition, when the power of the pachinko machine 2 is turned on, if the launch motor 18 is deviated from the origin position and the output of the launch motor origin sensor 37 is OFF, the launch motor 18 is rotated forward depending on the current position of the launch motor 18. Alternatively, control is performed to reverse the position and move the stop position of the firing motor 18 to the origin without firing the pachinko ball. The current stop position of the firing motor 18 is compared with the position of the origin to determine whether the firing motor 18 is rotated in the forward direction or the reverse direction in the direction of rotation close to the origin position. You may make it move a stop position to an origin by carrying out rotation control to.

  Similarly, a ball removal motor origin sensor (not shown) is provided in the ball removal motor 915a, and the ball removal motor 915a is controlled to stop at the origin position.

  The above-described winning ball detection switch, 50 replenishment detection switch 904, ball raising switch (upper) 41a, ball raising switch (lower) 41b, foul ball detection switch 33, and out ball detection switch 701 are electrostatic capacitances due to the passage of balls. It consists of proximity switches that detect changes in On the other hand, only the shot ball detection switch 903 is configured by a photosensor of a light projecting / receiving type. In amusement halls, there are cases where fraudulent acts using radio waves are performed in which fraudulent radio waves are transmitted to misdetect the ball detection switch. When such an improper radio wave is transmitted, the proximity switch may be erroneously detected, but the photosensor has no risk of erroneous detection.

  As a result, when a fraudulent act of transmitting an improper radio wave occurs, the winning ball detection switch, the foul ball detection switch 33, and the out ball detection switch 701, which are configured by proximity switches, output detection signals associated with erroneous detection. However, since there is no risk of erroneous detection of the fired ball detection switch 903 formed of a photosensor, the total number of detected balls and the fired ball of the foul ball detection switch 33, the out ball detection switch 701, and the winning ball detection switch. A wrinkle occurs between the number of balls detected by the detection switch 903. As a result, fraudulent acts caused by radio waves can be monitored. It should be noted that the winning ball detection switch, the 50 replenishment detection switch 904, the ball raising switch (upper) 41a, the ball raising switch (lower) 41b, the foul ball detection switch 33, the out ball detection switch 701, and the shot ball detection switch 903 are provided. , All may be composed of the same type of switch.

<Configuration of card unit and pachinko machine>
FIG. 5 is a block diagram showing the configuration of the card unit 3 and the pachinko machine 2. With reference to FIG. 5, the outline of the control circuit of the card unit 3 and the pachinko machine 2 will be described.

  The card unit 3 is provided with a CU control unit 323 composed of a microcomputer or the like. The CU control unit 323 includes a CPU (Central Processing Unit) as a control center, a ROM (Read Only Member) storing a program for operating the CPU, control data, and the like, and a RAM ( Random Access Memory) and an input / output interface for maintaining signal consistency with peripheral devices.

  The CU control unit 323 is provided with an external communication unit (not shown) for communicating with a hall management computer and a higher-level server 801 (see FIG. 77) for security management, and the pachinko machine 2 A security board 325 for communicating with the payout control board 17 while ensuring security is provided. The card unit 3 is provided with a connection part (not shown) to the pachinko machine 2 side, and the pachinko machine 2 is provided with a connection part (not shown) to the card unit 3 side. These connection parts are constituted by connectors, for example.

  The security board 325 on the CU side and the payout control board 17 on the P platform side are communicably connected via this connector and connection wiring. The security board 325 is provided with a communication control IC 325a for controlling communication between the security board 325 and the payout control board 17, and a security chip (SC) 325b for monitoring the security of the pachinko machine 2.

  The authenticity and type of the banknote are identified by the above-described money identifier, and the identification result signal is input to the CU control unit 323. When the IR photosensitive unit 320 receives infrared rays emitted from a remote controller owned by a game attendant, the received light signal is input to the CU control unit 323. The card reader / writer reads the recorded information of the inserted card, and the read information is input to the CU control unit 323. At the same time, the data to be written to the inserted card from the CU control unit 323 to the card reader / writer. When transmitted, the card reader / writer writes the data to the inserted card.

  The CU control unit 323 manages and stores the player's possession balls when the player is playing. Data such as a balance or the number of game balls is output from the CU control unit 323 to the display control unit 350 and converted into display data by the display control unit 350. The display data converted by the display control unit 350 is output to the display 312 and the display 312 displays the output display data. Further, when the player operates a touch panel provided on the surface of the display 312, the operation signal is input to the CU control unit 323 via the display control unit 350. When the player operates the ball lending button 321, the operation signal is input to the CU control unit 323. The ball lending button 321 is not limited to the configuration provided in the CU 3, and may be configured so as to be provided in the P platform 2 and input an operation signal to the CU control unit 323. When the player operates the replay button 319, the operation signal is input to the CU control unit 323. When the player operates the return button 322, the operation signal is input to the CU control unit 323.

  In the pachinko machine 2, the main control board 16 that controls the progress of the game of the pachinko machine 2, the payout control board 17 that manages and stores the game balls, and the drive control of the launch motor 18 based on commands from the payout control board 17 And a variable display device 278 are provided. In FIG. 5, a display control board (also referred to as an effect control board) that controls display of the variable display device based on a command from the main control board 16 is not shown.

  The main control board 16 is provided on the game board 26. The main control board 16 is equipped with a game control microcomputer as the main control unit 161. A microcomputer for gaming machine control includes a CPU (Central Processing Unit) as a control center, a ROM (Read Only Member) storing a program for operating the CPU and control data, and a RAM (RAM) functioning as a CPU work area. Random Access Memory) and an input / output interface for maintaining signal consistency with peripheral devices. The main controller 161 is connected to a winning sensor 162 and a radio wave sensor 163 provided on the game board 26. The game board 26 is further provided with a display control board (effect control board) for controlling the variable display device 278 and the like.

  The payout control board 17 is provided in the game frame (front frame) 6. The payout control board 17 is equipped with a payout control microcomputer which is a payout control unit 171. The payout control microcomputer includes a CPU (Central Processing Unit) as a control center, a ROM (Read Only Member) storing a program for operating the CPU and control data, and a RAM (RAM) functioning as a work area of the CPU. Random Access Memory) and an input / output interface for maintaining signal consistency with peripheral devices.

  Further, the above-described firing ball detection switch 903, out ball detection switch 701, foul ball detection switch 33, counting button 28, and radio wave sensor 173 are provided in a state in which the discharge control board 17 is electrically connected. The radio wave sensor 173 is for detecting an illegal act of illegally transmitting radio waves and mainly turning on the ball raising switch (upper) 41a. A detection signal of the radio wave sensor 173 is input to the payout control unit 171 via an input port (not shown) of the payout control board 17. As described above, the ball raising switch (upper) 41a detects the launch of a game ball by changing from on to off, and the payout control unit 171 subtracts “1” from the number of game balls based on the detection. To do. Accordingly, when the ball raising switch (upper) 41a is always turned on by an improper radio wave, the number of game balls is not subtracted no matter how many balls are fired. Such radio fraud is detected by the radio wave sensor 173. Details will be described with reference to FIG. Note that not only the ball raising switch (upper) 41a but also the fired ball detection switch 903 (see FIG. 2) may be subject to fraud by radio waves. In other words, when only the ball raising switch (upper) 41a is always turned on by unauthorized radio waves, ball firing is not detected, while the actually fired ball is recovered and detected by the firing ball detection switch 903. In this case, the number of fired balls and recovered balls (out balls) is flawed, an abnormality is detected, and fraud detection information 3 of “number of fired / OUT mismatched balls” is transmitted from the P stand 2 to the CU 3. (It will be described later in FIG. 13). However, the fraud detection information 3 of the “number of fired / OUT inconsistent balls” is not transmitted from the P unit 2 to the CU 3 by sending an illegal radio wave to the fired ball detection switch 903 to make it undetectable. Occurs. In the present embodiment, since the radio wave sensor 173 also detects unauthorized radio waves transmitted to such a shot ball detection switch 903, the above-described inconvenience can be prevented.

  From main control board 16 to payout control board 17, main control chip ID, winning opening information, round information, connection confirmation signal, winning detection signal, starting winning opening winning information, error information, number of symbols determined, jackpot information, manufacturer specific Jackpot information is sent.

  The main control chip ID (also referred to as main chip ID) is a chip ID recorded on the main control board 16 of the pachinko machine 2, and is transmitted to the payout control board 17 when the pachinko machine 2 is turned on. Information. The winning opening information is information including the type of winning opening (start winning opening, normal winning opening, large winning opening) and the number of winning balls (the number of payout balls when a game ball enters the winning opening). It is transmitted to the dispensing control board 17 when the machine 2 is turned on. The round information is information on the number of rounds when a big hit is made, and is transmitted to the payout control board 17 when the pachinko machine 2 is powered on.

  The connection confirmation signal is a signal for confirming that the main control board 16 and the payout control board 17 are connected, and a signal of a predetermined voltage is constantly supplied from the main control board 16 to the payout control board 17. The payout control board 17 is configured to control the operation on the condition that the payout control board 17 receives the predetermined voltage signal. The winning detection signal is a detection signal of a pachinko ball that has won a winning opening other than the starting winning opening. Upon receiving this detection signal, the payout control board 17 performs control to add the number of balls to be given to one winning ball to the number of game balls and the number of added balls. This will be described in detail later.

  The start winning award winning information is information indicating that a pachinko ball has won a winning winning opening 1 or a starting winning opening 2. The error information is information for notifying the payout control board 17 when an error occurs while the main control board 16 is performing game control.

  The symbol determination number of times is information on symbols determined as display results of the variable display device for winnings at each start winning opening.

  The jackpot information is information indicating that a jackpot has occurred. The breakdown includes common jackpot information indicating a jackpot common to each manufacturer and manufacturer-specific jackpot information indicating a manufacturer-specific jackpot. The common jackpot information is a jackpot commonly used by each gaming machine manufacturer, such as 15 round jackpots, and includes probability variation information when a probability change occurs with the jackpot. When the time-short state (control state for shortening the variable display time of the variable display device) occurs, the time-shortage information is included. The manufacturer-specific big hit is a big hit state that is adopted only by a certain gaming machine manufacturer, such as sudden probability change (surprise).

  A health check command and a winning ball number acceptance command are transmitted from the payout control board 17 to the main control board 16. The health check command is a command for checking whether or not the main control board 16 is operating normally. The prize ball number acceptance command is a command indicating that the additional number of balls has been accepted.

  An out ball detection signal is input from the out ball detection switch 701 to the payout control board 17. The payout control board 17 to which the out ball detection signal is input subtracts and updates the number of in-game balls (the number of floating balls floating in the game area 27) as will be described later. In the payout control board 17 to which the foul ball detection signal is input from the foul ball detection switch 33, as described later, the addition ball number and the game ball number are added and updated, and the in-game ball number is subtracted and updated. A shot detection signal is input from the shot detection switch 903 to the payout control board 17. The payout control board 17 to which the fired ball detection signal is input updates the number of in-game balls by subtraction.

  The security board 325 of the card unit 3 and the payout control board 17 of the pachinko machine 2 are electrically connected. From the security board 325 to the payout control board 17, as will be described later, a recovery request, a communication start request, and a communication end Various commands such as a request, a status information request, a card insertion notification, a card return notification, and a communication test request are transmitted.

  The recovery request is a command that requests the pachinko machine 2 to notify the recovery information, as will be described later. The payout control board 17 receives the recovery request and notifies the card unit 3 of the recovery information of the pachinko machine 2. The communication start request is a command for requesting the pachinko machine 2 to start communication. The payout control board 17 responds to the card unit 3 with the communication start in response to the communication start request. The communication end request is a command for requesting the pachinko machine 2 to end communication. The payout control board 17 receives a communication end request and responds to the card unit 3 with a communication end.

  The status information request is a command that requests the pachinko machine 2 to notify the status information. The payout control board 17 receives the status information request and notifies the card unit 3 of the status information of the pachinko machine 2. The card insertion notification is a command for notifying the pachinko machine 2 that a card has been inserted. The payout control board 17 receives a card insertion notification and responds to the card unit 3 that a card has been inserted. The card return notification is a command for notifying the pachinko machine 2 that the card has been returned. The payout control board 17 receives a card return notification and responds to the card unit 3 that the card has been returned. The communication test request is a command for notifying the pachinko machine 2 of test data. The payout control board 17 responds with test data to the card unit 3 in response to the communication test request.

  Various responses such as a recovery response, a communication start response, a communication end response, a status information response, a card insertion response, a card return response, and a communication test response are transmitted from the payout control board 17 to the security board 325.

  The game frame (front frame) 6 is provided with a launch control board 31 and a launch motor 18. The firing control board 31 emits a firing motor excitation output to drive the firing motor 18 when a touch ring input signal for detecting that the player is touching the hitting ball operating handle 25 is input.

  A firing control signal and a firing permission signal are output from the dispensing control board 17 to the firing control board 31. Upon receiving this, the launch control board 31 outputs a signal for exciting the launch motor 18. Thereby, the pachinko ball is in a state where it is bullet-launched into the game area 27.

  A display 54 is provided in the game frame (front frame) 6. The display unit 54 receives display data from the display control unit 350 of the card unit 3 and displays a display screen. As described above, in this embodiment, the P-side display 54 is controlled on the CU side, but instead, the display 54 is controlled to be displayed on the P-side. A display control substrate may be provided. In this case, the display control board controls display of the display 54 based on a command from the payout control unit 171.

<Notification process for abnormalities in card units and pachinko machines>
FIG. 6 is an explanatory diagram for explaining notification processing when an abnormality is detected as a result of mutual authentication.

  Referring to FIG. 6, when an abnormality occurs in CU control unit 323, security board 325, payout control unit 171, or main control board 16, a notification indicated by an arrow in FIG. The abnormality mentioned here is that the CU control unit 323, the security board 325, the payout control unit 171 or the main control board 16 is replaced with another illegally manufactured product, or malfunction or failure occurs due to noise or the like. Case, and an offline state due to disconnection or the like. The key management server 800 shown in FIG. 6 stores the SID and authentication key of the CU communication control unit in association with each serial ID (also referred to as SID) of the electronic component inside the card unit 3. It is. The key management server 803 is a key management server that can communicate with the main control board 16.

  First, when an abnormality occurs in the security substrate 325 of the card unit 3, the CU control unit 323 detects an abnormality as a result of the mutual authentication performed between the CU control unit 323 and the security substrate 325 described above. This mutual authentication includes device authentication using a session key in addition to serial ID authentication and device authentication described later.

  The serial ID is a serial ID (substrate serial ID) of the security board 325, and is stored in the ROM of the security chip 325b when the security chip 325b of the security board 325 is manufactured. Further, when the CU 3 is transferred to the amusement hall and then connected to the upper server 801, the board serial ID is downloaded from the key management server 800 of the key management center via the upper server 801 and stored in the CU control unit 323. .

  When the CU control unit 323 detects an abnormality in the security board 325, the CU control unit 323 notifies the host server 801 to that effect and transmits an abnormality notification command to the display control unit 350 of the card unit 3. The CU control unit 323 controls the display 312 to display that an abnormality has occurred and causes the display control unit 350 to perform an abnormality notification by lighting or blinking an abnormality notification lamp (not shown). Further, the CU control unit 323 transmits a signal indicating that an abnormality has occurred from the external communication unit to the hall management computer.

  When an abnormality occurs in the CU control unit 323 of the card unit 3, the security board 325 detects the occurrence of the abnormality by the above-described mutual authentication, and notifies the payout control unit 171 of a signal (abnormality notification signal) indicating that fact. . In response, the payout control unit 171 notifies the main control board 16 that an abnormality has occurred. As described above, the main control board 16 performs control to operate the abnormality notification lamp and transmits a signal indicating that an abnormality has occurred to the hall management computer.

  When the security board 325 detects an abnormality of the payout control unit 171, the CU control unit 323 is notified of this, and the CU control unit 323 notifies the host server 801 accordingly.

  As described above, when the security board 325 detects an abnormality of the CU control unit 323, the security board 325 notifies the payout control unit 171 of the fact. When detecting an abnormality of the payout control unit 171, the security board 325 notifies the CU control unit 323 of the fact. The notification destination of abnormality occurrence by the security board 325 is different. The reason for this is that even if the control unit in which an abnormality has occurred is notified that an abnormality has occurred, no abnormality notification control is performed and no abnormality prevention measure is provided. In addition, the security board 325 has a communication control function but does not have an abnormality notification control function. Therefore, the abnormality notification cannot be controlled by itself, and for this reason, notification is made that an abnormality has occurred in the direction of the control unit opposite to the control unit where the abnormality has occurred. The payout control unit 171 that has received the notification of the occurrence of the abnormality from the security board 325 notifies the main control board 16 to that effect. Upon receiving the notification, the main control board 16 performs the same control for abnormality notification as described above.

  When an abnormality occurs in the payout control unit 171, the security board 325 detects that fact and notifies the CU control unit 323 that the abnormality has occurred. The CU control unit 323 performs the above-described abnormality notification control. Notify the host server 801 that an abnormality has occurred. When an abnormality occurs in the payout control unit 171, it is detected that an abnormality has occurred in the main control board 16, and upon receiving the notification, the above-described abnormality notification control is performed.

  As described above, the payout control board 17 detects and notifies the abnormality to the main control board 16 when an abnormality occurs in the security board 325, while notifies the abnormality to the main control board 16. It detects and notifies the security board 325 that an abnormality has occurred. As with the security board 325 described above, the payout control board 17 is also controlled for anomaly notification even when a notice is given to the control unit in which an abnormality has occurred when it is detected that an abnormality has occurred. Therefore, a notification is sent to the control unit or control board on the opposite side of the control unit where the abnormality has occurred. The security board 325 and the payout control board 17 are not connected to an abnormality notification means such as an abnormality notification lamp or an abnormality notification display, and have a function of performing abnormality notification control themselves even when an abnormality is detected. Absent. In the above description, the security board 325 and the payout control board 17 are not connected to an abnormality notification means such as an abnormality notification lamp or an abnormality notification display, and perform abnormality notification control themselves even when an abnormality is detected. Although described as having no function, the security board 325 and the payout control board 17 may be provided with an abnormality notification function to directly notify that an abnormality has occurred.

<Frame configuration used in communication>
FIG. 7 is a diagram showing a configuration of a frame used for communication in the gaming machine. In FIG. 7, transmission data (business message) is always transmitted in units of one frame. That is, the business message is not divided and transmitted. In addition, when transmitting business messages continuously, an interval of 1 millisecond or more is provided.

One frame of transmission data includes a data length, a serial number, a command, a data part, and a CRC.
“Data length” indicates the data length of the transmission data (serial number to data portion (business message range)). “Serial number” indicates the sequence number of the business message. “Serial number” is transmitted by counting up (+1) the serial number received at the time of transmission with an initial value “1”. However, the “serial number” is not counted up at the time of retransmission.

  “Command” is a command code of a business message. The “data part” is business message data.

  “CRC” is a CRC-ITU-T system and is used for error detection of communication frames.

  The business message range is the encryption target range. The data length, serial number, and command data length are each 1 byte. The CRC data length is 2 bytes. The business message range and the encryption target range do not need to match, and for example, the data portion can be set as the encryption target range.

<Transmission / reception mode between card unit side and pachinko machine side>
Next, FIG. 8 is a schematic diagram showing main data among various data stored on the card unit 3 side and the pachinko machine 2 side, and the transmission / reception mode thereof. With reference to FIG. 8, main ones of various data stored on the card unit 3 side (CU side) and the pachinko machine 2 side (P base side) and transmission / reception modes thereof will be described.

  In the present embodiment, the fluctuation of the number of game balls is calculated on the P stand 2 side, and the current latest game ball number is stored and managed. The current number of game balls is also calculated and stored on the CU 3 side, but the number of game balls is based on information transmitted from the P stand 2 side. On the other hand, the number of possessed balls (the number of cards possessed), the number of stored balls, and the card balance (balance) are managed and stored on the CU3 side.

  FIG. 8 shows RAM storage data provided in the CU control unit 323 on the CU 3 side and RAM storage data mounted on the payout control board 17 on the P stand 2 side. First, when the power supply is turned on for the first time when the P stand 2 (pachinko machine 2) and the CU 3 (card unit 3) are electrically connected for the first time after being installed in the game hall, the payout control board on the P stand 2 side. 17 has a main chip ID (main control chip ID) transmitted from the main control board 16, transmits the main chip ID to the CU3 side, and also issues a payout chip ID (payout) stored in the payout control board 17 itself. Control chip ID) is transmitted to the CU3 side.

  On the CU3 side, the transmitted main chip ID and payout chip ID are stored. Next, data of the connection time, that is, the time at which communication is started after the CU 3 side and the P base 2 side are connected is transmitted from the CU 3 side to the P base 2 side, and the transmitted connection time is transmitted on the P base 2 side. Remember.

  In this state, three pieces of information of the main chip ID, the payout chip ID, and the connection time identified on the CU3 side are stored on the CU3 side and the P stand 2 side. When the power is turned on thereafter, the three pieces of information, that is, the main chip ID, the payout chip ID, and the previous connection time data are transmitted from the P stand 2 side to the CU 3 side.

  On the CU 3 side, the transmitted data is collated with the data already stored, and it is determined whether or not the same P base 2 is connected as in the previous time. As for the connection time data, every time the power is turned on, new connection time data in which communication between the CU 3 side and the P base 2 side is started is transmitted from the CU 3 side to the P base 2 side. Time data is stored on the P table 2 side.

  Each time a command and response is transmitted between the CU 3 side and the P base 2 side, the serial number is incremented by “1”, and the serial number is stored on the CU 3 side and the P base 2 side. This serial number is a communication number for confirming whether or not communication is properly performed by updating the number every time data is transmitted / received between the CU 3 and the P unit 2. The last serial number is a number updated at the end of the updated communication number.

  A specific mode of serial number backup in the CU 3 and the P stand 2 in this embodiment will be described. The CU 3 backs up and stores the serial number transmitted to the P base 2 by a command, and when it receives the serial number from the P base 2 next, it rewrites the serial number stored in the backup and stores it. Then, when the next command is transmitted, the serial number stored in the backup is updated by 1 and transmitted to the P unit 2, and the transmitted serial number is stored in the backup. In CU3, such processing is repeated.

  Similarly, the serial number received from the CU3 by the command is backed up and stored in the P unit 2, and when the response is transmitted from the P unit 2 to the CU3 next time, the serial number stored in the backup is updated by 1 and transmitted. Store the sent serial number as a backup. When the next response is received, the serial number stored in the backup is rewritten and stored in the received serial number. Such processing is repeated in the P stand 2.

  For example, a command is transmitted from the CU 3 side to the P base 2 side, and the serial number n at that time is transmitted, and the transmitted serial number n is stored on the P base 2 side. Then, when a response is returned from the P platform 2 side to the CU 3 side, the stored serial number n is added together (n + 1) and transmitted. On the CU3 side, since the returned serial number n + 1 is incremented by 1 from the already stored serial number n, it is determined that data communication has been performed normally, and the next time the command is sent, the serial number is incremented by 1 and n + 2. A serial number is sent to the P stand 2 side.

  The latest game machine information (game machine information being counted) is transmitted from the P machine 2 side to the CU 3 side. This latest game table information is stored in the latest game table information storage area of the RAM of the payout control unit 171 (see FIG. 5) on the P table 2 side. Specifically, information on the added ball number counter, information on the subtracted ball number counter, and information on the counted ball number counter are included. The number of game balls is not included in the latest game table information, and is transmitted from the P table 2 side to the CU 3 side as the count value of the game ball number counter as will be described later.

Information on these counters is collectively transmitted to the CU side as a response.
The added ball number counter is a counter that counts the added ball number. The added ball is the sum of “the number of winning balls × the number of winning balls” and “the number of back balls”. The back ball is a foul ball. That is, the addition ball indicates the number that the addition ball counter should add to the game ball. The subtraction ball number counter is a counter that counts the number of subtraction balls. The subtraction ball is the “number of fired balls”. That is, the number of balls detected by the output change from on to off of the ball raising switch (upper) 41a. Note that the “number of balls to be subtracted” does not include the “number of balls to be counted”. The counting ball counter is a counter that counts the counting balls. The counting ball is “the number of balls converted from game balls to holding balls by the counting operation”.

  For example, when a pachinko ball that has been placed in the game area 27 wins and the winning information is transmitted from the main control board 16 to the payout control board 17, an additional ball to which a gaming ball is added based on the winning information. The added ball number counter counts the number, and the value of the added ball number counter (added ball number) is transmitted from the P stand 2 side to the CU 3 side. Also, the subtraction ball counter counts the number of fired balls as the number of subtracted balls based on the output change from on to off of the ball raising switch (upper) 41a due to the pachinko ball being fired in the game area 27, The value of the subtraction ball number counter (subtraction ball number) is transmitted from the P stand 2 side to the CU3 side.

  Alternatively, the payout control unit 171 counts the number of gaming balls as the number of counting balls by pressing the counting button 28, and transmits the value of the counting ball number counter (counting number of balls) from the P stand 2 side to the CU3 side.

  On the P-unit 2 side, each time the values of the addition ball counter, the subtraction ball counter, and the counting ball counter are transmitted to the CU 3 side, the count values are stored in the previous gaming machine information storage area (the RAM of the payout control unit 171). Etc.) are stored (rewritten) as backup data, and the values of the added ball counter, subtracted ball counter, and counted ball counter as the latest game table information are cleared to 0 (excluding the game ball counter). In the present embodiment, “clear” has the same meaning as “initialization”.

  As a result, the game table information transmitted to the CU 3 side immediately before is added to the storage area of the previous game table information (game table information transmitted immediately before). Stored as data. When the latest game machine information is not transmitted from the P machine 2 side to the CU 3 side, the backup data includes not only the value of each counter at the time of the next transmission but also the value of each counter of the previous time that was not transmitted. It is intended to enable transmission.

  Further, the payout control board 17 updates the value of the game ball counter in response to the occurrence of a prize, the firing of a ball, the occurrence of a back ball, and the occurrence of a counting ball (conversion from a game ball to a holding ball), The updated value of the game ball counter is transmitted to the CU side as the number of game balls.

  On the CU3 side, in the accumulated data storage area in the RAM, the number of game balls, the number of cards held (simply referred to as the number of balls), the number of stored balls, the balance, the total number of added balls (total number of added balls), the total subtraction The number of balls (the total number of subtracted balls) and the number of balls at the time of card insertion are stored. The number of cards possessed is the number of balls obtained by subtracting the number of possessed balls paid out (the number of balls converted from the number of cards possessed to the number of game balls) from the number of balls possessed when the card is inserted, and adding the counted number of balls. That is, the card possession number is the number of possession possessed by the player at the present time.

  The total number of added balls is added based on the value (number of added balls) of the added ball counter transmitted from the P stand 2 side to update the number of balls. Further, the number of balls is updated by subtracting the total number of subtraction balls based on the value of the subtraction ball counter (the number of subtraction balls) transmitted from the P stand 2 side. Further, based on the value of the counting ball number counter transmitted from the P stand 2, the number of card holding balls is added and updated. In this way, the CU 3 manages the latest information by updating the total added ball number, the total subtracted ball number, and the card holding ball number with the latest game table information transmitted from the P table 2 one by one. Is possible.

  As shown in the figure, the CU 3 has an area for storing game balls, and also receives a count value of a game ball number counter (also referred to as game ball number or game ball total number information) from the P stand 2 side. CU3 updates the area for storing game balls in the following procedure. That is, the CU 3 stores the value based on the value of the added ball number counter (added ball number), the value of the subtracted ball number counter (subtracted ball number), and the value of the counted ball number counter transmitted from the P side. The number of game balls being updated is updated, and it is determined whether or not the count value of the game ball counter transmitted from the P platform side at the same timing matches the updated number of game balls. If they match, the game is allowed to continue, but if they do not match, control to shift to an error state is performed.

  As a result, for example, an error notification is performed by the abnormality notification lamp or the indicator 312 or an error notification signal indicating that an error has occurred is transmitted to the hall management computer or the upper server 801 (in this case, for halls). Error notification may be performed by the management computer or the upper server 801). As a result, a predetermined notification that prompts an artificial response by a staff member is performed.

  Instead of shifting to an error state and stopping the game, the number of game balls stored on the CU side may be replaced with the count value of the game ball number counter transmitted from the P side. . Alternatively, it may be corrected to an average value of the number of game balls managed on the CU 3 side and the number of game balls stored on the P stand 2 side.

  As described above, in this embodiment, the number of game balls is also stored on the CU 3 side, but it is determined whether or not the number of game balls matches the number of game balls managed and stored on the P-unit 2 side. (CU3 side function). Therefore, even if a situation occurs in which the number of game balls stored on the P stand 2 side does not match the number of game balls stored on the CU 3 side due to fraud or other circumstances, it can be checked. Here, the determination function is provided on the CU3 side. For example, the number of game balls stored on the CU3 side and stored on the P unit 2 side by the upper server 801 or the hall management computer connected to the CU3. The number of game balls being played may be received, and it may be determined whether or not the two match.

  As shown in FIG. 8, the CU 3 stores a storage area for storing the number of cards held and the number of stored balls, a storage area for storing the card balance of the received (inserted) card, and the total number of additional balls (the number of additional balls). (Cumulative total), the total number of subtracted balls (total number of subtracted balls), and a storage area for storing balls when the card is inserted. The CU control unit 323 (see FIG. 5) stores a stored ball in response to an input requesting the use of the stored ball (for example, a press input of the replay button 319 provided in the CU 3 (when there is no holding ball)). Subtract a certain number of balls from the area.

  The CU control unit 323 (see FIG. 5) is an input requesting the use of the holding ball (for example, pressing input of the replay button 319 provided in the CU 3 when the holding ball is present (however, when the holding ball is present)) Accordingly, a predetermined number of balls are subtracted from the storage area for storing balls. Further, the CU control unit 323 (see FIG. 5) subtracts a predetermined value from a storage area for storing the card balance in response to an input requesting the use of the card balance (for example, pressing input of the ball lending button 321).

  When the player performs an operation to deduct the value from the player's own gaming value (for example, prepaid balance, number of balls, or number of balls) and use it for the game, the number of balls that are deducted is the number of balls The number of balls to be added to the counter is transmitted from the CU 3 side to the P stand 2 side. In response to this, the P stand 2 side adds and updates the game ball counter.

  On the other hand, in the gaming system according to the present embodiment, it is possible to accept a so-called wagon service order in which the gaming value owned by the player is withdrawn and exchanged for a drink or the like. However, access to wagon services with game balls is restricted, and wagon services can only be received with holding balls. This is an image in which, in a conventional encapsulated pachinko machine in which each counter is provided, it is prohibited to grab a ball before counting remaining on a plate by hand and use it for a wagon service.

  For this reason, in this embodiment, when the operation for performing the wagon service is executed, if the number of balls is less than the number corresponding to the desired menu of the wagon service, the player is prompted to perform the counting operation. Has been. When the player performs a counting operation at that time, the number of counting balls based on the operation is transmitted from the P stand 2 side to the CU 3 side. In response to this, the CU3 side subtracts the number of game balls and adds and updates the number of card possessions.

<Commands and responses sent and received between the CU and the P platform>
Next, with reference to FIG. 9, the outline of the command and response transmitted / received between the card unit (CU) 3 and the pachinko machine (P unit) 2 will be described.

  FIG. 9 shows the transmission direction, whether the data to be transmitted is a command or a response, the name of transmission information, and its outline.

  First, a command named recovery request is transmitted from the CU 3 to the P unit 2. This recovery request command is for requesting recovery information from the P unit 2. A response named “recovery response” is transmitted from the P base 2 to the CU 3. This response of the recovery response notifies the CU 3 of the recovery information.

  A communication start request command is transmitted from the CU 3 to the P unit 2. This communication start request command requests the P base 2 to start communication. A response of a communication start response is transmitted from the P base 2 to the CU3. This response to the communication start response is a response to the CU 3 for communication start.

  A communication end request command is transmitted from the CU 3 to the P platform 2. This communication end request command requests the P unit 2 to end communication. A response of a communication end response is transmitted from the P base 2 to the CU3. This communication end response is a response to the end of communication to the CU3.

  A status information request command is transmitted from the CU 3 to the P platform 2. This status information request command is for requesting the status of the CU 3 to the P unit 2. The CU 3 uses this command to periodically check the status of the P base 2. The information information request command includes the number of balls to be added from the CU side to the P platform side shown in FIG.

  A response of a status information response is transmitted from the P base 2 to the CU3. This response of the status information response is to notify the information / status of the P platform 2 to the CU 3. The response of the information response includes the latest game table information and the number of game balls shown in FIG.

  A card insertion notification command is transmitted from the CU 3 to the P stand 2. This card insertion notification command notifies the P unit 2 of card insertion. A response of the card insertion response is transmitted from the P base 2 to the CU3. The response of this card insertion response is a response to the card insertion to the CU3.

  A card return notification command is transmitted from the CU 3 to the P stand 2. This card return notification command notifies the P unit 2 of a card return. A response of a card return response is transmitted from the P stand 2 to the CU 3. The response of this card return response is a response to the card return to CU3.

  A communication test request command is transmitted from the CU 3 to the P platform 2. This communication test request command notifies the P unit 2 of test data. A response of the communication test response is transmitted from the P base 2 to the CU3. The response of this card return response is a response of test data to CU3.

  Next, based on FIGS. 10 to 31, the command / response status information request, status information response, card insertion notification, card insertion response, card return notification, card return response, recovery request, recovery response shown in FIG. The contents of the transmission start request, communication start response, communication start response, communication end request, communication end response, communication test request, and communication test response will be described in detail.

  First, referring to FIG. 10, a status information request command is transmitted from CU 3 to P unit 2. The transmitted status information request command notifies the P unit 2 of the status of the CU 3. Note that the CU 3 periodically collects information and status of the P platform 2 using this command.

  The specific data of this status information request includes data of serial number, command, CU status, number of added balls, and CU error status, as shown in the lower part of FIG. The serial number is a sequence number of the command and is a value from 1 to 255 (cyclic). The CU 3 counts up (+1) the serial number received at the time of transmission with an initial value “1”, and transmits it. However, the serial number is not counted up at the time of retransmission. The command is a command code for requesting status information, and is “0x06” in binary data expressed in hexadecimal.

  The CU state indicates the state of CU3 to be notified to the P-unit 2; when Bit0 is “1”, card insertion processing is in progress; when Bit1 is “1”, a game permission request is issued; and Bit2 is “1”. When the bit 3 is “1”, the game ball addition request is indicated. When the Bit 4 is “1”, the counting ball reception completion is indicated. Bit 5 to Bit 7 are not used.

  Further, only when the CU state Bit 3 is “1”, the data of the added ball number is valid, and the data of the added ball number is transmitted from the CU 3 to the P stand 2. Further, the data on the number of added balls indicates a value added to the number of game balls.

  The CU error state represents an error code that is occurring in CU3. “0x00” indicates no error, and “0x01”-“0xFF” indicates that an error is occurring.

  FIG. 11 is a diagram illustrating each bit in the CU state in more detail. Bit0 shown in FIG. 11 indicates that the data name is being inserted into the card, “1” indicates that the card is being inserted, and “0” indicates that the card has not been inserted. That is, Bit0 indicates a state where a card (general card / member card) is inserted in CU3. In addition, a general card is being inserted by depositing into a stock card (general 0 yen 0 coin card) stocked in advance by the CU.

  Bit 1 indicates a game permission request with a data name of “1”, and indicates a game permission request when “1” and no game permission request when “0”, respectively. That is, Bit1 requests a game permission to the P base 2 according to the state of the CU3. The timing for permitting the game is, for example, when the user leaves the seat.

  Bit 2 indicates a game prohibition request when the data name is “1”, and indicates a game prohibition request when “1” and no game prohibition request when “0”, respectively. In other words, Bit 2 makes a game prohibition request to P stand 2 depending on the state of CU 3. The timing of game prohibition includes, for example, when the user is away from the seat, or when an operation failure error occurs.

  Bit 3 indicates a game ball addition request when the data name is “1”, and indicates that there is no game ball addition request when “1” and “0”, respectively. That is, Bit3 requests addition of game balls (the number of added balls) at the time of ball lending, holding ball payout, and stored ball payout operations.

  Bit 4 indicates that the counting ball reception is completed, “1” counting ball reception completion, and “0” indicates no counting ball reception. That is, Bit 4 notifies that the number of balls counted at the time of counting the game balls has been received from the P unit 2. Bit 4 is used for confirmation of delivery of “count ball” in a response of a status information response described later.

  Next, referring to FIG. 12 and FIG. 13, a response of the status information response is transmitted from the P base 2 to the CU 3. The response of the status information response to be transmitted notifies the CU 3 of the information / status of the P unit 2.

  The specific data of the status information request includes serial number, command, ball count information, game machine status, fraud detection information, and game information data, as shown in the lower part of FIG. The serial number is a sequence number of the command and is a value from 1 to 255 (cyclic). The P base 2 counts up (+1) the serial number received at the time of transmission and transmits it. However, the serial number is not counted up at the time of retransmission. The command is a command code for requesting status information, and is “0x16” as binary data in hexadecimal representation.

  The number of balls information is the number of balls of P table 2 (the number of game balls, the number of back balls, the number of fired balls, the outro passage at the time (current) when a command for requesting the status information is transmitted from CU 3 to P table 2 The number of balls, and the number of balls counted) and the firing strength. The number of game balls is the current number of game balls (the number of game balls as a result of calculating addition / subtraction). The number of back balls is the number of back balls when fired (when there are a plurality of back balls at the time of transmission, they are added together). The number of fired balls is the number of fired balls (summed if there are balls fired multiple times at the time of transmission). The number of balls that have passed through the outlet is the number of balls that have passed through the outlet 145 (when there are a plurality of balls that have passed during transmission, they are added together). The number of balls to be counted is the number of game balls counted. The firing strength is strength for launching a game ball.

  FIG. 14 is a diagram for explaining the meanings of various balls and the confirmation points in more detail. The number of game balls shown in FIG. 14 calculates the number of game balls held by CU 3 using “number of prize balls × number of winning balls”, “number of back balls”, and “number of shot balls” described later. Thereafter, the CU 3 checks whether the calculated number of game balls of the CU 3 matches the number of game balls of the P unit 2.

  The number of back balls (addition) is the number of foul balls, and is data to be added to the number of game balls held by the CU3. When the data is received without holding the card, the CU 3 does not add the number of game balls.

  The number of shot balls (subtraction) is data to be subtracted from the number of game balls held by CU3. If the data is received without holding the card, CU3 does not subtract the number of game balls. CU3 does not perform subtraction when the number of game balls held by CU3 itself is 0.

  The number of counting balls (subtraction) is data that is subtracted from the number of game balls held by the CU 3 and added to the number of cards possessed. Note that the number of counting balls is not used for the data of the number of subtraction balls transmitted from the P stand 2 to the CU 3. Further, when the data is received without holding the card, the CU 3 does not subtract the number of game balls. CU3 does not perform subtraction when the number of game balls held by CU3 itself is 0.

  Returning to FIG. 13, the gaming machine state indicates the state of the P machine 2 at the time when the command for requesting the status information is transmitted from the CU 3 to the P machine 2. The gaming machine state 1, the gaming machine state 2, And information on the game table error status.

  Bit 0 in gaming machine state 1 is permitting a game when it is “0”, and is prohibited when it is “1”. Bit 1 in the gaming machine state 1 is waiting when it is “0”, and is playing when it is “1”. Bit 2 in the gaming machine state 1 is “1”, indicating that there is no gaming ball. When Bit 3 in the gaming machine state 1 is “1”, the game is completed. Bit 4 in gaming machine state 1 is counting when it is “1”. Bit 5 in gaming machine state 1 is the result of adding game balls when “1”, and Bits 6 to 7 in gaming machine state 1 are spares.

  FIG. 15 is a diagram for explaining each bit in the gaming machine state 1 in more detail. Bit 0 shown in FIG. 15 indicates whether the name is game permit / game prohibition, and whether the game is permitted or prohibited. When “0”, the game is permitted, and when “1”, the game is prohibited. It is in. Bit1 indicates whether the name is waiting / playing, and whether the fan (player) is playing (launching a ball) or not. Not in the state), when “1”, the game is in progress (the fan is firing a ball).

  Bit 2 has the name “no game ball” and indicates the presence or absence of a game ball (detection of no game ball). When “0”, there are a number of game balls, and when “1”, there is no game balls. Bit 3 indicates whether or not the whereabouts of all the fired balls are confirmed in a state where the name is game completion and the ball firing is stopped. That is, it shows whether all the floating balls in the game area 27 have been collected. When it is “0”, the game is incomplete (a state where all balls are unconfirmed), and when it is “1”, a game is complete (a state where all balls are confirmed). Note that the P stand 2 times out and completes the game when the completion of the game is not confirmed for 15 seconds or more after the ball launch is stopped.

  Bit 4 indicates whether the name is being counted and whether or not the game ball is being counted (counting button is being pressed), and when it is “0”, it is counting when it is “1”. Bit 5 is a game ball addition result whose name is a game ball addition process result, and is “0” for addition and “NG” for addition NG.

  Returning to FIG. 13, Bit 0 in gaming machine state 2 is a big hit when it is “1”. Bit 1 in the gaming machine state 2 is in the special symbol probability variation function operating state when “1”. Bit 2 in the gaming machine state 2 is the special symbol variation time reduction function operating state when “1”. Bits 3 to 7 in the game table state 2 are reserved.

  The gaming machine error state is an error code that is occurring on the P machine 2, where there is no error when “0x00” and an error is occurring when “0x01” − “0xFF”.

  FIG. 16 is a diagram for explaining each bit in the gaming machine state 2 in more detail. Bit0 shown in FIG. 16 has a name that is a big hit, indicates one piece of information of the big hit, and “1” is set during the big hit. Bit 1 indicates that the name is being probabilistically changed and indicates one information of jackpot information, and “1” is set during probabilistic change. Bit 2 has a name that is short and short, indicates one information of jackpot information, and “1” is set in the short and long time.

  Returning to FIG. 13, the fraud detection information is information detected by the P stand 2 at the time when the command for requesting the state information is transmitted from the CU 3 to the P stand 2. The fraud detection state 1 and the fraud detection state 2. Information of fraud detection information 1 to fraud detection information 5 is included.

  Bit 0 of fraud detection state 1 is a state of detection of a prize ball sensor goto when “1”. Here, the “goto” is a fraudulent act of acquiring a ball in an illegal manner in a pachinko or slot machine. Bit 1 of fraud detection state 1 is a state of detecting a return ball sensor goto when “1”. Bit 2 of the fraud detection state 1 is a state of detection of the complex sensor goto when “1”. Bit 3 of fraud detection state 1 is a state of fraud detection when “1”. Bit 4 in fraud detection state 1 is a fraud detection state when “1”. Bits 5 to 7 in the fraud detection state 1 are reserved.

  Bit 0 of fraud detection state 2 is a door open state when “1”. Bit 1 in the fraud detection state 2 is a state in which the game board radio wave sensor is detected when “1”. Bit 2 of fraud detection state 2 is a state of detection of disconnection of the game board radio wave sensor when “1”. Bit 3 in the fraud detection state 2 is a state of fraud detection when it is “1”. Bit 4 of fraud detection state 2 is a state of magnetic sensor detection when “1”. Bit 5 in the fraud detection state 2 is a state of detection of the gaming frame radio wave sensor when “1”. Bit 6 of the fraud detection state 2 is a state of detection of disconnection of the game frame radio wave sensor when “1”. Bit 7 in fraud detection state 1 is reserved.

  The fraud detection information 1 is data indicating information on the detection of the winning ball sensor ball (the number of winning inconsistent balls) (see S664 in FIG. 80). The fraud detection information 2 is data indicating information on return ball sensor goto detection (return prize inconsistent number of balls). The return ball is a foul ball. The fraud detection information 3 is data indicating information on the composite sensor goto detection (number of fired / OUT mismatched balls). That is, it is data indicating information when an inconsistency between the number of shot balls and the number of out balls (the number of balls passing through the outlet) is detected. The fraud detection information 4 is data indicating information on fraud addition detection (number of fraud addition balls). The fraud detection information 5 is data indicating information on fraudulent out detection (number of fraudulent outlet passing balls).

  The game information is information on the P device 2 at the time when the command for requesting the status information is transmitted from the CU 3 to the P device 2, and includes the number of game information, type information 1 to n, and prize ball information 1 to n. It is out.

  The number of game information is the number (n) of type information / prize ball information, and is 0 to 255 (variable length). The type information 1 to n indicates the game type information 1 to n, and the prize ball information 1 to n indicates the game prize ball information 1 to n.

  FIG. 17 is a diagram illustrating the type information in the game information in more detail. In the type information shown in FIG. 17, the names from Bit 0 to Bit 3 are data types, indicating the data type of the game information. No information when “0”, no winning opening when “1” (ordinary winning opening) , “2” is the big prize opening, “3” is the start winning opening, and “4” is the number of symbol stops. The names from Bit 4 to Bit 7 are data numbers, which indicate data numbers for each data type of game information. When “0”, there is no information, and when “1” to “15”, the data number.

  FIG. 18 is a diagram illustrating the prize ball information in the game information in more detail. In the prize ball information shown in FIG. 18, the names from Bit 0 to Bit 3 are the number of prize balls, and indicate the number of prize balls at the time of winning for each data type of game information. When “1” to “15”, the number of prize balls is data. The names from Bit 4 to Bit 7 are the number of winnings, and indicate the number of winnings (cumulative) for each data type of game information. No information when “0”, data of winning numbers when “1” to “15” It is.

  By multiplying the number of winning balls by the number of winning balls, “the number of winning balls × the number of winning balls”, the number of balls to be added to the number of gaming balls by winning can be found. When the added number of balls is received without holding the card, CU3 does not add the number of game balls.

  Next, referring to FIG. 19, a card insertion notification command is transmitted from CU 3 to P unit 2. The transmitted card insertion notification command notifies the card ID and insertion time of the inserted card to the P base 2 when the card is inserted.

  The specific data of the card insertion notification includes serial number, command, card ID, and card insertion time data as shown in the lower part of FIG. The serial number is a sequence number of the command and is a value from 1 to 255 (cyclic). The CU 3 counts up (+1) the serial number received at the time of transmission with an initial value “1”, and transmits it. However, the serial number is not counted up at the time of retransmission. The command is a command code for card insertion notification and is “0x07” in binary data in hexadecimal notation.

  The card ID is ID information of the inserted card. The card insertion time is the time when a card is inserted into the card insertion / eject port 309 (see FIG. 1). The year information is two digits YY, the month information is two digits MM, the day information is two digits DD, and the time information is two. This is data represented by a digit hh, minute information by two digits mm, and second information by two digits ss.

  Next, referring to FIG. 20, a response of the card insertion response is transmitted from P base 2 to CU3. The transmitted card insertion response response notifies the CU 3 that the card insertion notification has been normally received.

  The specific data of the card insertion response includes serial number and command data as shown in the lower part of FIG. The serial number is a sequence number of the command and is a value from 1 to 255 (cyclic). The P base 2 counts up (+1) the serial number received at the time of transmission and transmits it. However, the serial number is not counted up at the time of retransmission. The command is a command code of a card insertion response, and is “0x17” as binary data in hexadecimal representation.

  Next, referring to FIG. 21, a card return notification command is transmitted from CU 3 to P stand 2. The transmitted card return notification command is to notify the P unit 2 of the card return. Further, the CU 3 transmits the notification when the “card return” button is pressed.

  The specific data of the card return notification includes serial number and command data as shown in the lower part of FIG. The serial number is a sequence number of the command and is a value from 1 to 255 (cyclic). The CU 3 counts up (+1) the serial number received at the time of transmission with an initial value “1”, and transmits it. However, the serial number is not counted up at the time of retransmission. The command is a command code for a card return notification and is “0x08” in binary data in hexadecimal notation.

  Next, referring to FIG. 22, a response of a card return response is transmitted from the P base 2 to the CU 3. The transmitted card return response is a response to the card return notification sent to the CU 3.

  The specific data of the card return response includes data of serial number, command, card ID, and card insertion time as shown in the lower part of FIG. The serial number is a sequence number of the command and is a value from 1 to 255 (cyclic). The P base 2 counts up (+1) the serial number received at the time of transmission and transmits it. However, the serial number is not counted up at the time of retransmission. The command is a command code of a card return response, and is “0x18” in binary data in hexadecimal representation.

  The card ID is ID information of the card being inserted. The card insertion time is the time when a card is inserted into the card insertion / eject port 309 (see FIG. 1). The year information is two digits YY, the month information is two digits MM, the day information is two digits DD, and the time information is two. This is data represented by a digit hh, minute information by two digits mm, and second information by two digits ss. Note that CU3 does not return the card if the card ID included in the command does not match the ID of the card currently being inserted or if there is a problem with the card insertion time included in the command. , And processing such as prohibiting the writing of the holding ball to the card.

  Next, referring to FIG. 23, a recovery request command is transmitted from CU 3 to P unit 2. The transmitted recovery request command is for notifying the P unit 2 of the recovery information.

  As shown in the lower part of FIG. 23, the specific data of this recovery request includes serial number, command, previous last transmission serial number, last inserted card ID, previous card insertion time, and the number of added balls. ing. The serial number is a sequence number of the command and is a value from 1 to 255 (cyclic). The CU 3 counts up (+1) the serial number received at the time of transmission with an initial value “1”, and transmits it. However, the serial number is not counted up at the time of retransmission. The command is a command code for the recovery request, and is “0x03” as binary data in hexadecimal representation.

  The previous last transmission serial number is data of the serial number of the command last transmitted to the P unit 2 at the previous connection, and when “0”, there is no data. The previously inserted card ID is data of the card ID of the card that was being inserted at the time of the previous connection, and when “0”, there is no inserted card.

  The previous card insertion time is data of the insertion time of the card that was being inserted at the previous connection, and when it is “0”, there is no inserted card. This data is also represented by year information as 2 digits YY, month information as 2 digits MM, day information as 2 digits DD, time information as 2 digits hh, minute information as 2 digits mm, and second information as 2 digits ss. It is. The number of additional balls is data on the number of additional balls of game balls, and when it is “0”, there is no data on the number of additional balls.

  FIG. 24 is a diagram for explaining the recovery process of the P base 2 in detail. The recovery process for the P-unit 2 shown in FIG. 24 is added to the game ball with reference to the number of additional balls when the P-unit 2 has not performed the “last previous transmission serial number” process notified from the CU 3. To do. Specifically, when the added ball number data is “0” and there is no added ball, the CU 3 does not transmit the added ball number data to the P unit 2, and the P unit 2 does not perform the recovery process. On the other hand, when the added ball number data is “1” to “65535” and there is an added ball, CU3 transmits the added ball number data by ball lending, holding ball payout, and accumulated ball payout to P stand 2, and P stand 2 performs a recovery process of adding the added number of balls to the current game ball.

  Next, with reference to FIG. 25, a response of the recovery response is transmitted from the P base 2 to the CU3. The response of the recovery response that is transmitted notifies the CU 3 of the recovery information held by the P unit 2. This “recovery information” is stored as a backup so that when the CU 3 transmits a recovery request command to the P unit 2 as the recovery process is executed, the P unit 2 transmits a recovery response to the CU 3. It is data. The recovery information returned from the P unit 2 to the CU 3 includes, as shown in FIG. 24, a serial number, a command, a last transmission serial number, a previously inserted card ID, a previous card insertion time, a previous game table information, a previous game information, The latest game table information and the latest game information are included.

  The serial number is a sequence number of the command and is a value from 1 to 255 (cyclic). The P base 2 counts up (+1) the serial number received at the time of transmission and transmits it. However, the serial number is not counted up at the time of retransmission. The command is a command code of the recovery response and is “0x13” in binary data in hexadecimal representation.

  The previous last transmission serial number is data of a serial number included in the response of the status information response last transmitted to the CU 3 at the time of the previous connection. When “0”, there is no stored serial number. The previously inserted card ID is data of the card ID of the card that was being inserted at the time of the previous connection, and when “0”, there is no inserted card.

  The previous card insertion time is data of the insertion time of the card that was being inserted at the previous connection, and when it is “0”, there is no inserted card. This data is also represented by year information as 2 digits YY, month information as 2 digits MM, day information as 2 digits DD, time information as 2 digits hh, minute information as 2 digits mm, and second information as 2 digits ss. It is. The number of additional balls is data on the number of additional balls of game balls, and when it is “0”, there is no data on the number of additional balls.

  The previous game table information is the game table information notified to the CU 3 last time, and includes information on the number of game balls, the number of back balls, the number of fired balls, the number of balls passing through the outlet, and the number of balls counted. The “number of game balls” is the number of game balls notified to the CU 3 last time. The “number of back balls” is the number of back balls notified to the CU 3 last time. “Number of fired balls” is the number of fired balls previously notified to CU3. The “out mouth passing ball count” is the number of out mouth passing balls notified to the CU 3 last time. “Counting balls” is the number of counting balls notified to CU3 last time.

  The previous game information is game information notified to the CU 3 last time, and includes information on the number of game information, type information 1 to type information n, and prize ball information 1 to prize ball information n. The “number of game information” is the number (0 to n) of game information notified to the CU 3 last time. “Type information 1” is the game type information 1 notified to the CU 3 last time. “Type information n” is the game type information n notified to the CU 3 last time. “Prize ball information 1” is game prize ball information 1 notified to the CU 3 last time. “Prize ball information n” is game prize ball information n notified to the CU 3 last time.

  The latest game table information is the latest game table information, and includes information on the number of game balls, the number of back balls, the number of shot balls, the number of balls passing through the outlet, and the number of balls counted. The latest game machine information is set to “0” when all information is not available. The “number of game balls” is the number of game balls currently held by the P stand 2. The “number of back balls” is the number of back balls (the number of foul balls) currently held by the P stand 2. The “number of fired balls” is the number of fired balls currently held by the P stand 2. The “out mouth passing ball count” is the number of out mouth passing balls held by the current P stand 2. The “number of counting balls” is the number of counting balls currently held by the P stand 2.

  The latest game information is the game information currently held by the P platform 2 and includes information on the number of game information, type information 1 to type information n, and prize ball information 1 to prize ball information n. The “number of game information” is the number (0 to n) of game information currently held in the P table 2. The “type information 1” is the game type information 1 held in the current P table 2. “Type information n” is the game type information n held by the current P unit 2. “Prize ball information 1” is game prize ball information 1 held in the current P stand 2. “Prize ball information n” is game prize ball information n held in the current P stand 2.

  As shown in Note 1) in FIG. 25, ALL0 is set as the recovery information at the time of factory shipment and when the backup data is indefinite. As shown in Note 2), if the CU3 has not performed the process of the “last previous transmission serial number” notified from the P table 2, the CU3 performs the recovery process using the previous game machine information and the latest game machine information. Do. When the “last previous transmission serial number” process is being performed, the CU 3 performs the recovery process using only the latest gaming machine information.

  Further, when the recovery process cannot be performed due to a mismatch of communication partners (for example, exchange of CU or P units), it is conceivable to manually correct by POS based on the display information of the P unit 2. For example, it is conceivable that the display information of the P base 2 is displayed using the liquid crystal display screen of the variable display device 278. Alternatively, it is also conceivable that a display device controlled by the payout control unit 171 is further provided on the P table 2 and information for manual correction is displayed on the display device. Note that POS refers to a free gift management system for exchanging free gifts and managing free gifts. In addition, POS is not limited to those for exchanging prizes or managing prizes, but records general sales information for each sale of merchandise at a store and uses the aggregated results as inventory management or marketing materials. It may be management (Point Of Sales system).

  Next, referring to FIG. 26, a communication start request command is transmitted from CU 3 to P unit 2. The transmitted communication start request command notifies the P base 2 of the start of communication. Further, the P base 2 clears the recovery information.

  The specific data of this communication start request includes serial number and command data as shown in the lower part of FIG. The serial number is a sequence number of the command and is a value from 1 to 255 (cyclic). The CU 3 counts up (+1) the serial number received at the time of transmission with an initial value “1”, and transmits it. However, the serial number is not counted up at the time of retransmission. The command is a command code for a communication start request, and is “0x04” as binary data in hexadecimal representation.

  Next, referring to FIG. 27, a response to the communication start response is transmitted from P platform 2 to CU3. The response of the transmitted communication start response notifies the CU 3 that communication has started normally.

  The specific data of this communication start response includes serial number and command data as shown in the lower part of FIG. The serial number is a sequence number of the command and is a value from 1 to 255 (cyclic). The P base 2 counts up (+1) the serial number received at the time of transmission and transmits it. However, the serial number is not counted up at the time of retransmission. The command is a command code of a communication start response, and is “0x14” as binary data in hexadecimal representation.

  Next, referring to FIG. 28, a communication end request command is transmitted from CU 3 to P unit 2. The transmitted communication end request command notifies the P unit 2 of the communication end.

  The specific data of this communication end request includes serial number and command data as shown in the lower part of FIG. The serial number is a sequence number of the command and is a value from 1 to 255 (cyclic). The CU 3 counts up (+1) the serial number received at the time of transmission with an initial value “1”, and transmits it. However, the serial number is not counted up at the time of retransmission. The command is a command code for a communication end request, and is “0x05” as binary data in hexadecimal representation.

  Next, referring to FIG. 29, a response of a communication end response is transmitted from P base 2 to CU3. The response of the transmitted communication end response notifies the CU 3 that the communication has been normally completed. Further, after the notification, the CU 3 and the P stand 2 stop communication and wait for restart.

  The specific data of the communication end response includes serial number and command data as shown in the lower part of FIG. The serial number is a sequence number of the command and is a value from 1 to 255 (cyclic). The P base 2 counts up (+1) the serial number received at the time of transmission and transmits it. However, the serial number is not counted up at the time of retransmission. The command is a command code of a communication end response, and is “0x15” as binary data in hexadecimal representation.

  Next, referring to FIG. 30, a communication test request command is transmitted from CU 3 to P unit 2. The transmitted communication test request command notifies the P unit 2 of the test data. Note that the test data notified to the P platform 2 is not encrypted.

  The specific data of this communication test request includes serial number, command, and test data data as shown in the lower part of FIG. The serial number is a sequence number of the command and is a value from 1 to 255 (cyclic). The CU 3 counts up (+1) the serial number received at the time of transmission with an initial value “1”, and transmits it. However, the serial number is not counted up at the time of retransmission. The command is a command code for a communication test request, and is “0x0F” as binary data in hexadecimal representation. The test data is data for testing notified to the P base 2 and is arbitrary data.

  Next, referring to FIG. 31, a response of the communication test response is transmitted from P base 2 to CU3. The response of the transmitted communication test response is to notify the test data to the CU3. Note that the test data notified to the CU 3 is not encrypted.

  The specific data of the communication test response includes serial number, command, and test data data as shown in the lower part of FIG. The serial number is a sequence number of the command and is a value from 1 to 255 (cyclic). The P base 2 counts up (+1) the serial number received at the time of transmission and transmits it. However, the serial number is not counted up at the time of retransmission. The command is a command code of a communication test response, and is “0x1F” as binary data in hexadecimal representation. The test data is arbitrary data that is test data notified to the CU 3.

<Main sequence in communication between CU and P platform>
Next, processing executed by the CPU in the CU control unit 323 and processing executed by the CPU mounted on the payout control board 17 will be described with reference to FIGS.

  First, with reference to FIG. 32, the mode of transmission and reception of commands and responses between the CU 3 and the P base 2 will be described. A command is transmitted from CU3 (primary station) to P station 2 (secondary station), and P station 2 returns a response to CU3 in response to the command. After receiving the response, CU3 transmits the next command to P unit 2, and P unit 2 returns the response to CU3 in response to the command. As shown in FIG. 32, the period from the transmission of the first command to the P unit 2 from the CU 3 to the transmission of the next command is controlled to 200 ms, that is, 0.2 seconds. Further, the period from the transmission of the response from the P base 2 to the CU 3 until the transmission of the next response is controlled to 200 ms, that is, 0.2 seconds.

  Thus, both a command and a response are transmitted between the CU 3 and the P base 2 at an interval of 200 ms. On the other hand, by operating the hitting operation handle 25, the P platform 2 hits 100 pachinko balls into the game area 27 per minute, so the hitting time interval is 0.6 seconds. As a result, a plurality of commands and responses are transmitted and received while firing one ball.

  Therefore, responses for notifying the amount of change in the number of game balls are sequentially transmitted from the P platform 2 to the CU 3 at intervals shorter than the ball firing time interval. As a result, the P stand 2 can finely notify the CU 3 of the amount of change in the number of game balls.

  Here, the transmission interval of the command and the response is set to 200 ms, but the transmission interval may be longer or shorter than this. For example, the transmission interval may be a firing time interval of the P platform 2. It is also possible to match with

  The command and response are transmitted by a polling method using CU3 as a primary station. However, recovery request / response, communication start request / response, communication end request / response command, and response are not included.

  Next, with reference to FIG. 33, a process when communication disconnection is detected on the CU3 side will be described. If the response is not received within 200 ms after the CU 3 transmits a command to the P unit 2, the same command is transmitted to the P unit 2 again. Further, if a response cannot be received within 200 ms, a second retransmission is performed in which the same command is transmitted to the P unit 2. If no response is received from the P-unit 2 within 200 ms after the second retransmission, the CU 3 determines that communication is abnormal at this stage and sets “communication interruption”. This communication abnormality may be caused when the connector of the CU 3 and the connector of the P base 2 are disconnected, or the connection wiring is disconnected or the power supply of the P base 2 is disconnected.

CU3 does not increment the serial number when retransmitting the command.
Next, with reference to FIG. 34, a process when communication disconnection is detected on the P platform 2 side will be described. A command is transmitted from the CU 3 to the P unit 2, and the P unit 2 returns a response to the CU 3 in response to the command. Thereafter, when the state in which the command from the CU 3 is not transmitted to the P stand 2 continues for one second, the P stand 2 determines that the communication is interrupted, stops the driving of the firing motor 18 and stops the game. . The cause of this communication disconnection may be the disconnection of the connector of the CU3 and the connector of the P base 2, disconnection of the connection wiring, or the power supply disconnection of the CU3, as described with reference to FIG.

  Note that the command and response for detecting communication disconnection on the P platform 2 side do not include the recovery request / response, communication start request / response, communication end request / response command, and response.

  Next, with reference to FIG. 35, the processing of the connection sequence when the power is turned on will be described. The process of the connection sequence in FIG. 35 is a process executed when communication is resumed after the communication between the CU 3 and the P stand 2 is normally completed. More specifically, it is executed when communication is resumed after the power of the CU 3 is turned off while the card is not inserted. A typical example is a case where the power supply is turned off after one day of business at the amusement hall is finished, and the power supply is turned on at the start of business the next day.

  First, power is turned on. When the power is turned on, communication is started after the firing motor 18 is stopped on the P stand 2 to stop the game. Thereafter, an authentication sequence is started, and information including the main chip ID and the payout chip ID is transmitted from the P base 2 to the CU3. The CU 3 sends the received main chip ID and payout chip ID to the upper management server, asks whether the main chip ID and the payout chip ID are properly registered, and has the result returned. . If it is properly registered, an appropriate authentication result is obtained.

  After the authentication sequence, the CU 3 transmits a recovery request to the P unit 2. That is, the CU 3 transmits the recovery data to the P unit 2. This recovery data includes the last last transmission serial number, the last inserted card ID, the previous card insertion time, and the number of added balls. To be precise, it is the various data shown in FIG. 23, and “recovery data” transmitted from the CU 3 to the P unit 2 in the subsequent flowcharts is exactly the various data shown in FIG. .

  In response to this, the P machine 2 executes recovery processing based on the received recovery data, and returns the recovery data backed up inside the P machine 2 (specifically, the payout control board 17) to the CU 3 as a response. (Recovery response).

  This recovery data includes the previous last transmission serial number, the previously inserted card ID, the previous card insertion time, the previous gaming machine information, the previous gaming information, the latest gaming machine information, and the latest gaming information. To be precise, it is the various data shown in FIG. 25, and “recovery data” transmitted from the P unit 2 to the CU 3 in the subsequent flowcharts is exactly the various data shown in FIG. 25. .

  The CU 3 that has received this recovery response starts recovery processing from that point. This recovery process is a process for recovering the consistency of each other's data between the CU 3 and the P stand 2 and is executed not only when the power is turned on, but also when a trouble occurs and is recovered. Executed.

  The CU 3 counts up the serial number each time a command such as a recovery request is transmitted. However, it does not count up when retransmitting a command. When the P unit 2 receives a command having the same serial number as the previously received serial number, it determines that a communication failure has occurred and the CU 3 has retransmitted the command. The CU 3 backs up the serial number when the command is transmitted. Each time the P unit 2 transmits a response corresponding to the received command, it increments the serial number. However, it is not counted up when the response is retransmitted. When receiving a response with the same serial number as the previously received serial number, the CU 3 determines that a communication failure has occurred and the P base 2 has retransmitted the response. The P unit 2 backs up the serial number when the response is transmitted.

  After the authentication sequence is completed, the CU 3 transmits a recovery request command to the P unit 2 with the serial number “n”. The P base 2 counts up the serial number and returns a response of the recovery response to the CU 3 as “n + 1”.

  Thereafter, the CU 3 counts up the serial number to “n + 2”, and transmits a communication start request (recovery clear ON) command to the P unit 2. In response to this, the P unit 2 clears the recovery data. Then, the P platform 2 counts up the serial number to “n + 3” and returns a response to the communication start response to the CU 3. In response, CU3 clears the recovery data. Thereafter, a status information request command and a status information response response are transmitted and received between the CU 3 and the P platform 2.

  The CU 3 transmits a status information request command of serial number = n + 4 to the P unit 2. In response to this, the P table 2 backs up the data of the number of game balls, the number of added balls, the number of subtracted balls, the number of counted balls, the number of symbols stopped, the number of winning prizes, and the status of the game table. Further, the P stand 2 clears the values of the counters of the number of game balls, the number of added balls, the number of subtracted balls, the number of counted balls, the number of symbols stopped, and the number of winning prizes. Then, the P platform 2 returns a response of the status information response of serial number = n + 5 to the CU3.

  Upon receiving the response, the CU 3 backs up the number of game balls, the number of added balls, the number of subtracted balls, the number of balls counted, the number of symbol stops, the number of winning prizes, and the game table state data based on the status information response. Note that the breakdown of the number of added balls is “the number of winning balls × the number of winning balls” and “the number of back balls”. The breakdown of the number of subtraction balls is “number of fired balls”.

  Thereafter, the CU 3 transmits a status information request command of serial number = n + 6 to the P unit 2, and the P unit 2 returns a response of the status information response of serial number = n + 7 to the CU 3. Each time the P unit 2 transmits a response of the status information response, it backs up the data and clears the counter. Further, the CU 3 backs up the data every time it receives a response of the status information response.

  With reference to FIG. 36, the process of CU3 and P stand 2 when a card is inserted is demonstrated. First, before inserting a card, the CU 3 transmits a status information request command including a serial number = n and a card insertion state = OFF to the P unit 2. In response to this, the P unit 2 returns a response of the status information response including serial number = n + 1 and game prohibition to the CU3.

  Thereafter, when the card is inserted, the CU 3 outputs a command signal for taking the card to the card reader / writer, and the card reader / writer reads the information recorded on the taken card and receives the read information. For example, the card insertion process is executed.

  The CU 3 is in a card information inquiry state for a predetermined period after the card is inserted. This is done by inquiring, for example, the upper server 801 (see FIG. 77) about the suitability of the inserted card, whether the card is a membership card registered at the game hall, or holding balls, storage balls, card balance, etc. This means that it is in the process of executing the process of displaying on the display 312 and displaying on the display 54 on the P platform 2 side.

  Since the CU 3 does not authenticate the inserted card while displaying that the inserted card is being inquired on the display 312, the status information request including the serial number = n + 2 and the card insertion state = OFF is issued. A command is transmitted to the P unit 2. In response to this, the P unit 2 returns a response of the status information response including serial number = n + 3 and game prohibition to the CU3. The display 54 on the P platform 2 side is controlled by the display control unit 350 of the CU 3 to display that the card is being inquired.

  Thereafter, when the inserted card is authenticated, the CU 3 transmits a card insertion notification command including a serial number = n + 4, a card ID, and a card insertion time to the P unit 2. In response to this, the P table 2 backs up the received card ID and card insertion time data to the RAM of the payout control unit 171 and returns a response of the card insertion response including the serial number = n + 5 to the CU3. Also in CU3, the card ID of the inserted card is stored in the RAM or the like of the CU control unit 323.

  In response to this, the CU 3 sends a status information request command including a serial number = n + 6 and a card insertion state = ON to the P unit 2 to notify the P unit 2 of the card insertion status. The P table 2 receives the notification that the card is being inserted, permits the game, and returns a response of the status information response including the serial number = n + 7 and the game permission to the CU 3.

  While the card is being inserted, CU3 sends a status information request command including serial number = n + 8 and card insertion status = ON to P-unit 2, and P-unit 2 sends a response of status information response including serial number = n + 9 and game permission. Reply to CU3.

  Next, with reference to FIG. 37, a process when depositing into the inserted card will be described. The inserted card is a general 0 yen 0 card (stock card with a balance of 0 yen and 0 coins) stocked in advance in the CU. In the present embodiment, a card is shown as an example of a recording medium stocked in advance in the CU, but IC coins may be used instead of the card.

  First, before the deposit operation, the CU 3 transmits a status information request command including a serial number = n and a card insertion state = OFF to the P unit 2. In response to this, the P machine 2 returns a response of the status information response including the serial number = n + 1 and the game prohibition to the CU3.

  The player inserts a bill into the bill insertion slot 302 and performs a deposit operation. When a deposit operation is performed, the CU 3 writes the amount of money deposited by the card reader / writer on a card stocked in advance and the card reader / writer reads information recorded on the card on which the amount is written. Processing is executed.

  When the deposit operation is performed, the CU 3 transmits a card insertion notification command including a serial number = n + 2, a card ID, and a card insertion time to the P unit 2. In response to this, the P unit 2 backs up the received card ID and card insertion time data, and returns a response of the card insertion response including the serial number = n + 3 to the CU 3.

  In response to this, the CU 3 sends a status information request command including a serial number = n + 4 and a card insertion state = ON to the P base 2 to notify the P base 2 of the card insertion status. The P table 2 receives the notification that the card is being inserted, permits the game, and returns a response of the status information response including the serial number = n + 5 and the game permission to the CU 3. As a result, the game is permitted. Thereafter, the game is made possible by securing a game ball using the balance of the card.

  While the card is being inserted, CU3 sends a status information request command including serial number = n + 6 and card insertion state = ON to P-unit 2, and P-unit 2 returns a response of status information response including serial number = n + 7 and game permission. Reply to CU3.

  Next, with reference to FIG. 38, a process for lending a game ball from the prepaid balance of the inserted card will be described. That is, a process when the prepaid balance recorded on the inserted card is consumed will be described. In the process of FIG. 38, the current number of game balls is “50” balls. First, the CU 3 transmits a status information request command including a serial number = n and a game ball addition request = OFF to the P unit 2. In response to this, the P platform 2 returns a response of the status information response including the serial number = n + 1 and the number of game balls = 50 to the CU3.

  Thereafter, when the player performs a lending operation (ball lending operation) in which the “lending” button is pressed once, CU3 lends 500 yen, that is, 125 balls. When the ball lending button (lending button) 321 is pressed, the CU 3 confirms prepaid consumption for 500 yen, and the number of game balls = 50 (number of game balls before update) +125 (number of added balls) = 175. Back up your data. In this way, the balance consumption is determined by the CU 3 alone when the lending operation is performed. Thereafter, CU3 is in the display of addition. During this addition display, the display unit 54 is displayed that 125 balls are withdrawn from the balance and are being added to the game balls.

  Next, the CU 3 transmits a status information request command including the serial number = n + 2, the game ball addition request = ON, and the number of addition balls = 125 to the P unit 2. In response, P 2 updates the number of game balls to the number of game balls = 50 (current number of game balls) +125 (number of additional balls) = 175, serial number = n + 3, number of additional balls = 175, game balls. A response of the status information response including the addition result = OK is returned to CU3.

  Thereafter, CU3 sends a status information request command including serial number = n + 4 and game ball addition request = OFF to P unit 2, and P unit 2 returns a status information response including serial number = n + 5 and the number of additional balls = 175. A response is returned to CU3.

  Next, with reference to FIG. 39, the process of paying out and holding out and replaying will be described. In FIG. 39, the initial number of game balls is “50” balls. The replay process in FIG. 39 is similar to the process at the time of consumption of the balance shown in FIG. First, the CU 3 transmits a status information request command including a serial number = n and a game ball addition request = OFF to the P unit 2. In response to this, the P platform 2 returns a response of the status information response including the serial number = n + 1 and the number of game balls = 50 to the CU3.

  Thereafter, when the player presses the replay button 319 in a state where there is a ball or a storage ball, the CU 3 confirms the consumption of 125 balls from the ball or the storage ball, updates the number of game balls, Data of number = 50 (number of game balls before update) +125 (number of added balls) = 175 is backed up. In this way, the consumption of the holding balls or the stored balls is determined by the CU 3 alone when the operation of pressing the replay button 319 is performed. In addition, when both the holding ball and the storage ball exist, consumption of the holding ball is given priority.

  In place of the control to prioritize the holding balls, the storage ball replay button and the holding ball replay button are provided, and the player can select and operate either the storage ball consumption or the holding ball consumption by selecting and operating. It may be. In other words, the replay button is used to obtain a game ball (game point) from a stored ball (stored medal) and a game ball (game point) from a stored ball (stored medal) replay button. You may comprise two with a holding ball (pointing) replay button. In addition, a holding ball payout button may be provided in CU3, and the holding ball payout button may be pressed to convert from a holding ball (a point) to a game ball (a game point).

  Thereafter, the CU 3 displays the addition of the game balls, and transmits a status information request command including the serial number = n + 2, the game ball addition request = ON, and the number of added balls = 125 to the P unit 2. In response, P 2 updates the number of game balls to the number of game balls = 50 (current number of game balls) +125 (number of additional balls) = 175, serial number = n + 3, number of additional balls = 175, game balls. A response of the status information response including the addition result = OK is returned to CU3.

  Note that CU3 indicates that the game ball is being added by displaying on the display 54 that 125 balls are being dropped from the holding ball or the stored ball and being added to the game ball.

  Thereafter, CU3 sends a status information request command including serial number = n + 4 and game ball addition request = OFF to P unit 2, and P unit 2 returns a status information response including serial number = n + 5 and the number of additional balls = 175. A response is returned to CU3.

  Next, a process of counting and subtracting a part of the game balls will be described with reference to FIG. In FIG. 40, the number of balls specified by the inserted recording medium (member card or visitor card) is “0” balls, and the initial number of game balls is “800” balls. First, the CU 3 transmits a status information request command including serial number = n and counting ball reception = OFF to the P unit 2. In response to this, the P stand 2 returns a response of the state information response including the serial number = n + 1, the number of game balls = 800, the number of counting balls = 0, and counting = OFF to the CU3.

  Thereafter, the player presses the count button 28 once to perform an operation of converting the game ball into a holding ball. This single press is a short press of less than 1 second, and is different from a long press of 1 second or more described with reference to FIG. When the counting button 28 is pressed, the payout control unit 171 of the P platform 2 measures the pressing time, and determines whether the pressing is short for less than 1 second or long pressing for 1 second or more. “Pressing the“ count ”button once” in FIG. 40 indicates a case where the payout control unit 171 determines that the short press is less than 1 second. In this case, 100 balls are counted and counted. Counted as a ball. When the initial number of game balls is “800”, the number of game balls is “700” and the count ball is “100” by pressing the count button 28 once.

  In the operation of pressing the count button 28 once, the number of balls to be counted as the counting ball may be changed by the time during which the count button 28 is pressed shortly. For example, when the count button 28 is pressed for a short time of less than 0.5 seconds, the number of balls counted as the counting ball is 100 balls. When the count button 28 is pressed for a short time of 0.5 seconds or longer, the number of balls counted as counting balls is 400 balls. Further, when the time during which the count button 28 is pressed is a short press for 0.5 seconds or more, all of the remaining number of game balls may be counted as a count ball.

  Immediately after an operation of briefly pressing the count button 28 once, the CU 3 transmits a command for status information request including serial number = n + 2 and count ball reception = OFF to the P base 2.

  In response to this, the P stand 2 notifies the CU 3 of the state of the number of game balls = 700 and the number of counting balls = 100, so that the serial number = n + 3, the number of gaming balls = 700, the number of counting balls = 100, and counting = A status information response including ON is returned to CU3. In response to the response of the state information response, CU3 adds the counted number of balls (100 balls) to the number of balls (0 ball) and updates the number of balls = 100, and the number of game balls = 800 (game balls before update) Number) −100 (number of balls) = 700 data is backed up.

  Further, the CU 3 receives a response of the state information response and starts display for counting 100 game balls. That is, the CU control unit 323 transmits a count display command to the display control unit 350. The display controller 350 receives the command and controls the display 54 on the P platform 2 side. As a result, the display 54 displays an image in which the number of game balls is counted and the number of balls is decreased, while the number of balls is increased. In this case, it is conceivable to perform an effect display such that game balls are guided and counted by each counter one by one. Another example of the effect display may be a display in which the number of game balls is converted to the number of balls in time. For example, the data for the number of balls and the data for the number of balls are shown in a bar graph, and the number of balls in the game ball number is increased while the number of balls in the game ball is increased while the number of balls in the game ball is decreased. The display to move to the bar graph may be repeated. In addition, as another example of the effect display, the current game ball number data and the number of possession balls data are digitally displayed as they are, and the number of possession balls is increased while decreasing the number of game balls, or a part of the number of game balls It is possible to repeat the display of moving the number of balls to the number of balls and various effects display.

  Further, the player performs an operation of pressing the counting button 28 once to convert the game ball into a holding ball. By pressing the count button 28 once, 100 balls out of the number of game balls are counted and counted as counting balls. When the current number of game balls is “700” balls, the number of game balls is “600” balls and the count ball is “100” balls by pressing the count button 28 once.

  Immediately after the operation of pressing the count button 28 once is performed, the CU 3 transmits a command for status information request including serial number = n + 4 and count ball reception = ON to the P base 2. The reason why the counting ball reception = ON is to notify the P stand 2 of the reception of the counting ball in response to the response of the previous status information response.

  In response to this, in order to notify the CU 3 of the number of game balls = 600 and the number of counting balls = 100, the P stand 2 has a serial number = n + 5, the number of game balls = 600, the number of counting balls = 100, and counting = A status information response including ON is returned to CU3. Upon receiving the response to the status information response, CU3 adds the counted number of balls (100 balls) to the number of balls (100 balls) and updates the number of balls to 200, and the number of game balls = 700 (game balls before update) Number) −100 (number of balls) = 600 data is backed up.

  Further, the CU 3 receives a response of the state information response and starts display for counting 100 game balls. If a status information response indicating 100 counts has been received before the count display for the previous 100 balls is completed, the current count display for the previous 100 game balls is displayed continuously. 100 counts are displayed based on the status information response.

  Thereafter, the CU 3 transmits a status information request command including serial number = n + 6 and counting ball reception = ON to the P base 2. The reason why the counting ball reception = ON is to notify the P stand 2 of the reception of the counting ball in response to the response of the previous status information response. In response to this, the P stand 2 returns a response of the state information response including the serial number = n + 7, the number of game balls = 600, the number of balls to be counted = 0, and the counting being = OFF to the CU 3.

  Here, a case has been described in which 100 balls out of the number of game balls are counted and counted as counting balls by pressing the counting button 28 once, but it is counted by pressing the counting button 28 once. The counting balls are not limited to 100 balls. For example, a configuration in which 200 balls or 300 balls out of the number of game balls is counted and counted as a counting ball by pressing the counting button 28 once short may be used.

  Next, a process of counting and subtracting all the game balls will be described with reference to FIG. In FIG. 41, the number of balls specified by the inserted recording medium (member card or the like) is “0” balls, and the initial number of game balls is “200” balls. First, the CU 3 transmits a status information request command including serial number = n and counting ball reception = OFF to the P unit 2. In response to this, the P stand 2 returns a response of the status information response including the serial number = n + 1, the number of game balls = 200, the number of counting balls = 0, and counting = OFF to the CU3.

  Thereafter, the player performs an operation of converting the game ball into a holding ball by long-pressing the counting button 28 (an operation of continuously pressing the button for one second or more). “Pressing the“ count ”button length” in FIG. 41 indicates a case where the payout control unit 171 determines that the button has been pressed for one second or longer, and in this case, during one command / response period (200 ms). Of the number of game balls, 100 balls are counted and counted as counting balls. When the initial number of game balls is “200”, the number of game balls is “100” and the counting ball is “100” in one command / response period.

  Immediately after the operation of long-pressing the count button 28 is performed, the CU 3 transmits a status information request command including serial number = n + 2 and count ball reception = OFF to the P platform 2.

  In response to this, in order to notify the CU 3 that the number of gaming balls = 100 and the number of counting balls = 100, the P stand 2 has a serial number = n + 3, the number of gaming balls = 100, the number of counting balls = 100, and counting = A status information response including ON is returned to CU3. In response to the response of the state information response, CU3 adds the counted number of balls (100 balls) to the number of balls (0 ball) and updates it to the number of balls = 100, and the number of game balls = 200 (game balls before update) Number) −100 (the number of counting balls) = 100 data is backed up.

  Further, the CU 3 receives a response of the state information response and starts display for counting 100 game balls.

  Thereafter, the CU 3 transmits a status information request command including serial number = n + 4 and counting ball reception = ON to the P base 2. The reason why the counting ball reception = ON is to notify the P stand 2 of the reception of the counting ball in response to the response of the previous status information response.

  In order to notify the CU 3 that the number of game balls = 0 and the number of count balls = 100, the P table 2 that is long-pressing the count button 28 has a serial number = n + 5, the number of game balls = 0, the number of count balls = 100, A response of a status information response including ON during counting = ON is returned to CU3. Upon receiving the response to the status information response, CU3 adds the counted number of balls (100 balls) to the number of balls (100 balls) and updates the number of balls to 200, and the number of game balls = 100 (game balls before update) Number) −100 (number of balls) = 0.

  In response to the response of the state information response, the CU 3 performs display for counting 100 game balls in succession to the display for counting the previous 100 game balls.

  Further, the CU 3 transmits a status information request command including serial number = n + 6 and counting ball reception = ON to the P base 2. The reason why the counting ball reception = ON is to notify the P stand 2 of the reception of the counting ball in response to the response of the previous status information response.

  In response to this, in order to notify the CU 3 that the number of gaming balls = 0 and the number of counting balls = 0, the P stand 2 has a serial number = n + 7, the number of gaming balls = 0, the number of counting balls = 0, and counting = A status information response including ON is returned to CU3. Upon receiving the response of the status information response, CU3 adds the counted number of balls (0 ball) to the number of balls (200 balls) and updates the number of balls to 200, and the number of game balls = 0 (game balls before update) Number) -0 (counted ball count) = 0 data is backed up.

  As the count display progresses, the number of game balls on the display on the display 54 eventually becomes zero. The player confirms that the number of game balls has become 0 and releases the counting button 28. By releasing the count button 28, the operation of converting the game ball into a holding ball is completed.

  Thereafter, the CU 3 transmits a status information request command including serial number = n + 8 and counting ball reception = OFF to the P unit 2. The reason for counting ball reception = OFF is that the number of counting balls received in the previous response to the status information response is 0, and there is no need to notify the P stand 2 of receipt of the counting ball. In response to this, the P stand 2 returns a response of the status information response including the serial number = n + 9, the number of game balls = 0, the number of balls to be counted = 0, and the counting in progress = OFF to the CU3.

  Here, a case has been described in which 100 balls out of the number of game balls are counted and counted as counting balls during one command / response period (200 ms) by long pressing the count button 28. The counting balls counted during the command / response period (200 ms) are not limited to 100 balls. For example, when the count button 28 is long pressed, the number of counting balls counted in one command / response period (200 ms) may be 200 balls, 300 balls, and the like.

  In addition, regardless of the current number of game balls, a configuration in which all of the game balls are counted by performing an operation of long-pressing the counting button 28 for about 5 seconds (25 command / response periods) may be employed. Note that the number of game balls to be counted may be changed depending on the operation time for which the count button 28 is long pressed. That is, when the current number of game balls is large, the number of balls counted in one command / response period (200 ms) is increased, and when the current number of game balls is small, the period of one command / response ( The number of counting balls counted in 200 ms) is reduced. Specifically, when the current number of gaming balls is 10,000 balls, the counting balls counted in one command / response period (200 ms) are set to 400 balls, and when the current number of gaming balls is 1000 balls, once The number of counting balls counted during the command / response period (200 ms) is 40 balls.

  Next, with reference to FIG. 42, the return process of a membership card, a general balance card, and a general possession card will be described. In FIG. 42, the number of balls specified by the inserted recording medium (member card or the like) is “0” balls, and the initial number of game balls is “200” balls. First, the CU 3 transmits a status information request command including serial number = n and counting ball reception = OFF to the P unit 2. In response to this, the P stand 2 returns a response of the status information response including the serial number = n + 1, the number of game balls = 200, the number of counting balls = 0, and counting = OFF to the CU3.

  Thereafter, the player performs an operation of converting the game ball into a holding ball by long-pressing the count button 28 (an operation of pressing the button for 1 second or longer). By long-pressing the count button 28, 100 balls out of the number of game balls are counted and counted as counting balls in one command / response period (200 ms). When the initial number of game balls is “200”, the number of game balls is “100” and the counting ball is “100” in one command / response period.

  However, in the counting display performed on the display 54, the number of game balls and the number of counting balls are not instantaneously changed to such numbers, but the game balls are gradually counted and decreased. The effect is such that the ball is gradually increased. For this reason, until the counting display is completed, the number of game balls and the number of points on display on the display 54 do not match the number of game balls and points on the memory on the CU side and the P side.

  However, instead of such control, the counting status (conversion status) of the points on the display may be synchronized with the actual data conversion processing. In this case, since the data counting process (conversion process) can be completed immediately, the counting display (conversion display) synchronized therewith also ends immediately. In this case, it may not be possible to sufficiently notify the player that the data has been counted. Therefore, while displaying the count, the display may be switched to the display “counting is completed” from the middle. In this case, the card return operation may be validated from the stage when the display of “counting has been completed” is started.

  Immediately after the operation of long-pressing the count button 28 is performed, the CU 3 transmits a status information request command including serial number = n + 2 and count ball reception = OFF to the P platform 2.

  In response to this, in order to notify the CU 3 that the number of gaming balls = 100 and the number of counting balls = 100, the P stand 2 has a serial number = n + 3, the number of gaming balls = 100, the number of counting balls = 100, and counting = A status information response including ON is returned to CU3. In response to the response of the state information response, CU3 adds the counted number of balls (100 balls) to the number of balls (0 ball) and updates it to the number of balls = 100, and the number of game balls = 200 (game balls before update) Number) −100 (the number of counting balls) = 100 data is backed up.

  In response to the response of the state information response, the CU 3 performs display for counting 100 game balls in succession to the display for counting the previous 100 game balls.

  Thereafter, the CU 3 transmits a status information request command including serial number = n + 4 and counting ball reception = ON to the P base 2. The reason why the counting ball reception = ON is to notify the P stand 2 of the reception of the counting ball in response to the response of the previous status information response.

  In order to notify the CU 3 that the number of game balls = 0 and the number of count balls = 100, the P table 2 that is long-pressing the count button 28 has a serial number = n + 5, the number of game balls = 0, the number of count balls = 100, A response of a status information response including ON during counting = ON is returned to CU3. Upon receiving the response to the status information response, CU3 adds the counted number of balls (100 balls) to the number of balls (100 balls) and updates the number of balls to 200, and the number of game balls = 100 (game balls before update) Number) −100 (number of balls) = 0.

  In response to the response of the state information response, the CU 3 performs display for counting 100 game balls in succession to the display for counting the previous 100 game balls.

  As the count display progresses, the number of game balls on the display on the display 54 eventually becomes zero. The player confirms that the number of game balls has become 0 and releases the counting button 28. By releasing the count button 28, the operation of converting the game ball into a holding ball is completed.

  Thereafter, the player performs an operation of pressing the return button 322. The CU 3 transmits a card return notification command including a serial number = n + 6 to the P unit 2 by performing an operation in which the player presses the return button 322. In response to this, the P platform 2 returns a response of the card return response including the serial number = n + 7, the card ID held on the payout control board 17 and the card insertion time to the CU 3.

  In response, the CU 3 compares the returned card ID and card insertion time with the card ID and card insertion time stored at the time of card insertion, and determines whether or not they match. . On the condition that they match, the card inserted in the card insertion / discharge slot 309 is returned to the player. At that time, the CU 3 transmits the card ID of the card and the data of the number of balls to the upper server 801, and the upper server 801 stores the data of the number of balls in association with the card ID of the card. If they do not match, an error is determined and error processing is executed. As the error processing, for example, control for prohibiting the return of the card in accordance with the return operation is performed to hold the card inside the CU 3, or the writing process to the holding card is prohibited. Further, an error notification by an abnormality notification lamp or the like, notification of occurrence of abnormality to the upper server 801, and the like are performed. When the card is returned, the higher-level server 801 controls the number of balls to be recorded and ejected on the card instead of storing the number of balls in association with the card ID of the card. Also good.

  Thereafter, the CU 3 transmits a status information request command including a serial number = n + 8 and a card insertion state = OFF to the P unit 2. When receiving the state information response including the card insertion state = OFF, the P base 2 clears the card ID and the card insertion time data held in the payout control board 17. In response to this, the P stand 2 returns a response of the status information response including the serial number = n + 9, the number of game balls = 0, the number of balls to be counted = 0, and the counting in progress = OFF to the CU3.

  Next, with reference to FIG. 43, a process for prompting a counting operation when returning a membership card, a general balance card, or a general possession card will be described. In FIG. 43, the number of possessed balls specified by the inserted recording medium (member card or the like) is “0” balls, and the initial number of game balls is “200” balls. First, the CU 3 transmits a status information request command including serial number = n and counting ball reception = OFF to the P unit 2. In response to this, the P stand 2 returns a response of the status information response including the serial number = n + 1, the number of game balls = 200, the number of counting balls = 0, and counting = OFF to the CU3.

  Thereafter, the player performs an operation of pressing the return button 322. However, since CU3 has 200 balls and is not 0 balls, CU3 prohibits the card return operation and prompts the player to perform a counting operation. "Please perform the counting operation." In this way, the display for prompting the counting operation is performed, so that the player can know the reason why the card return operation cannot be performed. The CU 3 transmits a status information request command including a serial number = n + 2 and a card insertion state = ON to the P unit 2. In response to this, the P platform 2 returns a response of the status information response including the serial number = n + 3, the number of game balls = 200, the number of balls to be counted = 0, and the counting being = OFF to the CU3.

  Thereafter, the player performs an operation of converting the game ball into a holding ball by long-pressing the count button 28 (an operation of pressing the button for 1 second or longer). By long-pressing the count button 28, 100 balls out of the number of game balls are counted and counted as counting balls in one command / response period (200 ms). When the initial number of game balls is “200”, the number of game balls is “100” and the counting ball is “100” in one command / response period.

  Immediately after the operation of depressing the count button 28 for a long time, the CU 3 transmits a command for status information request including serial number = n + 4 and count ball reception = OFF to the P base 2.

  In response to this, the P stand 2 notifies the CU 3 of the state of the number of game balls = 100 and the number of counting balls = 100, so that the serial number = n + 5, the number of gaming balls = 100, the number of counting balls = 100, and counting = A status information response including ON is returned to CU3. In response to the response of the state information response, CU3 adds the counted number of balls (100 balls) to the number of balls (0 ball) and updates it to the number of balls = 100, and the number of game balls = 200 (game balls before update) Number) −100 (the number of counting balls) = 100 data is backed up.

  Further, the CU 3 receives a response of the state information response and starts display for counting 100 game balls.

  Thereafter, the CU 3 transmits a status information request command including serial number = n + 6 and counting ball reception = ON to the P base 2. The reason why the counting ball reception = ON is to notify the P stand 2 of the reception of the counting ball in response to the response of the previous status information response.

  In order to notify the CU 3 that the number of game balls = 0 and the number of count balls = 100, the P table 2 that is pressing the count button 28 for a long time has a serial number = n + 7, the number of game balls = 0, the number of count balls = 100, A response of a status information response including ON during counting = ON is returned to CU3. Upon receiving the response to the status information response, CU3 adds the counted number of balls (100 balls) to the number of balls (100 balls) and updates the number of balls to 200, and the number of game balls = 100 (game balls before update) Number) −100 (number of balls) = 0.

  In response to the response of the state information response, the CU 3 performs display for counting 100 game balls in succession to the display for counting the previous 100 game balls.

  As the count display progresses, the number of game balls on the display on the display 54 eventually becomes zero. The player confirms that the number of game balls has become 0 and releases the counting button 28. By releasing the count button 28, the operation of converting the game ball into a holding ball is completed.

  Thereafter, the player performs an operation of pressing the return button 322. The CU 3 transmits a command to notify the card return including the serial number = n + 8 to the P-unit 2 by performing an operation in which the player presses the return button 322. In response to this, the P platform 2 returns a response of the card return response including the serial number = n + 9, the card ID held on the payout control board 17 and the card insertion time to the CU 3.

  In response, the CU 3 compares the returned card ID and card insertion time with the card ID and card insertion time stored at the time of card insertion, and determines whether or not they match. . On the condition that they match, the card inserted in the card insertion / discharge slot 309 is returned to the player. If they do not match, an error is determined and error processing is executed. As the error processing, for example, control for prohibiting the return of the card in accordance with the return operation is performed to hold the card inside the CU 3, or the writing process to the holding card is prohibited. Further, an error notification by an abnormality notification lamp or the like, notification of occurrence of abnormality to the upper server 801, and the like are performed.

  Thereafter, the CU 3 transmits a status information request command including a serial number = n + 10 and a card insertion state = OFF to the P unit 2. When receiving the state information response including the card insertion state = OFF, the P base 2 clears the card ID and the card insertion time data held in the payout control board 17. In response to this, the P stand 2 returns a response of the state information response including the serial number = n + 11, the number of game balls = 0, the number of counting balls = 0, and counting in progress = OFF to the CU3.

  As described above, according to the present embodiment, the card return operation can be finally performed through the display of converting the game ball obtained by the game into the possession ball by the player's operation. For this reason, a game ball is counted without causing confusion to a player who is accustomed to a conventional game system that allows a ball counter obtained by counting the balls obtained by the game to be counted by each card counter. A new game system using data can be provided. In addition, if the conversion display of all game balls does not end, the card return operation will not be valid, so it is a system that does not allow you to accidentally leave the game machine and leave with game balls remaining The game can be reminiscent of the player, giving the player a sense of security.

  In addition, since the state in which the game balls are counted is displayed on the display device 54 on the gaming machine side, it is easy for the player sitting facing the gaming machine to see the counting state. Further, as described above, the display control unit 350 that controls the display on the gaming machine side display 54 is provided on the CU side, so that the display control burden on the gaming machine side can be reduced.

  Next, with reference to FIG. 44, a process for automatically collecting a general card having a balance of 0 yen and a holding ball of 0 balls will be described. In FIG. 44, the balance specified by the inserted recording medium (member card or the like) is “0” yen, the number of possessed balls is “0” balls, and the initial number of game balls is “50” balls. It has become. First, the CU 3 transmits a status information request command including a serial number = n and a card insertion state = ON to the P unit 2. In response to this, the P table 2 notifies the CU 3 of the game table information, so that the serial number = n + 1, no game ball = OFF, game completion = OFF, the number of game balls = 20, the number of additional balls = 0, the number of subtraction balls A response of a status information response including = 30 is returned to CU3. In response to the notification from the P-unit 2, the CU 3 backs up the data of the number of game balls = 20, the total number of added balls = + 0, and the total number of subtracted balls = + 30.

  Thereafter, the P platform 2 detects that the number of game balls has decreased to 0 when the player plays a game (the number of game balls = 0).

  The CU 3 transmits a status information request command including a serial number = n + 2 and a card insertion state = ON to the P unit 2. In response to this, the P stand 2 sends a response of a status information response including serial number = n + 3, game ball no = ON, game completion = OFF, game ball count = 0, addition ball count = 0, subtraction ball count = 20. Reply to CU3. In response to the notification from the P stand 2, the CU 3 backs up the data of the number of game balls = 0, the cumulative number of added balls = + 0, and the total number of subtracted balls = + 20.

  After that, the P stand 2 detects that the game is completed after the number of game balls becomes zero and the floating ball (the number of balls in the game) in the game area 27 disappears. When a status information response of “game completion ON” is transmitted from the P stand 2 due to the absence of floating balls (the number of balls in the game), the CU 3 will display, for example, “Do you want to end the game?” Message may be displayed, and the player may touch the “YES” display to collect the general card.

  The CU 3 transmits a status information request command including a serial number = n + 4 and a card insertion state = ON to the P unit 2. In response to this, the P stand 2 sends a response of a status information response including serial number = n + 5, game ball no = ON, game completion = ON, game ball count = 0, addition ball count = 0, subtraction ball count = 0. Reply to CU3.

  Thereafter, the CU 3 transmits a card return notification command including the serial number = n + 6 to the P unit 2. In response to this, the P platform 2 returns a response of the card return response including the serial number = n + 7, the card ID held on the payout control board 17 and the card insertion time to the CU 3.

  In response, the CU 3 compares the returned card ID and card insertion time with the card ID and card insertion time stored at the time of card insertion, and determines whether or not they match. . If the card matches, the collected general cards are collected. If they do not match, an error is determined and error processing is executed. As the error processing, for example, control for prohibiting the return of the card in accordance with the return operation is performed to hold the card inside the CU 3, or the writing process to the holding card is prohibited. Further, an error notification by an abnormality notification lamp or the like, notification of occurrence of abnormality to the upper server 801, and the like are performed.

  Thereafter, the CU 3 transmits a status information request command including a serial number = n + 8 and a card insertion state = OFF to the P unit 2. When receiving the state information response including the card insertion state = OFF, the P base 2 clears the card ID and the card insertion time data held in the payout control board 17. In response to this, the P stand 2 sends a response of a state information response including serial number = n + 9, no game ball = ON, game completion = ON, the number of game balls = 0, the number of additional balls = 0, the number of subtraction balls = 0. Reply to CU3.

  Next, with reference to FIG. 45, the jackpot process during the game will be described. In this FIG. 45, the number of balls “500” specified by the inserted recording medium (member card or the like) is all converted into game balls, and the initial number of game balls is “500”. Suppose that

  First, the CU 3 transmits a status information request command including a serial number = n and a card insertion state = ON to the P unit 2. In response to this, the P table 2 notifies the CU 3 of the game table information, so that the serial number = n + 1, the big hit = OFF, the number of game balls = 490, the number of added balls = 3, the number of subtracted balls = 13 The response of the response is returned to CU3. In response to the notification from the P-unit 2, the CU 3 backs up the data of the number of game balls = 490, the total number of added balls = + 3, and the total number of subtracted balls = + 13.

  Thereafter, the CU 3 transmits a status information request command including a serial number = n + 2 and a card insertion state = ON to the P unit 2. In response to this, the P stand 2 returns a response of the state information response including the serial number = n + 3, the big hit = OFF, the number of game balls = 480, the number of added balls = 0, the number of subtracted balls = 10 to the CU3. Although not shown, the CU 3 receives the notification from the P stand 2 and backs up the data of the number of game balls = 480, the total number of added balls = + 0, and the total number of subtracted balls = + 10.

  Thereafter, a big hit occurs at the P stand 2. After the big hit occurs, the CU 3 transmits a status information request command including a serial number = n + 4 and a card insertion state = ON to the P unit 2. In response to this, the P stand 2 returns a response of the state information response including the serial number = n + 5, the big hit = ON, the number of game balls = 580, the number of added balls = 120, and the number of subtracted balls = 20 to the CU3. In response to the notification from the P stand 2, the CU 3 backs up the data of the number of game balls = 580, the total number of added balls = + 120, the total number of subtracted balls = + 20, and the number of jackpots = + 1. In addition, the current cumulative number of added balls = 123 and the current cumulative number of subtracted balls = 43.

  Thereafter, the player performs a manipulation of converting the game ball into a holding ball by pressing the count button 28 once. By pressing the count button 28 once, 100 balls out of the number of game balls are counted and counted as counting balls. If the current number of game balls is “580”, the number of game balls is “480” and the count ball is “100” by pressing the count button 28 once.

  Immediately after an operation of briefly pressing the count button 28 once, the CU 3 transmits a command for a status information request including serial number = n + 6 and count ball reception = OFF to the P base 2.

  In response to this, in order to notify the CU 3 that the number of gaming balls = 480 and the number of counting balls = 100, the P stand 2 has a serial number = n + 7, the number of gaming balls = 480, the number of counting balls = 100, and counting = A status information response including ON is returned to CU3. In response to the response of the state information response, CU3 adds the counted number of balls (100 balls) to the number of balls (0 ball) and updates the number of balls to 100, and the number of game balls = 580 (game balls before update) Number) −100 (number of balls counted) = 480.

  Furthermore, CU3 has 100 balls by counting operation, and further, the number of balls acquired in this game (= added ball total “123” balls−subtracted ball total “40” balls, or the current number of game balls) “580” balls + current number of balls held “0” balls—number of balls held at the start of the game “500” balls) = + 80 balls are positive, so a dollar box display (see FIG. 81) is displayed on the display 312. Start. In this way, in the dollar box display, in order to match the conventional act of transferring the balls acquired by the player in this game to the dollar box and stacking the dollar box, the counting operation is performed and the holding ball is set to 0 balls or more. And it is executed when the number of balls acquired in this game becomes positive. Specifically, the dollar box display represents an image in which 1000 dollars are placed in one dollar box shown in FIG. 81, balls are filled in order from the dollar box below, and the dollar boxes are stacked. In addition, when the player converts from a possession ball to a game ball, the dollar box display is displayed by reducing the number of balls from the dollar box by the number of balls converted to a game ball.

  Note that the dollar box display is not limited to the condition displayed when the number of possessed balls is 0 or more and the number of balls acquired in this game is positive, for example, acquired in this game The condition may be changed, such as displaying when the number of balls over 1000 balls. Also, the dollar box display may be displayed when the number of balls acquired in the current game is positive, regardless of the number of balls held. Furthermore, the means for displaying the number of balls and the number of balls acquired in the current game is not limited to the dollar box display, and the number of balls may be digitally displayed on the display 312. Further, instead of or in addition to the display 312, the display may be displayed on the display 54, or a dedicated display may be provided separately for display.

  Next, with reference to FIG. 46, a description will be given of a subtraction process from a game ball by a counting operation during a game (especially during ball firing). In FIG. 46, the number of balls specified by the inserted recording medium (member card or the like) is “0” balls, and the initial number of game balls is “400” balls. First, the CU 3 transmits a status information request command including serial number = n and counting ball reception = OFF to the P unit 2. In response to this, the P stand 2 returns a response of the state information response including the serial number = n + 1, the number of game balls = 400, the number of balls to be counted = 0, and the counting in progress = OFF to the CU3. Since the ball is being fired, the cumulative number of subtraction balls needs to include information for subtracting the game ball by firing the ball, but in FIG. 46, the game ball is subtracted by firing the ball for the sake of simplicity. The information is not shown. Of course, when the number of game balls becomes 250 balls or less, which will be described later, due to the ball firing, it goes without saying that the counting operation is not performed even if the counting button 28 is pressed.

  Thereafter, the player performs a manipulation of converting the game ball into a holding ball by pressing the count button 28 once. By pressing the count button 28 once, 100 balls out of the number of game balls are counted and counted as counting balls. If the initial number of game balls is “400”, the number of game balls is “300” and the count ball is “100” by pressing the count button 28 once.

  Immediately after an operation of briefly pressing the count button 28 once, the CU 3 transmits a command for status information request including serial number = n + 2 and count ball reception = OFF to the P base 2.

  In response to this, in order to notify the CU 3 that the number of gaming balls = 300 and the number of counting balls = 100, the P stand 2 has a serial number = n + 3, the number of gaming balls = 300, the number of counting balls = 100, and counting = A status information response including ON is returned to CU3. In response to the response of the state information response, CU3 adds the counted number of balls (100 balls) to the number of balls (0 ball) and updates the number of balls to 100, and the number of game balls = 400 (game balls before update) Number) −100 (number of balls) = 300 data is backed up.

  Further, the CU 3 receives a response of the state information response and starts display for counting 100 game balls.

  Further, the player performs an operation of pressing the counting button 28 once to convert the game ball into a holding ball. When the count button 28 is pressed once for a short time, 100 balls out of the number of game balls are counted and counted as count balls. Therefore, if the current number of game balls is “300” balls, pressing the count button 28 once should result in “200” balls and “100” balls. is there.

  However, the P stand 2 is in a state where the ball is continuously fired (a state where the game is continued), and the number of game balls is successively subtracted. Therefore, depending on the timing at which the counting button 28 is short-pressed or long-pressed and the timing at which the ball is fired, there is a possibility that the number of game balls is counted redundantly between the fired ball and the counting ball. Therefore, in order to avoid the possibility of such a problem, for example, when the number of game balls is 250 or less when the ball is continuously fired, control is performed so that the subsequent counting operation is not performed. To do. The P stand 2 determines a state in which the ball is continuously fired based on, for example, the input state of the touch sensor and the state of the shot ball detection switch 903.

  Therefore, when a ball is being fired during a game, if the current number of game balls is “300”, 100 balls cannot be counted even if the count button 28 is pressed once for a short time. Only, the number of game balls is “250” balls and the counting ball is “50” balls. Similarly, if the current number of game balls is “300”, even if the count button 28 is pressed once for a long time, 100 balls cannot be counted and only 50 balls are counted, and the number of game balls is “250” balls. The counting balls become “50” balls. If the count button 28 is pressed for a long time, it is possible to count all because there is an intention to end the game.

  Immediately after the operation of pressing the count button 28 once is performed, the CU 3 transmits a command for status information request including serial number = n + 4 and count ball reception = ON to the P base 2. The reason why the counting ball reception = ON is to notify the P stand 2 of the reception of the counting ball in response to the response of the previous status information response.

  In response to this, in order to notify the CU 3 of the number of game balls = 250 and the number of counting balls = 50, the P stand 2 has a serial number = n + 5, the number of gaming balls = 250, the number of counting balls = 50, and counting = A status information response including ON is returned to CU3. Here, “the number of gaming balls = 250, the number of counting balls = 50”, as described above, the counting operation is performed so that the number of gaming balls is 250 or less because the ball is being fired. This is because it is not executed.

  Upon receiving the response to the status information response, CU3 adds the number of balls (50 balls) to the number of balls (100 balls) and updates the number of balls to 150, and the number of games balls = 300 (game balls before update) Number) -50 (counted balls) = 250 data is backed up.

  In response to the response of the state information response, the CU 3 performs display for counting 50 game balls in succession to the display for counting the previous 100 game balls. Further, CU3 indicates that a part of the counting operation has been invalidated, that the number of counting balls in the status information response is normally 100, “counting balls = 50” and “the number of gaming balls” = 250 "is specified. Therefore, the CU 3 displays on the display unit 54 that the counting operation has been invalidated in the middle (a part of the counting operation has been invalidated).

  The indication that the counting operation has been invalidated may be displayed at the moment of receiving a response of “number of counting balls = 50” as shown in the figure, or after all counting display is completed. It may be displayed. Or you may make it display continuously until the display of all the counts is complete | finished from the moment of receiving the response of "count ball number = 50". Further, specific data (bit ON / OFF) for notifying the CU that the counting operation has been invalidated in the middle may be included in the status information response.

  In this way, when the counting operation is performed during the execution of the game using the game balls and the game balls reach a predetermined number of points that are not converted any more, it is determined that the counting operation has been invalidated on the way. Therefore, the player can understand that the game balls are not counted any more.

  FIG. 46 shows an example in which, after that, an operation in which a player who is firing a ball presses the count button 28 once to convert the game ball into a holding ball is detected. However, since the number of game balls is 250 in a state where balls are being fired in the game, the counting operation is invalidated even if the counting button 28 is pressed shortly for the same reason as described above.

  The CU 3 transmits a status information request command including serial number = n + 6 and counting ball reception = ON to the P unit 2. The reason why the counting ball reception = ON is to notify the P stand 2 of the reception of the counting ball in response to the response of the previous status information response. In response to this, since the counting operation is invalid, the P stand 2 returns a response of the state information response including the serial number = n + 7, the number of game balls = 250, the number of counting balls = 0, and counting = ON to the CU3. . The CU 3 specifies “counting operation was detected but invalidated” based on the data “number of counting balls = 0, counting = ON”. Based on this data, the CU 3 displays on the display 54 that the counting operation has been invalidated. When the counting operation to be invalidated is detected, the data “counting ball = 0, counting = ON” is transmitted only once, and in the response of the status information response thereafter, “counting = OFF " Further, specific data (bit ON / OFF) for notifying the CU that the counting operation is invalidated to the CU may be included in the status information response.

  Here, when the ball is being fired during the game, the condition of the number of game balls for invalidating the counting operation is not limited to 250 balls or less, but the speed for counting the number of game balls, You should decide appropriately considering the speed of launching.

  As described above, when a game using a game ball is performed, the counting operation is not effective unless there are more game points than the predetermined number. The timing when the game is continued and the timing when the remaining few game balls are consumed overlap, so that the game continues even though the game balls necessary for the game have been counted as holding balls It is possible to prevent a situation from occurring. In addition, it is possible to prevent a player's disadvantage that a game ball is completely lost and a ball cannot be shot when a big hit or the like occurs.

  Next, the abnormal sequence will be described with reference to FIG. In particular, the processing when the power supply is disconnected and the communication circuit is disconnected before the command is transmitted from the CU 3 to the P stand 2 will be described. After the processing, when communication is restored, the case where the communication counterparts match before and after the recovery, that is, the case where the CU 3 is not exchanged and the P stand 2 is not exchanged (communication counterpart match after restoration) will be described. .

  In FIG. 47, the initial number of game balls is “500”. First, the CU 3 transmits a status information request command including a serial number = n to the P unit 2. In response to this, the P stand 2 returns a response of the status information response including the serial number = n + 1, the number of game balls = 480, the number of added balls = 3, and the number of subtracted balls = 23 to the CU 3.

  In response to the response of the status information response, the CU 3 backs up the data of serial number = n + 1, number of game balls = 500 (number of game balls before update) +3 (number of added balls) −23 (number of subtraction balls) = 480.

  Thereafter, a power failure occurs at CU3, and the operation of CU3 stops. However, the P stand 2 cannot detect that the operation of the CU 3 is stopped immediately after the power is cut off in the CU 3, and if the next command cannot be received from the CU 3 for one second or more, Can detect disconnection. Therefore, in the P table 2, the game table information changes depending on the game during the period from the stop of the operation of the CU 3 until the communication line is detected, and the number of game balls = 450, the number of added balls = 6, the number of subtracted balls = 36. Note that the P stand 2 stops the game when it detects the disconnection of the communication line with the CU 3 whose operation is stopped.

  Thereafter, the power failure is restored at CU3, and CU3 starts operating. When the CU 3 starts operating, first, an authentication sequence is started between the CU 3 and the P unit 2, and information including the main chip ID and the payout chip ID is transmitted from the P unit 2 to the CU 3. The CU 3 sends the received main chip ID and payout chip ID to the upper management server, asks whether the main chip ID and the payout chip ID are properly registered, and has the result returned. . If it is properly registered, an appropriate authentication result is obtained.

  After the authentication sequence, the CU 3 transmits a recovery request to the P unit 2. That is, the CU 3 transmits the recovery data to the P unit 2. This recovery data includes the previous last transmission sequence number = n + 1, the previously inserted card ID, the previous card insertion time, and the number of added balls. To be precise, it is the various data shown in FIG. 23, and “recovery data” transmitted from the CU 3 to the P unit 2 in the subsequent flowcharts is exactly the various data shown in FIG. .

  In response to this, the P machine 2 executes recovery processing based on the received recovery data, and returns the recovery data backed up inside the P machine 2 (specifically, the payout control board 17) to the CU 3 as a response. (Recovery response).

  As this recovery data, the previous last transmission serial number = n + 1, the last inserted card ID, the previous card insertion time, the previous game table information (the number of game balls = 480, the number of added balls = 3, the number of subtracted balls = 23), the previous game Information, latest game table information (number of game balls = 450, number of added balls = 6, number of subtracted balls = 36), and latest game information. To be precise, it is the various data shown in FIG. 25, and “recovery data” transmitted from the P unit 2 to the CU 3 in the subsequent flowcharts is exactly the various data shown in FIG. 25. .

  The CU 3 that has received this recovery response starts recovery processing from that point. This recovery process is a process for recovering the data consistency between the CU 3 and the P platform 2.

  Specifically, the CU 3 determines whether or not the card ID and the card insertion time of the recovery data of the P base 2 received by the recovery response match the stored card ID and the card insertion time. If the card ID and the card insertion time match and the last transmission sequence number being backed up = n + 1 and the last transmission sequence number of the recovery data of the P unit 2 match n + 1, the CU3 has the latest recovery data of the P unit 2 The recovery process is performed using only the game machine information. CU3 performs the recovery process and sets the number of game balls = 450, the number of added balls = + 6, the number of subtracted balls = + 36, and the total number of starting ports 1 = + m.

  A command for displaying the number of game balls corrected by the recovery process on the display unit 54 is transmitted from the CU control unit 323 to the display control unit 350, and the display control unit 350 displays the corrected number of game balls on the display unit 54. Control is performed. Control is also performed so that the number of game balls corrected by the recovery processing of FIGS. 48, 49, 51 to 53, 55, and 56 described later is also displayed on the display 54. In addition, when displaying the number of game balls corrected by the recovery process, a message such as “recovered” may be displayed together. Further, the control may be performed so that the difference between the number of game balls at the time of power-off and the number of game balls corrected by the recovery process is also displayed. Furthermore, the number of game balls at the time of power-off and the number of game balls corrected by the recovery process may be controlled to be displayed simultaneously (parallel display). In the case of this parallel display, display control is performed so that the player can distinguish which is the number of game balls at the time of power-off and which is the number of game balls corrected by the recovery process. Further, display control may be performed in which the number of game balls at the time of power-off is displayed and gradually (temporally) changed to the number of game balls corrected by the recovery process. This change display control may be any one that changes in a digital display or one that changes in an analog display such as a bar graph.

  Thereafter, the CU 3 transmits a communication start request (recovery clear ON) command to the P unit 2. In response to this, the P unit 2 clears the recovery data. Then, the P platform 2 returns a response to the communication start response to the CU3. In response, CU3 clears the recovery data. Thereafter, a status information request command and a status information response response are transmitted and received between the CU 3 and the P platform 2. “Recovery data clear” is to erase untransmitted data at the timing of communication start / response, and after sending untransmitted data (recovery data), it is not necessary to store the data. It is deleted at the timing of communication start / response.

  Next, the abnormal sequence will be described with reference to FIG. In particular, a process when there is a power cut and a communication circuit break and a command has not reached the CU 3 from the P unit 2 will be described. Note that a case will be described in which the communication partner is the same before and after the recovery when the communication is recovered after the processing (the communication partner after the recovery is matched).

  In FIG. 48, the initial number of game balls is “500”. First, the CU 3 transmits a status information request command including a serial number = n to the P unit 2. In response to this, the P stand 2 returns a response of the status information response including the serial number = n + 1, the number of game balls = 480, the number of added balls = 3, and the number of subtracted balls = 23 to the CU 3.

  Thereafter, a power failure occurs at the P base 2, and the operation of the P base 2 stops. However, the game is continued until the power is cut off after the P table 2 returns the status information response response to the CU 3. Therefore, in the P table 2, the game table information changes depending on the game until the power interruption occurs, and the number of game balls = 450, the number of added balls = 6, and the number of subtracted balls = 36.

  Thereafter, the CU 3 transmits a status information request command including the serial number = n + 2 to the P unit 2. However, since the P unit 2 is stopped, the CU 3 cannot receive a response for 200 milliseconds after transmitting the command, and therefore retransmits the command up to twice as shown in FIG. Since CU3 cannot receive a response even if the command is retransmitted, it detects a communication line disconnection, and serial number = n + 2, number of game balls = 500 (number of game balls before update) +3 (number of additional balls) −23 (subtraction ball) Number) = 480 data is backed up.

  Thereafter, the power failure is restored at the P base 2, and the P base 2 starts operating. When the P table 2 starts operation, first, an authentication sequence is started between the CU 3 and the P table 2, and information including the main chip ID and the payout chip ID is transmitted from the P table 2 to the CU 3. The The CU 3 sends the received main chip ID and payout chip ID to the upper management server, asks whether the main chip ID and the payout chip ID are properly registered, and has the result returned. . If it is properly registered, an appropriate authentication result is obtained.

  After the authentication sequence, the CU 3 transmits a recovery request to the P unit 2. That is, the CU 3 transmits the recovery data to the P unit 2. This recovery data includes the last last transmission sequence number = n + 2, the previously inserted card ID, the previous card insertion time, and the number of added balls.

  In response to this, the P machine 2 executes recovery processing based on the received recovery data, and returns the recovery data backed up inside the P machine 2 (specifically, the payout control board 17) to the CU 3 as a response. (Recovery response).

  As this recovery data, the previous last transmission serial number = n + 1, the last inserted card ID, the previous card insertion time, the previous game table information (the number of game balls = 480, the number of added balls = 3, the number of subtracted balls = 23), the previous game Information, latest game table information (number of game balls = 450, number of added balls = 6, number of subtracted balls = 36), and latest game information.

  The CU 3 that has received this recovery response starts recovery processing from that point. This recovery process is a process for recovering the data consistency between the CU 3 and the P platform 2.

  Specifically, the CU 3 determines whether or not the card ID and the card insertion time of the recovery data of the P base 2 received by the recovery response match the stored card ID and the card insertion time. If the card ID and the card insertion time match and the last transmission sequence number being backed up = n + 2 is larger (newer) than the last transmission sequence number = n + 1 of the recovery data of the P unit 2, the CU3 Recovery processing is performed using only the latest game machine information of the recovery data of No. 2. CU3 performs the recovery process and sets the number of game balls = 450, the number of added balls = + 6, the number of subtracted balls = + 36, and the total number of starting ports 1 = + m. However, if the difference between the serial numbers of CU3 and P base 2 is 2 or more (except when the serial number of CU3 or P base 2 is “0”), CU3 and P base 2 are treated as having been illegal. Do not perform an error. When such an error occurs, at least one of the CU 3 and the P base 2 notifies that fact. At that time, the content of the notification may be displayed on at least one of the indicator 312 of the CU 3 and the indicator 54 of the P stand 2. Further, the host server 801 may be notified of this, and the host server 801 may be notified that an error has occurred. Further, the number of game balls may be corrected manually using a POS or the like with the intervention of a store clerk. Specifically, the number of game balls included in the recovery data from the P-unit 2 is displayed on the display 54, and the store clerk who sees it displays the player's card in the POS and sets the card ID of the card. The associated balls stored in the upper server 801 are updated in association with each other.

  Thereafter, the CU 3 transmits a communication start request (recovery clear ON) command to the P unit 2. In response to this, the P unit 2 clears the recovery data. Then, the P platform 2 returns a response to the communication start response to the CU3. In response, CU3 clears the recovery data. Thereafter, a status information request command and a status information response response are transmitted and received between the CU 3 and the P platform 2.

  Next, an abnormal sequence will be described with reference to FIG. In particular, the processing when the response from the P stand 2 to the CU 3 has not yet reached due to the power interruption and the communication circuit disconnection will be described. Note that a case will be described in which the communication partner is the same before and after the recovery when the communication is recovered after the processing (the communication partner after the recovery is matched).

  In FIG. 49, the initial number of game balls is “500”. First, the CU 3 transmits a status information request command including a serial number = n to the P unit 2. Thereafter, a power failure occurs at CU3, and the operation of CU3 stops. However, the P stand 2 cannot detect that the operation of the CU 3 is stopped immediately after the power is cut off in the CU 3, and if the next command cannot be received from the CU 3 for one second or more, Can detect disconnection.

  For this reason, the P unit 2 does not know that the operation of the CU3 is stopped, receives the command for requesting the status information of the CU3, the serial number = n + 1, the number of game balls = 480, the number of added balls = 3, the number of subtracted balls Response of the status information response including = 23 is returned to CU3. However, the response of the status information response sent back to CU3 does not reach CU3 because the operation of CU3 is stopped.

  Further, in the P table 2, the game table information changes depending on the game during the period from when the operation of the CU 3 stops until the communication line is detected, and the number of game balls = 450, the number of added balls = 6, the number of subtracted balls = 36. Note that the P stand 2 stops the game when it detects the disconnection of the communication line with the CU 3 whose operation is stopped.

  Thereafter, the power failure is restored at CU3, and CU3 starts operating. When the CU 3 starts operating, first, an authentication sequence is started between the CU 3 and the P unit 2, and information including the main chip ID and the payout chip ID is transmitted from the P unit 2 to the CU 3. The CU 3 sends the received main chip ID and payout chip ID to the upper management server, asks whether the main chip ID and the payout chip ID are properly registered, and has the result returned. . If it is properly registered, an appropriate authentication result is obtained.

  After the authentication sequence, the CU 3 transmits a recovery request to the P unit 2. That is, the CU 3 transmits the recovery data to the P unit 2. This recovery data includes the last last transmission sequence number = n, the previously inserted card ID, the previous card insertion time, and the number of added balls.

  In response to this, the P machine 2 executes recovery processing based on the received recovery data, and returns the recovery data backed up inside the P machine 2 (specifically, the payout control board 17) to the CU 3 as a response. (Recovery response).

  As this recovery data, the previous last transmission serial number = n + 1, the last inserted card ID, the previous card insertion time, the previous game table information (the number of game balls = 480, the number of added balls = 3, the number of subtracted balls = 23), the previous game Information, latest game table information (number of game balls = 450, number of added balls = 6, number of subtracted balls = 36), and latest game information.

  The CU 3 that has received this recovery response starts recovery processing from that point. This recovery process is a process for recovering the data consistency between the CU 3 and the P platform 2.

  Specifically, the CU 3 determines whether or not the card ID and the card insertion time of the recovery data of the P base 2 received by the recovery response match the stored card ID and the card insertion time. If the card ID and the card insertion time match and the last transmission sequence number being backed up = n is smaller (older) than the last transmission sequence number = n + 1 of the recovery data of the P unit 2, the CU3 Neither the game machine information nor the latest game machine information is received from the P machine 2, and it is determined that the operation has stopped due to the occurrence of power failure, and the recovery process is performed. However, if the difference between the serial numbers of CU3 and P base 2 is 2 or more (except when the serial number of CU3 or P base 2 is “0”), CU3 and P base 2 are treated as having been illegal. Do not perform an error.

  CU3 performs recovery processing using the previous game table information and the latest game table information of the recovery data of P table 2, and the number of game balls = 500 (number of game balls before update) + (3 + 6) (number of additional balls) − (23 + 36) (the number of subtraction balls) = 450, the number of additional balls = + (3 + 6), the number of subtraction balls = + (23 + 36), and the cumulative number of starting ports 1 = + m.

  Thereafter, the CU 3 transmits a communication start request (recovery clear ON) command to the P unit 2. In response to this, the P unit 2 clears the recovery data. Then, the P platform 2 returns a response to the communication start response to the CU3. In response, CU3 clears the recovery data. Thereafter, a status information request command and a status information response response are transmitted and received between the CU 3 and the P platform 2.

  Next, with reference to FIG. 50, the processing when the status information response from P platform (response to no request operation) has not reached the CU will be described. In the case shown in FIG. 50, since the command from the CU is input to the P units, the above-described backup clear processing is executed, but the serial number value of the command transmitted from the next CU to the P unit. Since (= n) is the same as the previous serial number value (= n), the P payout control units 171 are retransmitted because the response of the status information response transmitted to the CU does not reach the CU. It is judged that there is, and the current addition subtraction ball number as the current ball related information is cumulatively added to the data without clearing the data of the previous addition subtraction ball number which is the previous game table information to zero.

  Specifically, assuming that the current number of game balls is 520, the CU first sends a command with no request and a serial number = n to the P units as a status information request. In the P machine which has received it, the above-mentioned backup clear processing is performed, the current number of game balls = 520−13 + 3 = 510 is calculated, the number of game balls = 510 is backed up, the serial number = n + 1 is backed up, The current addition / subtraction ball number data is backed up and stored in the pre-addition / subtraction ball number, a status information response command is created, and the current addition / subtraction ball number data as current ball related information is cleared to zero. Also, the current number of game balls 510 is included in the response data of the state information response. Then, as a status information response, the P units transmit a response of serial number = n + 1, number of game balls = 510, number of added balls = 3, number of subtracted balls = 13 to the CU.

  However, since the response does not reach the CU, the CU transmits the same status information request as that of the previous time, that is, no request, serial number = n command to the P units.

  In response to this, the P payout control unit 171 receives the response of the transmitted status information response because the serial number received this time is the value (= n) one before the serial number (= n + 1) backed up. It is determined that this is a re-transmission due to the fact that the CU has not reached the CU, and the current addition subtraction ball number as the current ball related information with respect to those data without clearing the data of the previous addition subtraction ball number as the previous game machine information Add up the data and back up. As a result, the number of pre-added balls = 3 + 3 = 6 and the number of pre-subtracted balls = 13 + 8 = 21. After creating a response of the status information response composed of these data, the current addition / subtraction ball count data is cleared to zero. Then, as the status information response, the P units transmit a response of serial number = n + 1, number of game balls = 505, number of added balls = 6, number of subtracted balls = 21 to the CU. However, since this response also does not reach the CU, the CU transmits the same status information request (no request, serial number = n) command to the P units again.

  In response to this, the P payout control unit 171 determines that the serial number received this time is a value (= n) one before the serial number (= n + 1) backed up, and responds to the status information response. It is detected that this is a re-transmission for not reaching the CU. As a result, the P machine performs the cumulative addition storage on the previous game machine information as described above, creates a response of the status information response, and returns it to the CU. Specifically, as a status information response, a response of serial number = n + 1, number of game balls = 485, number of added balls = 12, number of subtracted balls = 47 is transmitted to the CU.

  Since the response of this state information response reaches the CU, the CU calculates the number of game balls = 520 + 12−47 = 485, and performs processing for correcting and storing the data of the game balls in the 485.

  As described above, when the previously transmitted state information response does not reach the CU, the P payout control units 171 retransmit the unreachable state information response and then transmit the next state information response. The information after adding the information that has not been reached is transmitted as the next status information response. As a result, the gaming apparatus can reliably and efficiently collect information regarding the number of game balls. In the example of FIG. 50, the case where the communication information is detected when the status information response from the P platform has not been transmitted three times has been described. However, the case where the status information response has not been received twice has been described. In the case of transmission failure detection in the case of transmission, if it has not reached 3 times, the status information response transmitted for the 4th time is the sum of the information of the status information response sent for the 3rd time Will be included.

  Next, the abnormal sequence will be described with reference to FIG. In particular, a process when an addition request command from the CU 3 to the P unit 2 has not reached due to a power interruption or a communication circuit disconnection will be described. Note that a case will be described in which the communication partner is the same before and after the recovery when the communication is recovered after the processing (the communication partner after the recovery is matched).

  In FIG. 51, the initial number of game balls is “50” balls. First, the CU 3 transmits a status information request command including a serial number = n to the P unit 2. In response to this, the P platform 2 returns a response of the status information response including the serial number = n + 1 and the number of game balls = 50 to the CU3.

  Thereafter, the player presses the replay button. Therefore, CU3 confirms the consumption of the stored ball, transmits a command of status information request including serial number = n + 2, game ball addition request = ON, number of added balls = 125 balls to P stand 2, and stores the ball as a game ball. Notify the converted information. At that time, CU3 backs up the data of serial number = n + 2, number of game balls = 50 (number of game balls before update) +125 (number of added balls) = 175.

  However, after the player presses the replay button and before receiving the command for requesting the state information, the P stand 2 is turned off and stops operating. Therefore, the P base 2 cannot receive the status information request command from the CU 3.

  Since the P unit 2 is stopped, the CU 3 cannot receive a response for 200 milliseconds after transmitting the command, and therefore retransmits the command up to twice as shown in FIG. Since the CU 3 cannot receive a response even if the command is retransmitted, the CU 3 detects the disconnection of the communication line.

  Thereafter, the power failure is restored at the P base 2, and the P base 2 starts operating. When the P table 2 starts operation, first, an authentication sequence is started between the CU 3 and the P table 2, and information including the main chip ID and the payout chip ID is transmitted from the P table 2 to the CU 3. The The CU 3 sends the received main chip ID and payout chip ID to the upper management server, asks whether the main chip ID and the payout chip ID are properly registered, and has the result returned. . If it is properly registered, an appropriate authentication result is obtained.

  After the authentication sequence, the CU 3 transmits a recovery request to the P unit 2. That is, the CU 3 transmits the recovery data to the P unit 2. This recovery data includes the previous last transmission sequence number = n + 2, the previously inserted card ID, the previous card insertion time, and the number of added balls = 125.

  In response to this, the P-unit 2 determines whether or not the communication partner before the power cut-off matches the communication partner after the power-off recovery. When the communication partner is the same and the last transmission sequence number being backed up = n + 1 is smaller (older) than the last transmission sequence number = n + 2 of the recovery data of CU3, the P unit 2 executes recovery processing. The number of game balls is corrected with the number of added balls, and the number of game balls is updated to 50 + 125.

  Further, the P table 2 returns the recovery data backed up inside the P table 2 (specifically, the payout control board 17) to the CU 3 as a response (recovery response).

  The recovery data includes the last last transmission sequence number = n + 1, the last inserted card ID, the previous card insertion time, the previous gaming machine information, the previous gaming information, the latest gaming machine information (the number of gaming balls = 175), and the latest gaming information. It is.

  The CU 3 that has received this recovery response starts recovery processing from that point. This recovery process is a process for recovering the data consistency between the CU 3 and the P platform 2.

  Specifically, the CU 3 determines whether or not the card ID and the card insertion time of the recovery data of the P base 2 received by the recovery response match the stored card ID and the card insertion time. When the card ID and the card insertion time match and the last transmission sequence number being backed up = n + 2 is larger (newer) than the last transmission sequence number = n + 1 of the recovery data of the P unit 2, the CU3 The recovery process is performed using only the latest game machine information of the recovery data of the machine 2. CU3 performs the recovery process and sets the number of game balls = 175. However, if the difference between the serial numbers of CU3 and P base 2 is 2 or more (except when the serial number of CU3 or P base 2 is “0”), CU3 and P base 2 are treated as having been illegal. Do not perform an error.

  Thereafter, the CU 3 transmits a communication start request (recovery clear ON) command to the P unit 2. In response to this, the P unit 2 clears the recovery data. Then, the P platform 2 returns a response to the communication start response to the CU3. In response, CU3 clears the recovery data. Thereafter, a status information request command and a status information response response are transmitted and received between the CU 3 and the P platform 2.

  Here, a case where a replay button for starting a game by paying out a stored ball has been described has been described, but the same operation is performed when a ball paying button for starting a game by paying out a ball is pressed.

  Next, the abnormal sequence will be described with reference to FIG. In particular, the processing when the response of the addition response from the P base 2 to the CU 3 has not reached due to power interruption or communication circuit disconnection will be described. Note that a case will be described in which the communication partner is the same before and after the recovery when the communication is recovered after the processing (the communication partner after the recovery is matched).

  In FIG. 52, the initial number of game balls is “50” balls. First, the CU 3 transmits a status information request command including a serial number = n to the P unit 2. In response to this, the P platform 2 returns a response of the status information response including the serial number = n + 1 and the number of game balls = 50 to the CU3.

  Thereafter, the player presses the replay button. Therefore, CU3 confirms the consumption of the stored ball, transmits a command of status information request including serial number = n + 2, game ball addition request = ON, number of added balls = 125 balls to P stand 2, and stores the ball as a game ball. Notify the converted information. At that time, CU3 backs up the data of serial number = n + 2, number of game balls = 50 (number of game balls before update) +125 (number of added balls) = 175.

  Thereafter, a power failure occurs at CU3, and the operation of CU3 stops. However, the P stand 2 cannot detect that the operation of the CU 3 is stopped immediately after the power is cut off in the CU 3, and if the next command cannot be received from the CU 3 for one second or more, Can detect disconnection.

  For this reason, the P unit 2 does not know that the operation of the CU3 is stopped, receives a command for requesting the state information of the CU3, and includes a serial number = n + 3, the number of game balls = 175, and a game ball addition result = OK. The response of the information response is returned to CU3. However, the response of the status information response sent back to CU3 does not reach CU3 because the operation of CU3 is stopped. In addition, in the P stand 2, the response of the status information response is returned to the CU 3, and the data of the serial number = n + 3 and the number of game balls = 175 is backed up.

  Thereafter, the power failure is restored at CU3, and CU3 starts operating. When the CU 3 starts operating, first, an authentication sequence is started between the CU 3 and the P unit 2, and information including the main chip ID and the payout chip ID is transmitted from the P unit 2 to the CU 3. The CU 3 sends the received main chip ID and payout chip ID to the upper management server, asks whether the main chip ID and the payout chip ID are properly registered, and has the result returned. . If it is properly registered, an appropriate authentication result is obtained.

  After the authentication sequence, the CU 3 transmits a recovery request to the P unit 2. That is, the CU 3 transmits the recovery data to the P unit 2. This recovery data includes the previous last transmission sequence number = n + 2, the previously inserted card ID, the previous card insertion time, and the number of added balls = 125.

  In response to this, the P-unit 2 determines whether or not the communication partner before the power cut-off matches the communication partner after the power-off recovery. The number of game balls is added when the communication partner is the same and the last transmission sequence number being backed up = n + 3 is larger (newer) than the last transmission sequence number = n + 2 of the recovery data of CU3. Do not correct with the number of balls.

  Further, the P table 2 returns the recovery data backed up inside the P table 2 (specifically, the payout control board 17) to the CU 3 as a response (recovery response).

  This recovery data includes the last last transmission sequence number = n + 3, the last inserted card ID, the previous card insertion time, the previous game table information, the previous game information, the latest game table information (the number of game balls = 175), and the latest game information. It is.

  The CU 3 that has received this recovery response starts recovery processing from that point. This recovery process is a process for recovering the data consistency between the CU 3 and the P platform 2.

  Specifically, the CU 3 determines whether or not the card ID and the card insertion time of the recovery data of the P base 2 received by the recovery response match the stored card ID and the card insertion time. If the card ID and the card insertion time match and the last transmission sequence number being backed up = n + 2 is smaller (older) than the last transmission sequence number = n + 3 of the recovery data of the P unit 2, the CU3 Recovery processing is performed using the previous game machine information and the latest game machine information of the recovery data of the machine 2. CU3 performs the recovery process and sets the number of game balls = 175. However, if the difference between the serial numbers of CU3 and P base 2 is 2 or more (except when the serial number of CU3 or P base 2 is “0”), CU3 and P base 2 are treated as having been illegal. Do not perform an error.

  Thereafter, the CU 3 transmits a communication start request (recovery clear ON) command to the P unit 2. In response to this, the P unit 2 clears the recovery data. Then, the P platform 2 returns a response to the communication start response to the CU3. In response, CU3 clears the recovery data. Thereafter, a status information request command and a status information response response are transmitted and received between the CU 3 and the P platform 2.

  Here, a case where a replay button for starting a game by paying out a stored ball has been described has been described, but the same operation is performed when a ball paying button for starting a game by paying out a ball is pressed.

  Next, an abnormal system sequence will be described with reference to FIG. In particular, the processing when the power supply is disconnected and the communication circuit is disconnected before the command is transmitted from the CU 3 to the P stand 2 will be described. Note that, after communication, when communication is restored, the communication partner does not match before and after the recovery. Specifically, the case where the CU 3 has failed and replaced with a new CU 3 (communication partner mismatch after recovery) will be described. . When it is exchanged for a new CU3, the card inserted in the CU3 before the exchange is discharged to the player, and if the player wants to continue the game with the same P stand 2, the card is inserted. Insert into CU3 after replacement.

  In FIG. 53, the initial number of game balls is “500”. First, the CU 3 transmits a status information request command including a serial number = n to the P unit 2. In response to this, the P stand 2 returns a response of the status information response including the serial number = n + 1, the number of game balls = 480, the number of added balls = 3, and the number of subtracted balls = 23 to the CU 3.

  In response to the response of the status information response, the CU 3 backs up the data of serial number = n + 1, number of game balls = 500 (number of game balls before update) +3 (number of added balls) −23 (number of subtraction balls) = 480.

  Thereafter, a power failure occurs at CU3, and the operation of CU3 stops. However, the P stand 2 cannot detect that the operation of the CU 3 is stopped immediately after the power is cut off in the CU 3, and if the next command cannot be received from the CU 3 for one second or more, Can detect disconnection. Therefore, in the P table 2, the game table information changes depending on the game during the period from the stop of the operation of the CU 3 until the communication line is detected, and the number of game balls = 450, the number of added balls = 6, the number of subtracted balls = 36. Note that the P stand 2 stops the game when it detects the disconnection of the communication line with the CU 3 whose operation is stopped.

  After power failure occurs at CU3, for example, due to failure of CU3, CU3 is replaced and changed from primary station (1) to primary station (2). Thereafter, the power failure is restored at CU3, and CU3 starts operating. When the CU 3 starts operating, first, an authentication sequence is started between the CU 3 and the P unit 2, and information including the main chip ID and the payout chip ID is transmitted from the P unit 2 to the CU 3. The CU 3 sends the received main chip ID and payout chip ID to the upper management server, asks whether the main chip ID and the payout chip ID are properly registered, and has the result returned. . If it is properly registered, an appropriate authentication result is obtained.

  After the authentication sequence, the CU 3 transmits a recovery request to the P unit 2. That is, the CU 3 transmits the recovery data to the P unit 2. However, since the CU3 is exchanged, no recovery data is held. Therefore, the recovery data includes the previous last transmission sequence number = 0, the previously inserted card ID = 0, the previous card insertion time = 0, and the number of added balls = 0.

  In response to this, the P machine 2 executes recovery processing based on the received recovery data, and returns the recovery data backed up inside the P machine 2 (specifically, the payout control board 17) to the CU 3 as a response. (Recovery response).

  As this recovery data, the previous last transmission serial number = n + 1, the last inserted card ID, the previous card insertion time, the previous game table information (the number of game balls = 480, the number of added balls = 3, the number of subtracted balls = 23), the previous game Information, latest game table information (number of game balls = 450, number of added balls = 6, number of subtracted balls = 36), and latest game information.

  The CU 3 that has received this recovery response starts recovery processing from that point. This recovery process is a process for recovering the data consistency between the CU 3 and the P platform 2.

  Specifically, the CU 3 determines that the CU 3 has been exchanged due to the last transmission sequence number of the CU being backed up = 0, and receives the card ID and the recovery response received from the recovery response. The CU 3 compares the card ID of the recovery data of the base 2. This “last transmission sequence number = 0” indicates that the CU 3 and the P base 2 are not connected and are not in communication. That is, information indicating that the CU 3 does not communicate with the gaming machine is “final transmission sequence number = 0”.

  Further, since the CU 3 has been exchanged, the insertion time of the card inserted into the CU 3 before the exchange is not stored. On the other hand, the upper server 801 stores a card ID, a card insertion time, and chip information of the P stand 2 that are transmitted from the CU 3 in association with each other. Therefore, the CU 3 transmits the chip information (main chip ID and payout chip ID) received from the P platform 2 in the authentication sequence to the upper server 801 and returns the card insertion time stored in association with it from the upper server 801. do that for me. The CU 3 compares the returned card insertion time with the card insertion time of the recovery data of the P base 2 and determines whether or not they match. If the card inserted in the CU3 before the exchange is discharged to the player and the player inserts the card into the CU3 after the exchange in order to continue playing on the same P stand 2, A determination is made that there is. When a card different from the card inserted into the CU 3 before replacement is inserted into the CU 3 after replacement, a mismatch determination is made.

  Instead of having the card insertion time returned from the upper server 801, the host server 801 may make a match determination. Specifically, when the card ID of the card inserted into the replaced CU 3 matches the card ID of the recovery data, the card ID and the card insertion time of the recovery data are transmitted to the upper server 801, and the upper server At 801, the stored card insertion time and the card insertion time of the transmitted recovery data may be compared to determine whether they match, and control may be performed so as to return the determination result to CU3. .

  Further, the storage location such as the card insertion time is not limited to the host server 801. For example, a card unit holder or the like in which the CU 3 is installed may be stored in the card when the card is ejected from the failed CU 3. You may leave it.

These modifications are also applicable to FIGS. 55 and 57 described later.
The CU3 has the same card ID and the same card insertion time, and the last transmission sequence number being backed up = 0 is smaller (older) than the last transmission sequence number = n + 1 of the recovery data of the P unit 2. If the last transmission serial number is “0”, the recovery process is performed using only the latest gaming machine information of the recovery data of the P machine 2. CU3 performs the recovery process and sets the number of game balls = 450, the number of added balls = + 6, the number of subtracted balls = + 36, and the total number of starting ports 1 = + m.

  Thereafter, the CU 3 transmits a communication start request (recovery clear ON) command to the P unit 2. In response to this, the P unit 2 clears the recovery data. Then, the P platform 2 returns a response to the communication start response to the CU3. In response, CU3 clears the recovery data. Thereafter, a status information request command and a status information response response are transmitted and received between the CU 3 and the P platform 2.

  As described above with reference to FIGS. 47 to 49 and FIGS. 51 to 57, as the correction mode during the recovery process, the CU 3 receives the last transmission serial number received from the P base 2 and the stored P base 2 If the final transmission sequence number received from P table 2 is greater than the stored P table 2 final transmission sequence number, the latest game table information and the previous game table information are used. There is a first correction mode for correcting the number of game balls. The other correction mode is that the CU 3 compares the last transmission sequence number received from the P unit 2 with the stored P unit final transmission sequence number, and the last transmission sequence number received from the P unit 2 is stored. There is a second correction mode in which the number of game balls is corrected only with the latest game table information if the sequence number is equal to or smaller than the P number last transmission sequence number. Furthermore, the correction mode during the recovery process includes a mode in which no correction is performed (see FIGS. 54 and 56). In other words, "determining the correction mode" means not only determining whether to correct using only the latest gaming machine information or using both the latest gaming machine information and the previous gaming machine information, but also not correcting It is a concept that encompasses decisions.

  In addition, the first correction mode specifically adds the number of balls added in the latest game table information and the number of balls added in the previous game table information to the number of game balls stored in the CU 3, and the latest game The number of balls subtracted from the table information and the number of balls subtracted from the previous game table information are subtracted to correct the number of game balls calculated. Specifically, the second correction mode was calculated by adding the number of balls added in the latest game table information to the number of game balls stored in CU3 and subtracting the number of balls subtracted in the latest game table information. Correct to the number of game balls.

  Next, the abnormal sequence will be described with reference to FIG. In particular, a process when there is a power cut and a communication circuit break and a command has not reached the CU 3 from the P unit 2 will be described. Note that a case where the communication partners do not match before and after the recovery when the communication is recovered after the processing (the communication partner mismatch after the recovery) will be described.

  In FIG. 54, the initial number of game balls is “500”. First, the CU 3 transmits a status information request command including a serial number = n to the P unit 2. In response to this, the P stand 2 returns a response of the status information response including the serial number = n + 1, the number of game balls = 480, the number of added balls = 3, and the number of subtracted balls = 23 to the CU 3.

  Thereafter, a power failure occurs at the P base 2, and the operation of the P base 2 stops. However, the game is continued until the power is cut off after the P table 2 returns the status information response response to the CU 3. Therefore, in the P table 2, the game table information changes depending on the game until the power interruption occurs, and the number of game balls = 450, the number of added balls = 6, and the number of subtracted balls = 36.

  Thereafter, the CU 3 transmits a status information request command including the serial number = n + 2 to the P unit 2. However, since the P unit 2 is stopped, the CU 3 cannot receive a response for 200 milliseconds after transmitting the command, and therefore retransmits the command up to twice as shown in FIG. Since CU3 cannot receive a response even if the command is retransmitted, it detects a communication line disconnection, and serial number = n + 2, number of game balls = 500 (number of game balls before update) +3 (number of additional balls) −23 (subtraction ball) Number) = 480 data is backed up.

  After the power failure occurs at the P base 2, for example, the P base 2 is out of order, so the P base 2 is replaced and changed from the secondary station (1) to the secondary station (2). Thereafter, the power failure is restored at the P base 2, and the P base 2 starts operating. When the P table 2 starts operation, first, an authentication sequence is started between the CU 3 and the P table 2, and information including the main chip ID and the payout chip ID is transmitted from the P table 2 to the CU 3. The The CU 3 sends the received main chip ID and payout chip ID to the upper management server, asks whether the main chip ID and the payout chip ID are properly registered, and has the result returned. . If it is properly registered, an appropriate authentication result is obtained.

  After the authentication sequence, the CU 3 transmits a recovery request to the P unit 2. That is, the CU 3 transmits the recovery data to the P unit 2. This recovery data includes the last last transmission sequence number = n + 2, the previously inserted card ID, the previous card insertion time, and the number of added balls.

  Receiving this, the P base 2 returns the recovery data backed up inside the P base 2 (specifically, the payout control board 17) to the CU 3 as a response (recovery response). However, the recovery data is not held because the P table 2 is replaced. Therefore, as the recovery data, the previous last transmission sequence number = 0, the previously inserted card ID = 0, the previous card insertion time = 0, the previous gaming machine information (none), the previous gaming information (none), and the latest gaming machine information (none) ), The latest game information (none).

  The CU 3 that has received this recovery response starts recovery processing from that point. This recovery process is a process for recovering the data consistency between the CU 3 and the P platform 2.

  Specifically, the CU 3 determines whether or not the card ID and the card insertion time of the recovery data of the P base 2 received by the recovery response match the stored card ID and the card insertion time. In CU3, the card ID and the card insertion time do not match, and the last transmission sequence number being backed up = n + 2 is larger (newer) than the last transmission sequence number = 0 of the recovery data of P unit 2, and P units When the final transmission sequence number of the recovery data of No. 2 is “0”, the recovery process is not performed on the recovery data of the P unit 2. For this reason, the recovery process of the CU 3 is manually performed using a POS with the intervention of a store clerk.

  Thereafter, the CU 3 transmits a communication start request (recovery clear ON) command to the P unit 2. In response to this, the P unit 2 clears the recovery data. Then, the P platform 2 returns a response to the communication start response to the CU3. In response, CU3 clears the recovery data. Thereafter, a status information request command and a status information response response are transmitted and received between the CU 3 and the P platform 2.

  Next, the abnormal sequence will be described with reference to FIG. In particular, the processing when the response from the P stand 2 to the CU 3 has not yet reached due to the power interruption and the communication circuit disconnection will be described. Note that a case will be described in which communication partners are not matched before and after the restoration (communication partner mismatch after restoration) when communication is restored after the processing.

  In FIG. 55, the initial number of game balls is “500”. First, the CU 3 transmits a status information request command including a serial number = n to the P unit 2. Thereafter, a power failure occurs at CU3, and the operation of CU3 stops. However, the P stand 2 cannot detect that the operation of the CU 3 is stopped immediately after the power is cut off in the CU 3, and if the next command cannot be received from the CU 3 for one second or more, Can detect disconnection.

  For this reason, the P unit 2 does not know that the operation of the CU3 is stopped, receives the command for requesting the status information of the CU3, the serial number = n + 1, the number of game balls = 480, the number of added balls = 3, the number of subtracted balls Response of the status information response including = 23 is returned to CU3. However, the response of the status information response sent back to CU3 does not reach CU3 because the operation of CU3 is stopped.

  Further, in the P table 2, the game table information changes depending on the game during the period from when the operation of the CU 3 stops until the communication line is detected, and the number of game balls = 450, the number of added balls = 6, the number of subtracted balls = 36. Note that the P stand 2 stops the game when it detects the disconnection of the communication line with the CU 3 whose operation is stopped.

  After power failure occurs at CU3, for example, due to failure of CU3, CU3 is replaced and changed from primary station (1) to primary station (2). Thereafter, the power failure is restored at CU3, and CU3 starts operating. When the CU 3 starts operating, first, an authentication sequence is started between the CU 3 and the P unit 2, and information including the main chip ID and the payout chip ID is transmitted from the P unit 2 to the CU 3. The CU 3 sends the received main chip ID and payout chip ID to the upper management server, asks whether the main chip ID and the payout chip ID are properly registered, and has the result returned. . If it is properly registered, an appropriate authentication result is obtained.

  After the authentication sequence, the CU 3 transmits a recovery request to the P unit 2. That is, the CU 3 transmits the recovery data to the P unit 2. However, since the CU3 is exchanged, no recovery data is held. Therefore, the recovery data includes the previous last transmission sequence number = 0, the previously inserted card ID = 0, the previous card insertion time = 0, and the number of added balls = 0.

  In response to this, the P machine 2 executes recovery processing based on the received recovery data, and returns the recovery data backed up inside the P machine 2 (specifically, the payout control board 17) to the CU 3 as a response. (Recovery response).

  As this recovery data, the previous last transmission serial number = n + 1, the last inserted card ID, the previous card insertion time, the previous game table information (the number of game balls = 480, the number of added balls = 3, the number of subtracted balls = 23), the previous game Information, latest game table information (number of game balls = 450, number of added balls = 6, number of subtracted balls = 36), and latest game information.

  The CU 3 that has received this recovery response starts recovery processing from that point. This recovery process is a process for recovering the data consistency between the CU 3 and the P platform 2.

  Specifically, the CU 3 determines that the CU 3 has been exchanged due to the last transmission sequence number of the CU being backed up = 0, and receives the card ID and the recovery response received from the recovery response. The CU 3 compares the card ID of the recovery data of the base 2. Further, since the CU 3 has been exchanged, the insertion time of the card inserted into the CU 3 before the exchange is not stored. On the other hand, the upper server 801 stores a card ID, a card insertion time, and chip information of the P stand 2 that are transmitted from the CU 3 in association with each other. Therefore, the CU 3 transmits the chip information (main chip ID and payout chip ID) received from the P platform 2 in the authentication sequence to the upper server 801 and returns the card insertion time stored in association with it from the upper server 801. do that for me. The CU 3 compares the returned card insertion time with the card insertion time of the recovery data of the P base 2 and determines whether or not they match. If the card inserted in the CU3 before the exchange is discharged to the player and the player inserts the card into the CU3 after the exchange in order to continue playing on the same P stand 2, A determination is made that there is. When a card different from the card inserted into the CU 3 before replacement is inserted into the CU 3 after replacement, a mismatch determination is made.

  The CU3 has the same card ID and the same card insertion time, and the last transmission sequence number being backed up = 0 is smaller (older) than the last transmission sequence number = n + 1 of the recovery data of the P unit 2. If the last transmission serial number is “0”, the recovery process is performed using only the latest gaming machine information of the recovery data of the P machine 2. CU3 performs the recovery process and sets the number of game balls = 450, the number of added balls = + 6, the number of subtracted balls = + 36, and the total number of starting ports 1 = + m.

  Thereafter, the CU 3 transmits a communication start request (recovery clear ON) command to the P unit 2. In response to this, the P unit 2 clears the recovery data. Then, the P platform 2 returns a response to the communication start response to the CU3. In response, CU3 clears the recovery data. Thereafter, a status information request command and a status information response response are transmitted and received between the CU 3 and the P platform 2.

  Next, the abnormal sequence will be described with reference to FIG. In particular, a process when an addition request command from the CU 3 to the P unit 2 has not reached due to a power interruption or a communication circuit disconnection will be described. Note that a case where the communication partners do not match before and after the recovery when the communication is recovered after the processing (the communication partner mismatch after the recovery) will be described.

  In FIG. 56, the initial number of game balls is “50”. First, the CU 3 transmits a status information request command including a serial number = n to the P unit 2. In response to this, the P platform 2 returns a response of the status information response including the serial number = n + 1 and the number of game balls = 50 to the CU3.

  Thereafter, the player presses the replay button. Therefore, CU3 confirms the consumption of the stored ball, transmits a command of status information request including serial number = n + 2, game ball addition request = ON, number of added balls = 125 balls to P stand 2, and stores the ball as a game ball. Notify the converted information. At that time, CU3 backs up the data of serial number = n + 2, number of game balls = 50 (number of game balls before update) +125 (number of added balls) = 175.

  However, after the player presses the replay button and before receiving the command for requesting the state information, the P stand 2 is turned off and stops operating. Therefore, the P base 2 cannot receive the status information request command from the CU 3.

  Since the P unit 2 is stopped, the CU 3 cannot receive a response for 200 milliseconds after transmitting the command, and therefore retransmits the command up to twice as shown in FIG. Since the CU 3 cannot receive a response even if the command is retransmitted, the CU 3 detects the disconnection of the communication line.

  After the power failure occurs at the P base 2, for example, the P base 2 is out of order, so the P base 2 is replaced and changed from the secondary station (1) to the secondary station (2). Thereafter, the power failure is restored at the P base 2, and the P base 2 starts operating. When the P table 2 starts operation, first, an authentication sequence is started between the CU 3 and the P table 2, and information including the main chip ID and the payout chip ID is transmitted from the P table 2 to the CU 3. The The CU 3 sends the received main chip ID and payout chip ID to the upper management server, asks whether the main chip ID and the payout chip ID are properly registered, and has the result returned. . If it is properly registered, an appropriate authentication result is obtained.

  After the authentication sequence, the CU 3 transmits a recovery request to the P unit 2. That is, the CU 3 transmits the recovery data to the P unit 2. This recovery data includes the previous last transmission sequence number = n + 2, the previously inserted card ID, the previous card insertion time, and the number of added balls = 125.

  In response to this, the P base 2 determines that the P base 2 is exchanged with the last transmission sequence number = 0 of the P base 2 being backed up and the communication counterparts do not match, and the recovery process is not performed with the recovery data of the CU 3. That is, the addition update of the number of game balls based on “the number of additional balls = 125” in the recovery request is not performed.

  Further, the P table 2 returns the recovery data backed up inside the P table 2 (specifically, the payout control board 17) to the CU 3 as a response (recovery response). However, the recovery data is not held because the P table 2 is replaced. Therefore, as the recovery data, the previous last transmission sequence number = 0, the previously inserted card ID = 0, the previous card insertion time = 0, the previous gaming machine information (none), the previous gaming information (none), and the latest gaming machine information (none) ), The latest game information (none).

  The CU 3 that has received this recovery response starts recovery processing from that point. This recovery process is a process for recovering the data consistency between the CU 3 and the P platform 2.

  Specifically, the CU 3 determines whether or not the card ID and the card insertion time of the recovery data of the P base 2 received by the recovery response match the stored card ID and the card insertion time. In CU3, the card ID and the card insertion time do not match, and the last transmission sequence number being backed up = n + 2 is larger (newer) than the last transmission sequence number = 0 of the recovery data of P unit 2, and P units When the final transmission sequence number of the recovery data of No. 2 is “0”, the recovery process is not performed on the recovery data of the P unit 2. For this reason, the recovery process of the CU 3 is manually performed using a POS with the intervention of a store clerk.

  Thereafter, the CU 3 transmits a communication start request (recovery clear ON) command to the P unit 2. In response to this, the P unit 2 clears the recovery data. Then, the P platform 2 returns a response to the communication start response to the CU3. In response, CU3 clears the recovery data. Thereafter, a status information request command and a status information response response are transmitted and received between the CU 3 and the P platform 2.

  Here, a case where a replay button for starting a game by paying out a stored ball has been described has been described, but the same operation is performed when a ball paying button for starting a game by paying out a ball is pressed.

  Next, the abnormal sequence will be described with reference to FIG. In particular, the processing when the response of the addition response from the P base 2 to the CU 3 has not reached due to power interruption or communication circuit disconnection will be described. Note that a case where the communication partners do not match before and after the recovery when the communication is recovered after the processing (the communication partner mismatch after the recovery) will be described.

  In FIG. 57, the initial number of game balls is “50” balls. First, the CU 3 transmits a status information request command including a serial number = n to the P unit 2. In response to this, the P platform 2 returns a response of the status information response including the serial number = n + 1 and the number of game balls = 50 to the CU3.

  Thereafter, the player presses the replay button. Therefore, CU3 confirms the consumption of the stored ball, transmits a command of status information request including serial number = n + 2, game ball addition request = ON, number of added balls = 125 balls to P stand 2, and stores the ball as a game ball. Notify the converted information. At that time, CU3 backs up the data of serial number = n + 2, number of game balls = 50 (number of game balls before update) +125 (number of added balls) = 175.

  Thereafter, a power failure occurs at CU3, and the operation of CU3 stops. However, the P stand 2 cannot detect that the operation of the CU 3 is stopped immediately after the power is cut off in the CU 3, and if the next command cannot be received from the CU 3 for one second or more, Can detect disconnection.

  For this reason, the P unit 2 does not know that the operation of the CU3 is stopped, receives a command for requesting the state information of the CU3, and includes a serial number = n + 3, the number of game balls = 175, and a game ball addition result = OK. The response of the information response is returned to CU3. However, the response of the status information response sent back to CU3 does not reach CU3 because the operation of CU3 is stopped. In addition, in the P stand 2, the response of the status information response is returned to the CU 3, and the data of the serial number = n + 3 and the number of game balls = 175 is backed up.

  After power failure occurs at CU3, for example, due to failure of CU3, CU3 is replaced and changed from primary station (1) to primary station (2). Thereafter, the power failure is restored at CU3, and CU3 starts operating. When the CU 3 starts operating, first, an authentication sequence is started between the CU 3 and the P unit 2, and information including the main chip ID and the payout chip ID is transmitted from the P unit 2 to the CU 3. The CU 3 sends the received main chip ID and payout chip ID to the upper management server, asks whether the main chip ID and the payout chip ID are properly registered, and has the result returned. . If it is properly registered, an appropriate authentication result is obtained.

  After the authentication sequence, the CU 3 transmits a recovery request to the P unit 2. That is, the CU 3 transmits the recovery data to the P unit 2. However, since the CU3 is exchanged, no recovery data is held. Therefore, the recovery data includes the previous last transmission sequence number = 0, the previously inserted card ID = 0, the previous card insertion time = 0, and the number of added balls = 0.

  In response to this, the P-unit 2 determines whether or not the communication partner before the power cut-off matches the communication partner after the power-off recovery. This determination is made based on the fact that the “last transmission sequence number” transmitted in the recovery request is 0. In the P stand 2, the CU 3 determines that the communication partners do not match, and does not correct the number of game balls with the number of added balls.

  Further, the P table 2 returns the recovery data backed up inside the P table 2 (specifically, the payout control board 17) to the CU 3 as a response (recovery response).

  This recovery data includes the last last transmission sequence number = n + 3, the last inserted card ID, the previous card insertion time, the previous game table information, the previous game information, the latest game table information (the number of game balls = 175), and the latest game information. It is.

  The CU 3 that has received this recovery response starts recovery processing from that point. This recovery process is a process for recovering the data consistency between the CU 3 and the P platform 2.

  Specifically, the CU 3 determines that the CU 3 has been exchanged due to the last transmission sequence number of the CU being backed up = 0, and receives the card ID and the recovery response received from the recovery response. The CU 3 compares the card ID of the recovery data of the base 2. Further, since the CU 3 has been exchanged, the insertion time of the card inserted into the CU 3 before the exchange is not stored. On the other hand, the upper server 801 stores a card ID, a card insertion time, and chip information of the P stand 2 that are transmitted from the CU 3 in association with each other. Therefore, the CU 3 transmits the chip information (main chip ID and payout chip ID) received from the P platform 2 in the authentication sequence to the upper server 801 and returns the card insertion time stored in association with it from the upper server 801. do that for me. The CU 3 compares the returned card insertion time with the card insertion time of the recovery data of the P base 2 and determines whether or not they match. If the card inserted in the CU3 before the exchange is discharged to the player and the player inserts the card into the CU3 after the exchange in order to continue playing on the same P stand 2, A determination is made that there is. When a card different from the card inserted into the CU 3 before replacement is inserted into the CU 3 after replacement, a mismatch determination is made.

  CU3 has the same card ID and the same card insertion time, and the last transmission sequence number being backed up = 0 is smaller (older) than the last transmission sequence number of recovery data of P unit 2 = n + 3. If the last transmission serial number is “0”, the recovery process is performed using only the latest gaming machine information of the recovery data of the P machine 2. CU3 performs the recovery process and sets the number of game balls = 175.

  Thereafter, the CU 3 transmits a communication start request (recovery clear ON) command to the P unit 2. In response to this, the P unit 2 clears the recovery data. Then, the P platform 2 returns a response to the communication start response to the CU3. In response, CU3 clears the recovery data. Thereafter, a status information request command and a status information response response are transmitted and received between the CU 3 and the P platform 2.

  Here, a case where a replay button for starting a game by paying out a stored ball has been described has been described, but the same operation is performed when a ball paying button for starting a game by paying out a ball is pressed.

  Next, the abnormal sequence will be described with reference to FIG. In particular, the processing when the game ball addition result is abnormal at the time of ball lending, holding ball payout, and saving ball payout will be described.

  In FIG. 58, the initial number of game balls is “50” balls. First, the CU 3 transmits a status information request command including a serial number = n and a game ball addition request = OFF to the P unit 2. In response to this, the P platform 2 returns a response of the status information response including the serial number = n + 1 and the number of game balls = 50 to the CU3.

  Thereafter, the player presses the possession payout button. Therefore, CU3 confirms the consumption of holding balls / storing balls, sends a command of status information request including serial number = n + 2, gaming ball addition request = ON, number of adding balls = 125 balls to P stand 2,・ Notify the information that converted the stored ball into a game ball. At that time, CU3 backs up the data of serial number = n + 2, number of game balls = 50 (number of game balls before update) +125 (number of added balls) = 175.

  Thereafter, an abnormality occurs in the process of adding game balls on the P platform 2. Therefore, upon receiving the command for requesting the state information of CU3, the P stand 2 receives a state information response including serial number = n + 3, number of game balls = 50 (number of game balls before game ball addition), game ball addition result = NG. A response is returned to CU3.

  The CU 3 that has received the response of the status information response including the game ball addition result = NG resends the command of the status information request including the serial number = n + 2, the game ball addition request = ON, and the number of added balls = 125 balls to the P unit 2. . Since CU3 is a retransmission of the status information request command, it does not update the serial number and retransmits the status information request command with the serial number = n + 2.

  However, the P stand 2 remains in a state where an abnormality has occurred in the process of adding game balls. Therefore, the P table 2 receives the command of the retransmitted status information request from the CU 3, and receives the serial number = n + 3, the number of game balls = 50 (the number of game balls before the game ball addition), and the status information including the game ball addition result = NG. The response of the response is returned to CU3.

  Further, the CU3 that has received the response of the state information response including the game ball addition result = NG again receives the command of the state information request including the serial number = n + 2, the game ball addition request = ON, and the number of additional balls = 125 balls. To the second retransmission. Since CU3 is a retransmission of the status information request command, it does not update the serial number and retransmits the status information request command with the serial number = n + 2.

  P stand 2 is still in a state where an abnormality has occurred in the process of adding game balls. Therefore, the P table 2 receives the command of the retransmitted status information request from the CU 3, and receives the serial number = n + 3, the number of game balls = 50 (the number of game balls before the game ball addition), and the status information including the game ball addition result = NG. The response of the response is returned to CU3.

  Processing for adding a game ball in the P table 2 when the CU 3 receives a response of a response of a status information response including the game ball addition result = NG from the P table 2 even if the command for requesting the state information is retransmitted twice As a result, the communication with the P platform 2 is stopped. Specifically, the CU 3 transmits a communication end request command to the P platform 2. The P platform 2 that has received the communication end request command returns a response to the communication end response to the CU 3.

The recovery processing at the time of abnormality described above is summarized as follows.
If there is a difference of 2 or more between the serial numbers of the CU 3 and the P stand 2, recovery is not performed as all illegal. However, when the serial number of CU3 = 0, the CU3 is exchanged, and only the latest game machine information of the P machine 2 is recovered, and the CU 3 takes in the latest game machine information of the P machine 2. Further, recovery is not performed when the serial number of the P platform 2 is 0.

  In the case of “the serial number from the P stand 2 ≦ the storage serial number of CU3”, the recovery is performed only with the latest gaming machine information.

  In the case of “serial number from P table 2> stored serial number of CU3”, recovery is performed using the latest gaming machine information and the previous gaming machine information.

  The abnormal system sequence between the CU 3 and the P stand 2 has been described above with reference to FIGS. 47 to 58. In the explanation, the operation of the abnormal sequence after “pressing the replay button” has been described, but the same operation is performed after “pressing the coin payout button”.

  Next, with reference to FIG. 59, the possession ball sharing process will be described. “Mobama sharing” means that the player divides and transfers the ball to another person. In FIG. 59, the number of balls specified by the inserted recording medium (member card or the like) is “0” balls, and the initial number of game balls is “1000” balls. First, the CU 3 transmits a status information request command including serial number = n and counting ball reception = OFF to the P unit 2. In response to this, the P stand 2 returns a response of the status information response including the serial number = n + 1, the number of game balls = 1000, the number of counting balls = 0, and counting = OFF to the CU3.

  Thereafter, when the player touches and specifies the ball sharing from a plurality of menus displayed on the display 54, for example (see FIG. 63 to FIG. 69), the CU3 has a ball sharing process. Occurs. The number of balls used for holding ball sharing is 100 balls.

  However, as described above, since the number of possessed balls is “0”, the display control unit 350 of the CU 3 controls the display 54 to display “Please press the count button for lack of possession”. Under the control, the display unit 54 displays “Please press the counting button because of the shortage of balls”. It should be noted that the display unit 54 performs the “displaying” period shown in FIG. 59, for example, the displays shown in FIGS. 63 to 69.

  The player sees the indication “Please press the count button because of the shortage of balls” on the display 54, and presses the count button 28 for a short time to convert the game ball into a ball. By pressing the count button 28 once, 100 balls out of the number of game balls are counted and counted as counting balls. If the initial number of game balls is “1000”, the number of game balls becomes “900” and the count ball becomes “100” by pressing the count button 28 once.

  As described above, when the number of remaining balls is less than the desired number of shared points, a predetermined notification is given, so that the player performs an operation of counting the number of game balls in order to receive a desired shared point service. Can be encouraged.

  Immediately after an operation of briefly pressing the count button 28 once, the CU 3 transmits a command for status information request including serial number = n + 2 and count ball reception = OFF to the P base 2.

  In response to this, in order to notify the CU 3 that the number of gaming balls = 900 and the number of counting balls = 100, the P stand 2 has a serial number = n + 3, the number of gaming balls = 900, the number of counting balls = 100, and counting = A status information response including ON is returned to CU3. Upon receiving the response to the status information response, CU3 adds the counted number of balls (100 balls) to the number of balls (0 ball) and updates the number of balls to 100, and the number of balls is 1000 (pre-updated game balls) Number) -100 (count ball number) = 900 data is backed up. Further, the CU 3 receives a response of the state information response and starts display for counting 100 game balls.

  Thereafter, the CU 3 transmits a status information request command including serial number = n + 4 and counting ball reception = ON to the P base 2. The reason why the counting ball reception = ON is to notify the P stand 2 of the reception of the counting ball in response to the response of the previous status information response. In response to this, since the operation of pressing the counting button 28 has not been performed, the P table 2 responds with a status information response including serial number = n + 5, number of gaming balls = 900, counting ball number = 0, counting = OFF. Is returned to CU3.

  As a result of the counting operation described above, the number of balls has reached “100”, so CU3 can secure the number of balls to be used for sharing the ball and after the ball is liquidated, the ball sharing process is completed. To do. Specifically, the liquidation of this ball is a process of subtracting the ball to be shared (divided and transferred) from the current number of balls (1000 balls), and is executed by the CU control unit 323.

  By executing this ball sharing process, the visitor card in which the number of balls to be shared (divided transfer) (100 balls) is recorded is ejected from the CU3, and the player hands it over to the other party who transfers the visitor card. As a result, the coins are shared (divided and transferred).

  Next, the processing of the wagon service will be described with reference to FIG. The wagon service is a service in which goods such as drinks are provided to the player by consuming the ball. A player who desires a wagon service touches the display 54 (see FIGS. 70 to 76) and places a wagon order. Then, the order content ordered by the player is input as an infrared signal from the IR photosensitive unit 320 of the CU 3 to the remote controller owned by the store clerk. In addition to or in addition to the order input by the remote controller, the wagon service order operations by the player are collected using a LAN (Local Area Network) or the like, and the wagon service is performed according to the collected order contents. You may do it.

  The amusement hall clerk performs a wagon service according to the contents of the order entered on the remote control. In FIG. 60, the number of balls specified by the inserted recording medium (member card or the like) is “30” balls, and the initial number of game balls is “60” balls.

  First, the CU 3 transmits a status information request command including serial number = n and counting ball reception = OFF to the P unit 2. In response to this, the P stand 2 returns a response of the state information response including the serial number = n + 1, the number of game balls = 60, the number of counting balls = 0, and counting = OFF to the CU3.

  Thereafter, the player performs a wagon order by performing a touch operation as described above, so that processing of the wagon order occurs in CU3. The number of balls used for the wagon order is 70 balls.

  However, as described above, since the number of possessed balls is “30”, the display control unit 350 of the CU 3 controls the display 54 to display “Please press the count button for lack of balls”. Under the control, the display unit 54 displays “Please press the counting button because of the shortage of balls”. In addition, the display unit 54 performs the “displaying” period shown in FIG. 60, for example, the displays shown in FIGS. 70 to 76.

  In this way, when the remaining possession ball is less than the desired wagon service product amount, a predetermined notification is made, and the player is prompted to count the game balls to receive the desired wagon service. Can do.

  The player sees the indication “Please press the count button because of the shortage of balls” on the display 54, and presses the count button 28 for a short time to convert the game ball into a ball. When the count button 28 is pressed once, if there are 100 or more game balls, 100 balls are counted and counted as counting balls. For example, if the number of game balls is “160”, the counting operation counts the number of balls as “100” and the number of game balls becomes “60”. However, in this example, since the initial number of game balls is “60” balls, even if the count button 28 is pressed once, only 60 balls are counted, and the number of game balls is “0” balls, “60” balls. In this example, since it is assumed that the ball is not continuously fired when the counting button 28 is operated, the counting operation is not invalidated even if the number of game balls is less than 250.

  Immediately after an operation of briefly pressing the count button 28 once, the CU 3 transmits a command for status information request including serial number = n + 2 and count ball reception = OFF to the P base 2.

  In response to this, in order to notify the CU 3 that the number of gaming balls = 0 and the number of counting balls = 60, the P stand 2 has a serial number = n + 3, the number of gaming balls = 0, the number of counting balls = 60, and counting = A status information response including ON is returned to CU3. In response to the response of the state information response, CU3 adds the number of balls (60 balls) to the number of balls (30 balls) and updates the number of balls to 90, and the number of game balls = 60 (game balls before update) Number) −60 (the number of balls counted) = 0. Further, the CU 3 receives the response of the state information response and starts display for counting 60 game balls.

  Thereafter, the CU 3 transmits a status information request command including serial number = n + 4 and counting ball reception = ON to the P base 2. The reason why the counting ball reception = ON is to notify the P stand 2 of the reception of the counting ball in response to the response of the previous status information response. In response to this, since the operation of pressing the counting button 28 has not been performed, the P table 2 responds with a status information response including serial number = n + 5, number of gaming balls = 0, number of counting balls = 0, counting in progress = OFF. Is returned to CU3.

  As a result of the counting operation described above, the number of held balls has become “90” balls, so CU3 can secure “70” balls for the number of wagons to be used, and pay the number of held balls (to the wagon order). After subtracting 70 balls, the wagon order processing is completed. Specifically, the liquidation of this ball is a process of subtracting the ball (70 balls) used for the wagon service from the current number of balls (90 balls), and is executed by the CU control unit 323. The payment when this wagon service is performed is, for example, in the same way as with the above-mentioned share of the ball, the ball used for the wagon service (70 balls) is written on the visitor card and discharged, and the visitor card is handed over to pay. Make a payment. As another method, a method may be used in which a terminal possessed by a staff member who performs a wagon service and the CU 3 communicate with each other to move a ball (70 balls) used for the wagon service to the terminal possessed by the staff member. Furthermore, a staff member who performs the wagon service may perform some operation on the CU 3 when the ordered product is delivered, and subtract the holding balls (70 balls) used for the wagon service based on the operation.

<Combination of game system configurations>
As shown in FIG. 5, the game system described above is provided with the counting button 28 on the P base 2, and the holding balls are not managed by the P base 2, but are managed by the CU 3. On the other hand, the management of the gaming balls is mainly performed. P display 2 is performed, displays 54 and 312 are provided on P table 2 and CU3, display control unit 350 is provided only on CU3, and display control of displays 54 and 312 is performed on the CU3 side. However, the gaming system according to the present invention is not limited to the above-described configuration. For example, as another game system configuration, the counting button 28 is provided on the P stand 2, the management of the game balls and holding balls is not performed on the P stand 2, but is performed on the CU 3, and the display is provided on the P stand 2 and the CU 3. The display control unit 350 may be provided only on the P base 2 and display control of the display may be performed on the P base 2 side. Many other combinations of gaming system configurations exist. FIG. 61 is a diagram showing a combination example of the configuration of such a gaming system.

  The configuration of the game system shown in FIG. 8, and the configuration of another gaming system described above is the combination No. 1 shown in FIG. 2. In FIG. 61, there are 63 combinations of game system configurations. However, no. 23 to No. No. 41, no. 44 to No. Combinations up to 62 are no. 2 to No. Since the column of the counting buttons of up to 20 combinations can be replaced with CU and P units, the description is omitted.

  It should be noted that the significance of whether the ball management (management of the ball and management of the game ball) is performed by the CU or the P platform is, in part, the storage of the ball data. . For example, in the case of a gaming system in which the holding balls are stored only by the CU and the gaming balls are stored only by the P units, the management of the holding balls is the CU and the management of the gaming balls is the P unit.

  Or, the significance of whether the ball management (management of the ball, management of the game ball) is performed by the CU or the P stand is that the ball data is stored in both the CU and the P stand. When there is a difference between the two data, which data is used to correct the data. For example, in the case of the gaming system shown in FIG. 8, the game balls are stored in both the CU and the P units, but if there is a difference between the two data, the game is based on the data on the P unit side. Correct the ball. In this case, the management of game balls is P units.

  In FIG. 61, all possible combinations are listed. However, the present invention is not limited to this, and unnecessary combinations may be deleted according to the technical idea disclosed in the present embodiment. For example, in the case where it is a technical idea that the CU 3 needs to display and control the game balls, the “display control” field is limited to “CU” only.

  Further, in the above-described embodiment, the content of the holding ball and the game ball are made different from each other, but they may be made into one common value data without being distinguished from each other. For example, common value data is specified by the card itself, the common value data is withdrawn and transmitted from the CU 3 to the P unit 2, and the P unit 2 that receives it stores it as common value data, and the progress of the game The common value data may be updated according to the control, and the finally updated common value data may be recorded on the card and discharged at the end of the game. The “common value data”, “mochitama”, and “game ball” are collectively referred to as “score”.

<Example of processing of game system>
Next, FIG. 62 is a flowchart for explaining processing of the gaming system when there are a predetermined number or more of game balls. With reference to FIG. 62, processing of the payout control unit 171 when the number of game balls is a predetermined number or more and processing of the CU control unit 323 when the number of game balls is a predetermined number or more will be described.

  In the process when the number of game balls is equal to or greater than the predetermined number, first, the payout control unit 171 checks the current number of game balls of the P unit 2 (step S481). Specifically, the payout control unit 171 reads the current number of game balls stored in the RAM mounted on the P-side payout control board 17.

  Next, the payout control unit 171 determines whether or not a big hit has occurred during the game (step S482). When a big hit occurs during a game, the number of game balls tends to exceed a predetermined number, and the player may feel inconvenience if the counting operation is prompted each time or the game ball is stopped firing. Conceivable. Therefore, when the payout control unit 171 determines that a big hit has occurred in the game (step S482: YES), the payout control unit 171 ends without performing the subsequent processing (return).

  If the payout control unit 171 determines that a big hit has not occurred during the game (step S482: NO), the payout control unit 171 determines whether or not the number of game balls that have been confirmed is greater than the 3000 full standard value ( Step S483). If the payout control unit 171 determines that there are more than 3000 confirmed game balls (step S483: YES), the payout control unit 171 transmits the game ball excess information to the CU control unit 323 (step S484). When the payout control unit 171 determines that the confirmed game balls are 3000 balls or less (step S483: NO), the payout control unit 171 ends without performing the subsequent processing (return).

  When the CU control unit 323 receives the game ball excess information from the payout control unit 171 (step S488), the display unit 54 displays “The game ball is full. Please perform the count operation.” Is displayed (step S489).

  In this way, if the number of game balls is greater than or equal to a predetermined number, predetermined notification control is performed, and this makes it possible to simulate a system similar to the conventional game system that notifies when the ball is full on the plate. It is possible to provide a system that can be reproduced and is familiar to players who are accustomed to the conventional game system.

  In addition, when using data game balls instead of actual game balls as in this system, there is no inconvenience of being overwhelmed with a large amount of balls, so there is no upper limit on the number of game balls. You may do it. However, if no upper limit is set, the player and the game store when the game ball data is lost due to troubles in the P units when the player has acquired a very large number of game balls. The problem between and becomes greater. Therefore, as in this embodiment, an upper limit value is provided for the number of game balls in the form of a full tank, and when the number of game balls reaches the upper limit value, counting is promoted and converted into points, P units It is possible to prevent the amusement store's compensation amount from becoming too large in the event that trouble occurs and the game ball data is lost. In other words, by converting the number of game balls into the number of points according to the counting operation and storing it in the CU3, it is possible to store the converted number of points in the upper server via the CU3. Even if a trouble occurs, it is easy to guarantee compensation to the player by the number of points stored in the upper server.

  The payout control unit 171 determines whether or not the player has pressed the count button 28 within 10 seconds after performing the display for prompting the count operation (step S485). If the payout control unit 171 determines that the player has pressed the count button 28 within 10 seconds after the display for prompting the count operation (step S485: YES), the payout control unit 171 ends without performing the subsequent processing. (return). It should be noted that when the notification such as a display prompting the counting operation is terminated, for example, when the counting button 28 is depressed, the full tank state is indicated. When the problem is solved, a predetermined fixed period of time has passed, or a combination of these may be used. When the counting button 28 is pushed down, the determination is made by the P stand 2 when the full state is eliminated, and the determination is made by the CU 3 when a predetermined fixed period has elapsed. However, the present invention is not limited to this, and all the determinations may be made on either the CU3 side or the P stand 2 side.

  If the payout control unit 171 determines that the player has not pressed the count button 28 within 10 seconds after the display for prompting the count operation (step S485: NO), the game control unit 171 stops the play of the game ball. That is, the payout control unit 171 stops the launching of the game ball by stopping the firing motor 18 via the firing control board 31 because the player does not perform the counting operation even after 10 seconds have passed since the counting operation is prompted. In this way, if the number of game balls is equal to or greater than a predetermined number and the counting operation is not performed, the game is disabled and the player can be prompted to perform the counting operation.

  The payout control unit 171 transmits to the CU control unit 323 that the game ball has been stopped because the counting operation is not performed even after 10 seconds have elapsed since the prompting of the counting operation, as the stop shooting information when the game ball is exceeded (Step 321). S487). Thereafter, the payout control unit 171 ends the processing (return).

  When the CU control unit 323 receives from the payout control unit 171 the launch stop information when the game ball is exceeded (step S490), the display 54 displays “The game ball is full. ”Is performed to stop the launch due to an excess of game balls (step S491). Thereafter, the payout control unit 171 ends the processing (return).

  As described above, the gaming system prompts the player to perform a counting operation when the number of game balls exceeds a predetermined number, so that a system similar to the conventional system that notifies when the game medium is full is simulated. A system that can be reproduced and that is familiar to players who are accustomed to conventional gaming systems can be provided.

63 to 76 are screen views displayed by the P display units 54.
First, based on FIG. 63 to FIG. 69, the display screen displayed on the display unit 54 when performing the ball sharing shown in FIG. 59 will be described.

  Referring to FIG. 63, the player selects and designates sharing of the ball from a plurality of menus displayed by touching the display item (icon) of “Menu” displayed in the upper left half of the screen. The state thus obtained is the display screen of the coin sharing shown in FIG. The shared ball sharing (game ball split transfer) can be either split transfer from a player-owned ball or split transfer from a stored ball. For this purpose, first, a message “Please select a ball sharing source” is displayed, and a display item (icon) representing a holding ball to be selected and a display item (icon) representing a storage ball are displayed.

  On the display screen on the right half of FIG. 63, the status of the currently inserted card is displayed. FIG. 63 shows that a membership card is inserted, and the membership card has a card balance of 0 yen, a holding ball of 0 balls, a storage ball of 500 balls, and a current game ball of 1000 balls.

  Further, as the state of CU3, it is displayed that the lending unit amount when lending a game ball from the card balance is 500 yen, and 125 balls corresponding to the 500 yen is the number of payout balls. Furthermore, it is shown that the player can reload the card balance of the inserted card by inserting a bill into the CU3.

  The player touches either “mochidama” or “reserved ball” on the left half of the screen to select and input a ball sharing source. Here, a case where “mochitama” is selected is shown.

  When the player selects “mochitama”, the screen shown in FIG. 64 is displayed. The message “Please select the number of balls to be shared” is displayed on the left half of the screen, and 50, 100, 150, 200, 250, 300, 350, Nine types of 400 balls and 500 balls are displayed. The player selects and inputs one of these nine types. Here, a case where “100 balls” is selected and input will be described.

  Normally, the number of shared balls is converted from the number of balls, but when the number of balls is larger than the number of balls, a screen shown in FIG. 65 is displayed. Specifically, the player has selected the number of balls to be shared as “100 balls”, but since there are no balls in the left half of the screen, “There are not enough balls. Please replenish "message is displayed. Thereby, the player is converted from the game balls to the number of shared balls by pushing the P counting buttons 28.

  In FIGS. 64 and 65, the total number of balls (50 balls, 100 balls, 150 balls,..., 500 balls) to be selected for sharing the ball is displayed. It is possible to control so that only the number of balls within the range of the number of balls when executing is displayed, and the number of balls exceeding the range of the number of balls is not displayed. Alternatively, the number of balls exceeding the range of the number of balls may be displayed with an X mark. Further, it may be controlled to display up to the number of balls that can be shared by counting the number of game balls and adding it to the number of balls. In that case, while enclosing the number of balls that can be shared only with the number of balls in a solid line, while enclosing the number of balls that can be shared by counting the number of game balls and adding it to the number of balls, both It is also possible to control so as to distinguish and display.

  If the player converts “100 balls” for the number of shared balls from game balls to possession balls, the screen shown in FIG. 66 is then displayed. In the screen shown in FIG. 66, a message “Are you sure you want to divide by the above details? Are you sure?” Is displayed, and the number of balls of your card is 900 as the details of the number of shared balls, The number is 100, and it is displayed that the number of balls of a shared card to be divided and transferred (shared ball sharing) to another person is 100. A display item (icon) of “start ball sharing” and a display item (icon) of “cancel” are displayed. The player touches one of these display items to select and input. If “Cancel” is selected, sharing of the ball is canceled. On the other hand, if “start ball sharing” is selected and input, ball sharing processing as shown in the details of the number of balls to be shared is started.

  If the player selects and inputs “start ball sharing”, then the screen shown in FIG. 67 is displayed. In the screen shown in FIG. 67, a message “My card will be ejected” is displayed, and a ball sharing processing status image indicating the progress of the ball sharing processing is displayed. This ball sharing process status image has three types, 1, 2, and 3 as the processing order. In the first process, the player's (player) card is discharged, the shared card is discharged as the second process, and the third process. As reinserted my card is displayed as ejected. In the “status” column, “processing” and “waiting” are displayed from the top, indicating that the first processing is currently being processed. An image in which one's own card is ejected by a broken line from the first process is shown.

  In the right half of the screen in FIG. 67, 900 balls that are currently playing balls on P cars are displayed. In this example, when the card is ejected, it is returned only after counting all the game balls, and since there is no operation by the return button, only the ball sharing operation is an exception. It should be noted that in order to eject the card, it may be possible to eject the card only after counting all the game balls, including during the coin sharing operation. In this case, the P table 2 performs a counting process before the card is discharged, and the number of counting balls is transmitted to the CU3 side.

  In addition, in this example, the case where there is one card insertion slot is explained, but when a card insertion slot is provided for inserting a membership card and a visitor card one by one and there are still game balls, Only the visitor card may be discharged without discharging the card. Thereby, it is possible to prevent the membership card from being discharged when the game balls remain.

  Further, in this example, it may be prompted to perform the counting process for all of the game balls first, and may be converted into a holding ball and shared and divided.

  Next, the screen shown in FIG. 68 is displayed at the stage where the card has been ejected. In FIG. 68, the “status” column indicates that the discharge of the card as the first process is “completed” and the discharge of the shared card as the second process is being processed next. . A state in which the shared card is ejected from the second process is indicated by an arrow.

  When the player reinserts his / her card into CU3, the screen shown in FIG. 69 is then displayed. In FIG. 69, a message “ball sharing has been completed” is displayed, and the ball sharing processing status indicates that all of the first processing, the second processing, and the third processing have been completed. Since the sharing of the coins for 100 balls is completed, it is displayed that the number of game balls in the P unit is 1000-100 = 900 and 900 balls.

  Next, FIGS. 70 to 76 are diagrams of display screens by the display unit 54 when the control processing of the wagon service shown in FIG. 60 is executed.

  First, referring to FIG. 70, the display screen of FIG. 70 is a state where the player touches and selects and inputs the display item (icon) of “Wagon Service” displayed in the upper half of the left half of the screen. First of all, the message “Please select the type you want to order” is displayed, and as the wagon menu, “5 classic menu items”, “30 drinks”, “10 food items”, “sweets 20” 4 types of menus are displayed, and an “order status confirmation” icon is displayed.

  In the right half screen of FIG. 70, 30 balls are currently displayed as possession balls in P units, and 60 balls are displayed as the number of game balls. The selection of orders for wagon services can be made primarily within the range of the number of balls, but by actually using the counting buttons to convert the number of games to balls, the actual number of balls It becomes possible to the range which added the number of game balls to.

  Accordingly, the player can select a wagon menu that can be ordered within the range of 90 balls, considering that the current number of balls and the total number of game balls is 90 balls.

  For example, when the player selects “30 drinks”, the screen shown in FIG. 71 is displayed. In FIG. 71, a message “Please select a product to order” is displayed, and six types of menus included in the drinks are shown. The number of coins required to order each menu Is displayed. The player touches and selects and inputs an item to be ordered from the displayed menu considering that the current number of balls and the total number of game balls are 90 balls.

  On the display screen, PET bottles, which are menu items that can be purchased within the range of the possession balls, are indicated by solid lines, and the game balls are converted into possession balls using the counting buttons as the current possession balls. Menus that can be purchased by adding are indicated by dotted lines. Menus that cannot be purchased even if the game balls are converted into possession balls are indicated by “x”.

  For example, since the player has 30 balls and 60 balls, only the plastic bottle is displayed with a solid line and can be purchased with the balls. You can purchase game balls using canned coffee with 40 balls consumed, milk with 50 balls consumed, cafe au lait with 60 balls consumed, and coffee with 75 balls consumed. , Displayed as a dotted line. Further, even when both 30 balls and 60 game balls are used, the ice float with 100 balls consumed is not enough, so “x” is shown on the screen displaying the ice float.

  This display method is not limited to this, and a menu that can be purchased only with possession balls, a menu that can be purchased with the number of balls including the possession balls and the game balls, and the number of balls including the possession balls and the game balls are also purchased. Any display that can distinguish menus that cannot be used. For example, a menu that can be purchased with only balls is displayed brightly with a lamp, etc., and a menu that can be purchased with the number of balls that include balls and game balls is flashed and displayed. For menus that cannot be purchased even with the number of balls and game balls, it is possible to make the selection impossible without turning on the lamp or the like. Moreover, you may control so that the menu which cannot be purchased even with the number of balls which added the holding ball and the game ball is not displayed. In addition, the menu that can be purchased in the case of the number of balls that cannot be purchased only with possession balls, but that has game balls added to the possession balls, is displayed in a dotted frame (see FIGS. 71 and 72). Such a menu may be displayed with a cross mark, or it may be controlled not to display such a menu.

  An equilateral triangle icon and an inverted triangle icon are displayed on the right side where various menus on the left screen are displayed. When the player touches the equilateral triangle icon, the screen is scrolled down and the upper part of the screen is displayed. On the other hand, if the player touches the inverted triangle icon shown in FIG. 71, the screen is scrolled up and the lower portion of the screen is displayed.

  In FIG. 71, the player selects the “PET BOTTLE” menu that requires 30 balls and touches the “ADD PRODUCT” icon displayed in the title column of “ORDER PRODUCT DETAIL” in FIG. Then, the display returns to the wagon menu display screen of FIG.

  Here, since a PET bottle with 30 balls to be consumed is already scheduled to be purchased, the player can only order 60 balls even if he has his own balls and game balls. Accordingly, in FIG. 72, “x” is displayed on the display so that the ice float with 100 balls consumed and the coffee with 75 balls consumed cannot be purchased. In addition, at this time point, the possession balls are applied to the PET bottles with 30 consumption balls, so that for future purchases, the game balls are converted to possession balls by using the counting buttons and purchased. Therefore, the menus other than the above are displayed with dotted lines.

  When the player finishes selecting the menu that he / she wants to purchase, the screen shown in FIG. 73 is then displayed, and the details of the ordered items selected and input so far are displayed. In the order details, the name of the ordered product, the number of balls consumed, and the quantity of the ordered product are displayed. In the case of FIG. 73, it is shown that one “pet bottle” having 30 balls is ordered and one “can coffee” having 40 balls is ordered.

  It is displayed that the total number of balls consumed is 70 balls. In addition, an “add” icon is displayed in the quantity column of the order item details. When the player touches and inputs this additional icon, the quantity is incremented by “1” each time it is touched. The A “delete” icon is displayed on the right side of the quantity corresponding to each ordered prize. When the player touches this icon, the order for the corresponding product can be deleted. For example, if “delete” at the top is touched, the order of “pet bottle” is deleted, and the order of “can coffee” is deleted by touching the second “delete”.

  Further, an “add product” icon is displayed below the order product details, and when the player touches this, the display returns to the wagon menu display screen of FIGS. 71 and 72 again as described above. The player can select an order item and place an additional order.

  In addition, a “cancel” icon is shown below the order product details in FIG. 73, and the player can cancel all the order products ordered so far by touching this icon.

  Furthermore, an “order” icon is shown below the order item details, and when the player touches this, the order processing of the wagon service as shown in the order item details is executed. Become.

  When the player touches the “delete” icon corresponding to the “canned coffee” order on the display screen of FIG. 73, although not shown, the state where the “canned coffee” order has been canceled is shown. It is.

  On the other hand, when the player touches the “Order” icon in FIG. 73 and the number of balls consumed is larger than the number of balls, the game ball is displayed on the display screen so as to be converted to a ball. The For example, a message such as “There are not enough balls. Press the counting button to replenish the balls.” And the player is prompted to convert the gaming ball into a ball by the counting button. .

  When the above operation is performed, the screen shown in FIG. 74 is displayed. In the display screen of FIG. 74, all the gaming balls for 60 balls are converted into holding balls by pressing the counting button once for a short time, and the total number of balls is 90 balls. On the other hand, the number of game balls decreases from 60 balls to 0 balls. Normally, 100 gaming balls per short press of the counting button are converted into holding balls, but in the above case, all the gaming balls are converted because there are only 60 balls. Further, when starting the game again, for example, the ball lending button 321 is pressed to convert the ball into a game ball and start the game.

  When the above operation is completed, a screen shown in FIG. 75 is displayed. On the display screen of FIG. 75, an image being inquired about the ordered product is displayed. An arrow is displayed indicating that transmission / reception is being performed between 70 balls, which is the total number of balls consumed, and 90 balls currently held on P cars, indicating that communication is in progress. Specifically, with reference to FIG. 75, an arrow indicating that communication is in progress is first displayed in the direction from the “70” balls consumed to the “90” balls of the P units. The text “Inquiry” is displayed.

  After this display is made, an arrow is displayed in the direction from the “90” balls of P units to the “70” balls consumed, and the characters “inquiry” are displayed. Both these displays are repeated several times. After the display, the screen shown in FIG. 76 is displayed. In the screen of FIG. 76, the message “The order item has been received. The number of consumption balls has been withdrawn from the holding ball.” Is displayed, and the order item reception completion is displayed and accepted. Details of the ordered product and the total number of consumed balls “70” are displayed. In the right half of the screen, it is displayed that as a result of the consumption of 70 balls, the current number of balls and game balls in P units are “20” balls and “0” balls, respectively.

  In addition, the number of game balls is reduced due to the firing of balls while the display of “There are not enough balls. Press the counting button to replenish the balls.” Is displayed in FIGS. When the number of possessed balls cannot be updated to the required number of possessed balls, the display control unit 350 performs control to display a message “The service cannot be selected because the number of game balls has decreased.”

  Also, in this example, the case where there is one card insertion slot is explained, but one card insertion slot for inserting a membership card and a visitor card is provided one by one, and the number of game balls compared to the number of balls consumed In the case where a visitor card is used to make a payment greater than the total number of balls, the visitor card may be discharged without discharging the membership card after the payment is completed. Thereby, it is possible to prevent the membership card from being discharged when the game balls remain. Further, in this example, it may be prompted to perform the counting process for all of the game balls first, and the wagon service process may be started after being converted to a holding ball.

  FIG. 77 is a block diagram showing the relationship between P game boards and game frames (front frames) for fraud detection processing. Referring to FIG. 77, pachinko machine (P stand) 2 includes a game board 26 and a game frame (front frame) 6.

  The game board 26 includes a main control board 16, and the game frame (front frame) 6 includes a payout control board 17. The payout control board 17 requests information from the main control board 16. On the other hand, the main control board 16 transmits to the payout control board 17 the winning opening information, the number of rounds, and the main control chip ID which will be described later with reference to FIG. The card unit 3 (CU3) includes a CU control unit 323 and a security board 325.

  The security board 325 makes a gaming machine chip information request, and in response to this request, the payout control board 17 transmits the main control chip ID, the payout control chip ID, etc. to the security board 325 as a response. The security board 325 transmits the received main control chip ID and payout control chip ID to the CU control unit 323.

  The CU control unit 323 transmits the received main control chip ID and payout control chip ID to the upper server 801, and checks whether or not the main control chip ID and payout control chip ID are registered regular ones. Have you do. When the P machine 2 manufactured by the gaming machine maker is shipped to the game hall, the main control chip ID and the payout control chip ID of the P machine 2 are transmitted from the gaming machine maker to the host server 801 for registration. Therefore, when the main control chip and the payout control chip of the P table 2 carried into the game hall are regular ones shipped from the gaming machine manufacturer, the CU control unit 323 sends the main control chip ID to the upper server 801. When the payout control chip ID is transmitted for verification, a reply indicating that it has been registered is returned. However, if the main control chip or the payout control chip is illegally modified, a reply indicating that the main control chip or the payout control chip is not registered and is inappropriate is returned from the upper server 801.

  The CU control unit 323 enables a game by the P unit 2 on the condition that an appropriate answer is returned, but when the incorrect answer is returned, the P unit 2 is reset. It waits for reset to wait.

  FIG. 78 is a diagram for explaining information transmitted from the main control board 16 in response to an information request from the payout control board 17 in order to perform fraud detection processing. Referring to FIG. 78, the information to be transmitted includes (a) winning opening information, (b) round number information, and (c) main control chip ID information.

  First, regarding (a) winning opening information, information on the type of winning opening and the number of winning balls from the winning opening (the value of the number of game balls added at the time of winning the winning opening) is transmitted. The reason why such information is transmitted is to prevent the number of prize balls from being changed due to an illegal act so that the number of prize balls exceeding the normal number of prize balls is not paid out.

  For example, with respect to the start winning opening, there are start winning openings 1 to 3, and when one game ball is won in each starting winning opening, 3 balls are paid out as the number of winning balls, respectively.

  Similarly to the start winning opening, the normal winning openings 1 to 3 exist, and when one game ball is won in the normal winning opening, 5 balls are paid out respectively.

  Furthermore, there is only one winning prize opening, and when one game ball wins a prize winning opening, 15 balls are paid out as the number of winning balls.

  The winning award information is stored in a memory such as a ROM of the main control unit 161 provided on the main control board 16.

  Next, regarding (b) round number information, there is a limit to the number of times that a big winning opening is opened at a normal jackpot, and the maximum number of rounds is 15 (15 rounds). If a big hit occurs, the number of 15 award balls is frequently sent to the payout control board 17, but for the purpose of preventing an illegal act such that this state continues even after exceeding the maximum number of rounds. Round number information is transmitted from the main control board 16.

  Next, since (c) main control chip ID information needs to be detected even when the main control board 16 itself is changed, “XXXXXXX” which is main control chip ID information is transmitted. This is sent to the payout control unit 171 to determine whether or not the game board is appropriate.

  Here, control for performing fraud detection processing using the above information will be described using a flowchart.

  FIG. 79 is a flowchart showing control of fraud detection processing at power-on. Referring to FIG. 79, when activation of P units is started, for example, by powering on P units, in step S651, game board information (main control chip ID, winning port information, The payout control board 17 of the game frame (front frame) 6 obtains the round number information).

  In step S652, the payout control board 17 is stored in a storage medium capable of storing stored information until the next power-on, such as the flash memory device, the hard disk device, and the backup RAM. Game board information (main control chip ID, winning opening information, round number information) is read into a RAM or the like.

  In step S653, the payout control board 17 transmits the main control chip ID and the payout control chip ID transmitted when the power is turned on to the CU3 side. For example, the CU3 side collates the transmitted main control chip ID and payout control chip ID with the upper server 801.

  In step S654, the payout control board 17 determines whether or not the main control chip ID transmitted and obtained when the power is turned on is the same as the main control chip ID already held in the payout control board 17.

  If the payout control board 17 determines that the main control chip ID transmitted and obtained when the power is turned on and the main control chip ID already held in the payout control board 17 are the same, the process proceeds to step S655, and the winning opening Information identity is determined.

  On the other hand, if the payout control board 17 determines that the main control chip ID transmitted and obtained when the power is turned on is not the same as the main control chip ID already held in the payout control board 17, the process proceeds to step S659. move on.

  Next, in step S655, the payout control board 17 determines whether or not the winning opening information transmitted and obtained when the power is turned on is the same as the winning opening information already held in the payout control board 17.

  If the payout control board 17 determines that the winning opening information transmitted and acquired when the power is turned on and the winning opening information already held in the payout control board 17 are the same, the process proceeds to step S656, and the round number information Identity is determined.

  On the other hand, if the payout control board 17 determines that the winning opening information transmitted and obtained when the power is turned on and the winning opening information already held in the payout control board 17 are not the same, the process proceeds to step S658. Fraud detection information is transmitted to the upper server 801. At this time, error display control using an abnormality notification lamp or the like may be performed.

  Next, in step S656, the payout control board 17 determines whether or not the round number information transmitted and obtained when the power is turned on is the same as the round number information already held in the payout control board 17.

  If the payout control board 17 determines that the round number information transmitted and obtained when the power is turned on is the same as the round number information already held in the payout control board 17, the process proceeds to step S657.

  On the other hand, if the payout control board 17 determines that the round number information transmitted and acquired when the power is turned on is not the same as the round number information already held in the payout control board 17, the process proceeds to step S658. Fraud detection information is transmitted to the upper server 801. At this time, error display control using an abnormality notification lamp or the like may be performed.

  Following the processing in step S655 and step S656, fraud detection information is transmitted from the payout control unit 171 in step S658, and the processing ends (return).

  Further, after the processing of step S654, the main control chip ID transmitted and obtained at the time of power-on in step S659 is not the same as the main control chip ID already held in the payout control board 17, A verification result as to whether or not the control chip ID has already been registered in the upper server 801 is acquired.

  The processes in steps S659 and S660 are provided for the following purposes. Usually, when a new P unit is installed, only the game board may be exchanged (board exchange) in order to reduce the normal cost. In this case, the main control chip ID of the exchanged game board is different from the main control chip ID held on the payout control board. It is necessary to prohibit transmission of fraud detection information when the main control chip ID is different due to such panel replacement.

  Therefore, when installing a new game board, the main control chip ID or the like is first registered in the upper server 801. Therefore, is the main control chip ID transmitted from the main control board registered in the upper server 801? The host server 801 determines whether or not and sends the comparison result to the payout control board 17 via the CU3. Next, the process proceeds to S660.

  If it is determined in step S660 that the collation result is appropriate (the main control chip ID stored in the host server 801 is the same as the main control chip ID transmitted from the main control unit 161), the process proceeds to step S657. Processing proceeds.

  On the other hand, if it is determined that the collation result is not appropriate (the main control chip ID stored in the host server 801 is the same as the main control chip ID transmitted from the main control unit 161), the process proceeds to step S670. In step S670, an abnormality process is performed, and the process ends (return).

  Following the processing of step S656 and step S660, in step S657, the game board information (main control chip ID, winning mouth information, round number information) transmitted from the main control board 16 is held in the payout control board 17, Processing ends (return). The payout control board 17 has a storage medium such as a flash memory device, a hard disk device, and a backup RAM that can store stored information until the next power-on even when the power is turned off. The board information (main control chip ID, winning opening information, round number information) is stored and held.

  FIG. 80 is a flowchart showing fraud detection processing during a game. Referring to FIG. 80, in step S661, payout control board 17 obtains information on the addition counter of the main control board. Next, in step S <b> 662, the payout control board 17 reads the winning opening information held on the payout control board 17.

  In step S663, whether or not the increase amount (increasing number of game balls) of the addition number counter in the polling interval can be generated based on the number of winning balls in the winning opening information held in the payout control board 17 shown in FIG. Determine whether.

  The relationship between the winning opening information shown in FIG. 78 and the game information shown in FIG. 13 will be described. The type of winning opening and the number of winning balls shown in FIG. 78 correspond to the type information and winning ball information in FIG. 13, respectively.

  Specifically, the start winning holes 1 to 3 indicate the game type information 1 to 3 of the type information 1 to 3 in FIG. 13, respectively, and the three balls that are the number of prize balls are those of the prize ball information 1 to 3 in FIG. The game prize ball information 1 to 3 is shown respectively.

  Next, the normal winning openings 1 to 3 indicate the game type information 4 to 6 of the type information 4 to 6 in FIG. 13, respectively, and the five balls which are the number of winning balls are the game awards of the prize ball information 4 to 6 in FIG. Sphere information 4 to 6 is shown respectively.

  Further, the special winning opening indicates the game type information 7 of the type information 7 of FIG. 13, and 15 balls, which is the number of the winning balls, indicate the game prize ball information 7 of the prize ball information 7 of FIG.

  If it is determined in step S663 that the increment amount (increased number of game balls) of the addition counter at the polling interval can be generated based on the number of winning balls in the winning opening information held in the payout control board 17, fraud detection Information is not transmitted, and the process ends (return). Specifically, when the increased number of game balls is 9, based on FIG. 78, it can be generated when 3 balls are won in the start winning slot 1 or when 1 ball is simultaneously won in the start winning slots 1-3. It becomes.

  On the other hand, when it is determined in step S663 that the increase amount (increase number of game balls) of the addition counter at the polling interval cannot be generated based on the number of winning balls in the winning opening information held in the payout control board 17 The process proceeds to step S664. Specifically, when the increased number of game balls is 7, based on FIG. 78, 7 balls cannot be generated by any combination.

  In step S664, fraud detection information notifying the gaming machine that some kind of fraud has been performed is transmitted to CU3, and the process ends (return). This “fraud detection information” specifically refers to “fraud detection information 1” in FIG. The CU 3 that has received the fraud detection information 1 performs abnormality notification using the abnormality notification lamp, notifies the higher server 801 to that effect, and notifies the upper server 801 that an abnormality has occurred.

  In S663, it is determined whether or not the increase amount (increasing number of game balls) of the addition number counter in the polling interval can be generated based on the number of winning balls in the winning opening information held in the payout control board 17. In addition, in addition to this, the information of the addition number counter transmitted from the main control unit 161 during the game may be compared with the stored round number information to determine whether or not they match. . That is, when the number of additions transmitted from the main control unit 161 continues to exceed the number of jackpot rounds (15), it is determined as abnormal.

  FIG. 81 is an example of a diagram displayed as a dollar box display on the display 312 of the CU3. Referring to FIG. 81, as described in FIG. 45, a dollar box display is performed on the display 312 on the CU3 side according to the number of balls acquired in the current (current) game due to a big hit or the like.

  Specifically, it is determined whether or not the number of balls acquired in the current game is positive as the cumulative number of added balls minus the total number of subtracted balls. Alternatively, the number of balls acquired in the current game may be the current number of game balls + current number of balls-number of balls at the start of the game. The dollar box display may be started when the number of balls acquired in the current game becomes positive regardless of the counting operation.

  The dollar box display is not limited to the conditions displayed when the number of balls acquired in this game is positive. For example, when the number of balls acquired in this game exceeds 1000 balls The conditions may be changed, for example, displayed on the screen.

  If the number of balls acquired in the current (current) game increases, the number of empty ball boxes 621 decreases and the number of ball boxes 622 filled with game balls increases. On the other hand, if there is no big hit and the number of game balls decreases, the number of ball boxes 622 decreases and the number of empty ball boxes 621 increases. The dollar box display is not limited to the increase / decrease of the empty ball box 621 and the ball box 622. Although not shown, the dollar box display may be changed according to the change in the number of game balls. Good. Further, a ball box 622 may appear according to a change in the number of game balls.

  This dollar box display starts calculating the number of balls acquired in the current (current) game on the CU3 side at the same time as the game is started. Here, the calculation is performed on the CU3 side, but the calculation may be performed on the P stand 2 side and the result may be notified to the CU3 side.

  FIG. 82 is a flowchart for explaining the operation process of the replay button 319 in FIG. Referring to FIG. 82, in step S681, the player (user) presses down the replay button 319 in FIG. 1, whereby the process of the replay button 319 is started.

  In step S682, it is determined whether or not the counting process from game balls to holding balls is being executed. By step S682, it is possible to prevent the lending process by the replay button 319 for converting from the holding ball to the game ball from competing with the counting process which is a process opposite to the lending process.

  If it is determined in step S682 that the counting process from game balls to holding balls is being executed, the process proceeds to step S684. In step S684, since the operation by the replay button 319 and the counting operation are in conflict, the operation of pressing the replay button 319 is invalidated, and the process ends (return). When the operation of depressing the replay button 319 is invalidated, the display of the message 54, 312 or the like may be performed such that “the operation of the replay button is invalidated because the counting process is in progress”. .

  On the other hand, if it is determined in step S682 that the counting process from game balls to holding balls is not being executed, the process proceeds to step S683. Next, in step S683, the lending process from the holding ball to the game ball is executed by the operation of the replay button 319, and the process ends (return).

  Next, FIG. 83 is a flowchart for explaining the operation processing of the counting button. Referring to FIG. 83, in step S691, when the player (user) presses down counting button 28 in FIG. 1, the operation process of counting button 28 is started.

  In step S692, it is determined whether or not the lending process from the possession ball to the game ball (the operation process for the replay button 319) is being executed. This is the same as step S682 in FIG. 82. This prevents the lending process by the replay button 319 for converting from the holding ball to the game ball in step S692 from competing with the counting process, which is the opposite process of this lending process. Is done.

  If it is determined in step S692 that the lending process from the possession ball to the game ball is being executed, the process proceeds to step S698. In step S697, since the operation by the replay button 319 and the counting operation are in conflict, the operation of depressing the counting button is invalidated, and the process ends (return). When the operation of depressing the count button 28 is invalidated, the display 54, 312 or the like displays a message that “the count button operation is invalidated because the ball lending process from holding balls / storage balls is in progress”. You may do it.

  On the other hand, if it is determined in step S692 that the lending process from the holding ball to the game ball is not being executed, the process proceeds to step S693. Next, in step S693, it is determined whether or not a game is in progress at the time this process is being performed.

  If it is determined in step S693 that the game is in progress, the process proceeds to step S694, and it is further determined whether or not the minimum required number of game balls in the game is 250 balls or more. Here, the minimum required number of game balls is described as 250 balls, but the present invention is not limited to this, and the minimum required number of game balls can be arbitrarily set.

  If it is determined in step S694 that the current number of game balls is 250 balls or more, the process proceeds to step S695. On the other hand, if it is determined that the current number of game balls is less than 250 balls, the process proceeds to step S698. The processing in step S694 is provided because it is desirable in the system to secure the minimum required number of balls for managing the number of balls in the game.

  Step S695 shows counting control in the case of a long press, but shows another example different from the control of FIG. 40 described above. In step S695, the number of game balls (number of processed balls) to be counted per second from the current number of game balls is determined. For example, if the current number of game balls is 10000 balls or more, the number of processed balls is 2500 balls. If the current number of game balls is 5000 or more and less than 10000 balls, the number of processed balls is 2000 balls. If the number of game balls is 1000 balls or more and less than 5000 balls, the number of processed balls is 1000 balls. If the current number of game balls is 200 balls or more and less than 1000 balls, the number of processed balls is 200 balls. If the number of game balls is less than 200 balls, the number of game balls is set as the current number of game balls, and the process proceeds to step S696.

  In step S696, counting processing from game balls to holding balls is executed according to the set number of processing balls. For example, if the current number of game balls is 15000 balls, wait for 1 second after counting 2500 balls, and repeat the operation of counting 2500 balls again after 1 second has passed. By repeating the operation 6 times, the counting of all balls is completed over 5 seconds. Next, the process proceeds to step S697.

  In step S697, the control for displaying the counting operation over a plurality of times in step S696 at any time on the display unit 54 is executed in step S697 (return). If the current number of game balls is 15000 balls, wait until 1 second elapses after counting 2500 balls, and when 1 second elapses, the operation of counting the 2500 balls is repeated 6 times. A state where the counting of all the balls is completed over a second is displayed on the display 54.

  Following the processing in steps S692 and S694, in step S698, the operation of depressing the counting button is invalidated, and the processing ends (return). In step S698, the ball lending process, which is the reverse of the counting process, or the invalidation of the counting process request for the number of game balls that is less than the minimum required number of game balls that is inappropriate for the management of the number of balls being played Is provided.

  According to the above configuration, the number of counting balls counted in one counting operation differs depending on the number of gaming balls acquired by the player, so even if there are relatively many gaming balls The number of counting operations required to count all the game balls is not extremely increased, and the operability of the counting button can be improved thereby.

  FIG. 84 is a diagram showing a modification of the display of the counting operation. In the above embodiment, the number of balls to be counted for the game ball is determined by the number of times and the time for which the counting button 28 is depressed. In this modification, instead of the counting button 28, a total counting button 28a and a partial counting button 28b as shown in FIG. 84 are displayed on the liquid crystal screen of the display 54.

  Referring to FIG. 84, a total counting button 28a and a partial counting button 28b are displayed on the left half of the screen. The all counting button 28a is a button for performing all counting processing for converting all of the number of game balls into a possession ball. On the other hand, the partial counting button 28b is a button for performing a partial counting process for converting a part of the number of game balls into a holding ball. For example, the partial counting button 28b is used when sharing a ball or using a wagon service.

  On the other hand, a numeric keypad 28c is displayed on the right half of the screen, and the numeric keypad 28c includes 0-9 numeric keys, a clear key (C), and an equal key (=). In this example, the number key, the clear key, and the equal key are used. However, the present invention is not limited thereto, and keys for providing various functions can be arranged.

  The player uses the numeric keypad 28c to input the number of game balls to be counted and inputs an equal key. Thereby, the number of game balls to be counted is determined. Thereafter, by pressing the partial counting button 28b, the desired number of game balls can be converted into a possession ball. Here, the operation has been described with the operation of pressing the partial counting button 28b after inputting and confirming the game ball to be counted first using the numeric keypad 28c, but not limited thereto, after pressing the partial counting button 28b, After inputting the number of game balls to be counted, an equal key is input to start the counting process.

  If the number of game balls to be counted is erroneously input, the desired number of game balls to be converted can be input again after inputting the clear key.

  The number of game balls that have been input is displayed on the display portion at the top of the numeric keypad 28c. By confirming this display portion, the player can confirm whether or not the requested number of game balls is being input.

  In the case of adopting such a modified example, all counting operations and partial counting operations of game balls are possible, so that it is possible to count a part of balls with each counter It is possible to provide a new system using game ball data in a form close to that of the game system.

  Since the display unit 54 is controlled by the CU 3 side (see FIG. 5), a touch operation signal on the touch panel of the display unit 54 is input to the CU 3 side without passing through the P stand 2. Therefore, when the modified example shown in FIG. 84 is adopted, it is necessary to transmit the touch operation signal of the touch panel input to the CU 3 from the CU 3 to the payout control unit 171 on the P platform side. Such a touch operation signal may be included in the status information request, for example. Also, the display as shown in FIG. 84 may be performed on the CU side display 312. Similarly in this case, it is necessary to transmit the touch operation signal of the touch panel input to the CU 3 from the CU 3 to the payout control unit 171 on the P platform side. In addition to the display unit 54 and the display unit 312, a dedicated display unit with a dedicated touch panel is provided, and the dedicated display unit for counting is controlled by controlling the dedicated display unit on the P table 2 side. The display shown in 84 may be performed, and the touch operation signal may be directly input to the P base 2. Furthermore, a screen as shown in FIG. 84 may be displayed on both the CU-side display 312 and the P-side display 54 according to the player's selection. Furthermore, the counting operation button may be displayed on the screen as described above while leaving the counting button 28 shown in FIG. 1, or when this modification is adopted, the counting button shown in FIG. 28 may be deleted.

  FIG. 85 is a flowchart for describing control of payout control unit 171 and CU control unit 323 by the radio wave sensor. Referring to FIG. 85, regarding the control of payout control unit 171 by the radio wave sensor, in step S711, notification of game board radio wave sensor detection from main control unit 161 or notification of game frame radio wave sensor detection is sent to payout control unit 171. Determine if it has been done.

  If it is determined in step S711 that the payout control unit 171 has been notified of the game board radio wave sensor detection or the game frame radio wave sensor detection from the main control unit 161, the process proceeds to step S714.

  On the other hand, if it is determined that the payout control unit 171 has not been notified of the game board radio wave sensor detection and the game frame radio wave sensor detection from the main control unit 161, the process proceeds to step S712, and the game board or game frame is detected. The notification of the disconnection detection of the radio wave sensor possessed by is determined.

  In step S712, as described above, it is determined whether or not the game board radio wave sensor disconnection detection notification or the game frame radio wave sensor disconnection detection input has been made to the payout control unit 171 from the main control unit 161.

  Here, as a method of detecting disconnection of the radio wave sensor, signal level detection of the radio wave sensor detection signal is performed. Specifically, three types of radio wave sensor detection signals are used: H level, L1 level, and L0 level. The signal level of the radio wave sensor when notification of radio wave sensor detection is made due to fraudulent action is set to H level, the signal level of the radio wave sensor is set to L0 (ground potential level) due to disconnection, and the signal level L1 (> L0) of a normal radio wave sensor ), It is possible to detect disconnection. Here, the method of notifying disconnection detection by signal level detection has been described, but the present invention is not limited to this. For example, the signal levels H and L1 may be set to the same level. This eliminates the need to detect a complicated signal level, thereby reducing costs.

  Further, in the above example, the detection is performed by measuring the voltage of each signal, but it can also be detected by measuring each current.

  If it is determined in step S712 that the payout control unit 171 has received notification of game board radio wave sensor disconnection detection from the main control unit 161 or input of game frame radio wave sensor disconnection detection, the process proceeds to step S714.

  On the other hand, if it is determined that the game board radio wave sensor disconnection detection notification and the game frame radio wave sensor disconnection detection input are not made from the main control unit 161 to the payout control unit 171, the process proceeds to step S713.

  In step S713, the payout control unit 171 determines that neither the gaming board radio wave sensor nor the game frame radio wave sensor has detected an illegal act, and the process ends (return).

  Following the processing of step S711 and step S721, in step S714, the payout control unit 171 determines that fraud has been detected in the game board radio wave sensor or the game frame radio wave sensor. In step S715, the process is terminated (return) by notifying the CU 3 that fraud has been detected (illegal notice).

  On the other hand, in step S716, the CU control unit 323 receives the fraud notification from the payout control unit 171 by the process in step S715, and the process proceeds to step S717.

  In step S717, the CU control unit 323 notifies the hall management computer of fraud, and the process proceeds to step S718.

  In step S718, the CU control unit 323 activates the abnormality notification lamp, and the process ends (return). By operating the abnormality notification lamp, the hall manager can check the operation status of the gaming machine that may be fraudulent in a short time and prevent fraud. .

<Commands and responses sent and received between the CU control unit and the SC>
Next, communication within the CU 3 shown in FIG. 6 will be described. In particular, communication between the CU control unit 323 and the security chip (SC) 325b of the security board 325 will be described. First, with reference to FIG. 86, an outline of commands and responses transmitted / received between the CU control unit 323 and the security chip (SC) 325b will be described.

  FIG. 86 shows the transmission direction, whether the transmitted data is a command or a response, the name of transmission information, and its outline.

  First, a command named board connection request is transmitted from the CU control unit 323 to the SC 325b. This board connection request command requests the SC 325b to connect to a gaming machine (P 2). A response named “substrate connection response” is transmitted from the SC 325 b to the CU control unit 323. This response to the board connection response notifies the CU control unit 323 of a response to the board connection request.

  A board shipment key request command is transmitted from the CU control unit 323 to the SC 325b. This board shipment key request command requests the board 325b for a board shipment key. A response of the board shipment key response is transmitted from the SC 325b to the CU control unit 323. The response of the board shipment key response is to notify the CU control unit 323 of the board shipment key.

  A command of the board serial ID authentication request 1 is transmitted from the CU control unit 323 to the SC 325b. This command of the board serial ID authentication request 1 requests the SC 325b to authenticate the board serial ID. A response of the board serial ID authentication response 1 is transmitted from the SC 325 b to the CU control unit 323. The response of the board serial ID authentication response 1 notifies the CU control unit 323 of the board serial ID authentication information.

  A command of the board serial ID authentication request 2 is transmitted from the CU control unit 323 to the SC 325b. The command of the board serial ID authentication request 2 requests the SC 325b to authenticate the board serial ID. A response of the board serial ID authentication response 2 is transmitted from the SC 325 b to the CU control unit 323. The response of the board serial ID authentication response 2 is to notify the CU control unit 323 of board serial ID authentication information.

  A command of device authentication request 1 is transmitted from the CU control unit 323 to the SC 325b. The device authentication request 1 command is a request for device authentication to the SC 325b. A response of the device authentication response 1 is transmitted from the SC 325b to the CU control unit 323. The response of the device authentication response 1 notifies the CU control unit 323 of the device authentication result.

  A command of device authentication request 2 is transmitted from the CU control unit 323 to the SC 325b. The device authentication request 2 command is for requesting device authentication to the SC 325b. A response of device authentication response 2 is transmitted from the SC 325 b to the CU control unit 323. The response of the device authentication response 2 notifies the CU control unit 323 of the device authentication result.

  A board authentication result notification command is transmitted from the CU control unit 323 to the SC 325b. This board authentication result notification command notifies the SC 325b of the authentication result between the CU control unit 323 and the SC 325b. A response of the board authentication result response is transmitted from the SC 325b to the CU control unit 323. The response of the board authentication result response is to notify the CU control unit 323 of the authentication result between the CU control unit 323 and the SC 325b.

  A board inquiry information request command is transmitted from the CU control unit 323 to the SC 325b. This board inquiry information request command requests board inquiry information from the SC 325b. A response of the board inquiry information response is transmitted from the SC 325b to the CU control unit 323. This response to the board inquiry information response is to notify the CU control unit 323 of board inquiry information.

  A board information notification command is transmitted from the CU control unit 323 to the SC 325b. This board information notification command notifies board information to the SC 325b. A response of the substrate information notification response is transmitted from the SC 325b to the CU control unit 323. The response of the board information notification response is a response to the CU control unit 323 that the board information notification has been received.

  A gaming machine chip inquiry information request command is transmitted from the CU control unit 323 to the SC 325b. This gaming machine chip inquiry information request command requests the gaming machine chip inquiry information from the SC 325b. A response of the gaming machine chip inquiry information response is transmitted from the SC 325b to the CU control unit 323. The response of the gaming machine chip inquiry information response is to notify the CU control unit 323 of the gaming machine chip inquiry information.

  A gaming machine chip verification result notification command is transmitted from the CU control unit 323 to the SC 325b. This gaming machine chip collation result notification command notifies the gaming machine chip information collation result to the SC 325b. A response of the gaming machine chip verification result response is transmitted from the SC 325b to the CU control unit 323. This response of the gaming machine chip verification result response notifies the CU control unit 323 that the gaming machine chip verification result has been received.

  An operation information request command is transmitted from the CU control unit 323 to the SC 325b. This operation information request command notifies the SC 325b of operation information. The response of the operation information response is transmitted from the SC 325b to the CU control unit 323. This response of the operation information response notifies the CU control unit 323 of the operation information.

  An operation information notification result command is transmitted from the CU control unit 323 to the SC 325b. The command of the operation information notification result notifies the SC 325b of the operation information notification result. The response of the operation information notification result response is transmitted from the SC 325b to the CU control unit 323. The response of the operation information notification result response notifies the CU control unit 323 that the operation information notification result has been received.

  A counter information request command is transmitted from the CU control unit 323 to the SC 325b. This counter information request command requests counter information from the SC 325b. A response of a counter information response is transmitted from the SC 325b to the CU control unit 323. This response of the counter information response notifies the CU control unit 323 of the counter information.

  A communication key request command is transmitted from the CU control unit 323 to the SC 325b. This communication key request command requests the SC 325b for a communication key. A response of the communication key response is transmitted from the SC 325b to the CU control unit 323. This response of the communication key response is a request for the communication key to the CU control unit 323.

  A substrate state request command is transmitted from the CU control unit 323 to the SC 325b. This command for requesting the substrate status is for requesting the substrate status to the SC 325b. A response of the substrate state response is transmitted from the SC 325b to the CU control unit 323. The response of the substrate state response notifies the CU control unit 323 of the substrate state.

  Next, based on FIG. 87 to FIG. 118, the command / response board connection request, board connection response, board shipping key request, board shipping key response, board serial ID authentication request 1, board serial ID authentication shown in FIG. Response 1, board serial ID authentication request 2, board serial ID authentication response 2, equipment authentication request 1, equipment authentication response 1, equipment authentication request 2, equipment authentication response 2, board authentication result notification, board authentication result response, board inquiry information Request, board inquiry information response, board information notification, board information notification response, gaming machine chip inquiry information request, gaming machine chip inquiry information response, gaming machine chip verification result notification, gaming machine chip verification result response, operation information request, operating information Response, operation information notification result, operation information notification result response, counter information request, counter information response, communication key request, communication key response, board status request, For fine substrate state response, describing its contents in detail.

  First, referring to FIG. 87, a board connection request command is transmitted from CU control unit 323 to SC 325b. The transmitted board connection request command notifies the card unit information to the SC 325b and requests connection with the gaming machine (P 2).

  The specific data of the board connection request includes serial number, command, hall code, machine number, and manufacturer code data, as shown in the lower part of FIG. The serial number is a sequence number of the command and is a value from 1 to 255 (cyclic). The CU control unit 323 counts up (+1) the serial number received at the time of transmission with an initial value “1” and transmits the serial number. However, the serial number is not counted up at the time of retransmission. The command is a command code for a board connection request, and is “0x60” in binary data in hexadecimal.

  The hall code is a code (installed store code) for identifying the store where the gaming machine is installed. The machine number is a number for identifying the game machine. The manufacturer code card unit is a code for identifying the manufacturer that manufactured the card unit (CU) 3.

  Referring to FIG. 88, a response of the board connection response is transmitted from SC 325b to CU control unit 323. The transmitted response of the board connection response is to notify the CU control unit 323 that the connection request has been accepted.

  The specific data of the board connection response includes serial number, command, and reception result data as shown in the lower part of FIG. The serial number is a sequence number of the command and is a value from 1 to 255 (cyclic). The SC 325b counts up (+1) the serial number received during transmission and transmits it. However, the serial number is not counted up at the time of retransmission. The command is a command code of the board connection response, and is “0x70” as binary data in hexadecimal representation.

  The acceptance result is data indicating the result of accepting the board connection request command transmitted from the CU control unit 323 to the SC 325b, indicating OK when “0x00” and NG when “0x01”.

  Referring to FIG. 89, a board shipment key request command is transmitted from CU control unit 323 to SC 325b. The transmitted board shipment key request command is a request for the shipment key (test key) of the security board 325 to the SC 325b.

  The specific data of this board shipping key request includes serial number and command data as shown in the lower part of FIG. The serial number is a sequence number of the command and is a value from 1 to 255 (cyclic). The CU control unit 323 counts up (+1) the serial number received at the time of transmission with an initial value “1” and transmits the serial number. However, the serial number is not counted up at the time of retransmission. The command is a command code for requesting a board shipment key, and is “0x61” in binary data in hexadecimal representation.

  Referring to FIG. 90, the board shipment key response response is transmitted from SC 325b to CU control unit 323. The transmitted board shipment key response response notifies the CU control unit 323 of the shipment key (test key) of the security board 325.

  The specific data of the board shipping key response includes data of a serial number, a command, a board shipping key, and a board shipping MAC (Message Authentication Code) key, as shown in the lower part of FIG. . The serial number is a sequence number of the command and is a value from 1 to 255 (cyclic). The SC 325b counts up (+1) the serial number received during transmission and transmits it. However, the serial number is not counted up at the time of retransmission. The command is a command code for a board shipping key response, and is “0x71” in binary data in hexadecimal representation.

  The board shipping key is a security board shipping key, and is an encryption key used to encrypt a message when a communication test is performed between the CU control unit 323 and the SC 325b before shipping to the amusement hall. The board shipping MAC key is a security board shipping key MAC key, and encrypts a MAC, which will be described later, when a communication test is performed between the CU control unit 323 and the SC 325b before shipping to the amusement hall. This is an encryption key used for this purpose.

  Referring to FIG. 91, a board serial ID authentication request 1 command is transmitted from CU control unit 323 to SC 325b. The transmitted command of the board serial ID authentication request 1 requests the SC 325b to authenticate the board serial ID of the security board 325.

  The specific data of the board serial ID authentication request 1 includes serial number and command data as shown in the lower part of FIG. The serial number is a sequence number of the command and is a value from 1 to 255 (cyclic). The CU control unit 323 counts up (+1) the serial number received at the time of transmission with an initial value “1” and transmits the serial number. However, the serial number is not counted up at the time of retransmission. The command is a command code of the board serial ID authentication request 1 and is “0x40” as binary data in hexadecimal representation.

  Referring to FIG. 92, the response of the board serial ID authentication response 1 is transmitted from SC 325b to CU control unit 323. The transmitted response of the board serial ID authentication response 1 is a response to the board serial ID authentication information to the CU control unit 323. The board serial ID authentication response 1 notifies a challenge code.

  The specific data of the board serial ID authentication response 1 includes serial number, command, and challenge code data, as shown in the lower part of FIG. The serial number is a sequence number of the command and is a value from 1 to 255 (cyclic). The SC 325b counts up (+1) the serial number received during transmission and transmits it. However, the serial number is not counted up at the time of retransmission. The command is a command code of the board serial ID authentication response 1, and is “0x50” as binary data in hexadecimal representation.

  The challenge code is a code used for a challenge / response method used for password authentication, and is a code including a random numerical string to be transmitted to the CU control unit 323.

  Referring to FIG. 93, a board serial ID authentication request 2 command is transmitted from CU control unit 323 to SC 325b. The transmitted command of the board serial ID authentication request 2 requests the SC 325b to authenticate the board serial ID of the security board 325. The board serial ID authentication request 2 returns a response code.

  The specific data of the board serial ID authentication request 2 includes serial number, command, response code, and response calculation data as shown in the lower part of FIG. The serial number is a sequence number of the command and is a value from 1 to 255 (cyclic). The CU control unit 323 counts up (+1) the serial number received at the time of transmission with an initial value “1” and transmits the serial number. However, the serial number is not counted up at the time of retransmission. The command is a command code of the board serial ID authentication request 2 and is “0x41” in binary data in hexadecimal notation.

  The response code is a code used for a challenge / response method used for password authentication, and is a code including data obtained as a result of performing a predetermined calculation process (response calculation) on the challenge code. The response calculation data is a random value used for response calculation. Specifically, the response code encrypts the challenge code using 48 bytes on the verification side and 32 bytes on the certification side with the encryption key of the board serial ID (16 bytes) that is the passphrase, and uses the hash function This is the calculated value.

  Referring to FIG. 94, a response of the board serial ID authentication response 2 is transmitted from SC 325b to CU control unit 323. The response of the board serial ID authentication response 2 to be transmitted notifies the CU control unit 323 of the result of checking the response code.

  The specific data of the board serial ID authentication response 2 includes serial number, command, and authentication result data as shown in the lower part of FIG. The serial number is a sequence number of the command and is a value from 1 to 255 (cyclic). The SC 325b counts up (+1) the serial number received during transmission and transmits it. However, the serial number is not counted up at the time of retransmission. The command is a command code of the board serial ID authentication response 2, and is “0x51” in binary data in hexadecimal notation.

  The authentication result represents a result of performing a challenge / response method used for password authentication, and represents “OK” in the case of “0x00”. When the authentication result is “NG”, the SC 325b notifies the CU control unit 323 of the authentication result as “OK” without notifying “NG”.

  Referring to FIG. 95, the device authentication request 1 command is transmitted from CU control unit 323 to SC 325b. The transmitted device authentication request 1 command requests authentication information from the SC 325b.

  The specific data of the device authentication request 1 includes serial number and command data as shown in the lower part of FIG. The serial number is a sequence number of the command and is a value from 1 to 255 (cyclic). The CU control unit 323 counts up (+1) the serial number received at the time of transmission with an initial value “1” and transmits the serial number. However, the serial number is not counted up at the time of retransmission. The command is a command code of the device authentication request 1 and is “0x42” in hexadecimal representation binary data.

  Referring to FIG. 96, a response of device authentication response 1 is transmitted from SC 325b to CU control unit 323. The response of the device authentication response 1 that is transmitted notifies the CU control unit 323 of authentication information.

  The specific data of the device authentication response 1 includes serial number, command, authentication information, random number, and MAC data, as shown in the lower part of FIG. The serial number is a sequence number of the command and is a value from 1 to 255 (cyclic). The SC 325b counts up (+1) the serial number received during transmission and transmits it. However, the serial number is not counted up at the time of retransmission. The command is a command code of the device authentication response 1 and is “0x52” as binary data in hexadecimal representation.

  The authentication information is a random number A. The random number is a padding character for encryption. The padding character for encryption is to add a padding character for encryption with a predetermined data length to the message (plaintext) so that the message (plaintext) to be encrypted can be encrypted with an encryption key with a data length of 16 bytes. This is to match the data length of the encryption key. MAC is a message authentication code. For example, a value obtained by calculating the generated random number A using a predetermined hash function is defined as MAC. That is, the message digest of the generated random number A becomes the MAC. For communication of the device authentication response 1, in the first security mode (hereinafter referred to as SE1 mode), the board initial key, board authentication key or board shipping key (hereinafter referred to as board initial key / authentication key / shipping key). The ciphertext encrypted using is transmitted. The SE1 mode is an encryption method in a low security mode in which encryption is always performed using a fixed key without adding and updating keys. The board initial key and board authentication key will be described later.

  Referring to FIG. 97, the device authentication request 2 command is transmitted from CU control unit 323 to SC 325b. The transmitted device authentication request 2 command notifies the SC 325b of the authentication result and the authentication information.

  The specific data of the device authentication request 2 includes serial number, command, authentication result, authentication information, random number, and MAC data as shown in the lower part of FIG. The serial number is a sequence number of the command and is a value from 1 to 255 (cyclic). The CU control unit 323 counts up (+1) the serial number received at the time of transmission with an initial value “1” and transmits the serial number. However, the serial number is not counted up at the time of retransmission. The command is a command code of the device authentication request 2 and is “0x43” as binary data in hexadecimal representation.

  The authentication result represents the result of device authentication, and “0x00” represents “OK”. When the authentication result is “NG”, the SC 325b notifies the CU control unit 323 of the authentication result as “OK” without notifying “NG”.

  The authentication information is a random number B. The random number is a padding character for encryption. MAC is a message authentication code. For the communication of the device authentication request 2, a ciphertext encrypted using the substrate initial key / authentication key / shipping key in the SE1 mode is transmitted.

  Referring to FIG. 98, a response of device authentication response 2 is transmitted from SC 325b to CU control unit 323. The response of the device authentication response 2 that is transmitted notifies the CU control unit 323 of the authentication result.

  The specific data of the device authentication response 2 includes serial number, command, authentication result, random number, and MAC data as shown in the lower part of FIG. The serial number is a sequence number of the command and is a value from 1 to 255 (cyclic). The SC 325b counts up (+1) the serial number received during transmission and transmits it. However, the serial number is not counted up at the time of retransmission. The command is a command code of the device authentication response 2, and is “0x53” as binary data in hexadecimal representation.

  The authentication result represents the result of device authentication, and “0x00” represents “OK”. When the authentication result is “NG”, the SC 325b notifies the CU control unit 323 of the authentication result as “OK” without notifying “NG”. The random number is a padding character for encryption. MAC is a message authentication code. For communication of the device authentication response 2, a ciphertext encrypted using the substrate initial key / authentication key / shipping key in the SE1 mode is transmitted.

  Referring to FIG. 99, a board authentication result notification command is transmitted from CU control unit 323 to SC 325b. The transmitted board authentication result notification command notifies the SC 325b of the authentication result between the CU control unit 323 and the SC 325b.

  The specific data of this board authentication result notification includes serial number, command, authentication result, random number, and MAC data as shown in the lower part of FIG. The serial number is a sequence number of the command and is a value from 1 to 255 (cyclic). The CU control unit 323 counts up (+1) the serial number received at the time of transmission with an initial value “1” and transmits the serial number. However, the serial number is not counted up at the time of retransmission. The command is a command code for notifying the board authentication result, and is “0x44” in binary data in hexadecimal notation.

  The authentication result represents the result of device authentication, and represents “OK” for “0x00” and “NG” for “0x01”.

  The random number is a padding character for encryption. MAC is a message authentication code. In the communication of the board authentication result notification, ciphertext encrypted using the board initial key / authentication key / shipping key in the SE1 mode is transmitted.

  Referring to FIG. 100, a response of the board authentication result response is transmitted from SC 325b to CU control unit 323. The response of the transmitted board authentication result response is to notify the CU control unit 323 of the authentication result between the CU control unit 323 and the SC 325b.

  The specific data of the board authentication result response includes serial number, command, authentication result, random number, and MAC data, as shown in the lower part of FIG. The serial number is a sequence number of the command and is a value from 1 to 255 (cyclic). The SC 325b counts up (+1) the serial number received during transmission and transmits it. However, the serial number is not counted up at the time of retransmission. The command is a command code of the board authentication result response, and is “0x54” as binary data in hexadecimal representation.

  The authentication result represents the result of device authentication, and represents “OK” for “0x00” and “NG” for “0x01”. The random number is a padding character for encryption. MAC is a message authentication code. For the communication of the board authentication result response, a ciphertext encrypted using the board initial key / authentication key / shipping key in the SE1 mode is transmitted.

  Referring to FIG. 101, a board inquiry information request command is transmitted from CU control unit 323 to SC 325b. The transmitted board inquiry information request command requests inquiry information of the security board 325 from the SC 325b.

  The specific data of this board inquiry information request includes serial number and command data as shown in the lower part of FIG. The serial number is a sequence number of the command and is a value from 1 to 255 (cyclic). The CU control unit 323 counts up (+1) the serial number received at the time of transmission with an initial value “1” and transmits the serial number. However, the serial number is not counted up at the time of retransmission. The command is a command code for requesting board inquiry information, and is “0x45” in binary data expressed in hexadecimal.

  Referring to FIG. 102, a response to the board inquiry information response is transmitted from SC 325b to CU control unit 323. The transmitted response to the board inquiry information response is to notify the CU control unit 323 of inquiry information about the security board 325.

  The specific data of the board inquiry information response includes a serial number, a command, a board serial number, inquiry information, and MAC data as shown in the lower part of FIG. The serial number is a sequence number of the command and is a value from 1 to 255 (cyclic). The SC 325b counts up (+1) the serial number received during transmission and transmits it. However, the serial number is not counted up at the time of retransmission. The command is a command code of the board inquiry information response, and is “0x55” as binary data in hexadecimal representation.

  The board serial number is a serial number of the security board 325 for identifying the security board 325. The inquiry information is inquiry information of the security board 325. MAC is a message authentication code. For the communication of the board authentication result response, a ciphertext encrypted using the board initial key / authentication key / shipping key in the SE1 mode is transmitted.

  Referring to FIG. 103, a board information notification command is transmitted from CU control unit 323 to SC 325b. The transmitted board information notification command requests the SC 325b to receive information on the security board 325 received from the host device.

  The specific data of this board information notification includes serial number, command, inquiry result, board information, random number, and MAC data as shown in the lower part of FIG. The serial number is a sequence number of the command and is a value from 1 to 255 (cyclic). The CU control unit 323 counts up (+1) the serial number received at the time of transmission with an initial value “1” and transmits the serial number. However, the serial number is not counted up at the time of retransmission. The command is a command code for board information notification, and is “0x46” as binary data in hexadecimal notation.

  The inquiry result is a result of the inquiry information of the security board 325 received from the higher-level device. “0x00” indicates “board information is present”, “0x01” indicates “board information is not present (higher-level device offline)”, “ In the case of “0x02”, “no board information (host device online)” is indicated.

  The board information is inquiry information data of the security board 325 received from the host device, and is valid only when the inquiry result is “with board information”. The random number is a padding character for encryption. MAC is a message authentication code. For the communication of the substrate information notification, a ciphertext encrypted using the substrate initial key / authentication key / shipping key in the SE1 mode is transmitted.

  Referring to FIG. 104, the response of the board information notification response is transmitted from SC 325b to CU control unit 323. The response of the transmitted board information notification response notifies the CU control unit 323 that the board information notification has been normally received.

  The specific data of the board information notification response includes serial number and command data as shown in the lower part of FIG. The serial number is a sequence number of the command and is a value from 1 to 255 (cyclic). The SC 325b counts up (+1) the serial number received during transmission and transmits it. However, the serial number is not counted up at the time of retransmission. The command is a command code for a board information notification response, and is “0x56” in binary data in hexadecimal.

  Referring to FIG. 105, a gaming machine chip inquiry information request command is transmitted from CU control unit 323 to SC 325b. The transmitted gaming machine chip inquiry information request command is for requesting gaming machine chip information for inquiring of the host device to the SC 325b.

  The specific data of this gaming machine chip inquiry information request includes serial number and command data as shown in the lower part of FIG. The serial number is a sequence number of the command and is a value from 1 to 255 (cyclic). The CU control unit 323 counts up (+1) the serial number received at the time of transmission with an initial value “1” and transmits the serial number. However, the serial number is not counted up at the time of retransmission. The command is a command code for requesting gaming machine chip inquiry information, and is “0x47” in binary data in hexadecimal representation.

  Referring to FIG. 106, a response of the gaming machine chip inquiry information response is transmitted from SC 325b to CU control unit 323. The response of the gaming machine chip inquiry information response to be transmitted notifies the CU control unit 323 of gaming machine chip information to be inquired of the host device.

  Specific data of this gaming machine chip inquiry information response includes serial number, command, main control chip number, payout control chip number, inquiry information, and MAC data as shown in the lower part of FIG. ing. The serial number is a sequence number of the command and is a value from 1 to 255 (cyclic). The SC 325b counts up (+1) the serial number received during transmission and transmits it. However, the serial number is not counted up at the time of retransmission. The command is a command code for a gaming machine chip inquiry information response, and is “0x57” in binary data in hexadecimal representation.

  The main control chip number is a gaming machine main control chip number of gaming machine chip information to be inquired of the host device. The payout control chip number is a gaming machine payout control chip number of gaming machine chip information to be inquired of the host device. The inquiry information is data representing gaming machine chip information to be inquired of the host device. MAC is a message authentication code. For the communication of the board authentication result response, a ciphertext encrypted using a communication key (session key) in the second security mode (hereinafter referred to as SE2 mode) is transmitted. The SE2 mode is a high security mode in which a count value (key) that is a source of data for performing an exclusive OR (exclusive OR) on plaintext is added and updated. The communication key is an encryption key used for communication between the CU control unit 323 and the SC 325b.

  Referring to FIG. 107, a gaming machine chip collation result notification command is transmitted from CU control unit 323 to SC 325b. The transmitted gaming machine chip verification result notification command notifies the SC 325b of the verification result of gaming machine chip information received from the host device.

  The specific data of the gaming machine chip collation result notification includes data of serial number, command, collation result, and collation result information as shown in the lower part of FIG. The serial number is a sequence number of the command and is a value from 1 to 255 (cyclic). The CU control unit 323 counts up (+1) the serial number received at the time of transmission with an initial value “1” and transmits the serial number. However, the serial number is not counted up at the time of retransmission. The command is a command code for notifying a gaming machine chip collation result, and is “0x48” in binary data in hexadecimal notation.

  The collation result is a result of collating the gaming machine chip information received from the host device. When “0x00”, “match result is present”, when “0x01” is “no match result (higher device offline)”, “ In the case of “0x02”, “no verification result (higher level device online)” is indicated.

  The collation result information is data obtained by collating the gaming machine chip information received from the host device, and is valid only when the collation result is “with collation result present”. MAC is a message authentication code. Note that the ciphertext encrypted using the communication key in the SE2 mode is transmitted for the communication of the board information notification.

  Referring to FIG. 108, the response of the gaming machine chip collation result response is transmitted from SC 325b to CU control unit 323. The transmitted response of the gaming machine chip matching result response notifies the CU control unit 323 that the gaming machine chip matching result notification command has been normally received.

  The specific data of the gaming machine chip verification result response includes serial number, command, verification result, manufacturer code, and model code data, as shown in the lower part of FIG. The serial number is a sequence number of the command and is a value from 1 to 255 (cyclic). The SC 325b counts up (+1) the serial number received during transmission and transmits it. However, the serial number is not counted up at the time of retransmission. The command is a command code of the gaming machine chip collation result response, and is “0x58” as binary data in hexadecimal representation.

  The collation result is a gaming machine chip collation result, and represents “collation OK” when “0x00” and “collation NG” when “0x01”. The manufacturer code is a gaming machine manufacturer code for identifying the manufacturer of the gaming machine, and is valid only when the verification result is “verification OK”. The model code is a game machine model code for identifying the game machine model, and is valid only when the collation result is “collation OK”. Note that the ciphertext encrypted using the communication key in the SE2 mode is transmitted for communication of the gaming machine chip verification result response.

  Referring to FIG. 109, an operation information request command is transmitted from CU control unit 323 to SC 325b. The transmitted operation information request command is a request for operation information / error information to be notified to the host device to the SC 325b.

  The specific data of the operation information request includes serial number and command data as shown in the lower part of FIG. The serial number is a sequence number of the command and is a value from 1 to 255 (cyclic). The CU control unit 323 counts up (+1) the serial number received at the time of transmission with an initial value “1” and transmits the serial number. However, the serial number is not counted up at the time of retransmission. The command is a command code for requesting operation information, and is “0x49” as binary data in hexadecimal representation.

  Referring to FIG. 110, the response of the operation information response is transmitted from SC 325b to CU control unit 323. The response of the operation information response to be transmitted is a response to the CU control unit 323 of the operation information / error information notified to the host device.

  The specific data of the operation information response includes a serial number, a command, operation information, and MAC data, as shown in the lower part of FIG. The serial number is a sequence number of the command and is a value from 1 to 255 (cyclic). The SC 325b counts up (+1) the serial number received during transmission and transmits it. However, the serial number is not counted up at the time of retransmission. The command is a command code for an operation information response, and is “0x59” as binary data in hexadecimal representation.

  The operation information is data representing operation information / error information notified to the host device. MAC is a message authentication code. Note that the ciphertext encrypted using the communication key in the SE2 mode is transmitted for communication of the gaming machine chip verification result response.

  Referring to FIG. 111, an operation information notification result command is transmitted from CU control unit 323 to SC 325b. The command of the operation information notification result to be transmitted notifies the SC 325b of the operation information response received from the host device.

  The specific data of the operation information notification result includes a serial number, a command, a notification result, notification result information, and MAC data, as shown in the lower part of FIG. The serial number is a sequence number of the command and is a value from 1 to 255 (cyclic). The CU control unit 323 counts up (+1) the serial number received at the time of transmission with an initial value “1” and transmits the serial number. However, the serial number is not counted up at the time of retransmission. The command is a command code of the operation information notification result, and is “0x4A” in binary data in hexadecimal representation.

  The notification result is a notification result of the operation information received from the higher-level device. “0x00” indicates “notification result present”, “0x01” indicates “no notification result (high-level device offline)”, and “0x02”. In this case, “Notification Result No (Host Device Online)” is shown.

  The notification result information is error information notification result information received from the host device, and is valid only when the notification result is “notification result present”. MAC is a message authentication code. Note that the ciphertext encrypted using the communication key in the SE2 mode is transmitted for communication of the encryption key used for the operation information notification result.

  Referring to FIG. 112, the response of the operation information notification result response is transmitted from SC 325b to CU control unit 323. The response of the transmitted operation information notification result response notifies the CU control unit 323 that the operation information notification result command has been normally received.

  The specific data of the operation information notification result response includes serial number and command data as shown in the lower part of FIG. The serial number is a sequence number of the command and is a value from 1 to 255 (cyclic). The SC 325b counts up (+1) the serial number received during transmission and transmits it. However, the serial number is not counted up at the time of retransmission. The command is a command code for the response to the operation information notification result, and is “0x5A” as binary data in hexadecimal representation.

  Referring to FIG. 113, a counter information request command is transmitted from CU control unit 323 to SC 325b. The transmitted counter information request command requests the counter value (initial vector portion value) of the SE2 mode from the SC 325b.

  The specific data of the counter information request includes serial number and command data as shown in the lower part of FIG. The serial number is a sequence number of the command and is a value from 1 to 255 (cyclic). The CU control unit 323 counts up (+1) the serial number received at the time of transmission with an initial value “1” and transmits the serial number. However, the serial number is not counted up at the time of retransmission. The command is a command code for requesting counter information, and is “0x62” as binary data in hexadecimal representation.

  Referring to FIG. 114, the response of the counter information response is transmitted from SC 325b to CU control unit 323. The response of the counter information response to be transmitted is to notify the CU control unit 323 of the counter value of the SE2 mode (the value of the initial vector portion).

  Specific data of the counter information response includes serial number, command, upstream counter value, downstream counter value, random number, and MAC data, as shown in the lower part of FIG. The serial number is a sequence number of the command and is a value from 1 to 255 (cyclic). The SC 325b counts up (+1) the serial number received during transmission and transmits it. However, the serial number is not counted up at the time of retransmission. The command is a command code of a counter information response, and is “0x72” as binary data in hexadecimal representation.

  The upstream counter value is an SE2 mode counter value (initial vector portion value) used for communication from the SC 325b to the CU control unit 323. The downstream counter value is an SE2 mode counter value (initial vector portion value) used for communication from the CU control unit 323 to the SC 325b. The random number is a padding character for encryption. MAC is a message authentication code. Note that for the counter information response communication, ciphertext encrypted using the substrate initial key / authentication key / shipping key in the SE1 mode is transmitted. For example, the SC 325b generates a random number as the upstream counter value (value of the initial vector portion), and uses the random number as the upstream counter value (value of the initial vector portion). As for the down counter value (initial vector portion value), for example, the SC 325b generates a random number other than the random number of the up counter value (initial vector portion value), and the random number is used as the down counter value (initial vector portion value). To do.

  Referring to FIG. 115, a communication key request command is transmitted from CU control unit 323 to SC 325b. The transmitted communication key request command requests a communication key, which is a communication encryption key, from the SC 325b.

  The specific data of the communication key request includes serial number and command data as shown in the lower part of FIG. The serial number is a sequence number of the command and is a value from 1 to 255 (cyclic). The CU control unit 323 counts up (+1) the serial number received at the time of transmission with an initial value “1” and transmits the serial number. However, the serial number is not counted up at the time of retransmission. The command is a command code for requesting a communication key, and is “0x63” as binary data in hexadecimal representation.

  Referring to FIG. 116, the response of the communication key response is transmitted from SC 325b to CU control unit 323. The response of the transmitted communication key response notifies the CU control unit 323 of a communication key that is an encryption key for communication.

  The specific data of the communication key response includes serial number, command, communication key, and MAC data as shown in the lower part of FIG. The serial number is a sequence number of the command and is a value from 1 to 255 (cyclic). The SC 325b counts up (+1) the serial number received during transmission and transmits it. However, the serial number is not counted up at the time of retransmission. The command is a command code of a communication key response, and is “0x73” as binary data in hexadecimal representation.

  The communication key is data representing a communication key that is an encryption key for communication. MAC is a message authentication code. For the communication of the counter information response, the ciphertext encrypted using the communication key in the SE2 mode is transmitted.

  Referring to FIG. 117, a board status request command is transmitted from CU control unit 323 to SC 325b. The transmitted board status request command requests the status of the security board 325 and the gaming machine from the SC 325b.

  The specific data of the substrate state request includes serial number and command data as shown in the lower part of FIG. The serial number is a sequence number of the command and is a value from 1 to 255 (cyclic). The CU control unit 323 counts up (+1) the serial number received at the time of transmission with an initial value “1” and transmits the serial number. However, the serial number is not counted up at the time of retransmission. The command is a command code for requesting the through board state, and is “0x4F” in binary data expressed in hexadecimal.

  Referring to FIG. 118, a response of the substrate state response is transmitted from SC 325b to CU control unit 323. The transmitted board state response response notifies the CU control unit 323 of the state of the security board 325 and the gaming machine.

  The specific data of the board status response includes serial number, command, board status, error status, and MAC data as shown in the lower part of FIG. The serial number is a sequence number of the command and is a value from 1 to 255 (cyclic). The SC 325b counts up (+1) the serial number received during transmission and transmits it. However, the serial number is not counted up at the time of retransmission. The command is a command code of the board state response, and is “0x5F” as binary data in hexadecimal.

  The board state is data representing the state of the security board 325 and the gaming machine. The board state is the ready state of the gaming machine when Bit0 is “1”, the host device transmission request (gaming machine chip information verification request) when Bit1 is “1”, and the host device transmission when Bit2 is “1”. Each request (operation information transmission request) is shown. Bits 3 to 7 are not used.

  The error state is data representing an error state of the security board 325 and the gaming machine. The error status is communication line disconnection when Bit0 is “1”, communication error when Bit1 is “1”, authentication error when Bit2 is “1”, and fraud detection when Bit3 is “1”. It represents. Bit 4 to Bit 7 are not used. MAC is a message authentication code. For the communication of the counter information response, the ciphertext encrypted using the communication key in the SE2 mode is transmitted.

<Main sequence in communication between CU control unit and SC>
Next, a process executed by the CPU in the CU control unit 323 and a process executed by the security chip (SC) 325b will be described with reference to FIGS.

  First, with reference to FIG. 119, the mode of transmission and reception of commands and responses between the CU control unit 323 and the SC 325b will be described. In particular, a pattern in which the CU control unit 323 issues a command (request) and obtains a processing result from the response (response) will be described. First, a command is transmitted from the CU control unit 323 (primary station) to the SC 325b (secondary station), and the SC 325b returns a response to the CU control unit 323 in response to the command. After receiving the response, the CU control unit 323 transmits the next command to the SC 325b, and the SC 325b returns the response to the CU control unit 323 in response to the command.

  As shown in FIG. 119, the CU control unit 323 transmits a command to the SC 325b and then waits for a response from the SC 325b. After receiving the command from the CU control unit 323, the SC 325b performs a corresponding process, and transmits a processing result response to the CU control unit 323.

  Next, with reference to FIG. 120, a description will be given of a pattern in which the CU control unit 323 makes an inquiry to the host device and sends a result to the SC 325b regarding the transmission and reception of commands and responses between the CU control unit 323 and the SC 325b. First, a board status request command is transmitted from the CU control unit 323 (primary station) to the SC 325b (secondary station). After receiving a command from the CU control unit 323, the SC 325b performs a corresponding process, and when information for inquiring or notifying a higher-level device (such as the higher-level server 801 or the key management server 800) is generated, the higher-level device transmission request is present. Set the response. Specifically, the SC 325b transmits a response of the substrate state response including the setting of host device transmission request to the CU control unit 323. It should be noted that the response of the board state response includes a setting of whether there is a higher-level device transmission request of the gaming machine chip information collation request and the operation information transmission request. In the following description, a case will be described in which the response of the substrate state response includes the setting of the host device transmission request with the operation information transmission request.

  The CU control unit 323 that has received the response of the board state response transmits a board inquiry information request command to the SC 325b and waits for a response from the SC 325b in order to detect the content of the host apparatus transmission request.

  After receiving the board inquiry information request command from the CU control unit 323, the SC 325b sends a response to the board inquiry information response including the contents of the host device transmission request (for example, the board serial number to be checked and inquiry information) to the CU control unit 323. Send to.

  When the CU control unit 323 receives the board inquiry information response from the SC 325b and the like, the CU control part 323 makes an inquiry to the host device, for example, the board serial number of the security board 325 to be checked and the inquiry information of the security board 325, and waits for the response. Note that the CU control unit 323 does not transmit a command to the SC 325b while making an inquiry to the host device.

  When receiving a response from the host device, the CU control unit 323 transmits a board information notification command including the board serial number of the security board 325 inquired to the SC 325 b and the inquiry result of the inquiry information of the security board 325.

  After receiving the board information notification command from the CU control unit 323, the SC 325b performs a corresponding process, and transmits a response to the board information notification response notifying that the board information notification command has been normally received to the CU control unit 323. To do.

  Next, with reference to FIG. 121, a process for detecting a communication line disconnection on the CU control unit 323 side will be described. The CU control unit 323 monitors the state of the SC 325b at a constant cycle (600 ms) after the authentication with the SC 325b is completed. The CU control unit 323 can detect a transmission request to a host device, a gaming machine error, and the like by monitoring the state of the SC 325b.

  The CU control unit 323 transmits a substrate state request command to the SC 325b at a cycle of 600 ms. After receiving a command from the CU control unit 323, the SC 325b performs a corresponding process, and transmits a response to a board state response including a transmission request to a higher-level device and an error of the gaming machine to the CU control unit 323.

  Here, the cycle for transmitting the substrate state request command to the SC 325b is 600 ms. However, the cycle for transmission may be longer or shorter.

  Next, with reference to FIG. 122, a process for detecting a communication line disconnection on the CU control unit 323 side will be described. The CU control unit 323 transmits the same command to the SC 325b again when a response is not received within 200 ms after transmitting the command to the SC 325b. If no response is received within 200 ms, a second retransmission is performed in which the same command is transmitted to the SC 325b. If no response is received from the SC 325b within 200 ms after the second retransmission, the CU control unit 323 determines that the communication is abnormal at this stage and sets “communication line disconnection”.

The CU control unit 323 does not increment the serial number when retransmitting the command.
Next, with reference to FIG. 123, processing for turning on the power and normal startup of the CU control unit 323 will be described. FIG. 123 shows a sequence when the power supply is first turned on after the CU 3 is installed in the game arcade, and in particular, a normal startup sequence using the board initial key will be described.

  First, when the power of the CU3 is turned on, the CU control unit 323 and the SC325b are activated. When the power is first turned on after the CU 3 is installed in the amusement hall, the CU control unit 323 obtains the board initial key from the host device (specifically, from the host server 801) and also stores the card unit information in the SC 325b. And a board connection request command for requesting connection with the gaming machine is transmitted. Here, the board initial key is an encryption key that is downloaded from the host server 801 and stored in the CU control unit 323 when first communicating with the host device after being delivered to the amusement hall, and is installed in the key management center. This is an encryption key used for communication between the CU control unit 323 and the SC 325b until the board information (board serial ID and board authentication key) stored in the key management server 800 is acquired.

  After receiving the board connection request command from the CU control unit 323, the SC 325b performs a corresponding process, and returns a response to the board connection response notifying the CU control unit 323 that the connection request has been received.

  Thereafter, the CU control unit 323 and the SC 325b use the substrate initial key acquired from the higher-level server 801 as the encryption key, perform the device authentication sequence in the SE1 mode, and are authenticated when the device authentication can be performed. Detailed processing of the device authentication sequence will be described later.

  Thereafter, the CU control unit 323 and the SC 325b use the substrate initial key acquired from the higher-level server 801 as the encryption key, perform the substrate information acquisition sequence in the SE1 mode, and acquire OK when the substrate information can be acquired. . The board information is acquired from the key management server 800 of the key management center and includes a board serial ID and a board authentication key. Detailed processing of the substrate information acquisition sequence will be described later. The board authentication key is an encryption key that is downloaded from the key management server 800 installed in the key management center and used for communication between the CU control unit 323 and the SC 325b. The key management server 800 stores a board authentication key in association with a board serial number or the like.

  When the board information can be acquired by the board information acquisition sequence, the board serial ID authentication sequence and the device authentication sequence are executed. The board serial ID authentication sequence authenticates the board serial ID between the CU control unit 323 and the SC 325b using a challenge / response method. Detailed processing of the board serial ID authentication sequence will be described later. After processing the board serial ID authentication sequence, the CU control unit 323 and the SC 325b use the board authentication key acquired from the key management server 800 as the encryption key and perform the device authentication sequence in the SE1 mode.

  Thereafter, the CU control unit 323 and the SC 325b use the substrate initial key or the substrate authentication key as the encryption key, perform a communication key exchange sequence in the SE1 mode, and generate a communication key. In the communication key exchange sequence, the substrate authentication key is used as the encryption key when the substrate information can be acquired in the substrate information acquisition sequence. However, when the substrate information cannot be acquired, the substrate initial key is used as the encryption key. When the board initial key is used, the communication key is generated using the board initial key. When the authentication key is used, the communication key is generated using the authentication key. Note that the communication key exchange sequence is for exchanging a key (communication key) used for encryption communication with a gaming machine in order to enable gaming by the gaming machine, and detailed processing will be described later.

  After processing the communication key exchange sequence, the SC 325b performs an authentication process with the communication control IC 325a. Meanwhile, the CU control unit 323 monitors the substrate state at regular intervals.

  Thereafter, the CU control unit 323 and the SC 325b use the communication key as the encryption key, perform a gaming machine chip information authentication sequence in the SE2 mode, and authenticate the gaming machine chip information. Detailed processing of the gaming machine chip information authentication sequence will be described later.

  Thereafter, the CU control unit 323 and the SC 325b use the communication key as an encryption key, perform a gaming machine communication start sequence in the SE2 mode, and start business message communication with the gaming machine. Details of the gaming machine communication start sequence will be described later. By performing the above processing, the CU control unit 323 can perform business message communication with the gaming machine.

  Next, with reference to FIG. 124, the power-on / normal startup process of the CU control unit 323 will be described. This FIG. 124 shows a sequence at the time of power-on for the second and subsequent times after the CU3 is installed in the amusement hall and the first power-up is completed, and in particular, a normal startup sequence using a board authentication key will be described. To do.

  First, when the power of the CU3 is turned on, the CU control unit 323 and the SC325b are activated. When activated, the CU control unit 323 notifies the card unit information to the SC 325b and transmits a board connection request command for requesting connection with the gaming machine. Note that the CU control unit 323 has already acquired the board authentication key from the key management server 800 of the key management center. As described above, the key management server 800 stores the board authentication key in association with the board serial number and the like, and the CU control unit 323 transmits the board serial number and the like to the key management server 800 via the upper server 801. The key management server 800 transmits the board authentication key stored correspondingly to the CU control unit 323 via the upper server 801.

  After receiving the board connection request command from the CU control unit 323, the SC 325b performs a corresponding process, and returns a response to the board connection response notifying the CU control unit 323 that the connection request has been received.

  Thereafter, the CU control unit 323 and the SC 325b perform a substrate serial ID authentication sequence using the challenge / response method, and authenticate the substrate serial ID between the CU control unit 323 and the SC 325b. Detailed processing of the board serial ID authentication sequence will be described later.

  Thereafter, the CU control unit 323 and the SC 325b use the substrate authentication key as the encryption key, perform the device authentication sequence in the SE1 mode, and are authenticated when the device authentication can be performed. Detailed processing of the device authentication sequence will be described later.

  Thereafter, the CU control unit 323 and the SC 325b use the board authentication key as the encryption key, perform a communication key exchange sequence in the SE1 mode, and generate a communication key. Details of the communication key exchange sequence will be described later.

  After processing the communication key exchange sequence, the SC 325b performs an authentication process with the communication control IC 325a. Meanwhile, the CU control unit 323 monitors the substrate state at regular intervals.

  Thereafter, the CU control unit 323 and the SC 325b use the communication key as the encryption key, perform a gaming machine chip information authentication sequence in the SE2 mode, and authenticate the gaming machine chip information. Detailed processing of the gaming machine chip information authentication sequence will be described later.

  Thereafter, the CU control unit 323 and the SC 325b use the communication key as an encryption key, perform a gaming machine communication start sequence in the SE2 mode, and start business message communication with the gaming machine. Details of the gaming machine communication start sequence will be described later. By performing the above processing, the CU control unit 323 can perform business message communication with the gaming machine. By performing business telegram communication with this gaming machine, gaming can be performed on the gaming machine. Performing business message communication with this gaming machine is an operation process using this authentication key (board authentication key).

  Next, with reference to FIG. 125, the power-on / factory collection process of the CU control unit 323 will be described. FIG. 125 shows a sequence at the time of factory shipment before the CU 3 is shipped to the amusement hall, and in particular, a factory shipment start-up sequence using a board shipment key will be described. This sequence is a process in the CU control unit 323 and the SC 325b that is not connected to the host device at the time of factory shipment.

  First, when the power of the CU3 is turned on, the CU control unit 323 and the SC325b are activated. When activated, the CU control unit 323 notifies the card unit information to the SC 325b and transmits a board connection request command for requesting connection with the gaming machine. Note that the CU control unit 323 has not yet acquired the board initial key because it is not connected to the host device (specifically, the host server 801). That is, when the CU control unit 323 is not connected to the upper server 801, control using the board initial key cannot be performed.

  After receiving the board connection request command from the CU control unit 323, the SC 325b performs a corresponding process, and returns a response to the board connection response notifying the CU control unit 323 that the connection request has been received.

  Thereafter, the CU control unit 323 and the SC 325b perform the device authentication sequence, but since they are not connected to the upper server 801, the CU control unit 323 and the SC 325b have not acquired the board initial key used for the encryption key, and the result of device authentication is authentication NG. . Detailed processing of the device authentication sequence will be described later.

  Since the device authentication sequence is authentication NG, the CU control unit 323 transmits a board shipment key request command for requesting the board shipment key to be used for testing the security board 325 to the SC 325b. After receiving the board shipment key request command from the CU control unit 323, the SC 325b transmits a board shipment key response response including the board shipment key to the CU control unit 323.

  Thereafter, the CU control unit 323 and the SC 325b perform a device authentication sequence in the SE1 mode using the board shipping key acquired from the SC 325b as the encryption key. Detailed processing of the device authentication sequence will be described later.

  Thereafter, the CU control unit 323 and the SC 325b use the board shipment key as the encryption key, perform a communication key exchange sequence in the SE1 mode, and generate a communication key. Details of the communication key exchange sequence will be described later.

  After processing the communication key exchange sequence, the SC 325b performs an authentication process with the communication control IC 325a. Meanwhile, the CU control unit 323 monitors the substrate state at regular intervals.

  Thereafter, the CU control unit 323 and the SC 325b use the communication key as an encryption key, perform a gaming machine communication start sequence in the SE2 mode, and start business message communication with the gaming machine. Details of the gaming machine communication start sequence will be described later. Further, since the communication key is generated using the board shipping key, the CU control unit 323 can communicate with the gaming machine only in the communication test message.

  Therefore, the CU control unit 323 transmits a communication test request command including a communication test message to the SC 325b. After receiving a communication test request command from the CU control unit 323, the SC 325b returns a communication test response response including a communication test message. The CU control unit 323 and the SC 325b encrypt the communication test message in the SE2 mode using the communication key as the encryption key.

Next, with reference to FIG. 126, processing when the game machine is turned on again will be described.
The CU control unit 323 and the SC 325b perform communication in the SE2 mode using a communication key as an encryption key. Note that the security board 325 is communicating with the gaming machine.

  Since the CU control unit 323 monitors the board state at a regular cycle, even when the communication line disconnection with the gaming machine is detected in SC325b, the communication line disconnection with the gaming machine is detected. The occurrence can be detected.

  Specifically, the CU control unit 323 uses a communication key as an encryption key and transmits a substrate state request command to the SC 325b in the SE2 mode. After receiving the board status request command from the CU control unit 323, the SC 325b returns a response of the board status response including information on communication line disconnection = ON to the CU control unit 323. The CU control unit 323 can detect that a communication line is disconnected with the gaming machine by receiving a response of the board state response from the SC 325b.

  After that, when the gaming machine is turned on again and the communication line is restored with the gaming machine, the SC 325b detects that the communication line has been restored with the gaming machine.

  Then, the CU control unit 323 uses the communication key as the encryption key and transmits a board state request command to the SC 325b in the SE2 mode. After the SC 325b receives the board state request command from the CU control unit 323, the communication line is disconnected. A response of the substrate state response including information of = OFF is returned to the CU control unit 323. Thereby, the CU control unit 323 can detect that the communication line has been restored with the gaming machine by receiving the response of the board state response from the SC 325b.

  Thereafter, the CU control unit 323 and the SC 325b use the communication key as the encryption key, perform a gaming machine chip information authentication sequence in the SE2 mode, and authenticate the gaming machine chip information. Detailed processing of the gaming machine chip information authentication sequence will be described later.

  Thereafter, the CU control unit 323 and the SC 325b use the communication key as an encryption key, perform a gaming machine communication start sequence in the SE2 mode, and start business message communication with the gaming machine. Details of the gaming machine communication start sequence will be described later. By performing the above processing, the CU control unit 323 can perform business message communication with the gaming machine.

Next, with reference to FIG. 127, a process for acquiring board information will be described.
First, the CU control unit 323 transmits a board inquiry information request command to the SC 325b in order to request information for inquiring of the host device. Note that the board inquiry information request command to be transmitted is encrypted in the SE1 mode using the board initial key as the encryption key.

  The SC 325b that has received the board inquiry information request command notifies the CU control unit 323 of information (board serial number and inquiry information) for inquiring of the host apparatus (specifically, the key management server 800 via the host server 801). The response of the board inquiry information response is returned to the CU control unit 323. Note that the response of the board inquiry information response to be returned is encrypted in the SE1 mode using the board initial key as the encryption key.

  The CU control unit 323 that has received the response to the board inquiry information response sends information on the security board 325 (board serial number) to the host device (specifically, the key management server 800 via the host server 801) based on the board serial number and the inquiry information. Number and inquiry information) and wait for a response from the host device. During the board information inquiry, the CU control unit 323 does not transmit a command to the SC 325b.

  Thereafter, when receiving a board information inquiry result (board serial ID and board authentication key) from the host device, the CU control unit 323 stores the inquiry result and notifies the SC 325b of the inquiry result. Specifically, the CU control unit 323 transmits a board information notification command including a board serial ID and a board authentication key as an inquiry result to the SC 325b. The board information notification command to be transmitted is encrypted in the SE1 mode using the board initial key as the encryption key.

  After receiving the board information notification command, the SC 325b holds the inquiry result as a board information inquiry result, and in order to notify the CU control unit 323 that the board information notification command has been normally received, A response is returned. Note that the response of the substrate information notification response to be returned is encrypted in the SE1 mode using the substrate initial key as the encryption key.

Next, the processing of the gaming machine chip information authentication sequence will be described with reference to FIG.
First, the CU control unit 323 monitors the substrate state at a regular cycle and transmits a substrate state request command to the SC 325b. Note that the board state request command to be transmitted is encrypted in the SE2 mode using a communication key as an encryption key.

  The SC 325b that has received the board status request command returns a response to the board status response including information indicating that the gaming machine chip verification request = OFF to the CU control unit 323, since the acquisition of gaming machine chip information has not yet been completed. Note that the response of the substrate state response to be returned is encrypted in the SE2 mode using the communication key as the encryption key.

  Until the SC 325b completes the acquisition of the gaming machine chip information, a board state request command and a board state response response are transmitted and received between the CU control unit 323 and the SC 325b. Therefore, the SC 325b that has received the board state request command returns a board state response response including information indicating that the gaming machine chip verification request = ON to the CU control unit 323 when the acquisition of the gaming machine chip information has been completed. .

  Thereafter, when the CU control unit 323 detects a gaming machine chip information collation request from the response of the returned substrate state response, the CU control unit 323 inquires the SC 325b about the gaming machine chip information. Specifically, the CU control unit 323 transmits a gaming machine chip inquiry information request command to the SC 325b. Note that the gaming machine chip inquiry information request command to be transmitted is encrypted in the SE2 mode using a communication key as an encryption key.

  The SC 325b that has received the gaming machine chip inquiry information request command notifies the CU control unit 323 of the contents (main control chip number, payout control chip number, and chip information) to be inquired of the host device. A response of the response is returned to the CU control unit 323. Note that the response of the returned gaming machine chip inquiry information response is encrypted in the SE2 mode using a communication key as an encryption key.

  The CU control unit 323 that has received the response of the gaming machine chip inquiry information response inquires the gaming machine chip information including the main control chip number and the payout control chip number from the higher level apparatus, and waits for a response from the higher level apparatus. During the game machine chip information inquiry, the CU control unit 323 does not transmit a command to the SC 325b.

  After that, when receiving the matching result of the gaming machine chip information from the host device, the CU control unit 323 notifies the SC 325b of the matching result. Specifically, the CU control unit 323 transmits a gaming machine chip verification result notification command including a verification result to the SC 325b. Note that the gaming machine chip verification result notification command to be transmitted is encrypted in the SE2 mode using a communication key as an encryption key.

  After receiving the gaming machine chip verification result notification command, the SC 325b sends a gaming machine chip verification result response to notify the CU control unit 323 of the gaming machine manufacturer code and the gaming machine model code when the verification result is OK. Send back. The response of the returned gaming machine chip verification result response is encrypted in the SE2 mode using a communication key as the encryption key.

  Next, with reference to FIG. 129, processing of gaming machine communication start and gaming machine Ready sequence will be described.

  First, the CU control unit 323 monitors the substrate state at a regular cycle and transmits a substrate state request command to the SC 325b. Note that the board state request command to be transmitted is encrypted in the SE2 mode using a communication key as an encryption key.

  The SC 325b that has received the board state request command returns a response to the board state response including information on the gaming machine Ready = OFF to the CU control unit 323 because the authentication with the gaming machine has not yet been completed. Note that the response of the substrate state response to be returned is encrypted in the SE2 mode using the communication key as the encryption key.

  Until the SC 325b is authenticated with the gaming machine, the board state request command and the board state response response are transmitted and received between the CU control unit 323 and the SC 325b. Therefore, the SC 325b that has received the board state request command returns a board state response response including information on the gaming machine Ready = ON to the CU control unit 323 when the authentication with the gaming machine is completed.

  Thereafter, the CU control unit 323 detects a change from the OFF state of the gaming machine Ready to the ON state, and thereafter, business message communication with the gaming machine becomes possible.

  Thereafter, the CU control unit 323 transmits a recovery request command to the SC 325b. The SC 325 b that has received the recovery request command returns a response of the recovery response to the CU control unit 323. The recovery request command and the recovery response response are encrypted in the SE2 mode using a communication key as an encryption key.

  Upon receiving the response of the recovery response, the CU control unit 323 transmits a communication start request command to the SC 325b. The SC 325 b that has received the communication start request command returns a response to the communication start response to the CU control unit 323. The communication start request command and the communication start response response are encrypted in the SE2 mode using the communication key as the encryption key.

Next, with reference to FIG. 130, processing of a communication key exchange sequence will be described.
First, the CU control unit 323 requests the counter information request command for requesting the SC 325b the value of the initial vector portion of the counter used in the SE2 mode (upstream initial vector portion value, downstream initial vector portion value). Send.

  Upon receiving the counter information request command, the SC 325b generates an initial vector portion value, and notifies the CU control portion 323 of the generated initial vector portion value as a response to the counter information response. The response of the substrate status response to be returned is encrypted in the SE1 mode using the substrate initial key or the substrate authentication key as the encryption key.

  Thereafter, the CU control unit 323 transmits a communication key request command for requesting a communication key to the SC 325b.

  Upon receiving the communication key request command, the SC 325b generates a communication key (session key) and notifies the CU control unit 323 of the generated communication key as a response to the communication key response. Note that the response of the communication key response to be returned is encrypted in the SE1 mode using the board initial key or the board authentication key as the encryption key. Specifically, the method for generating a communication key (session key) is to generate a communication key (session key) from the board initial key and a random number when using the board initial key, and to use the authentication key. A communication key (session key) is generated from the authentication key and a random number. The current time data may be used instead of the random number.

  Thereafter, communication between the CU control unit 323 and the SC 325b is performed using a communication key (session key).

Next, with reference to FIG. 131, the processing of the board serial ID authentication sequence will be described.
First, the CU control unit 323 transmits a command of board serial ID authentication request 1 for requesting board serial ID authentication to the SC 325b. Since the board serial ID authentication is performed using a challenge / response method, the CU control unit 323 requests a challenge code from the SC 325b.

  The SC 325b that has received the command of the board serial ID authentication request 1 generates a challenge code based on the board serial ID, and notifies the CU control unit 323 of the generated challenge code as a response of the board serial ID authentication response 1.

  Upon receiving the board serial ID authentication response 1 command, the CU control unit 323 generates a response code based on the challenge code, and notifies the generated response code to the SC 325b using the board serial ID authentication request 2 command.

  The SC 325b that has received the command of the board serial ID authentication request 2 checks the response code, and if the board serial ID matches, the check result is OK, and the check result is CU controlled by the response of the board serial ID authentication response 2. Notification to the unit 323. If the check result is NG, the SC 325b notifies the CU control unit 323 of the check result as “OK”. The check result is notified by including it in the authentication result in the substrate authentication result notification and the substrate authentication result response.

Next, the process of the device authentication sequence will be described with reference to FIG.
First, the CU control unit 323 transmits a device authentication request 1 command for requesting device authentication information to the SC 325b. The device authentication request 1 command is encrypted in the SE1 mode using the board initial key or the board authentication key as the encryption key.

  Upon receiving the device authentication request 1 command, the SC 325b sends the CU control unit 323 the authentication information random number A and MAC encrypted with any one of the board initial key, board authentication key, and board shipping key. The MAC encrypted with the key is returned as a response of the device authentication response 1.

  The CU control unit 323 that has received the device authentication response 1 command decrypts the random numbers A and MAC of the authentication information and checks the random numbers A and MAC in order to verify the board initial key, board authentication key, and board shipping key.

  Thereafter, the CU control unit 323 sends the authentication information random number B encrypted with any one of the board initial key, board authentication key and board shipping key to the SC 325b, and the MAC encrypted with the MAC key. The device authentication request 2 command is transmitted. The device authentication request 2 command is encrypted in the SE1 mode using the board initial key or the board authentication key as the encryption key.

  Upon receiving the device authentication request 2 command, the SC 325b decrypts the random numbers B and MAC of the authentication information in order to verify the board initial key, board authentication key, and board shipping key with respect to the CU control unit 323. Check the MAC. Then, the SC 325 b returns an authentication result as a response of the device authentication response 2 to the CU control unit 323.

  Thereafter, the CU control unit 323 transmits a board authentication result notification command to the SC 325b in order to notify the authentication result of the device authentication. The board authentication result notification command is encrypted in the SE1 mode using the board initial key or the board authentication key as the encryption key.

  Upon receiving the board authentication result notification command, the SC 325b transmits a board authentication result response command to the CU control unit 323 in order to notify the board serial ID authentication and the device authentication authentication result. The board authentication result response command is encrypted in the SE1 mode using the board initial key or the board authentication key as the encryption key.

Next, with reference to FIG. 133, processing of an authentication abnormality sequence will be described.
First, when the power of the CU3 is turned on, the CU control unit 323 and the SC325b are activated. When activated, the CU control unit 323 notifies the card unit information to the SC 325b and transmits a board connection request command for requesting connection with the gaming machine.

  After receiving the board connection request command from the CU control unit 323, the SC 325b performs a corresponding process, and returns a response to the board connection response notifying the CU control unit 323 that the connection request has been received.

  Thereafter, the CU control unit 323 and the SC 325b use the substrate initial key acquired from the higher-level server 801 as the encryption key, perform the device authentication sequence in the SE1 mode, and are authenticated when the device authentication can be performed.

  Thereafter, the CU control unit 323 and the SC 325b use the substrate initial key acquired from the higher-level server 801 as the encryption key, perform the substrate information acquisition sequence in the SE1 mode, and acquire OK when the substrate information can be acquired. . The board information is obtained from the key management center and includes a board serial ID and a board authentication key.

  When the board information can be acquired by the board information acquisition sequence, the board serial ID authentication sequence and the device authentication sequence are executed. The board serial ID authentication sequence authenticates the board serial ID between the CU control unit 323 and the SC 325b using a challenge / response method. After processing the board serial ID authentication sequence, the CU control unit 323 and the SC 325b use the board authentication key acquired from the key management server 800 as the encryption key and perform the device authentication sequence in the SE1 mode.

  However, when the response is NG in the board serial ID authentication sequence or the device authentication sequence, the same sequence is retried and executed twice at the maximum. Still, if the response is NG in the board serial ID authentication sequence or the device authentication sequence, the subsequent communication is not performed as “board authentication error”.

  Also, if an abnormality occurs before the device authentication sequence after power is turned on, the abnormality cannot be notified to the host device. In addition, even if an abnormality occurs at any authentication sequence stage, control may be performed so that the abnormality is notified to the host device.

  Next, with reference to FIG. 134, the sequence processing at the time of abnormality detection will be described. In the sequence shown in FIG. 134, the CU control unit 323 and the SC 325b are communicating with the gaming machine. Note that the communication between the CU control unit 323 and the SC 325b is encrypted in the SE2 mode using a communication key as an encryption key.

  Thereafter, when the SC 325b detects an authentication error, communication error, communication line disconnection, or fraud detection error in communication with the gaming machine, processing in the CU control unit 323 and the SC 325b will be described.

  First, the CU control unit 323 transmits a board state request command requesting the state of the gaming machine to the SC 325b. Note that the substrate status request command is encrypted in the SE2 mode using a communication key as an encryption key.

  The SC 325b that has received the board status request command returns a board status response response to the CU control unit 323, thereby detecting the detected gaming machine status (authentication error, communication error, communication line disconnection, or fraud detection). Is reported as error status information.

  The CU control unit 323 that has received the response of the board state response notifies the host device of the state of the gaming machine that has received the notification from the SC 325b as abnormality detection information.

  Characteristic parts of the sequence between the CU control unit 323 and the SC 325b described with reference to FIGS. 119 to 134 will be described below.

  As a sequence executed after the CU 3 is received and installed in the amusement hall, there is a “device authentication sequence” (see FIGS. 123 and 124). This “apparatus authentication sequence” is obtained by downloading and obtaining a board initial key from the host device (upper server 801) at the time of first power-on after being installed in the amusement hall and authenticated using the board initial key. Sequence. On the condition that the authentication result of this board authentication sequence is OK, the “board information acquisition sequence” is executed using this board initial key (see FIG. 123). By this board information acquisition sequence, the board authentication key is downloaded and stored from the host device (key management server 800), and thereafter, various authentication sequences, communication key exchange sequences, etc. are executed using this board authentication key, and the communication key is obtained. Using this, business message communication with the gaming machine is executed (see FIG. 124).

  On the other hand, as a result of executing the board information acquisition sequence using the board initial key (see FIGS. 123 and 127), the board authentication key may not be acquired. This board authentication key is sent to the key management server 800 when the CU manufacturer ships the CU3 to the game hall, and stored in the key management server 800. The board authentication key stored in advance in the key management server 800 is downloaded and stored, but transmission of the board authentication key from the CU manufacturer to the key management server 800 may be delayed for some reason. In addition, when the CU 3 installed and installed in the amusement hall executes the board information acquisition sequence and tries to download the board authentication key, an unexpected situation occurs between the key management server 800 and the CU 3 and communication is impossible. May be offline. In such a case, the board authentication key cannot be downloaded.

  If the board authentication key cannot be downloaded and the actual operation such as business message communication with the gaming machine after that cannot be performed at all, operational problems such as a decrease in the operating rate at the amusement hall occur. Therefore, when such an unforeseen situation occurs, control is performed so that the temporary operation of the actual operation can be performed using the board initial key which is a temporary authentication key. Specifically, a communication key exchange sequence (see FIGS. 123 and 130) is executed using the board initial key acquired from the host device (specifically, the host server 801), and communication is performed using the board initial key. Generate a key (session key), share the communication key (session key) between the CU control unit 323 and the SC 325b, perform business message communication using the communication key (session key), and control the actual operation Is done. The actual operation control using the board initial key is an unstable state in which the board initial key is a temporary key and the board authentication key cannot be obtained. The Specifically, actual operation control using this board initial key is allowed for only two days, and when the board authentication key cannot be obtained even at the time of power-up on the third day, the subsequent control is stopped, Control is performed to notify that an abnormality has occurred and to notify the host server 801 and the hall management computer that an abnormality has occurred. The temporary operation time limit control that is allowed for a certain period of time (for example, two days) with the board initial key is that the board initial key is stored in the upper server 801, so that at least the CU control unit 323 is in the upper level. Allowed to be connected to the server 801 is permitted.

  Further, the above-mentioned “device authentication sequence” is executed at the time of factory shipment shown in FIG. When the device authentication sequence is executed at this stage, since the substrate initial key has not yet been acquired, the authentication result of NG is derived as a result of executing this device authentication sequence using the substrate initial key. Then, each sequence after the board shipping key request and the board shipping key response shown in FIG. 125 is executed, and communication between the gaming machine and the communication test message is executed. In other words, the “device authentication sequence” determines whether the board initial key has been acquired or whether it has not been acquired at the time of factory shipment. It is also used effectively to determine whether the key has been acquired or whether it has not been acquired.

<About encryption mode>
Next, the details of the SE2 mode encryption communication used in the present embodiment will be described based on FIGS. 135 to 143. This SE2 mode encryption communication is performed between the CU control unit 323 and the security chip 325b, but in addition, between the communication control IC 325a and the security chip 325b, the security substrate 325 and the payout control unit 171 of the pachinko machine 2. Between the payout control unit 171 and the main control board 16 of the pachinko machine 2, between the main control board 16 and the key management server 803, and between the CU control unit 323 and the host server 801 and the key management server 800. Etc. may be performed. Furthermore, it may be performed among various devices installed in the game hall, for example, the hall management computer 1, a jet counter, a card issuing device, a payment device, a gift exchange device (POS terminal), and the like.

  First, the SE2 mode encryption mechanism will be described with reference to FIG. FIG. 135 (a) shows a downlink counter used for SE2 mode encryption and decryption used in communication from the CU control unit 323 to the security chip 325b. This downstream counter is composed of 16 bytes, and is composed of an initial vector portion value R1 consisting of 8 bytes, a telegram counter portion N consisting of 7 bytes, and a cipher block counter portion I consisting of 1 byte.

  The value R1 of the initial vector portion is transmitted from the CU control unit 323 to the security chip 325b as described with reference to FIGS. As a result, the value R1 of the initial vector portion is shared between the CU control unit 323 and the security chip 325b. The cipher block counter unit I and the message counter unit N are added and updated as will be described later, but the value R1 of the initial vector unit is not added and updated.

  The initial values of the message counter unit N and the cipher block counter unit I are 0. As described above, such a down counter is shared between devices (for example, the CU control unit 323 and the security chip 325b) that perform encrypted communication with each other. Each time plaintext divided into blocks (16 bytes) is encrypted one block at a time, the encryption block counter I is counted up. When all the blocks of a message transmitted with one command or response are encrypted, the encrypted message is transmitted, the message counter unit N is incremented by “1”, and the encrypted block counter unit I is set to “ 0 ". Such a count-up operation is repeated.

  FIG. 135 (b) shows an upstream counter used for SE2 mode encryption and decryption used for communication from the security chip 325b to the CU control unit 323. FIG. This up counter uses the value R2 of the initial vector portion instead of the value R1 of the initial vector portion described above. Since the initial vector portion value R2 and the up counter configuration are the same as the initial vector portion value R1 and the down counter configuration, description thereof will not be repeated.

  With reference to (c) of FIG. 135, a block cipher mechanism in the SE2 mode will be described. FIG. 135 (c) shows an example of communication from the CU control unit 323 to the security chip 325b, and a message transmitted by one command or response is composed of three blocks of plaintexts 1 to 3. An example is shown. First, plaintext data to be transmitted (see FIG. 7) is divided into 16-byte block plaintext (plaintext 1, plaintext 2,...). Then, the current downstream counter values R1, N, 0 are encrypted using the key K. This key K is a substrate initial key, an authentication key, or a communication key (session key) as described in FIGS. 123 to 126, 128, 129, and 134. Then, an exclusive OR (exclusive OR) operation is performed on the encrypted value (16 bytes) and the plaintext 1 block (16 bytes). The calculation result is ciphertext 1 (16 bytes). Although the encryption method using exclusive OR (exclusive OR) has been described here, the encryption may be performed using other logical operations.

  When the next plaintext 2 is encrypted, the downstream counter is updated by adding “1”. As a result, the value of the down counter is R1, N, 1. This value is encrypted with the key K in the same manner as described above, and an exclusive OR (exclusive OR) operation is performed on the encrypted result data and the plaintext 2 to generate a ciphertext 2.

  When the next plaintext 3 is encrypted, the value of the down counter is further updated by adding “1”, and the values become R1, N, and 2. This value is encrypted with the key K, and an exclusive OR (exclusive OR) operation is performed on the value of the encryption result and the plaintext 3 to generate the ciphertext 3. The above three blocks of plaintexts 1 to 3 constitute all frames of a message transmitted by a single command or response. By encrypting these plaintexts 1 to 3, the ciphertext is transmitted. The message counter unit N is incremented by “1”, and the cipher block counter unit I becomes “0”.

  Therefore, when the plaintext 1 of the command or response to be transmitted next is encrypted, the value of the counter becomes {R1, N + 1, I = 0 ”. An exclusive OR (exclusive OR) operation is performed on the value obtained by encrypting the value with the key K and the plaintext 1 to generate a ciphertext 4.

Thereafter, encryption is performed while adding and updating the values of the plaintext 2, plaintext 3,.
Although the encryption mechanism has been described using the down counter, the mechanism is the same in the up counter, and the description thereof will not be repeated.

  Next, the decoding process will be described with reference to FIG. When the received ciphertext 1 (16 bytes) is decrypted, the ciphertext receiving side first encrypts the value (R1, N, 0) of the down counter with the key K, and encrypts it. A plaintext 1 is obtained by calculating an exclusive OR (exclusive OR) between the obtained value and the ciphertext 1.

  As a characteristic of exclusive-or (exclusive OR) operation, an exclusive-or operation is performed on binary data (binary data) with a certain binary value (referred to as A), and the result data is calculated. If the exclusive OR operation is further performed with the same binary value (A), the original binary data before the first exclusive OR operation is restored. The SE2 mode encryption / decryption processing is performed using such exclusive OR characteristics.

  When decrypting the ciphertext 2 (16 bytes) of the second block, the counter value is updated by adding “1”. As a result, the value of the counter becomes R1, N, 1, and the R1, N, 1 is encrypted with the key K, the exclusive value is calculated with the resulting value and the ciphertext 2 and decrypted, and the plaintext 2 Is generated.

  Similarly, when the ciphertext 3 is decrypted, the counter value is updated by “1”. As with the case of encryption, the counter update method at the time of decryption also counts “1” by the encryption block counter I every time each block of a message transmitted with one command or response is decrypted. When the decryption of all the blocks of the message transmitted by one command or response is completed, the message counter unit N is updated by adding “1” and the value of I is cleared to zero.

  The case of the up counter used for SE2 mode encryption and decryption used for communication from the security chip 325b to the CU control unit 323 is the same as the down counter, and therefore the description thereof will not be repeated.

  As described above, in the SE1 mode, the plaintext M is encrypted by performing an exclusive OR operation with the same data length key, and the ciphertext is subjected to the exclusive OR operation with the same data length key. Since the data (key) for performing the exclusive OR operation on the plaintext M is constant and does not change because it is only decrypted in line, high security cannot be expected. However, in the SE2 mode, data for performing an exclusive OR operation on the plaintext M (a key as a counter value) is updated and changed, so that high security can be expected.

  Next, based on FIG. 137 to FIG. 141, the actual encryption communication operation of the command and response between the CU control unit 323 and the security chip 325 b will be described. FIG. 137 shows the encrypted communication at the normal time when it is properly decrypted on the receiving side that has received the encrypted communication message. FIG. 138 shows processing at the time of abnormality when a response from the security chip 325b to the CU control unit 323 has not arrived. FIG. 139 shows processing at the time of abnormality when a command from the CU control unit 323 to the security chip 325b has not arrived. FIG. 140 shows processing of a modified example at the time of an abnormality that has not reached the response shown in FIG. 138. FIG. 141 shows a modified example of the command unreachable abnormality process shown in FIG. 139.

  The encryption processing of FIGS. 137 to 141 will be described below. When performing encrypted communication from the CU control unit 323 to the security chip 325b, a down counter of the value R1 of the initial vector unit is used, and the security chip 325b When performing encrypted communication to the CU control unit 323, an upstream counter having the value R2 of the initial vector unit is used.

  First, normal processing will be described with reference to FIG. An operation instruction and response between the CU control unit 323 and the security chip 325b will be described by taking a 96-byte data length as an example of a multiple of 48 bytes.

  Referring to FIG. 137, CU control unit 323 divides 96-byte plaintext into six blocks of 16 bytes, and encrypts plaintexts 1 to 6 of each block one by one. The first block, plaintext 1, has downstream counter values R1, N, 0. The counter value is encrypted as described above, and the encrypted value and plaintext 1 are used for exclusive OR. The ciphertext 1 is generated by performing the above operation. Similarly, when the ciphertext 2 is generated, the downstream counter values R1, N, 1 are used, and when the ciphertext 2 is generated, the downstream counter values R1, N, 2 are used to generate the ciphertext 4. At this time, the values of the down counters R1, N, and 3 are used, when the ciphertext 5 is generated, the values of the down counters R1, N, and 4 are used, and when the ciphertext 6 is generated, the values of R1, N, and 5 The value of the down counter is used.

  The security chip 325b that has received the ciphertexts 1 to 6 composed of these six blocks generates plaintext by decrypting the ciphertext as needed while updating the counter value as described in FIG. The value of the down counter at the start of decryption, that is, the value of the counter used for decrypting the first ciphertext 1 is R1, N, 0, and the encrypted value and ciphertext 1 are encrypted. Is calculated and decrypted, and plaintext 1 is generated. Similarly, the ciphertext 2, the ciphertext 3, the ciphertext 4, the ciphertext 5, and the ciphertext 6 are also updated by incrementing the value of the cipher block counter unit by “1” at any time. Specifically, for ciphertext 2, the downstream counter values R1, N, 1 are used, for ciphertext 3, the downstream counter values R1, N, 2 are used, and for ciphertext 4, R1, N, 3 downstream counter values, ciphertext 5 uses R1, N, 4 downstream counter values, and ciphertext 6 uses R1, N, 5 downstream counter values. Decoding is performed using the counter value.

  Next, the security chip 325 b encrypts the response and transmits it to the CU control unit 323. At this time, since the security chip 325b uses an upstream counter, the counter value “R2, N, 0” is used first. The counter value of the upstream counter is encrypted, and an exclusive OR operation is performed on the encrypted value and the first plaintext 1 of the response to generate a ciphertext 1. Next, the security chip 325b updates the encryption block counter unit by adding “1” and generates the ciphertext 2 using the values of R2, N + 1, and 1. Similarly, ciphertext 3, ciphertext 4, ciphertext 5, and ciphertext 6 are generated while incrementing and updating the cipher block counter unit by “1”, and a response including these ciphertexts is transmitted to the CU control unit 323. .

  The CU control unit 323 that has received the ciphertexts 1 to 6 including the six blocks generates plaintext by decrypting the ciphertext as needed while updating the counter value as described with reference to FIG. The value of the upstream counter at the start of decryption, that is, the value of the counter used to decrypt the first ciphertext 1 is R2, N, 0, and the encrypted value and the ciphertext 1 are encrypted. Is calculated and decrypted, and plaintext 1 is generated. As described above, the ciphertext 2, the ciphertext 3, the ciphertext 4, the ciphertext 5, and the ciphertext 6 are decrypted at any time while the cipher block counter is added and updated as needed, and the plaintext 2, plaintext 3, plaintext 4, Plaintext 5 and plaintext 6 are generated.

  From the next time onward, the security chip 325b updates “N” added to the value “N” of the message counter unit used for decrypting the ciphertext received last time, and uses the counter values R1, N + 1, 0 as a response. The first ciphertext 1 is decrypted. As described above, the ciphertext 2, the ciphertext 3, the ciphertext 4, the ciphertext 5, and the ciphertext 6 are decrypted at any time while the cipher block counter is added and updated as needed, and the plaintext 2, plaintext 3, plaintext 4, Plaintext 5 and plaintext 6 are generated.

  In addition, the CU control unit 323 adds “1” to the value “N” of the message counter unit used for decrypting the ciphertext received last time, and updates the response using the counter values of R2, N + 1, 0. The first ciphertext 1 is decrypted. As described above, the ciphertext 2, the ciphertext 3, the ciphertext 4, the ciphertext 5, and the ciphertext 6 are decrypted at any time while the cipher block counter is added and updated as needed, and the plaintext 2, plaintext 3, plaintext 4, Plaintext 5 and plaintext 6 are generated.

  With such a method, transmission data encryption and reception data decryption processing are performed between the CU control unit 323 and the security chip 325b by using a downlink counter and an uplink counter, respectively.

  Next, with reference to FIG. 138, processing in the event of an abnormality when the response from the security chip 325b to the CU control unit 323 has not reached will be described. First, a command including 6 blocks of ciphertexts 1 to 6 is transmitted from the CU control unit 323 to the security chip 325b. The counter value of the down counter used for each block is initially R1, N, 0, and the encryption block counter unit is incremented by “1”, and the final value is R1, N, 5. . The security chip 325b that has received this ciphertext first decrypts the ciphertext 1 using the counter values R1, N, 0 at the start of ciphering to generate plaintext 1. Next, the ciphertext 2, the ciphertext 3, the ciphertext 4, the ciphertext 5, and the ciphertext 6 are decrypted by adding and updating the cipher block counter unit as needed to obtain plaintext 2, plaintext 3, plaintext 4, plaintext 5, and plaintext 6. Generate.

  The security chip 325b then encrypts the plaintext 1 of the first block of the response using the value “R2, N, 0” that is the counter value of the upstream counter, and generates the ciphertext 1. Next, the value of the cipher block counter unit is incremented by “1” to generate ciphertext 2, ciphertext 3, ciphertext 4, ciphertext 5, and ciphertext 6, and transmit them to the CU control unit 323. If the response composed of the ciphertexts 1 to 6 does not reach the CU control unit 323, the CU control unit 323 retransmits the same command data as the previously transmitted command to the security chip 325b. When the security chip 325b decrypts the retransmitted ciphertext, the value of the message counter unit used for decrypting the ciphertext previously received by the security chip 325b is N. “R1, N + 1, 0” is used as the counter value of the down counter to be used.

  The security chip 325b first decrypts the ciphertext 1 using the counter values R1, N + 1, 0 to generate plaintext 1. Next, the ciphertext 2, the ciphertext 3, the ciphertext 4, the ciphertext 5, and the ciphertext 6 are decrypted by adding and updating the cipher block counter unit as needed to obtain plaintext 2, plaintext 3, plaintext 4, plaintext 5, and plaintext 6. Generate.

  Next, the security chip 325b adds and updates “1” to the value “N” of the message counter unit used for the previous ciphertext generation, and uses the counter values of R2, N + 1, 0 to start the first response. The ciphertext 1 is generated by encrypting the plaintext 1 of the block. Next, the value of the cipher block counter unit is incremented by “1” to generate ciphertext 2, ciphertext 3, ciphertext 4, ciphertext 5, and ciphertext 6, and transmit them to the CU control unit 323.

  Since the CU control unit 323 has not received a response from the previous security chip 325b, the CU control unit 323 attempts to decode using the counter value “R2, N, 0” for decoding the previous response. However, the ciphertext 1 is data encrypted using the counter value “R2, N + 1, 0”, and the restoration start counter value of the CU control unit 323 is “R2, N, 0”. Even if decryption is attempted using this counter value, decryption fails because the plaintext cannot be decrypted correctly.

  The determination as to whether or not decryption into correct plaintext has been made is based on a general check by the MAC. Briefly, the CU control unit 323 encrypts R2, N, 0, which is the first counter value, with a key, and calculates the exclusive OR between the value and the first ciphertext 1. Such decryption processing is sequentially executed for ciphertext 2, ciphertext 3, ciphertext 4, ciphertext 5 and ciphertext 6 while updating the counter value by “1”, and is included in the data of the processing result. MAC check is performed using the data of the existing MAC. Specifically, a MAC is generated from the data of the decryption processing result according to the MAC algorithm, and the generated MAC is compared with the MAC data included in the transmission data from the security chip 325b. To check. If they are decoded correctly, they match, but in this case, the value of the counter used for decoding is out of order. It is determined that the MAC is abnormal, that is, decoding has failed.

  When it is determined that such a MAC abnormality, that is, a decoding failure, the CU control unit 323 executes a repair process for repairing the incorrect counter value to a correct counter value. The CU control unit 323 sets the value of the message counter unit N to “R2, N, 0” that is the counter value at the start of decryption that was first used for decryption of the ciphertext determined to be decryption failure. While subtracting and updating by “1”, the decrypted ciphertext is sequentially performed using the subtracted counter value to perform the above-described MAC check to determine whether the decryption has been correctly performed. If it is determined that the MAC is abnormal as a result of the MAC check even if the counter value is subtracted a predetermined number of times, the CU control unit 323 next sets “R2, N, 0” as the counter value at the start of decoding. On the other hand, the message counter unit N is incremented and updated by “1”, and the decryption process using the added counter value is sequentially performed to perform the MAC check. If the MAC check determines that the decryption is successful and the decryption is successful, the plaintext successfully decrypted is fetched as a proper command. Then, the counter value of the message counter used when it is determined that the decryption is successful is used to encrypt the first plaintext 1 of the next response data.

  In the case of FIG. 138, decryption is performed by using the counter value “R2, N + 1, 0” obtained by adding and updating the message counter unit N once from “R2, N, 0” which is the counter value at the start of decryption. Therefore, it is determined that the MAC is normal and that decoding is successful.

  Using the counter values R1, N + 2, 0 obtained by adding and updating the value of the message counter part of the counter value R2, N + 1, 0 of the value N of the message counter part used when it was determined that the decryption was successful. Next, ciphertext 1 is generated by encrypting the first plaintext 1 of the response to be transmitted. Next, ciphertext 2, ciphertext 3, ciphertext 4, ciphertext 5, and ciphertext 6 are sequentially generated and transmitted to the security chip 325b while incrementing and updating the cipher block counter unit by “1”.

  In response to this, the security chip 325b decrypts the first ciphertext 1 of the received ciphertext using the counter value “R1, N + 2, 0”. Since the first ciphertext 1 is encrypted using the counter value “R1, N + 2, 0”, it can be properly decrypted using the same counter value. Then, the security chip 325b sequentially decrypts the ciphertext 2, the ciphertext 3, the ciphertext 4, the ciphertext 5, and the ciphertext 6 while adding and updating the cipher block counter unit by “1”.

  The number of subtractions to the counter value in the counter repair process described above matches the number of retries that the CU control unit 323 retransmits (retrys) the operation command when no response has been reached. In the case of the present embodiment, the number of retries is limited to two, and it is not necessary to perform subtraction update of the telegram counter unit N beyond the counter value error caused by the two retries. Therefore, the counter value is subtracted or updated up to twice.

  Next, based on FIG. 139, processing in the event of an abnormality in which a command from the CU control unit 323 to the security chip 325b has not reached will be described. First, the CU control unit 323 generates 6 blocks of ciphertexts 1 to 6 using the counter values R1, N, 0 to R1, N, and 5 and transmits them to the security chip 325b. However, if the ciphertext does not reach the security chip 325b, the CU control unit 323 attempts to retry by encrypting the command having the same content again and retransmitting it to the security chip 325b. As the message counter unit used for encryption at the time of retransmission, N + 1 obtained by adding “1” to the value N of the message counter unit used for encryption at the time of transmission of the previous command is used. Therefore, using the counter value “R1, N + 1, 0”, the CU control unit 323 generates the ciphertext 1 by encrypting the first plaintext 1 block of the command to be retransmitted. Next, the CU control unit 323 sequentially generates the ciphertext 2, ciphertext 3, ciphertext 4, ciphertext 5, and ciphertext 6 while incrementing and updating the cipher block counter unit by “1” to generate the security chip 325b. Re-send to.

  However, when the retransmitted ciphertext does not reach the security chip 325b, the CU control unit 323 tries to retry the second time by encrypting the command having the same content again and retransmitting it to the security chip 325b. . The command transmitted in the second retry reaches the security chip 325b, and the security chip 325b attempts to decrypt the ciphertext.

  The security chip 325b uses “R1, N, 0” that is a value obtained by adding and updating “1” to the last counter value used for decrypting the command previously received by the CU control unit 323. A process of decrypting the block is performed, and the ciphertext 2, ciphertext 3, ciphertext 4 and ciphertext 5 are sequentially added to the counter value “R1, N, 0” while updating the cipher block counter by “1”. Attempts to decrypt the ciphertext 6.

  However, as a result of retrying twice by the CU control unit 323, the counter value on the CU control unit 323 side and the counter value on the security chip 325b side are out of order, so that the plaintext can be decrypted. However, as a result of the MAC check described above, the MAC is abnormal and it is determined that the decoding has failed.

  Then, the security chip 325b performs a repair process for the crazy counter as described above. The ciphertext that has been retransmitted sequentially while subtracting and updating the message counter unit N by “1” with respect to “R1, N, 0”, which is the count value that was first used for the ciphertext determined to be unsuccessful. Attempt to decrypt the sentence and perform MAC check. As described above, the number of subtraction updates is limited to two, which is the number of retries. If the decryption is not successful even though the counter value is updated by subtraction update of the counter value for two times, the security chip 325b applies the message counter unit with the counter value “R1, N, 0”. Attempts to sequentially decrypt the ciphertext while incrementing and updating “1”. The number of attempts for this addition update is equal to the number of retries for performing retransmission by the CU control unit 323 when the command has not been reached. In the present embodiment, the retry is performed twice. As a result, the counter value is added and updated up to two times that is the number of retries.

  As a result of the second addition update, the counter value becomes “R1, N + 2, 0”, and the ciphertext 1 is decrypted using this counter value, and the ciphertext 2 and the ciphertext are sequentially updated while performing the addition update of the cipher block counter unit. By decrypting the sentence 3, the ciphertext 4, the ciphertext 5, and the ciphertext 6, it can be decrypted into an appropriate plain text, and as a result of the MAC check, it is determined to be appropriate and it is determined that the decryption is successful. The security chip 325b captures a plaintext command that is determined to be successful. Then, the response data corresponding thereto is encrypted and transmitted to the CU control unit 323. At the time of the encryption, unlike the value “N + 2” of the message counter unit used for the decryption process determined to be successful, the value “N” of “R2, N, 0” which is the count value used first. Is used. Therefore, ciphertext 1 is generated by encrypting the first block using “R2, N, 0”. Next, the ciphertext 2, ciphertext 3, ciphertext 4, ciphertext 5, and ciphertext 6 are sequentially generated while the count value of the cipher block counter unit is incremented by “1” and transmitted to the CU control unit 323. . The CU control unit 323 performs processing for decrypting the first block of the ciphertext using “R2, N, 0”, and sets the cipher block counter unit to “1” for the counter value “R2, N, 0”. The ciphertext 2, the ciphertext 3, the ciphertext 4, the ciphertext 5, and the ciphertext 6 are tried to be decrypted sequentially while adding and updating each one.

  Next, a modified example of the process at the time of abnormality when the response is not reached will be described based on FIG. FIG. 140 is a modification example of FIG. 138 described above, and here, the difference will be mainly described. When the response from the security chip 325b to the CU control unit 323 has not yet arrived, the CU control unit 323 executes a retry to retransmit the same command as the previous time. When the command (encrypted text) retransmitted by the retry reaches the security chip 325b, the counter values between the CU control unit 323 and the security chip 325b are different as in FIG. As a result, when the security chip 325b attempts to decrypt the ciphertext, the MAC check results in a MAC error and it is determined that the decryption has failed. In this modified example, when the decryption fails, it is determined that decryption is impossible, and a decryption error command is transmitted to the security chip 325b. At that time, the CU control unit 323 encrypts the response of the decryption error using the key K in the SE1 mode, and transmits the ciphertext to the security chip 325b. The security chip 325b receives it, decrypts the ciphertext using the key K, which is a common key, and determines that a decryption error has occurred. Then, a new random number is generated to initialize the counter value, and the random number value is transmitted to the CU control unit 323 as the initial vector unit value R2. At that time, using the key K, the value of the initial vector portion R2 is encrypted in the SE1 mode, and the ciphertext is transmitted to the security chip 325B. The CU control unit 323 decrypts the received ciphertext using the key K in the SE1 mode, and acquires the value R2 of the initial vector unit. As a result, the counter value “R2, 0, 0” that is initialized is shared between the CU control unit 323 and the security chip 325b.

  Next, the CU control unit 323 encrypts a response indicating that the update of the value R2 of the initial vector unit is completed using the key K in the SE1 mode, and transmits the encrypted response to the security chip 325b.

  In response to this, the security chip 325b encrypts the same data as the previously retransmitted command in the SE2 mode and transmits it to the CU control unit 323. At that time, the initial block is encrypted using the counter value initialized, that is, “R2, 0, 0”. Then, ciphertext 2, ciphertext 3, ciphertext 4, ciphertext 5, and ciphertext 6 are sequentially generated and added to the cipher block counter unit by “1” and transmitted to the CU control unit 323.

  The CU control unit 323 decrypts the first block of the ciphertext using the initialized counter value, that is, “R2, 0, 0”. Next, the ciphertext 2, ciphertext 3, ciphertext 4, ciphertext 5 and ciphertext 6 are decrypted in order while adding and updating the cipher block counter unit by “1” to generate plain text.

  Next, based on FIG. 141, a modified example of the process at the time of an abnormality where the command has not reached will be described. FIG. 141 is a modified example of the process when the command has not yet reached in FIG. 139, and here, the difference will be mainly described. When the command reaches the security chip 325b by the second retry by the CU control unit 323, the counter values between the CU control unit 323 and the security chip 325b are different. As a result, when the security chip 325b attempts to decrypt the ciphertext, the MAC check results in a MAC error and it is determined that the decryption has failed. In this modification, it is determined that decoding is impossible when the decoding fails, and a response to the decoding error is transmitted to the CU control unit 323.

  At that time, the security chip 325b encrypts the response of the decryption error using the key K in the SE1 mode, and transmits the ciphertext to the CU control unit 323. The CU control unit 323 receives this and decrypts the ciphertext using the key K, which is a common key, and determines that a decryption error has occurred. Then, a new random number is generated to initialize the counter value, and the random number value is transmitted to the security chip 325b as the initial vector portion value R1. At this time, the value R1 of the initial vector portion is encrypted by the SE1 mode using the key K, and the ciphertext is transmitted to the security chip 325b. The security chip 325b decrypts the received ciphertext using the key K in the SE1 mode, and acquires the value R1 of the initial vector portion. As a result, the counter value “R1, 0, 0” initialized between the CU control unit 323 and the security chip 325b is shared. As described above, as the initialization (resetting) of the counter value performed when the ciphertext cannot be restored, the counter that cannot be decrypted (a wrinkle occurs between the CU control unit 323 and the security chip 325b). However, only the initial vector portion R1 of the down counter and the initial vector portion R2 of the up counter may be reset.

  Next, the security chip 325b encrypts a response indicating that the update of the value R1 of the initial vector portion is completed in the SE1 mode using the key K, and transmits the encrypted response to the CU control unit 323.

  In response to this, the CU control unit 323 encrypts the same data as the previously retransmitted command in the SE2 mode and transmits it to the security chip 325b. At that time, the initial block is encrypted using the counter value initialized, that is, “R1, 0, 0”. Then, ciphertext 2, ciphertext 3, ciphertext 4, ciphertext 5, and ciphertext 6 are sequentially generated and added to the cipher block counter unit by “1” and transmitted to the security chip 325b.

  The security chip 325b decrypts the first block of the ciphertext using the initialized counter value, that is, “R1, 0, 0”. Next, the ciphertext 2, ciphertext 3, ciphertext 4, ciphertext 5 and ciphertext 6 are decrypted in order while adding and updating the cipher block counter unit by “1” to generate plain text.

  Next, encryption processing and decryption processing in the SE2 mode will be described with reference to FIGS. 142 (a) and 142 (b). First, in S100 of FIG. 142 (a), an encryption key is issued. This encryption key is a board initial key, an authentication key, or a communication key (session key), and is simply referred to as “key” hereinafter. The key is shared between the CU control unit 323 and the security chip 325b.

  In step S101, initial vector values R1 and R2 corresponding to the down counter and the up counter are issued. The initial vector portion values R1 and R2 are respectively generated by the security chip 325b. In step S102, the message counter unit N and the cipher block counter unit I of the counter are reset to “0”. Next, in S103, the values R1 and R2 of the initial vector portion are encrypted in the SE1 mode with the key issued in S100, and the value R1 of the initial vector portion for downlink and the value R2 of the initial vector portion for upstream are obtained from the security chip 325b. It is transmitted to the CU control unit 323. Here, the initial vector portions R1 and R2 have been described as being generated by the security chip 325b, but the initial vector portion value R1 is generated by the CU control portion 323 and transmitted to the security chip 325b. The security chip 325b Based on the transmitted algorithm for generating the initial vector portion value R 1, the initial vector portion value R 2 is generated and transmitted to the CU control unit 323. Alternatively, the initial vector portion values R1 and R2 may be generated by the CU control portion 323, and the initial vector portion R1 and R2 may be transmitted to the security chip 325b. Further, the same algorithm may be used for generating the initial vector portion values R1 and R2, or the other initial vector portion may be used by using the algorithm in which the initial vector portion value transmitted from one is generated. The value of can also be generated.

  In the security chip 325b, as shown in S130 of FIG. 142 (b), the transmitted encrypted R1 and R2 are decrypted in the SE1 mode using a key to generate plaintext R1 and R2, respectively. In S131, R1 and R2 are stored as the initial vector portion value, and the message counter portion N and the cipher block counter portion I are reset to a value of “0”.

  On the ciphertext transmission side, a message (plaintext) to be transmitted is generated in S104 of FIG. 142 (a). The generated plaintext is divided into 16-bit blocks, and encrypted using the current value of the counter for each block to generate a ciphertext (S105). Then, when the encryption of one block is completed, the control proceeds to S106, and it is determined whether or not the encryption of all the frames of the plaintext message generated in S104, that is, all the blocks has been completed. If it has not been completed yet, the control proceeds to S107, and the encryption block counter I is updated by adding “1”, and then the process proceeds to S105. The ciphertext is generated by encrypting the next block in S105.

  When the encryption of all frames of the message is completed by cycling through the loop of S105 → S106 → S107 → S105, the control proceeds to S108, and the message counter unit N is updated by adding “1”. In step S109, the encryption block counter I is cleared to “0”.

  Next, the control advances to S110, and processing for transmitting the ciphertext to the other party is performed. Next, in S111, it is determined whether or not a decoding error has been received. This decryption error is transmitted in S162 or S170, which will be described later, when decryption fails on the ciphertext receiving side, and if it is received, error processing is performed in S112. This error process is, for example, a process of displaying an error on the display device or notifying the host server that an error has occurred and stopping the subsequent operation control.

  After the ciphertext transmitted in S110 is received in S132 in FIG. 142 (b), decryption processing is performed in S133. As described above, this decoding process is a process of decoding for each block using the current counter value of the counter. After all the frames are decoded, the MAC check is performed as described above to determine whether the decoding is successful. If the decryption fails, the counter repair process in S135 is executed.

  FIG. 143 is a flowchart showing specific control contents of the counter repair process shown in S135 described above. FIG. 143 (a) shows the counter repair process shown in FIG. 138 and FIG. 139, and FIG. 143 (b) shows the repair process of the modification shown in FIG. 140 and FIG.

  First, the counter repair process 1 will be described with reference to FIG. First, in S150, the message counter unit N is updated by subtracting “1” from the counter value used for the decryption process of the first block of the ciphertext that failed to be decrypted. Next, in S151, a decoding process is executed for each block using the counter value updated by subtraction, and a MAC check is performed to determine whether the decoding is successful. If the decoding is not successful, the value of the repair counter SK is updated by adding “1” in S154. The repair counter SK is a counter for counting how many times repair is attempted. Next, in S155, it is determined whether or not the repair counter SK has reached a predetermined value. As described above, the predetermined value is the value of the number of retries 2 on the ciphertext transmission side.

  If the predetermined value has not yet been reached, control returns to S150, and the control of S150 to S155 is repeatedly executed. If the decoding is successful during the repeated execution, a determination of YES is made in S152, the control advances to S153, and a process of resetting the repair counter SK to “0” is performed.

  On the other hand, when the process of S150 to S155 is repeatedly executed and the value of the repair counter SK reaches a predetermined value, a determination of YES is made in S155 and the control proceeds to S156, and the current message counter N is repaired. The value of the counter SK is added. As a result, the value of the message counter unit N becomes the value of the message counter unit N of the last counter value used when decryption failed. Then, in S157, “1” is added and updated for the message counter unit N, and decryption processing using the counter value is performed in S158. Next, in S159, a MAC check is performed to determine whether or not the decoding is successful. If the decoding is not successful, the repair counter SK is updated by subtracting “1” in S160, and the value of the repair counter SK is updated in S161. It is determined whether or not “0” has been reached. If not, the control returns to S157, and the control of S157 to S161 is repeatedly executed.

  If it is determined in S159 that decoding has succeeded while this repeated execution is being performed, the control advances to S153, and a process of resetting the repair counter SK is performed. The plaintext determined as successful decryption is the correct plaintext.

  On the other hand, when the value of the repair counter SK becomes “0” by repeatedly executing the processes of S157 to S161, the counter is repaired a predetermined number of times. In this case, the control proceeds to S162. Then, a process of encrypting information indicating a decryption error using the key K in the SE1 mode and transmitting the ciphertext is performed.

  This decoding error information is received in S112 of FIG. 142A described above, and a determination of YES is made.

  Next, a modified counter repair process 2 will be described with reference to FIG. 143 (b). In S170, information indicating a decryption error is encrypted in the SE1 mode using the key K, and the encrypted information is transmitted to the other party. If this decryption error is received, a determination of YES is made in S112 of FIG. 142 (a). In the case of this modification, if a determination of YES is made in S112, the control proceeds to S101. Then, after a new random number is generated in S101 and the message counter unit N and the cipher block counter unit I are reset in S102, the random number is encrypted in S103, and values R1 and R2 of the initial vector unit are obtained. Processing to transmit to is performed. The transmitted value of the encrypted initial vector portion is received in S171 of FIG. 143 (b). Next, in S172, information indicating that the update of the value R1 or R2 of the initial vector portion is completed is encrypted in the SE1 mode using the key K, and the ciphertext is transmitted to the other party, and then the control is performed. Shifts to S130 in FIG. 142 (b).

  In S130, a process of decrypting the ciphertext of the initial vector portion values R1 and R2 received in S171 described above in the SE1 mode using the key K is performed. Then, the plaintext initial vector portion values R1 and R2 generated as a result of decryption are stored, and the telegram counter portion N and the cipher block counter portion I are reset to “0” (S131). ).

  Then, using the values R1, 0, 0 or R2, 0, 0, the process of decrypting the ciphertext received in S132 is performed in S133.

  If the data length of the received data is abnormal or if a CRC error occurs as a result of the CRC check, the receiving side performs processing to discard the received message without updating the counter value. . Then, processing for returning a request for retransmission is performed. On the receiving side, a process is performed in which the value of the telegram counter unit N in the current count value of the counter is decremented by “1”, and the same telegram is decrypted and retransmitted.

<Main sequence in communication between communication control IC and security chip>
Next, based on FIGS. 144 to 148, processing executed by the CPU in the security chip 325 b (hereinafter also referred to as SC 325 b) and executed by the CPU mounted on the communication control IC 325 a (also referred to as IC 325 a). Processing will be described.

  FIG. 144 is a diagram for explaining a mode of command and response transmission / reception between the security chip 325b and the communication control IC 325a. Referring to FIG. 144, a command is transmitted from SC 325b (primary station) to IC 325a (secondary station), and IC 325a returns a response to SC 325b in response to the command. The SC 325b transmits the next command to the IC 325a after receiving the response, and the IC 325a returns a response to the SC 325b in response to the command. As shown in FIG. 144, the SC 325b transmits various requests that cause the IC 325a to update the security information, and then waits for a response from the IC 325a. On the other hand, after receiving the request from SC 325b, IC 325a performs processing for this request and transmits the processing result to SC 325b.

  Next, FIG. 145 is a diagram for explaining processing when communication disconnection is detected on the SC 325b side. Referring to FIG. 145, in the same way as the communication disconnection between CU 3 and P stand 2 described in FIG. 33, when SC 325b has not received a response within 200 ms after sending a command to IC 325a. Transmits the same command to the IC 325a again. If no response is received within 200 ms, a second retransmission is performed in which the same command is transmitted to the IC 325a. If the response is not received from the IC 325a within 200 ms after the second retransmission, the SC 325b determines that the communication is abnormal at this stage and sets “communication interruption”. This communication abnormality may be caused when the SC 325b connector is disconnected from the IC 325a2 connector, or the connection wiring is disconnected or the IC 325a is powered off. However, the command to be retransmitted does not include a command for P unit 2 (game machine).

The SC 325b does not increment the serial number when retransmitting the command.
FIG. 146 is a flowchart showing a subroutine program of the authentication sequence of the communication control IC 325a. Referring to FIG. 146, the first authentication sequence is executed between SC 325b and IC 325a. For example, the first authentication sequence authenticates the serial ID of SC 325b, that is, the SID of SC 325b stored in the EEPROM (not shown). Next, the second authentication sequence is executed between the SC 325b and the IC 325a. For example, the serial ID of IC 325a, that is, the SID of IC 325a stored in the EEPROM (not shown) is authenticated by this second authentication sequence.

  Next, a third authentication sequence is executed between the SC 325b and the IC 325a. For example, the writer management information is authenticated by the third authentication sequence. The data included in the writer management information response includes a command code, a writer ID (ROM writer ID), an authentication key version, and the like.

  Next, an IC authentication result sequence is executed between the SC 325b and the IC 325a. An IC authentication result notification is transmitted from the SC 325b to the IC 325a. By this IC authentication result notification, the authentication results from the first authentication sequence to the third authentication sequence are collectively notified. On the other hand, an IC authentication result response is transmitted from the IC 325a to the SC 325b. Here, the authentication results from the first authentication sequence to the third authentication sequence are collectively notified by the IC authentication result response.

  The first to third authentication sequences, the IC authentication result notification, and the IC authentication result response sequence use the authentication key or the temporary authentication key as the encryption key, and use the SE1 mode, which is a simple block cipher usage mode. Executed. Here, this authentication key is an encryption key downloaded from the key management server 800 installed in the key management center and used for communication between the SC 325b and the IC 325a. The temporary authentication key is an encryption key that is stored in the SC 325b and the IC 325a from the manufacturing stage and used for communication between the SC 325b and the IC 325a until the authentication key is downloaded.

  FIG. 147 is a flowchart showing a subroutine program of the security information update sequence. Referring to FIG. 147, this security information update sequence is executed between SC 325b and IC 325a after the communication control IC authentication sequence described with reference to FIG. 146 is completed.

  For example, authentication key update authentication is performed by a security information update sequence. Specifically, the SC 325b first sets the key version, authentication key, and MAC key information acquired from the host device. However, the above-described information is executed only when there is update information. The case where there is update information corresponds to, for example, the case where it is found that the above-described information is leaked or there is a possibility that the update is performed by setting in the key management center. When this authentication key update response is appropriate (when update is normal), both IC 325a and SC 325b are in an initial state (communication start), and authentication is started again from the first authentication sequence described above. Similarly, when there is update information for other keys, authentication may be performed again after setting the key version, the key, and the MAC key information acquired from the host device.

  The authentication key update request and authentication key update response sequences use the authentication key or the temporary authentication key as an encryption key, and use the SE2 mode, which is higher in security than the SE1 mode, which is a simple block cipher usage mode. Executed.

  FIG. 148 is a sequence showing when the communication control IC 325a has an authentication error. 148, the first to third authentication sequences described in FIG. 146 are executed. The first to third authentication sequences are executed using the temporary authentication key as the encryption key and the SE1 mode, which is a simple block cipher usage mode. Both the SC 325b and the IC 325a store the serial ID of the SC and the serial ID of the communication control IC, and any one of the first to third authentication sequences uses the challenge / response method. This is a sequence for authenticating the serial ID, and any one of the first to third authentication sequences is a sequence for authenticating the serial ID of the communication control IC using the challenge / response method. The serial ID of the SC, the serial ID of the communication control IC, and the above-mentioned board serial ID are configured with different IDs.

  After these authentication sequences are completed, the IC authentication result sequence is then executed between the SC 325b and the IC 325a. An IC authentication result notification is transmitted from the SC 325b to the IC 325a. By this IC authentication result notification, the authentication results from the first authentication sequence to the third authentication sequence are collectively notified. On the other hand, an IC authentication result response is transmitted from the IC 325a to the SC 325b. The authentication results from the first authentication sequence to the third authentication sequence are collectively notified by the IC authentication result response. If the IC authentication result notification and / or the IC authentication result response is inappropriate, the processing from the first authentication sequence to the third authentication sequence described above is retried. If the number of retries is limited to two, and the IC authentication result notification and / or IC authentication result response is inappropriate even after the two retries, SC325b is ranked “communication control IC authentication error”. It notifies the device and waits until the reset processing of the host device starts (waiting for reset).

  If the IC authentication result notification and / or the IC authentication result response is inappropriate even after a plurality of (here, twice) retries, the process is restored by reset processing (for example, power-on again). However, the present invention is not limited to this, and the reset may be performed on the condition that the SC 325b has been authenticated with the key management server 800 or the upper server 801 that is the upper apparatus when in a reset waiting state.

  The control operations of the sequence between the CU control unit 323 and the SC 325 and the sequence between the SC 325 and the IC 325a described above are collectively described below.

  The CU control unit 323 stores SC 325b identification information for identifying the SC 325b that is the authentication partner (stores the board serial ID), and the IC 325a includes IC 325a identification information for identifying the IC 325a, SC325b identification information is stored (ID information and the like are stored), and SC325b stores SC325b identification information (substrate serial ID) and IC 325a identification information (ID information and the like). Then, a challenge code (challenge code in FIG. 131) is generated between the CU control unit 323 and the SC 325b using the SC 325b identification information stored in the SC 325b and transmitted to the CU control unit 323 (the board in FIG. 131). Serial ID authentication response 1) Using the stored SC325b identification information, the CU control unit 323 generates a response code (response code in FIG. 131) from the received challenge code and returns it to SC325b (FIG. 131). Board serial ID authentication request 2), in SC 325b, first challenge response authentication processing is performed to determine the suitability of the received response code using the stored SC 325b identification information (response code check in FIG. 131).

  In addition, a challenge code is generated between the SC 325b and the IC 325a using the SC 325b identification information stored in the SC 325b and transmitted to the IC 325a, and the IC 325a is received using the stored SC 325b identification information. A response code is generated from the challenge code and returned to the SC 325b, and the second challenge response authentication process (first authentication sequence in FIG. 146) for determining the suitability of the response code received using the stored SC 325b identification information in the SC 325b. ) And a challenge code is generated using the IC 325a identification information stored in the IC 325a and transmitted to the SC 325b, and the SC 325b uses the stored IC 325a identification information to read from the received challenge code. A third challenge response authentication process (second authentication sequence in FIG. 146) for determining the suitability of the response code received using the stored IC 325a identification information in the IC 325a. Do.

  According to such operation control, between the CU control unit 323 and the SC 325b and between the SC 325b and the IC 325a, the challenge code is transmitted from one control means to the other control means and stored in the other control means. Challenge code and response code sent and received between the control means because the response is generated from the challenge code received using the identification information and sent back to one of the control means. Even if the information is leaked, it is difficult to specify the stored identification information, and it is possible to prevent fraudulent acts on the control means due to the leakage of the identification information as much as possible.

  In addition, a gaming system or gaming device (CU3, P unit 2, jet counter, POS terminal, etc.) having a CU control unit 323 and an IC 325a that perform cryptographic communication with each other and an IC 325a that performs cryptographic communication with the IC 325a, Mutual authentication processing means (first authentication sequence to third authentication sequence in FIG. 148) for performing a plurality of types of mutual authentication processing with different authentication methods between the CU control unit 323 and the IC 325a and between the IC 325a and the IC 325a; If the authentication result of each mutual authentication alone in the multiple types of mutual authentication processing performed by the mutual authentication processing means is inappropriate, the authentication result of the single authentication is not notified to the control means of the authentication partner, General notification means (FIG. 148) that summarizes the abnormalities resulting from the execution of all authentication and notifies the control means of the authentication partner It includes and notifies) the overall authentication sequence until the first authentication sequence to third authentication sequence. Then, the mutual authentication processing means collectively reports the abnormality by the general notification means, and then executes a re-authentication process in which a plurality of types of mutual authentication processes are performed again between the control means having the abnormality (FIG. 148: No. 148). The authentication sequence from the first authentication sequence to the third authentication sequence is retried at most twice).

  According to such operation control, a plurality of types of mutual authentication processes with different authentication methods are performed between the first control unit and the second control unit and between the IC 325a and the IC 325a. Even if the security of mutual authentication by one authentication method is broken, the security of mutual authentication can be maintained by mutual authentication by another different authentication method.

  In addition, for example, when the authentication result of each type of mutual authentication of each of the multiple types of mutual authentication is inappropriate, the type of mutual authentication is notified when the authentication result is notified to the control means of the authentication partner. However, it is not desirable for security because it is known that the authentication result is incorrect. In order to sum up the abnormalities of the results of executing all of the multiple types of mutual authentication and not to notify the control method of the other party of authentication, it is not possible to see which type of mutual authentication has occurred , Can improve security.

  Furthermore, since the re-authentication process is performed again between the control means in which the abnormality occurred after the general notification of the abnormality, it is possible to check again whether the mutual authentication is really abnormal, and the reliability of mutual authentication Can be improved.

  In addition, the gaming system or the gaming machine stops the subsequent processing between the inappropriate control means on the condition that the result of the re-authentication process by the mutual authentication processing means is inappropriate (FIG. 148: Further waiting for reset).

  According to such operation control, since the subsequent processing is stopped between the inappropriate control means on the condition that the result of the re-authentication process is not reliable and the reliability is inappropriate, it is not inappropriate. Nevertheless, the inconvenience of stopping the subsequent processing can be reduced as much as possible.

  In addition, the gaming system or gaming device performs an abnormality notification for executing processing for notifying the management server of the occurrence of an abnormality on the condition that the result of the re-authentication processing by the mutual authentication processing means is inappropriate. It further includes processing means (FIG. 148: “communication control IC authentication error” is notified to the host device).

  According to such operation control, since the notification of the occurrence of an abnormality is sent to the management server on the condition that the result of the re-authentication process is not reliable and the reliability is inappropriate, it is not inappropriate. Nevertheless, the inconvenience of notifying the management server of the occurrence of an abnormality can be reduced as much as possible.

  In addition, a gaming system or gaming device (CU3, P-2, jet counter, POS terminal, etc.) provided with SC325b and IC325a that perform cryptographic communication with each other performs a plurality of types of mutual authentication processing with different authentication methods using SC325b and IC325a. And the mutual authentication processing means (the first authentication sequence to the third authentication sequence in FIG. 148) performed between the two and the mutual authentication by the mutual authentication processing means when the independent authentication result is inappropriate. General notification means for notifying the authentication result to the authentication partner control means, but summing up the abnormalities of the results of executing all of the plurality of types of mutual authentication and notifying the authentication partner control means (FIG. 148: first authentication sequence) The authentication sequence up to the third authentication sequence is collectively notified). Then, the mutual authentication processing means performs a re-authentication process in which a plurality of types of mutual authentication processes are performed again between the CU control unit 323 and the IC 325a after the abnormality is summarized and notified by the general notification means (FIG. 148). The authentication sequence from the first authentication sequence to the third authentication sequence is retried at most twice).

  According to such operation control, since a plurality of types of mutual authentication processes with different authentication methods are performed between the SC 325b and the IC 325a, even if the security of mutual authentication by a certain authentication method is broken. The security of mutual authentication can be maintained by mutual authentication using other different authentication methods.

  In addition, for example, when the authentication result of each type of mutual authentication of each of the multiple types of mutual authentication is inappropriate, the type of mutual authentication is notified when the authentication result is notified to the control means of the authentication partner. However, it is not desirable for security because it is known that the authentication result is incorrect. In order to sum up the abnormalities of the results of executing all of the multiple types of mutual authentication and not to notify the control method of the other party of authentication, it is not possible to see which type of mutual authentication has occurred , Can improve security.

  Furthermore, since a re-authentication process in which a plurality of types of mutual authentication processing is performed again between the SC 325b and the IC 325a is executed after the summary notification of the abnormality, it is possible to confirm again whether the mutual authentication is actually abnormal. The reliability of mutual authentication can be improved.

  The above gaming system or gaming device is provided with stop means for stopping subsequent processing by the SC 325b and the IC 325a on the condition that the result of the re-authentication processing by the mutual authentication processing means is inappropriate (FIG. 148: waiting for reset). Further).

  According to such operation control, the subsequent processing by the SC 325b and the IC 325a is stopped on the condition that the result of the re-authentication processing is inappropriate and the reliability is inappropriate. Nevertheless, the inconvenience of stopping the subsequent processing can be reduced as much as possible.

  The above gaming system or gaming device performs an abnormality notification process for executing a process for notifying the management server of the occurrence of an abnormality on the condition that the result of the re-authentication process by the mutual authentication processing means is inappropriate. Means (FIG. 148: “communication control IC authentication error” is notified to the host device).

  According to such operation control, since the notification of the occurrence of an abnormality is sent to the management server on the condition that the result of the re-authentication process is not reliable and the reliability is inappropriate, it is not inappropriate. Nevertheless, the inconvenience of notifying the management server of the occurrence of an abnormality can be reduced as much as possible.

  The mutual authentication processing means in the above gaming system or gaming machine generates a challenge code in the IC 325a and transmits it to the SC 325b, and generates a response code from the received challenge code using the identification information stored in the SC 325b. The first challenge response authentication process (first authentication sequence in FIG. 146) for determining the suitability of the received response code using the stored identification information, and the challenge code is generated in SC 325b. Then, a response code is generated from the challenge code received using the identification information stored in the IC 325a and sent back to the SC 325b, and received using the stored identification information in the SC 325b. The second challenge response authentication process of determining the appropriateness of response code is performed (second authentication sequence of FIG. 146).

  According to such operation control, in SC 325b and IC 325a, a response is received from the challenge code received using the identification information stored in the other control means by transmitting the challenge code from one control means to the other control means. Even if a challenge code or response code sent and received between both gaming means is leaked because it is challenge-response type authentication that generates a code and sends it back to one control means, it will be stored It is difficult to specify the identification information that is present, and fraudulent acts on the gaming means due to leakage of the identification information can be prevented as much as possible.

  Next, based on FIG. 149, the counter operation of the decoding process in the SE2 mode will be described. In the above-described embodiment, two types of counters, a down counter and an up counter, are shown (see FIG. 135). The two types of cases are shown in FIG. On the other hand, FIG. 149 (a) shows a counter using a common counter for downlink and uplink. First, an example using a common counter will be described with reference to FIG.

  In the case of the common counter, there is a disadvantage that a counter value difference between the CU control unit 323 and the SC 325 occurs when cross transmission occurs. In normal transmission, for example, after a response (response) from the SC 325 is transmitted to the CU control unit 323, the CU control unit 323 transmits the next request (command) to the SC 325. On the other hand, in the cross transmission, the output of the response from the SC 325 and the output of the next request (command) from the CU control unit 323 are made almost simultaneously, and the next request (command) from the CU control unit 323 is made. ) Is received by the CU control unit 323, and after the response (response) is output from the SC 325, the next request (command) from the CU control unit 323 is SC325. Received.

  In the case of the common counter, when the above-described cross transmission occurs, for example, the counter value is obtained by transmitting the next request (command) before receiving the response (response) from the SC 325 on the CU control unit 323 side. One updated state (counter value = 3), and the response (response) encrypted with the counter value (= 2) is decrypted with the updated counter value (= 3). Therefore, the counter values on the CU control unit 323 side and the SC 325 side are in a state of being different from each other, and there is a disadvantage that the decoding cannot be performed properly.

  Therefore, on the other hand, when two types of counters, that is, a down counter and an up counter are used, when the above-described cross transmission occurs, referring to FIG. 149 (b), for example, on the CU control unit 323 side Even if the downstream counter value is updated by one by transmitting the following information before receiving the response from the SC 325 (downstream counter value = 3), the updated counter value is CU. Since only the down counter value used for generating the ciphertext to be transmitted from the control unit 323 to the SC 325 is updated, and the up counter value is not updated (up counter value = 1), the up counter value ( = 1) The response (response) from the SC 325 encrypted by (1) can be properly decrypted on the CU control unit 323 side using the same upstream counter value (= 1). The ability.

  As described above, the first key (down counter) used to generate the ciphertext to be transmitted from the first control means (CU control unit 323, etc.) to the second control means (SC325b, etc.), and the second control means (SC325b). Etc.) to the first control means (CU control unit 323 etc.) and the second key (upstream counter) used for generating the ciphertext to be transmitted is independently updated, so that the first control means (CU control unit) 323, etc.) and the second control means (SC325b, etc.), it is possible to prevent inconvenience that a key mismatch occurs between the two control means when a cross transmission occurs. After the response from the second control means (SC 325b etc.) is transmitted to the first control means (CU control part 323 etc.), the first control means (CU control part 323 etc.) sends the second information to the second control means (CU control part 323 etc.). The normal transmission is transmitted to the SC 325b etc., whereas the cross transmission refers to the output of the response from the second control means (SC 325b etc.) and the next from the first control means (CU control unit 323 etc.) Information is output almost simultaneously, and after the next information is output from the first control means (CU control unit 323, etc.), a response from the second control means (SC325b, etc.) is sent to the first control means (CU Control unit 323 etc.) receives and outputs a response from the second control means (SC325b etc.), the next information from the first control means (CU control unit 323 etc.) is the second control means (SC325b etc.) ) Received and received status Say (for example, FIG. 149 (a) (b) reference). For example, the first control unit (CU control unit) uses a key used for generating ciphertext to be transmitted between the first control unit (CU control unit 323, etc.) and the second control unit (SC 325b, etc.) as one type of key. 323, etc.) to the second control means (SC325b, etc.) and each time transmission from the second control means (SC325b, etc.) to the first control means (CU control unit 323, etc.) When the above-mentioned cross transmission occurs when updating each other, for example, the first control unit (CU control unit 323, etc.) side receives the next response before receiving a response from the second control unit (SC325b, etc.). In order to decrypt the response information transmitted from the second control means (SC 325b etc.) with the updated key, the key is updated by transmitting the information. First control It becomes stage (CU control unit 323, etc.) side and a state in which the key is staggered in the second control means (SC325b etc.) side, is caused inconvenience can not be properly decoded.

  Therefore, the first key (down counter) used for generating the ciphertext to be transmitted from the first control means (CU control unit 323, etc.) to the second control means (SC325b, etc.) and the second control means (SC325b, etc.) Two types of keys, that is, a second key (upstream counter) used for generating ciphertext to be transmitted to one control means (CU control unit 323, etc.) are used. As a result, when the above-mentioned cross transmission occurs, for example, the first control means (CU control unit 323 etc.) side transmits the next information before receiving a response from the second control means (SC 325b etc.). Even if one key is updated by the above, the updated key is used to generate ciphertext to be transmitted from the first control means (CU control unit 323, etc.) to the second control means (SC325b, etc.). The second key (upstream counter) is not updated, only the first key (downstream counter) to be updated is updated, so that the second control means (SC325b etc.) encrypted by the second key (upstream counter) Can be properly decrypted on the first control means (CU control unit 323, etc.) side using the same second key (up counter).

<Slot machine>
Next, a slot machine will be described as another example of the gaming machine. FIG. 150 is a perspective view showing a state in which the front door of the slot machine is opened. In the description so far, the slot machine is also abbreviated as “S” in the following, because the pachinko machine is abbreviated as “P”.

  The above gaming system using game balls and holding balls is also applied to the S units. However, in the S platform, the game is played without using balls, and hence the game balls will be referred to as game points and the holding balls as points.

  Referring to FIG. 150, in the slot machine 2S, a front door 2bS is provided so as to be openable and closable with respect to the main body frame 2aS with the left edge thereof as a swing center. Although not shown in FIG. 150, a CU is connected to the left side of the slot machine 2S in the same manner as the P units.

  In the slot machine 2S, the number of bets is set by using game points, and the game points are added and updated in accordance with winning. For this reason, when playing a game in the slot machine 2S, a medal insertion operation is not necessary. Therefore, the slot machine 2S is not provided with a medal slot and a medal payout slot.

  Inside the casing of the slot machine 2S, reels 2L, 2C, and 2R (hereinafter also referred to as a left reel, a middle reel, and a right reel) in which a plurality of types of symbols are arranged on the outer periphery are juxtaposed in a horizontal direction. Of the symbols arranged on the reels 2L, 2C and 2R, three consecutive symbols are arranged so as to be seen from the see-through window 10 provided on the front door 2bS. A plurality of types of symbols are drawn in a predetermined order on the outer periphery of the reels 2L, 2C, and 2R.

  A touch panel display 510 is provided in a portion surrounding each reel 2L, 2C, 2R of the front door 2bS. The display 510 is a display corresponding to the P displays 54, and displays various types of information (game points, points, etc.) of the same type as the display 54, as well as the number of bets set in the game. Is displayed. The display unit 510 is connected to the CU display control unit 350 in the same manner as the display unit 54 in FIG. 5 and is controlled on the CU side. The indicator 510 is not provided in a portion surrounding each of the reels 2L, 2C, 2R, but is provided at a lower panel portion (at a position below the start switch 7S shown in FIG. You may provide in the panel part provided with the conventional S medal payout opening.

  Further, the front door 2bS has a single BET switch 5S that is operated when setting the number of bets using “game points = 1” corresponding to one medal, and the maximum determined according to the game state. When setting the number of bets (for example, “game point = 3” in the normal game state before BB occurrence and RT (Replay Time) where the winning probability of replay is high, “game point = 2” in the bonus) The MAXBET switch 6S is operated, the start switch 7S is operated when the game is started, and the stop switches 8L, 8C, 8R are respectively operated when the rotation of the reels 2L, 2C, 2R is stopped. Yes.

  When playing a game in the slot machine 2S, first, as with the P machines, after securing a game point using the adjacent CU, the number of bets is set using the game point. The game points are obtained by withdrawing the balance of the prepaid card inserted into the CU, the points, or the stored medals deposited in the game hall (corresponding to P stored balls). In order to use the game points, the single BET switch 5S or the MAXBET switch 6S may be operated. In the present embodiment, for example, by setting the number of bets to 1, the game points are deducted by 1, and the display of the game points on the display 510 is also subtracted and updated. When the bet number is set, the pay line determined according to the bet number and the gaming state is valid, and the operation of the start switch 7S is valid, that is, the game can be started.

  When the start switch 7S is operated while the game can be started, the reels 2L, 2C, and 2R rotate, and the symbols of the reels 2L, 2C, and 2R continuously change. When any one of the stop switches 8L, 8C, 8R is operated in this state, the rotation of the corresponding reels 2L, 2C, 2R is stopped, and the display result is derived and displayed on the fluoroscopic window 10.

  Then, when all the reels 2L, 2C, 2R are stopped, one game is completed, and a predetermined symbol combination (hereinafter also referred to as a role) on the activated pay line is displayed on each reel 2L, 2C, When the 2R display result is stopped, a prize is generated, a game point determined according to the prize is given to the player, and the display of the game point on the display 510 is also added and updated.

  In the case of S units, it is possible to count game points as in the case of P units. As shown in FIG. 1, the slot machine 2S is provided with a counting button 28S for counting game points and converting them into points. The ball lending button, the return button, and the replay button are provided on the CU side (see FIG. 5). The player executes the counting operation based on an arbitrary timing or a display for prompting the counting operation on the display unit 510 in the same manner as the P units. Then, the game points are counted and the display 510 displays a state in which the points are increased while the game points are decreased. The ball lending button may be provided not on the CU side but on the P platform side and the S platform side. In this case, the operation signal of the ball lending button may be directly input to the CU 2 or may be transmitted to the CU 3 as a status information response via the P unit 2 or the S unit (slot machine) 2S. It may be.

  The types of winning combinations are determined according to the state of the game, but can be broadly divided into special roles with a shift to the big bonus (BB) and regular bonus (RB), and small roles with payout of medals. And a re-gamer (replay) that allows the next game to be started without the need to set the bet amount.

  Which of a plurality of types of winning combinations is to be won or whether any winning combination is to be excluded is determined by, for example, the main control unit (S) controlling the slot machine 2S when a start operation is detected. It corresponds to the main control unit 161 of the stand). This determination is made, for example, by drawing a random number generated from a predetermined random number generator or generated on software.

  After that, the main control unit waits for the reel stop operation by the player, draws in the symbol corresponding to the winning combination in the predetermined frame number range based on the stop operation time, otherwise draws another symbol Is controlled to stop the three symbols and determine whether or not there is a prize. If the main control base determines that a winning is made, the main control base gives the player game points according to the type of winning (adds game points).

  In other words, the game can be started by setting a predetermined number of bets for one game using the gaming value by using the S units, and a plurality of types of identification information that can be identified can be displayed in a variable manner. A slot machine in which one game is completed when a display result is derived to the variable display device, and a winning can be generated according to the display result derived to the variable display device, which is displayed on the variable display device Before the result is derived, a predetermining unit that determines whether or not to allow a plurality of types of winnings to be generated, and causing the variable display device to derive a display result according to the determination result of the predetermining unit A slot machine including derivation control means for performing control and giving means for giving a game value when the winning occurs is configured.

  FIG. 151 is an explanatory diagram for explaining various data stored in each of the card unit and the slot machine and their transmission / reception modes. FIG. 151 is obtained by replacing the terminology of FIG. 8 described as the configuration of the P units with that for the S units, and the aspect thereof is the same as that described with reference to FIG. The description of is omitted.

<Modifications and feature points>
Next, modifications and feature points of the present embodiment described above are listed.

  (1) When a slot machine (S units), which is an example of a gaming machine, is applied to the above gaming system, for example, there are P units of reels and various sensor parts attached to the reels and a main control board for controlling the reels. Corresponding to the board, other configurations correspond to P game frames. However, the S units do not require the various detection switches 41a, 701, 33, the launch control board 31, and the launch motor 18 of the game frame shown in FIG.

  A conventional S unit is provided with a credit function. When this function is enabled, the credit is subtracted when the number of bets is set, and the credit is added when a winning occurs. However, there is an upper limit for credits, and when a winning occurs when the number of credits reaches the upper limit value, medals are paid out from the hopper.

  On the other hand, in the S units according to the present embodiment, game points are subtracted when the bet number is set, and game points are added when a winning occurs. Further, when the game points reach a predetermined number, a display for prompting a counting operation is made, and the gaming points are converted into points by performing the counting operation. For this reason, it is not necessary to pay out medals when the credit reaches the upper limit unlike the conventional S units. As a result, it is not necessary to provide a hopper on the S platform according to the present embodiment.

  As a result, the amusement hall does not need to secure a large number of medals, reducing the economic burden. The game arcade is also freed from operations such as replenishment / collection of medals and maintenance operations to deal with clogged medals. The player is relieved from the hassle of inserting medals for each betting operation after the credit is full, and can easily concentrate on the game.

  On the other hand, if S units become medalless, a player who has won a large number of medals will not be able to act to show off his arms by stacking boxes with medals beside the seat. Inconvenience arises. However, in this embodiment, since the function of displaying the dollar box is provided as described above, it is possible to prevent such inconvenience. In addition, it is desirable that the dollar box display in the case of the S units is such that a large number of medals are loaded instead of the large number of balls shown in FIG.

  When S machines are applied as a gaming machine, each type of data is expressed as follows using two types of data, “Points” and “Game Points”, and “Credit” and “Credit Excess Points”. It is also possible to configure a gaming system that is converted. Note that these four types of data are displayed on the S displays 510.

  First, when a conversion operation (lending operation, saving medal payout operation, point payout operation) from the balance of a prepaid card, a medal or a point is detected, each is withdrawn and converted into a game point. The

  A game point is data corresponding to a medal in a conventional slot machine. For this reason, for example, it is desirable to display the number of game points on the display 510 and to display the number of medal images corresponding to the game points. For example, when a pseudo-insertion medal operation (for example, an operation of pushing a medal) such that a player touches the medal image and inserts it into the slot machine is detected, the medal image disappears and the game points are subtracted. Instead, one bet is set. By performing such a pseudo medal insertion operation three times, the bet number is set to the maximum value of three.

  Thereafter, when a pseudo medal insertion operation is further detected, a credit is added in accordance with the detection. An upper limit value (for example, 50) is set for the credit, and when the credit exceeds the upper limit value, a credit excess point is added.

  The betting amount setting can be performed using the game points as described above, and can also be performed using credits. That is, if the one-sheet BET switch 5S is operated, 1 is added to the betting number setting value and 1 is subtracted from the credit. If the MAXBET switch 6S is operated, the bet number is set to 3, and the credit is subtracted according to the bet number setting.

  As a result of the game, when a winning occurs, a number of points corresponding to the winning is added to the credit. When a winning that exceeds the upper limit of credit occurs, the score for the excess is stored as a credit excess point. This credit excess point corresponds to a medal to be paid out when a winning occurs exceeding the upper limit of credit in the conventional slot machine. For this reason, for example, it is desirable to display the credit excess points on the display 510 and to display the number of medal images corresponding to the credit excess points. Further, it is desirable to change the color of this medal image so that it can be distinguished from the medal image corresponding to the game point.

  Further, it is desirable that the credit excess points are converted into game points by the player's operation. For example, when a pseudo medal conversion operation (for example, an operation of pushing a medal) is performed such that the player touches the medal image corresponding to the credit excess point and converts it to a game point, the medal image disappears and the credit excess Points are subtracted and game points are added.

  Alternatively, if the credit becomes less than the upper limit value, the credit excess point may be automatically converted into credit.

  When the player performs a counting operation, each of the game points, credits, and credit excess points is counted and converted into points. As a result, the player's points are posted as “card possession number + game points + credits + credit excess points”. The “card possession number” is the number of points before conversion (the number of possessions currently owned by the player) that has not been converted into game points.

  In the above description, the four types of data of points, game points, credits, and credit excess points may be stored on both sides by exchanging data between the CU and S units. You may memorize | store only in the S stand side only by CU side. Further, the credit excess point may be the target of the dollar box display of FIG.

  Moreover, although the example using a credit excess point was demonstrated in the above description, it is not necessary to use a credit excess point. In this case, when the credit limit is exceeded, it may be added to the game points.

  (2) In the present embodiment, game points are added by consuming the card count. Alternatively, game points are added by consuming stored balls (stored medals). That is, the card frequency or the stored ball is converted into game points. On the other hand, the card power and the stored balls are not converted into points (count balls, count medals). However, the card power and the stored ball may be once converted into points.

  (3) In the present embodiment, game points are converted into points by counting operation. The conversion rate in this case is 1: 1. However, the conversion rate in the case of conversion may be other than 1: 1. For example, when 100 game points are converted, 97 points obtained by subtracting three of them may be converted into points. Or you may make it convert into the number of game balls obtained by multiplying a predetermined ratio of less than 100% with respect to a point.

  (4) The recording medium for recording the holding point in an identifiable manner may use a mobile terminal such as a smartphone. In this case, the communication unit for communicating with the mobile terminal is provided in the CU, and the CU recognizes the ID stored in the mobile terminal by holding the mobile terminal over the communication unit. The game is made possible by the procedure as described. On the other hand, at the end of the game, the portable terminal is again held over the communication unit, so that the score at the end of the game is added to the player's score through the ID.

  (5) The operation means for counting game points may be provided on the CU side. In this case, the operation means may be displayed on a touch panel, or may be constituted by a physical switch.

  (6) In the present embodiment, when an uncounted game point remains when a card return operation is performed, a message prompting the counting is displayed on the P display or the CU side display. However, instead of such a configuration, when an uncounted game point remains when the card return operation is performed, the counting display is automatically started and the display on the P table or the CU side is used. It may be notified that automatic counting has started because there are still uncounted game points, or that, in addition, the card will be returned after completion of automatic counting.

  Alternatively, when an uncounted game point remains when the card return operation is performed, it is determined that there is a possibility that the player may leave the table temporarily, and the display (CU side or P stand side) You may display the message which confirms whether it is temporary leaving. Further, the display device may be constituted by a touch panel so that the player can input a response to the message. Furthermore, if the response input is the end of the game, a message prompting the counting operation is displayed. On the other hand, if the response input is temporarily away from the desk, the card may be temporarily ejected while the ID of the card is stored on the CU side, the P platform side, or both. Thereafter, when a card with the same ID is inserted, the game is resumed from the original state.

  (7) The counting time from the start of the counting operation to the completion of the counting display is based on the game points when the game points are less than the first reference value and when the game points exceed the first reference value. The increasing rate of the counting time may be reduced. As a result, while it is possible to produce an effect of counting display as if counting a real ball, it can be prevented that it takes too much time to complete counting due to an increase in game points. Further, when the game points exceed a certain reference value, all the counting times may be the same. Alternatively, the same counting time may be adopted regardless of the number of game points without providing a reference value.

  (8) During the big hit, the judgment reference value for judging that the number of game balls is full may be increased. In other words, the determination reference value for the full tank determination may be different depending on whether or not the big hit. As a result, it is possible to prevent the number of game balls from rapidly increasing during the big hit, and making a full tank determination immediately to stop firing.

  (9) The number of game balls when a big hit occurs is memorized. During the big hit, even if the criterion value for full tank is exceeded, the increased number of game balls allowed after the big hit has occurred If it is within a value (for example, 1000 balls), it is good also as what does not determine a full tank.

  (10) As the counting operation means for counting the game balls, one that exhibits a counting function when operated a predetermined number of times twice or more may be employed. As a result, erroneous operation can be prevented. Further, in this case, one function may be used to exhibit another function different from the counting function. For example, when there is no operation for a predetermined time (for example, within 1 second) after the operation is performed once, a function to turn on a lamp for calling a store clerk is exhibited, and within 1 second from 1 operation. When the second operation is detected, it is conceivable to perform the counting function.

  (11) In the present embodiment, when the counting operation button is operated for less than a predetermined time (short-time operation), for example, the first ball count is counted, and when operated for a predetermined time or longer (long-time operation), the operation is performed. A number of balls that is larger than the first number of balls is counted according to time. For example, it is conceivable that 100 balls are counted in the short-time operation, while a predetermined number exceeding 100 balls, for example, 200 balls or 400 balls, is counted in the long-time operation. Also, the number of game points to be counted may be controlled to be different depending on the long press time of the counting operation button. For example, it is conceivable that 100 balls start to be counted by long-pressing for 1 second, and if the long-pressing continues for 5 seconds as it is, all the remaining balls are counted. Alternatively, it may be controlled such that a predetermined number is counted by one operation and all remaining balls are counted by the fifth operation.

  (12) “Predetermined processing” of “recording medium processing means for processing so that predetermined processing can be performed using the game points as the holding points when a predetermined recording medium processing operation is detected” , CU processing when using a card ejected from the CU inserted into another CU connected to another gaming machine (processing to withdraw the possessed ball that can be specified by the card and convert it into a gaming ball , Or shared ball processing, or wagon service processing). Alternatively, the “predetermined process” may be a process in which a prize is exchanged by receiving a card with a prize exchange machine for exchanging prizes and consuming the points specified by the card.

  Further, the above-mentioned “processing so that predetermined processing can be performed with the game point as the holding point when a predetermined recording medium processing operation is detected” means, for example, when a card return operation is detected In this process, the score is recorded on the card inserted in the CU so as to be specified, and the card is returned. Here, “recordably specified” means that the score is directly recorded on the card, and the card ID and score are recorded on the server connected to the CU without recording the score on the card. And a method of storing IDs and points in association with each other in the server.

  (13) In the present embodiment, (A) the fact that game points of “predetermined points” or more are not stored, game points are not counted even if a counting operation is performed. Is done. In the embodiment, when (B) the game points are counted until the stored game points reach the “predetermined number of points”, no more points can be counted, and a notification to that effect is given. Is done. The same number may be adopted as the predetermined number of points in these two cases (A) and (B), that is, the reference value may be different.

  (14) In the present embodiment, when the counting operation is performed during the ball firing, the counting operation is invalidated when the number of game balls at that time is equal to or less than the reference value. However, even if the number of game balls when the counting operation is detected during the ball firing exceeds the reference value, the number of balls counted in one counting operation is set to a predetermined number. In some cases, the counting operation may be invalidated when the value obtained by subtracting the predetermined number from the number of game balls when the counting operation is detected does not satisfy the reference value.

  Further, in the present embodiment, in order to invalidate the counting operation during the game, it is determined whether or not the game is in progress based on whether or not the ball firing operation has been detected. In addition to this, whether the number of in-game balls (floating balls floating in the game area 27) is 0 (not playing) or not (playing), whether or not a game is being played May be determined. In addition, it is also possible to determine whether or not the game is in progress based on whether or not the variable display device is changing, whether or not it is a big hit, whether or not the attacker is open.

  Further, “in game” when S units are applied as a gaming machine and the counting operation during the game is invalidated is, for example, a period from the start of rotation of the reels 2L, 2C, and 2R to the stop. . Alternatively, it is a period from when the start operation is detected until the reels 2L, 2C, 2R are stopped.

  (15) In FIG. 62, the process proceeds to S483 on condition that no big hit has occurred (NO in S482), but the step of S482 may be deleted and the process may proceed from S481 to S483. That is, regardless of whether or not a big hit is being made, when the number of game balls is greater than a predetermined number, a display for prompting a counting operation may be performed.

  Further, the steps of S486 and S487 may be deleted. That is, in FIG. 62, when the counting operation is not detected even after a predetermined time has elapsed since the display for prompting the counting operation, the game ball is forcibly stopped. It may not be performed.

  (16) Referring to FIG. 8, the P platform is provided with a counting ball counter that temporarily stores the counted counting balls (held balls), but does not include a counter that stores the cumulative value of the counting balls. . However, a counting ball cumulative storage counter that stores the cumulative value of counting balls may be provided on the P platform side. In addition, the CU side is provided with an area for storing card holding balls (counting balls). If a holding ball is recorded on the inserted card itself, this area holds the card holding ball. The current number of players' balls, including balls, is stored. For this reason, only in this area, the number of counting balls counted by the player in the current game cannot be specified. Therefore, an area for storing the number of counting balls counted by the player in this game may be further provided on the CU side. In this case, the CU adds balls to the area based on the information on the number of balls that are sent from the P cars after the game starts, and when the balls are converted into game balls, Subtract the holding ball.

  (17) The display for prompting the counting operation in FIG. 43 may be a display of “Please play the game after the game balls remain, so please return” or a counting button on the screen. The display may be such that 28 is displayed and blinks.

  (18) In the present embodiment, when the number of game balls is equal to or greater than a predetermined number (3,000 balls or more), “control for performing display for prompting counting operation on display” is executed as “predetermined notification control”. Is done. Here, “prompt for counting operation” is, for example, a message indicating “Please count, because the number of game balls has reached the upper limit”, or simply “Counting operation is required”. There may be. Further, the “predetermined notification control” may be a control for outputting a notification sound for prompting a counting operation from a speaker. Further, the “notification” may not be “notification for prompting the counting operation” but simply notify that “the number of game balls has reached the upper limit” (not to prompt for the counting operation). .

  Further, when the game point is equal to or greater than a predetermined first reference value (3000 balls or more), “predetermined notification control” is performed, and thereafter, the game point is set to a second reference value greater than the first reference value. It may be controlled so that the game is disabled when the game point is reached, and the game is permitted (no firing prohibited) until the game point reaches the second reference value from the first reference value. In the case where the gaming machine is a slot machine, the inoperable state can be realized by controlling the start lever to operate so that the reel does not start rotating or the betting number setting is invalidated.

  (19) In the present embodiment, when a game using game points is being performed (while the ball is being fired), if there are no more game points remaining (eg, 250 points), the counting operation is performed. Not activated. Here, the predetermined number of points is not limited to 250 points, and may be any number as long as it is 1 point or more. However, for example, when an excessively small number of points such as one point is set, a malfunction occurs when the timing of firing and the timing of counting occur almost simultaneously. Alternatively, if a counting operation is detected when the number of points is equal to or less than a predetermined number (for example, 10 points or less) and the counting operation is detected, 5 points are left for launching and the remaining points are counted. You may control to.

  In addition, when it is detected that a player who notices that the counting operation has been invalidated because there are no more points left than the predetermined number of points has been stopped, it is invalidated first. The counting operation may be activated to automatically start the counting operation. That is, in this case, the player who notices that the counting operation has been invalidated only needs to stop the firing operation, and does not need to perform the counting operation again.

  (20) In order to change the number of game points to be converted by one operation according to the time for which the count button is kept pressed, for example, when a long press (for example, continuous operation for 1 second or more), While all are counted, only 200 balls may be counted in a short press (for example, continuous operation for less than 1 second). However, in this case, when the remaining number of game balls is small, for example, when it is less than 200 balls, it is desirable that all game balls are counted by operating the counting button.

  (21) When the number of points counted by one short pressing operation of the counting button is made different according to the remaining number of game points, for example, the following may be considered. For example, when the number of game points is less than 200, all the game points are counted by one short press operation of the counting button. When the game points are 200 or more and less than 1000, 200 points are counted by one short press operation. When the game points are 1000 or more and less than 5000, 1000 points are counted by one short press operation. When the game points are 5000 or more and less than 10,000, 2000 points are counted by one short press operation. When the number of game points is 10,000 or more, 2500 points are counted by one short press operation. The above numerical values are specific examples and can be set as appropriate.

  (22) When counting game balls (game points) and converting points, not only counting display but also counting sound may be output from a speaker. In addition, when counting the game points, it is conceivable to display an image in which balls are dropped one by one from the ball storage tray to the counter.

  (23) Timing for performing conversion display (display indicating that game balls are counted and the number of balls is increased) based on the counting operation and subtracting game points on the data The timing for adding the points can be varied. The calculation may be executed after the conversion display is completed. For this purpose, count data may be transmitted from the gaming machine to the CU after the conversion display is completed. It should be noted that such a modification can be similarly applied to the case where the points are converted into game points.

  (24) In the present embodiment, in the communication between the CU and the gaming machine, a command-response method is adopted in which the CU is a primary station and the gaming machine is a secondary station. The relationship between and may be reversed. Alternatively, instead of adopting such a communication system having a master-slave relationship, a system may be employed in which both send data to the other party when a request to communicate occurs.

  (25) In FIG. 8 or 151, the game balls (game points) are stored on both the gaming machine side and the CU side, but the game balls (game points) are stored only on the game machine side, and the CU It may not be stored on the side. On the other hand, the card holding balls (scoring points) are stored only on the CU side, but may also be stored on the gaming machine side. In particular, game balls (game points) are stored only on the gaming machine side, while card holding balls (points) are stored only on the CU side to clarify the division of data storage management. Good.

  (26) The counting display and various notifications performed on the display 54 may be performed on the display 312 in the same manner.

  (27) In CU3, based on the value of the added ball number counter (added ball number) and the value of the subtracted ball number counter (subtracted ball number) transmitted from the P platform side, the stored game ball number is updated. When the number of game balls stored is subtracted based on the value of the counting ball number counter transmitted from the P platform side, if the value of the number of game balls becomes negative, an error (abnormal) determination is made. Then, error processing may be performed. As a specific example of error processing, error notification is performed by an abnormality notification lamp or the like, or an error notification signal indicating that an error has occurred is transmitted to the hall management computer or the upper server 801 (in this case, hall management). Error notification may be performed by the computer or the upper server 801).

  (28) In the above-described embodiment, the high level signal is input to the main control board 16 and the payout control board 17 when the radio sensors 163 and 173 detect radio waves. However, the radio sensors 163 and 173 Inverting amplifiers (inverters) for inverting the signals may be provided in the radio wave sensors 163 and 173 so that the signals are input to the main control board 16 and the payout control board 17 via the inverting amplifiers. By doing so, a high level signal is inputted to the main control board 16 and the payout control board 17 when the radio wave sensors 163 and 173 are not detected, while a low level signal is inputted when the radio wave is detected and the main control board 16 is detected. When the occurrence of abnormality is determined on the payout control board 17 and the radio sensors 163 and 173 are illegally pulled out, a low level signal is input to the main control board 16 and the payout control board 17 and the same as when detecting the radio wave. In addition, the main control board 16 and the payout control board 17 can determine whether an abnormality has occurred.

  (29) In the above-described embodiment, the payout control unit 171 has storage means for storing and holding the prize opening information and the round number information transmitted from the main control unit 161 when the power is turned on. It is determined whether the information of the addition number counter transmitted from the control unit 161 is consistent with the winning prize information and the round number information stored and held (see FIGS. 79 and 80). This is called “total prize ball number matching determination”. However, instead of storing and holding winning mouth information and round number information, winning control information and round number information are transmitted together with information on the addition number counter from the main control unit 161 each time, and the payout control which has received it is received. The unit 171 may perform control so as to determine whether or not the information of the received addition number counter is consistent with the received prize opening information and round number information. This is referred to as “every time transmission method of winning mouth information and round number information”.

  (30) When the game board radio wave sensor disconnection detection or the game frame radio wave sensor disconnection detection is input to the payout control board 17, the payout control board 17 may be disabled. Specific examples of the deactivation include stopping transmission of the number of additional balls to the CU 3 and stopping the counting operation of the additional ball counter.

  (31) When a lending operation or a conversion operation (lending operation) from a holding point (holding ball) to a gaming point (game ball) is detected, the gaming points may be counted up one by one. In order to shorten the waiting time of the player, a display may be made so that a plurality of points (for example, 25 points equivalent to 100 yen) are counted up. Conversely, when a game point counting operation is executed, a display may be made so that the points are counted up by a plurality of points. Furthermore, the number of units for counting up and displaying game points or points may be set from a plurality of types. In the setting, it is conceivable to use a touch panel of P or S display devices.

  (32) When the counting operation is executed, the points may be counted up at an accelerated rate when a predetermined time has elapsed since the counting up of the points was started. Alternatively, a speed-up button for accelerating the count display may be displayed on the touch panel display on the CU side or the gaming machine side, and the operation may be detected to display the acceleration count display. By performing the acceleration counting display of the points in this way, the waiting time of the player when counting a large number of gaming points can be shortened.

  (33) A touch sensor may be provided on the hitting operation handle, and the counting operation may be invalidated while the touch sensor detects that the player is holding the hitting operation handle. Invalidating the coefficient operation means both detecting the counting operation but not executing the counting operation based on the detection output, or not detecting the counting operation itself. Or, if the player does not invalidate the counting operation only by touching the hitting operation handle, and if the counting operation is disabled if the hitting operation handle is turned to such an extent that the ball firing drive pulse is output. Good.

  In these cases, when a counting operation is detected, a message “Please release handle” may be displayed on the display of the gaming machine or CU. Alternatively, when the counting operation button is displayed as an icon on the touch panel screen, the counting operation button may be grayed out to notify the player that the operation is impossible.

  (34) At least one or all of the ball lending button, the return button, the replay button, and the counting button may be provided on the gaming machine side, or may be provided on the CU side. Further, it is conceivable that the button is displayed on the display device on the gaming machine side or the CU side described as the touch panel type display device.

  (35) In S663 of FIG. 80, the presence / absence of an abnormality is determined based on whether or not the increment amount (game ball) of the addition counter at the polling interval is an appropriate value. Then, the information on which winning opening has been won and the information on the number of winning balls added by the winning (number of added balls) are transmitted from the main control board 16 to the payout control board 17, and in the payout control board 17, The presence / absence of an abnormality may be determined based on whether or not the number of prize balls that should be added according to the prize winning slot matches the received prize ball number information (number of balls to be added). This is called an “individual determination method for each winning mouth”.

  Specifically, the payout control board 17 stores winning award information transmitted from the main control board 16. The content is information on the number of prize balls (the number of added balls) associated with each winning opening (see FIG. 78 (a)). If a winning occurs during the game, the information on which winning opening is won and the information on the number of winning balls (added balls) added by the winning are associated with each other from the main control board 16 to the payout control board 17. Sent. For example, information such as “winning at the start winning opening 1 and information on the number of winning balls (added ball number) is 5” is sent. The payout control board 17 that has received it refers to the stored prize opening information (FIG. 78 (a)), and stores the information on the number of prize balls (addition balls) stored for the "start prize opening 1". Number) Read “3”. The read prize ball number information (addition ball number) “3” is compared with the received prize ball number information (addition ball number) “5”, and it is determined that an abnormality has occurred if there is a mismatch.

In other words, the gaming machines (P units, S units) that give predetermined game points by the occurrence of winnings are:
For controlling the progress of the game of the gaming machine and specifying an addition update amount for adding the score corresponding to the type of winning to the gaming point based on the occurrence of winning in any of a plurality of types of winnings Game parts (game board 26, reels and various sensor parts attached to the reels) provided with game control means (P main control boards 16, S main control boards) for generating addition update information;
A game frame configured to be able to attach the game parts (P front frame 6, reels in S units and various sensor parts attached to the reels and configurations other than the main control board for controlling the reels);
The addition update information (the number of added balls, the addition number) provided in the game frame and generated by the game control means is received, the game points are added and updated based on the addition update information, and the game points Game point processing means (payout control board 17) for subtracting and updating the game points based on use in games,
The addition update amount of the game points to be added and updated in accordance with the occurrence of the winning is determined in advance according to the type of winning that has occurred (FIG. 78 (a)),
The game control means stores a predetermined addition update amount as a prescribed addition update amount (winning opening information is stored in a memory such as a ROM of the main control unit 161 provided on the main control board 16. ), Processing for transmitting the prescribed addition update amount to the game point processing means (FIG. 77: winning opening information is transmitted from the main control board 16 to the payout control board 17),
The game point processing means receives the addition update information, the type of winning that causes the addition update information, and the number of winnings from the game control means, and the prescribed addition updating corresponding to the type of winning Appropriateness determining means for determining whether or not the added update amount is an appropriate size depending on whether or not the product of the number of winnings with respect to the amount matches the added update amount specified by the added update information including.

  Such an “individual determination method for each winning mouth” includes “total winning ball number matching determination” described in the main embodiment, and “the winning mouth information and round number information transmitted every time” described in (29) above. Any of the “method” may be applied.

  (36) The gaming system according to the present embodiment includes a point use operation means for executing a predetermined point use process using points. Here, the predetermined score use processing includes processing for executing the wagon service, or processing for dividing and sharing the score (held ball) (processing for dividing and transferring the score to another person). It is a concept. The holding point use operation means is, for example, a touch panel. Alternatively, the point use operation means may be a remote controller that is given to a clerk of the game store to instruct the CU or the gaming machine to execute the point use processing.

  (37) The sequence control shown in FIG. 32 to FIG. 60 and FIG. 119 to FIG. 149 is the transmission / reception sequence between control devices in a single gaming machine such as CU3, P stand 2, S stand 2S, etc. However, the present invention may be applied to a transmission / reception sequence between a plurality of gaming machines such as CU3, P stand 2, jet counter, POS terminal, and the like.

  (38) In the above-described embodiment, the identity of the player is determined based on the card ID. Instead of or in addition to this, the identity of the player is determined based on the player's fingerprint, retina and other biomass. A determination may be made.

  (39) In the above-described embodiment, as described with reference to FIGS. 53, 55, 57, etc., the CU presents the score transmitted from the gaming machine on the condition that the card ID matches the insertion time. Is sent from the gaming machine as a further condition that the communication has started before a predetermined time (for example, 20 minutes) has passed since the communication between the gaming machine and the CU3 was interrupted. The score may be controlled so that the CU stores it as the current score. Specifically, a timer for measuring a predetermined time (for example, 20 minutes) after communication between the gaming machine and CU3 is interrupted is provided in the CU control unit 323 at the start of communication between the gaming machine and CU3 (at the time of recovery). It is determined whether or not the timer is still timed (in a state where time is not up), and on the further condition that it is a result of determination that the timer is timed, the score sent from the gaming machine is the current value of the CU. It controls to memorize as a score.

  Further, instead of the insertion time, the CU may store the score transmitted from the gaming machine on condition that the last serial number used between the CU 3 and the P stand 2 matches, as the current score. .

  (40) In the above-described embodiment, only the authentication for the board serial ID is performed as the challenge response authentication between the CU control unit 323 and the security chip 325b, but the serial ID (also referred to as SID) of the CU control unit 323 is used. ) Authentication may also be performed. Specifically, the SID is stored in the security chip 325b at the manufacturing stage of the security chip 325b, and when the CU3 is loaded into the game hall and connected to the upper server 801, the key management server 800 passes through the upper server 801. The SID is downloaded and stored in the CU control unit 323, and challenge response authentication by SID is performed between the CU control unit 323 and the security chip 325b.

That is, the first control means (CU control unit 323 or CU3, P stand 2, jet counter, POS terminal, etc.) and the second control means (security chip 325b, or communicatively connected to the first control means) CU3, P stand 2, jet counter, POS terminal, etc.) and third control means communicably connected to the second control means (communication control IC 325a or CU3, P stand 2, jet counter, POS terminal, etc.) A gaming system (or gaming device) including:
The first control means stores second control means identification information for identifying the second control means that is an authentication partner (stores a board serial ID),
The third control means stores third control means identification information for identifying the third control means and the second control means identification information (stores ID information and the like),
The second control unit includes a first control unit identification information authentication (SID of the CU control unit 323) for identifying the first control unit, the second control unit identification information (substrate serial ID), and the first control unit identification information. 3 Control means identification information (ID information etc.) is stored,
Between the first control means and the second control means,
A challenge code (challenge code in FIG. 131) is generated using the second control means identification information stored in the second control means and transmitted to the first control means (board serial ID authentication response in FIG. 131). 1) In the first control means, using the stored second control means identification information, a response code (response code in FIG. 131) is generated from the received challenge code and sent to the second control means. A first challenge response authentication process in which the response is received (substrate serial ID authentication request 2 in FIG. 131) and the second control means determines the suitability of the response code received using the stored second control means identification information. (Response code check in FIG. 131),
A challenge code is generated using first control means identification information authentication (storing SID) for identifying the first control means stored in the first control means, and transmitted to the second control means. In the second control means, using the stored first control means identification information, a response code is generated from the received challenge code and returned to the first control means, and in the first control means Then, a second challenge response authentication process for determining the suitability of the received response code using the stored first control means identification information is performed.

Further, in the above gaming system (or gaming machine), mutual authentication processing other than the first and second challenge response authentication processing is performed between the first control means and the second control means,
As a result of the first and second challenge response authentication processes, when the proper authentication is not performed, the mutual authentication process is executed without notifying improperness at the authentication stage. Appropriate notification may be performed.

<Various configurations included in the embodiment>
(1-1) The present invention is a gaming system for enabling a game with a gaming machine (P units, S units) that grants predetermined game points (game balls, game points) upon occurrence of a prize. ,
Game point storage means for storing the game points (game ball counter of FIG. 8, game score counter of FIG. 151);
Conversion operation means (counting buttons 28, 28S) for converting the game points into predetermined points (balls, points);
Display means (displays 54, 312, and 510) for performing conversion display of the game points to the possession points based on the detection of the operation of the conversion operation means;
When a predetermined recording medium processing operation (card return operation (operation of the return button 322)) is detected, the game point is used as the holding point, and a predetermined process (a card is received by a gift exchange machine) is specified by the card. Processing that allows exchanging prizes by consuming points, and processing of CUs when a card ejected from a CU is inserted into another CU connected to another gaming machine and used) Recording medium processing means (CU control unit 323) for processing (processing that makes it possible to identify a ball with a card ID, for example, recording a ball on a card or ID management of a ball with a computer);
And enabling means (FIG. 43) for enabling the recording medium processing operation when conversion display for all game points stored in the gaming point storage means is completed.

  According to the above configuration, the recording medium processing operation can be performed through the display in which the game points obtained by the game are temporarily converted into points by the player's operation. Therefore, a new system using game points without causing confusion to a player who is accustomed to the conventional game system that counts game media obtained by gaming and makes it possible to specify the counting result by a recording medium Can provide.

(1-2) The present invention is a game point processing device (CU, P, S) for enabling a game to give predetermined game points (game balls, game points) by the occurrence of a prize. ,
Based on the detection of a conversion operation (operation of the counting buttons 28 and 28S) for converting the game points into predetermined points (holding balls, points), conversion of the game points into the points Display means (displays 54, 312, and 510) for performing display;
When a predetermined recording medium processing operation (card return operation (operation of the return button 322)) is detected, the game point is used as the holding point, and a predetermined process (a card is received by a gift exchange machine) is specified by the card. Processing that allows exchanging prizes by consuming points, and processing of CUs when a card ejected from a CU is inserted into another CU connected to another gaming machine and used) Recording medium processing means (CU control unit 323) for processing (processing that makes it possible to identify a ball with a card ID, for example, recording a ball on a card or ID management of a ball with a computer);
And an enabling means (FIG. 43) for enabling the recording medium processing operation when conversion display for all game points is completed.

  According to the above configuration, the recording medium processing operation can be performed through the display in which the game points obtained by the game are temporarily converted into points by the player's operation. Therefore, a new system using game points without causing confusion to a player who is accustomed to the conventional game system that counts game media obtained by gaming and makes it possible to specify the counting result by a recording medium Can provide.

(1-3) The gaming system according to (1-1),
Conversion processing means (FIG. 43, payout control unit 171, CU control unit 323) for converting the game points into the holding points based on the detection of the operation of the conversion operation means;
A score storage means for storing the score ("card holding ball (count ball)" on the CU side in FIG. 8).

  According to the above configuration, since the game points are actually converted into score points and stored as score points in addition to the display, a new system that uses game points in a form that is even closer to the conventional system. Can provide.

(1-4) (1-1) The gaming system according to (1-3),
A gaming device (CU) including the recording medium processing means;
A gaming machine (P units, S units) including the display means,
The gaming device includes display control means (display control unit 350) for controlling display of the display means.

  According to the above configuration, by providing the display means on the game side, it becomes easier for the player facing the gaming machine to see the state of the conversion display, and at the same time, the display control means is provided on the gaming device side to control the display on the gaming machine side. The burden can be reduced.

(1-5) The gaming system according to (1-4),
The gaming machine includes the conversion operation means (count buttons 28, 28S).

  According to said structure, the operativity of the player facing a game machine can be improved by providing a conversion operation means in the game side.

(1-6) (1-1) (1-3) (1-4) The gaming system according to (1-5),
If the recording medium processing operation is detected when conversion display for all game points is not performed by the display means, the display means performs display for prompting operation of the conversion operation means (FIG. 43).

  According to the above configuration, the display prompting the operation of the conversion operation means is performed, so that the player can be informed of the reason why the recording medium processing operation has not been validated.

(1-7) (1-4) The gaming system according to (1-5),
The gaming machine includes the gaming point storage means (game ball number counter in FIG. 8, game point counter in FIG. 151),
The gaming device includes a point storage means (the area of card holding balls (counting balls) in FIG. 8) for storing the points.

  According to the above configuration, the management of game points and points can be shared between the gaming machine and the gaming device, and the management burden of each can be reduced.

(1-8) (1-1) The gaming system according to (1-3) to (1-7),
The recording medium processing means includes
A score processing means for performing score processing for enabling the score stored in the score storage means to be specified by the recording information of the recording medium (the CU control unit 323 records the score on the card, or the card ID and score are sent to the server for storage)
Return processing means (the CU control unit 323 ejects the card) for returning the recording medium to the player after the holding point processing is performed.

  According to the above configuration, since the score process and the return process of the recording medium are performed together by the recording medium processing operation, the player's operation when ending the game becomes easy.

(2-1) The present invention is a gaming system for enabling a game with a gaming machine (P units, S units) that grants predetermined game points (game balls, game points) upon occurrence of a prize. ,
Game point storage means for storing the game points (game ball counter of FIG. 8, game score counter of FIG. 151);
Conversion operation means (counting buttons 28, 28S) for converting the game points into predetermined points (balls, points);
Display means (displays 54, 312, and 510) for performing conversion display of the game points to the possession points based on the detection of the operation of the conversion operation means;
Notification control for performing predetermined notification control (control for displaying a prompt for a counting operation on a display) when the number of game points stored in the game point storage means is equal to or greater than a predetermined number (3,000 balls or more). Means (S489 in FIG. 62).

  According to said structure, the step which converts the game point obtained by the game into a point once by operation of a player arises. Therefore, a new system using game points can be provided without causing confusion to players who are accustomed to the conventional game system for counting game media obtained by games. In addition, if the number of game points is greater than or equal to a predetermined number of points, predetermined notification control is performed, which makes it possible to simulate a system similar to the conventional system that notifies when the game medium is full, Can provide a system that is familiar to players who are used to the system.

(2-2) The present invention is a game point processing device (CU, P, S) for enabling a game to give predetermined game points (game balls, game points) by the occurrence of winnings. ,
Based on the detection of a conversion operation (operation of the counting buttons 28 and 28S) for converting the game points into predetermined points (holding balls, points), conversion of the game points into the points Display means (displays 54, 312, and 510) for performing display;
Notification control means (S489 in FIG. 62) for performing predetermined notification control (control for prompting the counting operation on the display) when the number of game points is equal to or greater than a predetermined number (3,000 balls or more). Including.

  According to said structure, the step which converts the game point obtained by the game into a point once by operation of a player arises. Therefore, a new system using game points can be provided without causing confusion to players who are accustomed to the conventional game system for counting game media obtained by games. In addition, if the number of game points is greater than or equal to a predetermined number of points, predetermined notification control is performed, which makes it possible to simulate a system similar to the conventional system that notifies when the game medium is full, Can provide a system that is familiar to players who are used to the system.

(2-3) The gaming system according to (2-1),
The notification control means is means for controlling the display means (display control unit 350), and when the game points stored in the game point storage means are equal to or greater than the predetermined number, Is displayed on the display means (FIG. 62).

  According to the above configuration, since the display prompting the conversion operation is performed, it is easy for the player to understand the meaning of the notification.

(2-4) (2-1) The gaming system according to (2-3),
Disabling means (S486 in FIG. 62; stop firing) is included for controlling the gaming machine to a game-impossible state when the game points stored in the game point storage means are equal to or greater than the predetermined number of points.

  According to the above configuration, if the number of game points is equal to or greater than a predetermined number, the game is disabled, so that a conversion operation can be prompted.

(3-1) The present invention is a gaming system for enabling a game with a gaming machine (P units, S units) that gives predetermined game points (game balls, game points) upon occurrence of a prize. ,
Game point storage means for storing the game points (game ball counter of FIG. 8, game score counter of FIG. 151);
Conversion operation means (counting buttons 28, 28S) for converting the game points into predetermined points (balls, points);
Display means (displays 54, 312, and 510) for performing conversion display of the game points to the possession points based on the detection of the operation of the conversion operation means;
When a game is being played by the gaming machine using the game points (while the ball is being fired), game points of a predetermined number or more (for example, 250 points or more) are stored in the game point storage means. On the condition, the validation means (FIG. 46) for validating the operation of the conversion manipulation means.

  According to said structure, the step which converts the game point obtained by the game into a point once by operation of a player arises. Therefore, a new system using game points can be provided without causing confusion to players who are accustomed to the conventional game system for counting game media obtained by games. Moreover, when a game using game points is being performed, the conversion operation by the conversion operation means is not effective unless there are more game points than the predetermined number of points, so that there are few game points left by the conversion operation. The game continues even though the conversion display timing overlaps with the timing at which the remaining few game points are consumed due to the continuation of the game, and the game points necessary for the game have been converted and displayed as points. It is possible to prevent such a situation from occurring.

(3-2) The present invention is a game point processing device (CU, P, S) for enabling a game to give a predetermined game point (game ball, game point) by the occurrence of a prize. ,
Based on the detection of a conversion operation (operation of the counting buttons 28 and 28S) for converting the game points into predetermined points (holding balls, points), conversion of the game points into the points Display means (displays 54, 312, and 510) for performing display;
When a game using the gaming machine using the gaming point is being performed (while the ball is being fired), the game is performed on the condition that a predetermined number or more (for example, 250 or more) of gaming points remain. And validating means for validating the conversion operation (FIG. 46).

  According to said structure, the step which converts the game point obtained by the game into a point once by operation of a player arises. Therefore, a new system using game points can be provided without causing confusion to players who are accustomed to the conventional game system for counting game media obtained by games. Moreover, when a game using game points is being performed, the conversion operation by the conversion operation means is not effective unless there are more game points than the predetermined number of points, so that there are few game points left by the conversion operation. The game continues even though the conversion display timing overlaps with the timing at which the remaining few game points are consumed due to the continuation of the game, and the game points necessary for the game have been converted and displayed as points. It is possible to prevent such a situation from occurring.

(3-3) The gaming system according to (3-1),
When a game is being played by the gaming machine using the game points, and the operation of the conversion operation means is detected in a state where the game point storage means does not store more than the predetermined number of game points. , Including notification control means for performing first notification control (control for displaying on the display that the counting operation has been invalidated because the game is in progress and the number of game balls is 250 or less).

  According to the above configuration, the conversion operation is not effective for the player because the first notification control is performed when the conversion operation is performed in a state where a predetermined number of game points remain during execution of the game using the game points. Can be understood.

(3-4) (3-1) The gaming system according to (3-3),
Conversion processing means (FIG. 43, payout control unit 171) that performs conversion processing for converting the game points stored in the game point storage means into the holding points based on the detection of the operation of the conversion operation means. CU control unit 323),
A score storage means for storing the score ("card holding ball (count ball)" on the CU side in FIG. 8);
When the conversion processing means detects an operation of the conversion operation means when a game is being played by the gaming machine using the game points, the game points stored in the game point storage means The conversion process is performed until the predetermined number of points is reached (FIG. 46),
When the conversion process is performed until the game point stored in the game point storage unit reaches the predetermined number of points, the notification control unit disables second notification control (counting operation is invalidated halfway). Control to display this).

  According to the above configuration, since the second notification control is performed when the conversion operation is performed during the execution of the game using the game points and the game points reach a predetermined number of points that are not further converted, the second notification control is performed. The player can understand that the game points are not converted.

(4-1) The present invention is a gaming system for enabling a game by a gaming machine (P, S) that gives predetermined game points (game balls, game points) by occurrence of a winning. ,
Game point storage means for storing the game points (game ball counter of FIG. 8, game score counter of FIG. 151);
Conversion operation means (counting buttons 28, 28S) for converting the game points into predetermined points (balls, points);
Conversion processing means (FIG. 43, payout control unit 171, CU control unit 323) for converting the game points into the holding points based on the detection of the operation of the conversion operation means;
A score storage means for storing the score (“card holding ball (count ball)” on the CU side in FIG. 8);
A point use operation means (touch panel; FIG. 63, etc.) for executing predetermined point use processing (wagon service, point sharing) using the points;
On the basis of the detected operation of the holding point use operating means, a deduction means for subtracting the points necessary for the holding point use processing from the holding points stored in the holding point storage means (FIGS. 59 and 59). 60)
When the score stored in the score storage means is less than the score required for the score use processing, the predetermined notification control (Fig. 59, Fig. 60; "Please press the count button for lack of balls" ”And a notification control means (display control unit 350) for performing display on the display).

  According to said structure, the step which converts the game point obtained by the game into a point once by operation of a player arises. Therefore, a new system using game points can be provided without causing confusion to players who are accustomed to the conventional game system for counting game media obtained by games. In addition, it is possible to execute the score use processing in exchange for the score after conversion, and when the remaining score is less than the number necessary for the score use processing, a predetermined notification control is performed. It is possible to prompt the player to perform an operation for converting the game points into points in order to execute the points use processing.

(4-2) The present invention is a game point processing device (CU, P units, S units) for enabling a game in which predetermined game points (game balls, game points) are given by the occurrence of winnings. ,
Based on the detection of a conversion operation (operation of the counting buttons 28 and 28S) for converting the game points into predetermined points (held balls, points), the game points are converted into the points. Conversion processing means (FIG. 43, payout control unit 171, CU control unit 323),
A score storage means for storing the score (“card holding ball (count ball)” on the CU side in FIG. 8);
A point use operation means (touch panel; FIG. 63, etc.) for executing predetermined point use processing (wagon service, point sharing) using the points;
On the basis of the detected operation of the holding point use operating means, a deduction means for subtracting the points necessary for the holding point use processing from the holding points stored in the holding point storage means (FIGS. 59 and 59). 60)
When the score stored in the score storage means is less than the score required for the score use processing, the predetermined notification control (Fig. 59, Fig. 60; "Please press the count button for lack of balls" ”And a notification control means (display control unit 350) for performing display on the display).

  According to said structure, the step which converts the game point obtained by the game into a point once by operation of a player arises. Therefore, a new system using game points can be provided without causing confusion to players who are accustomed to the conventional game system for counting game media obtained by games. In addition, it is possible to execute the score use processing in exchange for the score after conversion, and when the remaining score is less than the number of points necessary for the score use processing, predetermined notification control is performed. It is possible to prompt the player to perform an operation for converting the game points into points in order to execute the desired point use processing.

(4-3) The gaming system according to (4-1),
When a predetermined recording medium processing operation (card return operation (operation of the return button 322)) is detected, the game point is used as the holding point, and a predetermined process (a card is received by a gift exchange machine) is specified by the card. Processing that allows exchanging prizes by consuming points, and processing of CUs when a card ejected from a CU is inserted into another CU connected to another gaming machine and used) It includes a recording medium processing means (CU control unit 323) that performs processing (processing that makes it possible to identify the ball with the ID of the card, for example, recording the ball on the card, or ID management of the ball using a computer).

  According to the above configuration, the recording medium processing operation can be performed through the display in which the game points obtained by the game are temporarily converted into points by the player's operation. Therefore, a new system using game points without causing confusion to a player who is accustomed to the conventional game system that counts game media obtained by gaming and makes it possible to specify the counting result by a recording medium Can provide.

(4-4) The gaming system according to (4-3),
A gaming device (CU) including the recording medium processing means;
A gaming machine (P units, S units) provided with display means (displays 54, 510) for performing conversion display of the gaming points to the holding points based on detection of the operation of the conversion operation means. Including
The gaming device includes display control means (display control unit 350) for controlling display of the display means.

  According to the above configuration, by providing the display means on the game side, it becomes easier for the player facing the gaming machine to see the state of the conversion display, and at the same time, the display control means is provided on the gaming device side to control the display on the gaming machine side. The burden can be reduced.

(4-5) The gaming system according to (4-4),
The gaming machine includes the conversion operation means (count buttons 28, 28S).

  According to said structure, the operativity of the player facing a game machine can be improved by providing a conversion operation means in the game side.

(4-6) (4-4) The gaming system according to (4-5),
The gaming machine includes the gaming point storage means (game ball number counter in FIG. 8, game point counter in FIG. 151),
The gaming apparatus includes the holding point storage means (the area of card holding balls (counting balls) in FIG. 8).

  According to the above configuration, the management of game points and points can be shared between the gaming machine and the gaming device, and the management burden of each can be reduced.

(4-7) The gaming system according to (4-3) to (4-6),
The recording medium processing means includes
A score processing means (a CU control unit 323 scores points on a card) for performing a score process so that the game points stored in the game point storage means can be specified by the recorded information of the recording medium as the score. Or send the card ID and points to the server for storage)
Return processing means (the CU control unit 323 ejects the card) for returning the recording medium to the player after the holding point processing is performed.

  According to the above configuration, since the score process and the return process of the recording medium are performed together by the recording medium processing operation, the player's operation when ending the game becomes easy.

(5-1) The present invention is a gaming system for enabling a game by a gaming machine (P units, S units) that grants predetermined game points (game balls, game points) upon occurrence of a prize. ,
Game point storage means for storing the game points (game ball counter of FIG. 8, game score counter of FIG. 151);
Conversion operation means (counting buttons 28, 28S) for converting the game points into predetermined points (balls, points);
Display means (displays 54, 312, and 510) for performing conversion display of the game points to the possession points based on the detection of the operation of the conversion operation means;
In accordance with an operation on the conversion operation means, a total conversion operation (“total counting” in FIG. 84) for converting and displaying all game points stored in the game point storage means to the holding points, and the game points It is configured to be able to execute a partial conversion operation (“partial counting” in FIG. 84) for converting and displaying a part of the game points stored in the storage means to the holding points.

  According to said structure, the step which converts the game point obtained by the game into a point once by operation of a player arises. Therefore, a new system using game points can be provided without causing confusion to players who are accustomed to the conventional game system for counting game media obtained by games. In addition, since all conversion operations and partial conversion operations of game points are possible, game points can be obtained in a manner that is closer to that of a conventional game system that allows partial counting of game media obtained by games. A new system can be provided.

(5-2) The present invention is a game point processing device (CU, P units, S units) for enabling a game in which predetermined game points (game balls, game points) are given by the occurrence of winnings. ,
A conversion operation means for converting the game points into predetermined points (holding balls, points);
Display means (displays 54, 312, and 510) for performing conversion display of the game points to the possession points based on the detection of the operation of the conversion operation means;
In response to an operation on the conversion operation means, a total conversion operation (“total counting” in FIG. 84) for converting and displaying all game points into the points, and a part of the game points as the points A partial conversion operation (“partial counting” in FIG. 84) for conversion display can be executed.

  According to said structure, the step which converts the game point obtained by the game into a point once by operation of a player arises. Therefore, a new system using game points can be provided without causing confusion to players who are accustomed to the conventional game system for counting game media obtained by games. In addition, since all conversion operations and partial conversion operations of game points are possible, game points can be obtained in a manner that is closer to that of a conventional game system that allows partial counting of game media obtained by games. A new system can be provided.

(5-3) The gaming system according to (5-1),
The display means changes the number of game points to be converted and displayed to the holding points by one operation of the conversion operation means according to the continuous operation time for which the conversion operation means is continuously operated (100 balls for a short press). , More than 400 balls in long press).

  According to the above configuration, since the number of game points to be converted and displayed by one operation of the conversion operation means differs according to the continuous operation time during which the conversion operation means continues to be operated, the game for operating the conversion operation means Convenience can be improved.

(5-4) The gaming system according to (5-1),
The display means changes the number of game points to be converted and displayed to the holding points by one operation of the conversion operation means according to the number of game points stored in the game point storage means (FIG. 83). S694 to S696).

  According to the above configuration, since the number of game points to be converted and displayed by one operation of the conversion operation means differs according to the number of game points stored in the game point storage means, the game points are compared. Even if the number of game points is large, the number of operations of the conversion operation means necessary for converting and displaying all the game points is not extremely increased, thereby improving operability.

(5-5) The gaming system according to (5-1),
The display means converts and displays a predetermined number of game points into the holding points by a single operation of the conversion operation means (100 balls for short press (FIG. 43), a predetermined number of 100 balls or more for long press, For example, it may be 200 or 400.)

  According to the above configuration, a predetermined number of game points are converted and displayed by one operation of the conversion operation means, so that the player can easily understand the relationship between the conversion operation and the conversion display target game points. .

(5-6) The gaming system according to (5-1),
The conversion operation means includes a first conversion operation means capable of performing an operation for converting and displaying game points having a first size score to the holding points, and game points having a second size score as the game points. And a second conversion operation means capable of performing an operation for conversion to a holding point (FIG. 84).

  According to the above configuration, the player can select the number of game points to be converted and displayed in one operation by selectively operating the first and second conversion operation means.

(6-1) The present invention is a gaming system for enabling a game with a gaming machine (P units, S units) that grants predetermined game points (game balls, game points) upon occurrence of a prize. ,
Game point storage means for storing the game points (game ball counter of FIG. 8, game score counter of FIG. 151);
Conversion operation means (counting buttons 28, 28S) for converting the game points into predetermined points (balls, points);
Conversion processing means (FIG. 43, payout control unit 171, CU control unit 323) for converting the game points into the holding points based on the detection of the operation of the conversion operation means;
A score storage means for storing the score (“card holding ball (count ball)” on the CU side in FIG. 8);
Use of the point use operation means (replay button 319) for receiving a predetermined service using the point;
Notification control means (display control unit 350, FIG. 59, FIG. 60, FIG. 63 to FIG. 76) for performing control for notifying a service that can be received by the player using the points;
On the basis of the detected operation of the point use operation means, point deduction means for deducting points necessary for the service from the points stored in the point storage means (see “Point Points” in FIG. 59). After the payment is completed, the shared ball processing ends ”, FIG. 60“ After the payment is completed, the wagon service ends ”),
The notification control means may be a case where game points are stored in the game point storage means when the points stored in the score storage means are less than the points required for a predetermined service. The player is controlled so as not to notify the predetermined service as a service that can be received by the player (displaying as a service that can be received by the player by displaying a cross as shown in FIGS. 71 and 72) (Alternatively, menus that cannot be purchased even if the number of balls including game balls and game balls is added may be controlled so as not to be displayed.)

  According to said structure, the step which converts the game point obtained by the game into a point once by operation of a player arises. Therefore, a new system using game points can be provided without causing confusion to players who are accustomed to the conventional game system for counting game media obtained by games. Further, when the player receives a predetermined service using the points stored in the point storage means, a service that can be received by the player using the points is notified, and the player Recognize services that can be received. In addition, when the score stored in the score storage means is less than the score required for a predetermined service, even if the game points are stored in the game point storage means, the player receives Since the control for notifying the predetermined service as a service that can be performed is not performed, there is a disadvantage that the player is misunderstood that the service can be received within the range of the points stored in the point storage means. Can be prevented.

  (6-2) In the gaming system according to (6-1), the notification control means can control to notify a plurality of types of services having different necessary points (FIGS. 64, 71, 72). ), A service within a score that is stored in the score storage means (the menu surrounded by a solid line in FIGS. 71 and 72) and a required score are stored in the score storage means. The required points are within the updated points by converting the game points that exceed the existing points but can be converted by the operation of the conversion operation means into the points and adding and updating the points. Control is performed to distinguish and notify services that can be performed (menus surrounded by broken lines in FIGS. 71 and 72).

  According to such a configuration, the player can receive a service that can be received within the score stored in the score storage means, and the score stored in the score storage means, among a plurality of types of services. However, it is possible to distinguish and recognize services that can be received by converting game points into points and adding and updating points. The convenience of the player when receiving the service is improved.

  (6-3) In the gaming system according to (6-1) or (6-2), the notification control unit can control to notify a plurality of types of services having different necessary points (FIG. 64). 71, FIG. 72), a service in which the required points exceed the updated points even if all the game points that can be converted by the operation of the conversion operation means are converted into the points and added and updated. (A menu that cannot be purchased even with the number of balls including a game ball and game balls may be controlled so as not to be displayed).

  According to the above configuration, even if all the game points are converted into points and added and updated, control for notifying a service in which the required points exceed the points after the update is not performed. The misunderstanding of the player that it can be received can be prevented.

  (6-4) In the gaming system of (6-1) or (6-2), the notification control means can control to notify a plurality of types of services having different necessary points (FIG. 64). 71, FIG. 72), a service in which the required points exceed the updated points even if all the game points that can be converted by the operation of the conversion operation means are converted into the points and added and updated. Controls to notify that the service cannot be received by the player (displays that the service cannot be received by the player by displaying a cross as shown in FIGS. 71 and 72).

  According to the above configuration, even if all the game points are converted into points and added and updated, the service in which the required points exceed the updated points is notified as a service that the player cannot receive. Therefore, it is possible to prevent the player from misunderstanding that such services can be received.

  (6-5) In the gaming system according to any one of (6-1) to (6-4) above, the notification control unit is configured to obtain a score in which a required score is stored in the score storage unit. A service is selected that allows the required points to be within the updated points by converting the game points that can be converted by the operation of the conversion operation means into the points and adding and updating them. When this is done, notification control is made to prompt the operation of the conversion processing means ("There are not enough balls. Press the counting button to replenish the balls").

  According to the above configuration, the selected service exceeds the score stored in the score storage means, but the game score is converted into a score to be added and updated within the updated score range. When it is a service that can be provided, notification control that prompts the operation of the conversion processing means is performed, so that the player can perform the conversion operation according to the notification and receive the service, and the convenience of the player Improves.

  (6-6) In the gaming system according to (6-5), the notification control means reduces the game points while performing notification control for prompting the operation of the conversion operation means, and stores the holding points. When it becomes impossible to update the score stored in the means to the required score, control is performed to notify that the service cannot be selected (see “There are not enough balls in FIG. 65, FIG. 73. If the number of gaming balls decreases while the display of “Please press and replenish the holding balls” is displayed and the number of holding balls cannot be updated to the required number of holding balls, the display control unit 350 displays “ "The service cannot be selected because the number of balls has decreased."

  According to the above configuration, the player can recognize that the service cannot be selected despite the notification that prompts the user to operate the conversion operation means.

  (6-7) In the gaming system of (6-1) to (6-6) above, when a game is being played by the gaming machine using the gaming points, a predetermined number of points are stored in the gaming point storage means. On the condition that the above game points are stored, it further includes an enabling means (S691 to S698 in FIG. 83) for enabling the operation of the conversion operating means.

  According to the above configuration, when a game using game points is being performed, the conversion operation by the conversion operation means is not effective unless there are at least a predetermined number of game points remaining. The timing at which the game points that have not been converted are displayed and the timing at which the remaining few game points are consumed due to the continuation of the game overlap, and the game points necessary for the game have been converted into points. Therefore, it is possible to prevent the situation where the game is continued without being generated.

(6-8) Another aspect of the present invention is to connect to a gaming machine (P units, S units) provided with game point storage means for storing a predetermined game point given by the occurrence of a prize. A gaming device (CU) for enabling a game in the gaming machine, comprising a connecting portion (connector) of
Conversion processing means for providing a service for converting the gaming points into the holding points based on the detection of the conversion operation (the pressing operation of the counting buttons 28 and 28S) for converting the gaming points into the predetermined holding points. (FIG. 43, payout control unit 171, CU control unit 323),
A score storage means for storing the score (“card holding ball (count ball)” on the CU side in FIG. 8);
Notification control means (display control unit 350, FIG. 59, FIG. 60, FIG. 63 to FIG. 76) for performing control for notifying a service that can be received by the player using the points;
Based on the detection of a point use operation for receiving a predetermined service using the points, the points necessary for the service are deducted from the points stored in the point storage means. 59. Points deduction means ("Moving the ball sharing process ends after adjusting the points", Fig. 60 "Ending the wagon service after adjusting the points"),
The notification control means may be a case where game points are stored in the game point storage means when the points stored in the score storage means are less than the points required for a predetermined service. The player is controlled so as not to notify the predetermined service as a service that can be received by the player (displaying as a service that can be received by the player by displaying a cross as shown in FIGS. 71 and 72) (Alternatively, menus that cannot be purchased even if the number of balls including game balls and game balls is added may be controlled so as not to be displayed.)

  According to said structure, the step which converts the game point obtained by the game into a point once by operation of a player arises. Therefore, a new system using game points can be provided without causing confusion to players who are accustomed to the conventional game system for counting game media obtained by games. Further, when the player receives a predetermined service using the points stored in the point storage means, a service that can be received by the player using the points is notified, and the player Recognize services that can be received. In addition, when the score stored in the score storage means is less than the score required for a predetermined service, even if the game points are stored in the game point storage means, the player receives Since the control for notifying the predetermined service as a service that can be performed is not performed, there is a disadvantage that the player is misunderstood that the service can be received within the range of the points stored in the point storage means. Can be prevented.

  (6-9) In the gaming machine according to (6-8), the notification control means can control to notify a plurality of types of services having different necessary points (FIGS. 64, 71, 72). ), A service within a score that is stored in the score storage means (the menu surrounded by a solid line in FIGS. 71 and 72) and a required score are stored in the score storage means. The necessary points may be within the updated points by converting the game points that exceed the existing points but can be converted by the conversion operation into the points and adding and updating the points. Control is performed to distinguish and notify possible services (menus surrounded by broken lines in FIGS. 71 and 72).

  According to the above configuration, the player can receive a service that can be received within the score stored in the score storage means, and the score stored in the score storage means, from among a plurality of types of services. However, the service that can be received by converting the game points into points and adding and updating the points can be recognized separately, and the convenience of the player when receiving the services is improved.

  (6-10) In the gaming device of the above (6-8) or (6-9), the notification control means can control to notify a plurality of types of services having different necessary points (FIG. 64). 71, FIG. 72), even if all the game points that can be converted by the conversion operation are converted to the points and added and updated, the service in which the required points exceed the updated points will not be notified. (Menus that cannot be purchased even with the number of balls including game balls and game balls may be controlled so as not to be displayed).

  According to the above configuration, even if all the game points are converted into points and added and updated, control for notifying a service in which the required points exceed the points after the update is not performed. The misunderstanding of the player that it can be received can be prevented.

  (6-11) In the gaming device according to (6-8) or (6-9), the notification control means can control to notify a plurality of types of services having different necessary points (FIG. 64). 71, FIG. 72), even if all the game points that can be converted by the conversion operation are converted to the points and added and updated, the service in which the required points exceed the points after the update is a player Is controlled as a service that cannot be received (displays that the service cannot be received by the player by displaying a cross as shown in FIGS. 71 and 72).

  According to the above configuration, even if all the game points are converted into points and added and updated, the service in which the required points exceed the updated points is notified as a service that the player cannot receive. Therefore, it is possible to prevent a player from misunderstanding that such a service can be received.

  (6-12) In the gaming apparatus according to any one of (6-8) to (6-11) above, the notification control unit determines a score in which a required score is stored in the score storage unit. A service has been selected that allows the required points to be within the updated points by converting all of the game points that can be converted by the conversion operation to the points and adding and updating them. In some cases, notification control that prompts the operation of the conversion processing means is performed ("There are not enough balls. Press the counting button to replenish the balls").

  According to the above configuration, the selected service exceeds the score stored in the score storage means, but the game score is converted into a score to be added and updated within the updated score range. When it is a service that can be provided, notification control that prompts the operation of the conversion processing means is performed, so that the player can perform the conversion operation according to the notification and receive the service, and the convenience of the player Improves.

  (6-13) In the gaming machine according to (6-12), the notification control means decreases the number of game points stored during the notification control for prompting the conversion operation and stores it in the holding point storage means. If it is not possible to update the possessed score to the required score, control is performed to notify that the service cannot be selected (see FIG. 65 and FIG. 73, “There are not enough balls. If the number of game balls decreases while the display of “please replenish balls” is performed and the number of balls cannot be updated to the required number of balls, the display control unit 350 displays “the number of game balls is "The service cannot be selected because it has decreased."

  According to the above configuration, the player can recognize that the service cannot be selected despite the notification that prompts the user to operate the conversion operation means.

  (6-14) In the gaming apparatus according to any one of (6-8) to (6-13), when the game is performed by the gaming machine using the gaming point, the conversion processing means is The conversion process when the conversion operation is detected is performed on the condition that the game point storage means stores at least a predetermined number of game points (S691 to S698 in FIG. 83).

  According to the above configuration, when a game using game points is being performed, the conversion operation by the conversion operation means is not effective unless there are at least a predetermined number of game points remaining. The timing at which the game points that have not been converted are displayed and the timing at which the remaining few game points are consumed due to the continuation of the game overlap, and the game points necessary for the game have been converted into points. Therefore, it is possible to prevent the situation where the game is continued without being generated.

(7-1) The present invention is a gaming machine (P units, S units) that grants predetermined game points by the occurrence of a prize,
Game parts (game board 26, reels and various sensor parts attached to the reels) provided with game control means (P main control board 16, S main control board) for controlling the progress of the game of the gaming machine; ,
A game frame configured to selectively attach different types of game components (P front frame 6, reels in S units, various sensor parts attached to the reels, and configurations other than the main control board for controlling the reels) When,
Provided on the game frame side, receives addition update information (the number of added balls, the number of additions) output from the game control means when a winning occurs, and adds and updates the game points based on the addition update information Game point processing means (payout control board 17) for subtracting and updating the game points based on the use of the game points for games;
A sensor (radio wave sensor 173) is provided on the game frame side and detects electromagnetic waves.

  According to the above configuration, since the sensor for detecting the radio wave sensor is provided on the game frame side provided with the game point processing means, it is possible to cope with illegal acts due to electromagnetic waves on the game machine frame side. It becomes.

  (7-2) In the gaming machine of (7-1), the gaming point processing means is disabled by removing the sensor (game frame radio wave sensor disconnection detection is detected on the payout control board 17). When an input is made, the payout control board 17 may be disabled (for example, the transmission of the number of additional balls to the CU 3 may be stopped, or the counting operation of the additional ball counter may be stopped).

  According to the above configuration, since the game point processing means is disabled by removing the sensor, it is possible to cope with an illegal act of removing the sensor.

(7-3) In the gaming machine of (7-1) or (7-2) above, an input unit for inputting the detection signal of the electromagnetic wave sensor (input port to the payout control board 17 of the radio wave sensor 173 in FIG. 5) And an abnormality control means (S714, S715) for performing the abnormality control when the detection signal is input,
When the sensor is removed, it becomes the same input state as the detection signal of the sensor (the inverting amplifier (inverter) for inverting the signal of the radio wave sensor 173 is provided in the radio wave sensor 173 and the signal is passed through the inverting amplifier) Is input to the payout control board 17, a high level signal is input to the main control board 16 and the payout control board 17 when the radio wave sensor 173 is not detected, while a low level signal is input when the radio wave is detected. When the abnormality is detected by the payout control board 17 being input and the radio wave sensor 173 is illegally pulled out, a low level signal is input to the payout control board 17 and the payout control board 17 is the same as when the radio wave is detected. Determines the occurrence of abnormality).

  According to the above configuration, when the sensor is removed, the input state is the same as the detection signal of the sensor, and the abnormal time control means executes the abnormal time control. It is possible to deal with fraud.

(7-4) In another aspect of the present invention, game control means (P main control board 16 and S main control board) for controlling the progress of the game by the gaming machines (P, S) is provided. A game frame (P front frame 6, reels in the S units and various sensor units and reels attached to the reels) configured to be attached to the game parts (the game board 26, the reels and various sensor units attached to the reels) Other than the main control board for controlling
It receives addition update information (the number of balls to be added, the number of additions) output from the game control means based on a winning prize, adds and updates game points based on the received addition update information, and the game points are added to the game. Game point processing means (payout control board 17) for subtracting and updating the game points by being used;
And a sensor (radio wave sensor 173) for detecting electromagnetic waves.

  According to the above configuration, since the sensor for detecting the radio wave sensor is provided on the game frame side provided with the game point processing means, it is possible to cope with illegal acts due to electromagnetic waves on the game machine frame side. It becomes.

  (7-5) In the game frame of (7-4), the game point processing means is disabled by removing the sensor (game frame radio wave sensor disconnection detection is detected on the payout control board 17). When an input is made, the payout control board 17 may be disabled (for example, the transmission of the number of additional balls to the CU 3 may be stopped, or the counting operation of the additional ball counter may be stopped).

  According to the above configuration, since the game point processing means is disabled by removing the sensor, it is possible to cope with an illegal act of removing the sensor.

(7-6) In the game frame of (7-4) or (7-5) above, an input unit for inputting the detection signal of the electromagnetic wave sensor (input port to the payout control board 17 of the radio wave sensor 173 in FIG. 5) Further comprising an abnormality control means for performing an abnormality control when a detection signal is input,
When the sensor is removed, the input state is the same as the detection signal of the sensor.

  According to the above configuration, when the sensor is removed, the input state is the same as the detection signal of the sensor, and the abnormal time control means executes the abnormal time control. It is possible to cope with fraudulent activity (an inverting amplifier (inverter) for inverting the signal of the radio wave sensor 173 is provided in the radio wave sensor 173, and the signal is input to the dispensing control board 17 via the inverting amplifier). With this configuration, when the radio wave sensor 173 is not detected, a high level signal is input to the main control board 16 and the payout control board 17, while when a radio wave is detected, a low level signal is input to the payout control board 17. If the occurrence of abnormality is determined and the radio wave sensor 173 is pulled out illegally, a low level signal is input to the payout control board 17 and the payment is performed in the same manner as when radio wave is detected. Control board 17 and determines abnormality).

  According to the above configuration, when the sensor is removed, the input state is the same as the detection signal of the sensor, and the abnormal time control means executes the abnormal time control. It is possible to deal with fraud.

(7-7) Still another aspect of the present invention is a game component (game board 26, reel and various sensor parts attached to the reel) attached to the game frame,
A game control means for controlling the progress of the game by the gaming machine and generating addition update information (the number of balls to be added and the number of additions) for specifying an addition update amount to be added to a predetermined game point based on the occurrence of a prize ( P main control boards 16 and S main control boards),
Transmitting means for transmitting the added update information to the game point processing means (payout control board 17) provided on the game frame side provided with a sensor for detecting electromagnetic waves and adding / subtracting game points (FIG. 5). Transmission of the number of additional balls of 8, transmission of the addition number of FIG. 151, FIG. 45).

  According to the above configuration, since the sensor for detecting the radio wave sensor is provided on the gaming frame side by attaching the gaming component to the gaming frame, Can also be dealt with.

(8-1) The present invention is a gaming machine (P units, S units) that grants predetermined game points by the occurrence of a prize,
Game control means (P main control boards 16 and S for generating addition update information for controlling the progress of the game of the gaming machine and specifying the addition update amount to be added to the game points based on the occurrence of a prize. A game part provided with a main control board) (game board 26, reels and various sensor parts attached to the reels);
A game frame configured to be able to attach the game parts (P front frame 6, reels in S units and various sensor parts attached to the reels and configurations other than the main control board for controlling the reels);
The addition update information (the number of added balls, the addition number) provided in the game frame and generated by the game control means is received, the game points are added and updated based on the addition update information, and the game points Game point processing means (payout control board 17) for subtracting and updating the game points based on use in games,
The addition update amount of the game points to be added and updated in accordance with the occurrence of the winning is determined in advance according to the type of winning that has occurred (FIG. 78 (a)),
The game control means stores a predetermined addition update amount as a prescribed addition update amount (winning opening information is stored in a memory such as a ROM of the main control unit 161 provided on the main control board 16. ), Processing for transmitting the prescribed addition update amount to the game point processing means (FIG. 77: winning opening information is transmitted from the main control board 16 to the payout control board 17),
The game point processing means determines whether or not the addition update amount specified by the addition update information transmitted from the game control means is an appropriate size based on the specified addition update amount. Means (S663).

  According to the above configuration, the amount of game points to be added and updated in accordance with the occurrence of a winning is determined in advance according to the type of winning that has been generated, and the game control means can determine the predetermined addition. The update amount is stored as the specified addition update amount, and the processing for transmitting the specified addition update amount to the game point processing means is performed, and the game point processing means receiving the update amount information is added update information transmitted from the game control means. It is determined based on the prescribed addition update amount whether or not the addition update amount specified by is an appropriate size. Originally, the addition update amount specified by the addition update information transmitted from the game control means based on the occurrence of the winning is consistent with the prescribed addition update amount, but the addition transmitted from the game control means If the update information itself is fraudulent, the consistency between the two cannot be achieved, and the suitability determination means determines that the size is not appropriate, and it is possible to deal with fraud.

(8-2) In the gaming machine of (8-1) above, the gaming control means transmits a specified addition update amount when the gaming machine is turned on (S651),
The game point processing means stores and holds storage means information (main control chip ID, winning mouth information, round number information) in S657 for storing the specified addition update amount transmitted from the game control means. Storage medium)
The suitability determining means determines whether or not the addition update amount specified by the addition update information transmitted from the game control means is an appropriate amount, to the specified addition update amount stored in the storage means. Based on the determination (S663).

  According to the above configuration, the specified addition update amount transmitted at the time of power-on is stored on the game point processing means side, and thereafter, the addition update amount specified by the addition update information transmitted from the game control means is appropriate. In order to determine whether or not the size is based on the stored prescribed addition update amount, the game control means does not need to send the prescribed addition update amount each time the addition update amount is transmitted, The control burden on the game control means can be reduced.

(8-3) In the gaming machine of (8-2), the game control means also transmits game control means identification information for identifying the game control means to the game point processing means when the gaming machine is powered on. (S651),
The storage means also stores the game control means identification information transmitted from the game control means (also stores the main control chip ID in S657),
The suitability judging means collates the game control means identification information and the prescribed addition update amount transmitted from the game control means with the game control means identification information and the prescribed addition update amount stored in the storage means. Then, when the game control means identification information matches but the prescribed addition update amount does not match, an abnormality determination is made (YES in S654 and fraud detection information is sent in S658 when NO in S655).

  According to said structure, a memory | storage means memorize | stores the game control means identification information transmitted from the game control means. Then, the game control means identification information and the prescribed addition update amount transmitted from the game control means are compared with the game control means identification information and the prescribed addition update amount stored in the storage means, and the game control means identification information is An abnormality is determined when they match but the specified addition update amount does not match. As a result, when the game parts are exchanged together with the game control means and a new game part is attached to the game frame, it is determined that the game control means identification information does not match, but the game control means identification information matches. When such exchange has not been performed and the specified addition update amount transmitted from the same game control means does not match the stored additional addition update amount, the specification transmitted to the game point processing means Since it is assumed that the addition update amount itself has been fraudulent and an abnormality determination is made in such a case, it is possible to cope with fraudulent acts with respect to the specified addition update amount itself.

(8-4) In the gaming machine of the above (8-2) or (8-3), the game control means continues the high winning state in which the winning probability is improved by satisfying a predetermined gaming condition a plurality of times. Control to a specific gaming state to be controlled (the variable winning ball device (big winning opening 271) is controlled to open and close 15 rounds by the occurrence of a big win)
The number of continuations of the high winning state in the specific gaming state is predetermined (15 times in FIG. 78 (b)),
The game control means stores the predetermined number of consecutive high winning states as a predetermined number of times (the winning slot information is stored in a memory such as a ROM of the main control unit 161 provided on the main control board 16). (Stored), when the gaming machine is turned on, the specified number of times of continuous transmission is transmitted to the gaming point processing means (S651),
The storage means stores the prescribed number of continuous times transmitted from the game control means (stores and holds round number information in S657),
The suitability determining means determines whether or not the received increase state of the added update amount is consistent with the prescribed number of continuous times stored in the storage means (transmitted from the main control unit 161 during the game) It is determined whether or not the information of the addition number counter is consistent with the stored round number information to determine whether the addition number transmitted from the main control unit 161 is up. (If it continues for more than 15 times, it is judged as abnormal).

  According to said structure, the memory | storage means also memorize | stores the regular continuation number transmitted from the game control means. Then, the high winning state is continued for the prescribed number of times of continuous, and the addition update amount is generally increased during that period. Then, the suitability determining means increases the added update amount exceeding the specified number of times of continuation in order to determine whether or not the increase state of the received added update amount is consistent with the specified number of continuations stored in the storage means. An inconsistent state such as a state can be determined abnormally.

(8-5) According to another aspect of the present invention, addition update information for controlling the progress of a game by a gaming machine and specifying an addition update amount to be added to a game point based on the occurrence of a prize (the number of added balls, Game parts (game board 26, reels and various sensor parts attached to the reels) equipped with game control means (P main control boards 16, S main control boards) for generating (addition number) can be attached. A configured game frame (P front frame 6, reels in S units, various sensor parts attached to the reels, and configuration other than the main control board for controlling the reels),
The addition update information (the number of added balls, the addition number) generated by the game control means is received, the game points are added and updated based on the addition update information, and the game points are used for the game. Game point processing means (payout control board 17) for subtracting and updating the game points;
The addition update amount of the game points to be added and updated in accordance with the occurrence of the winning is determined in advance according to the type of winning that has occurred (FIG. 78 (a)),
The game point processing means determines whether or not the addition update amount specified by the addition update information transmitted from the game control means is an appropriate size based on the specified addition update amount. Means (S663).

  According to the above configuration, the amount of game points to be added and updated in accordance with the occurrence of a winning is determined in advance according to the type of winning that has been generated, and the predetermined amount of added updating is specified and added. The game point processing means that has received the specified addition update information transmitted from the game control means stored as the update amount has an appropriate amount of addition update amount specified by the addition update information transmitted from the game control means. Is determined based on the prescribed addition update amount. Originally, the addition update information transmitted from the game control means based on the occurrence of the winning is consistent with the prescribed addition update amount, but the addition update information itself transmitted from the game control means is illegal. In such a case, the consistency between the two cannot be obtained, and it is possible to determine that the suitability determination means is not of an appropriate size, and to deal with fraud.

(9-1) The present invention is a gaming system for enabling a game with a gaming machine (P units, S units) that grants predetermined game points when a winning occurs.
Game point storage means for storing the game points (game ball counter of FIG. 8, game score counter of FIG. 151);
Conversion operation means (counting buttons 28, 28S) for converting the game points into predetermined points (balls, points);
Conversion display means (displays 54, 312 and 510) for performing conversion display of the game points to the holding points based on the detection of the operation of the conversion operation means;
Display means (dollar box display of FIG. 45, FIG. 81) for performing display based on the game points given up to the present time after the player started the game with the gaming machine.

  According to said structure, the step which converts the game point obtained by the game into a point once by operation of a player arises. Therefore, a new system using game points without causing confusion to a player who is accustomed to the conventional game system that counts game media obtained by gaming and makes it possible to specify the counting result by a recording medium Can provide. In addition, since the display based on the game points given to the present time after the player started the game with the gaming machine, the profits earned up to the present time since the player started the game can be visually recognized. This improves the convenience of the player.

(9-2) In the gaming system of (9-1) above, conversion processing means (FIG. 43, payout) for converting the gaming points into the holding points based on the detection of the operation of the conversion operating means. A control unit 171 and a CU control unit 323),
The display means is calculated by subtracting the points possessed by the player from the start of the game by the gaming machine to the sum of the points and game points converted by the conversion processing means. The profit (cumulative number of accumulated balls−total number of subtracted balls) is displayed (FIG. 45).

  According to the above configuration, the game is obtained by subtracting the points owned by the player from the start of the game by the gaming machine to the sum of the points and game points converted by the conversion processing means. It is possible to accurately calculate the profits acquired from the start to the present time, and display the accurate profits.

(9-3) Another aspect of the present invention is provided with game point storage means (game ball number counter in FIG. 8, game point counter in FIG. 151) for storing predetermined game points given by the occurrence of winning. A gaming device (CU) for connecting to a gaming machine (P, S) so as to be communicably connected to the gaming machine, enabling a game in the gaming machine,
Conversion display means (displays 54, 312 and 510) for performing conversion display of the gaming points to the holding points based on detection of a conversion operation for converting the gaming points into predetermined holding points. ,
Display means (dollar box display of FIG. 45, FIG. 81) for performing display based on the game points given up to the present time after the player started the game with the gaming machine.

  According to said structure, the step which converts the game point obtained by the game into a point once by operation of a player arises. Therefore, a new system using game points without causing confusion to a player who is accustomed to the conventional game system that counts game media obtained by gaming and makes it possible to specify the counting result by a recording medium Can provide. In addition, since the display based on the game points given to the present time after the player started the game with the gaming machine, the profits earned up to the present time since the player started the game can be visually recognized. This improves the convenience of the player.

(9-4) In the gaming apparatus of (9-3) above, conversion processing means (FIG. 43, payout) that converts the gaming points into the holding points based on the detection of the operation of the conversion operating means. A control unit 171 and a CU control unit 323),
The display means is calculated by subtracting the points possessed by the player from the start of the game by the gaming machine to the sum of the points and game points converted by the conversion processing means. The profit (cumulative number of accumulated balls−total number of subtracted balls) is displayed (FIG. 45).

  According to the above configuration, the game is obtained by subtracting the points owned by the player from the start of the game by the gaming machine to the sum of the points and game points converted by the conversion processing means. It is possible to accurately calculate the profits acquired from the start to the present time, and display the accurate profits.

(10-1) The present invention is a gaming system for enabling a game by a gaming machine (P units, S units) that grants predetermined game points by the occurrence of a prize,
First conversion operation means (replay button 319) for converting player-owned points into the game points;
First conversion processing means (FIG. 39, payout control unit 171 and CU control unit 323) for performing processing for converting the points to the game points based on the detection of the operation of the first conversion operation means; ,
Second conversion operation means (counting buttons 28, 28S) for converting the gaming points into the possession points;
Second conversion processing means (FIG. 43, payout control unit 171 and CU control unit 323) for performing processing for converting the gaming points into the holding points based on the detection of the operation of the second conversion operation means; ,
First conversion operation invalidating means (S684) for invalidating the operation of the first conversion operation means during the execution of the conversion process by the second conversion processing means.

  According to said structure, the step which converts the game point obtained by the game into a point once by operation of a player arises. Therefore, a new system using game points without causing confusion to a player who is accustomed to the conventional game system that counts game media obtained by gaming and makes it possible to specify the counting result by a recording medium Can provide. Further, since the operation of the first conversion operation means is invalidated during the execution of the conversion process by the second conversion processing means, the points are converted into game points during the process of converting the game points into points. It is possible to prevent inconvenience that the processing is not performed and the point is difficult to understand.

(10-2) According to another aspect of the present invention, it is possible to play a game using a gaming machine (P, S) that updates a predetermined game point by using the game and adds and updates a score by generating a prize. A gaming system for
First conversion operation means (replay button 319) for converting player-owned points into the game points;
First conversion processing means (FIG. 39, payout control unit 171 and CU control unit 323) for performing processing for converting the points to the game points based on the detection of the operation of the first conversion operation means; ,
Second conversion operation means (counting buttons 28, 28S) for converting the gaming points into the possession points;
Second conversion processing means (FIG. 43, payout control unit 171 and CU control unit 323) for performing processing for converting the gaming points into the holding points based on the detection of the operation of the second conversion operation means; ,
A second conversion operation invalidating unit (S698) for invalidating the operation of the second conversion operation unit during execution of the process by the first conversion processing unit;

  According to said structure, the step which converts the game point obtained by the game into a point once by operation of a player arises. Therefore, a new system using game points without causing confusion to a player who is accustomed to the conventional game system that counts game media obtained by gaming and makes it possible to specify the counting result by a recording medium Can provide. Further, since the operation of the second conversion operation means is invalidated during the conversion process by the first conversion processing means, the game points are converted into points during the process of converting the points to game points. It is possible to prevent inconvenience that the processing is not performed and the point is difficult to understand.

  (10-3) In the gaming system according to (10-1), first invalidation processing notifying means for notifying that invalidation processing by the first conversion operation invalidating means has been executed (the replay button 319 is depressed) When the operation is invalidated, the message display of “the operation of the replay button is invalidated because the counting process is in progress” may be performed by the indicators 54, 312 and the like.

  According to the above configuration, since it is notified that the invalidation process by the first conversion operation invalidating unit has been executed, the player can recognize that the operation of the first conversion operation unit has been invalidated. .

  (10-4) In the gaming system of (10-2) above, second invalidation processing notifying means for notifying that invalidation processing by the second conversion operation invalidating means has been executed (operation in which the count button 28 is pressed down) Is displayed on the display units 54, 312 and the like, the message “The operation of the counting button is invalidated because the ball lending process from holding balls and storage balls is in progress.” Including.

  According to the above configuration, since it is notified that the invalidation process by the second conversion operation invalidating unit has been executed, the player can recognize that the operation of the second conversion operation unit has been invalidated. .

  (10-5) In the gaming system according to any one of (10-1) to (10-4), based on the detection of the operation of the second conversion operation means, the holding points of the gaming points It further includes display means (displays 54, 312, and 510) for performing conversion display.

  According to the above configuration, since the player displays the conversion of the game points to the holding points by operating the second conversion operation means, there is a state in which the game media obtained by the game are being counted. It becomes closer to the conventional gaming system that can be visually recognized, and it is possible to more reliably prevent confusion of players who are used to the conventional gaming system.

(10-6) According to another aspect of the present invention, the game machine includes a connection unit configured to be communicably connected to a gaming machine (P, S) that gives a predetermined game point when a winning is generated. A gaming device (CU) for enabling the game of
Based on the detection of a first conversion operation (depressing the replay button 319) for converting a player-owned score into the game score, a first conversion is performed for converting the score into the game score. Processing means (FIG. 39, CU control unit 323);
Second conversion processing means for performing a process of converting the gaming points into the holding points based on detection of a second conversion operation (depressing the counting buttons 28 and 28S) for converting the gaming points into the holding points. (FIG. 43, CU control unit 323),
First conversion operation invalidating means (S684) for invalidating the first conversion operation during the execution of the conversion processing by the second conversion processing means.

  According to said structure, the step which converts the game point obtained by the game into a point once by operation of a player arises. Therefore, a new system using game points without causing confusion to a player who is accustomed to the conventional game system that counts game media obtained by gaming and makes it possible to specify the counting result by a recording medium Can provide. Further, since the operation of the first conversion operation means is invalidated during the execution of the conversion process by the second conversion processing means, the points are converted into game points during the process of converting the game points into points. It is possible to prevent inconvenience that the processing is not performed and the point is difficult to understand.

(10-7) Another aspect of the present invention includes a connection unit (connector) for connecting to a gaming machine (P unit, S unit) that gives a predetermined game point by occurrence of a prize so as to be able to communicate, A gaming device (CU) for enabling gaming on a gaming machine,
Based on the detection of a first conversion operation (depressing the replay button 319) for converting a player-owned score into the game score, a first conversion is performed for converting the score into the game score. Processing means (FIG. 39, CU control unit 323);
Second conversion processing means for performing a process of converting the gaming points into the holding points based on detection of a second conversion operation (depressing the counting buttons 28 and 28S) for converting the gaming points into the holding points. (FIG. 43, CU control unit 323),
Second conversion operation invalidating means (S698) for invalidating the second conversion operation during the execution of the conversion processing by the first conversion processing means.

  According to said structure, the step which converts the game point obtained by the game into a point once by operation of a player arises. Therefore, a new system using game points without causing confusion to a player who is accustomed to the conventional game system that counts game media obtained by gaming and makes it possible to specify the counting result by a recording medium Can provide. Further, since the operation of the second conversion operation means is invalidated during the conversion process by the first conversion processing means, the game points are converted into points during the process of converting the points to game points. It is possible to prevent inconvenience that the processing is not performed and the point is difficult to understand.

  (10-8) In the gaming apparatus of (10-6) above, first invalidation processing notifying means (notifying that the replay button 319 is pushed down) for notifying that invalidation processing by the first conversion operation invalidating means has been executed. When the operation is invalidated, the message display of “the operation of the replay button is invalidated because the counting process is in progress” may be performed by the indicators 54, 312 and the like.

  According to the above configuration, since it is notified that the invalidation process by the first conversion operation invalidating unit has been executed, the player can recognize that the operation of the first conversion operation unit has been invalidated. .

  (10-9) In the gaming apparatus of (10-7) above, second invalidation processing notifying means for notifying that invalidation processing by the second conversion operation invalidating means has been executed (operation in which the count button 28 is depressed) Is displayed on the display units 54, 312 and the like, the message “The operation of the counting button is invalidated because the ball lending process from holding balls and storage balls is in progress.” Including.

  According to the above configuration, since it is notified that the invalidation process by the second conversion operation invalidating unit has been executed, the player can recognize that the operation of the second conversion operation unit has been invalidated. .

  (10-10) In the gaming apparatus according to any one of (10-6) to (10-9), the gaming point is converted into the holding point based on the detection of the second conversion operation. It further includes display means (displays 54, 312, and 510) for performing display.

  According to the above configuration, since the player displays the conversion of the game points to the holding points by operating the second conversion operation means, there is a state in which the game media obtained by the game are being counted. It becomes closer to the conventional gaming system that can be visually recognized, and it is possible to more reliably prevent confusion of players who are used to the conventional gaming system.

(11-1) The present invention provides first control means (CU control unit 323 or CU3, P stand 2, jet counter, POS terminal, etc.) and second control means (security chip 325B or CU3) that perform cryptographic communication with each other. A gaming system including a P stand 2, a jet counter, a POS terminal, etc.
Both the first control means and the second control means are
A key for independently updating an encryption key (down counter in FIG. 135 (a), upstream counter in FIG. 135 (b)) used for encrypted communication by the same updating method in the first control means and the second control means. Key update means for performing update processing (update processing of counters in FIGS. 135 (c) to 141);
Encryption means for generating ciphertext using the key updated by the key update means (FIG. 135 (c), S105 in FIG. 142 (a));
Decryption means (FIG. 136, S133 in FIG. 142 (b)) that receives the ciphertext generated by the encryption means and decrypts it using the key updated by the key update means,
The key update means performs the key update process according to transmission / reception of ciphertext (FIGS. 135 (c) to 141; one transmission or reception (ciphertext data length 96 bytes) / (key length 16 bytes). ) = 6 is added and updated),
When the decryption means is unable to decrypt the received ciphertext due to the key update process trap between the key update means of the first control means and the key update means of the second control means, Key update decryption processing that attempts to perform decryption within a predetermined number of times by updating the key included in the control means that could not perform decryption (S150 to S162 in FIGS. 138, 139, and 143 (a)) ).

  According to such a configuration, when the received ciphertext cannot be decrypted due to a key update process trap between the key update unit of the first control unit and the key update unit of the second control unit, In order to try within the range of the predetermined number of times of decryption by updating the key included in the control means that could not be decrypted, after decrypting each other's keys, try to decrypt while updating the key A process for repairing the key mismatch is performed, which makes it possible to repair and restore the key mismatch.

  (11-2) In the gaming system according to (11-1), both the first control unit and the second control unit are appropriate by the decryption unit even if the key update decryption process is performed a predetermined number of times. In addition, error processing means (S162 in FIG. 143 (a)) for executing error processing when decryption into a plaintext is not possible is further included.

  According to such a configuration, even if the key update / decryption process is performed a predetermined number of times, an error process is performed when decryption to an appropriate plaintext is not performed. Nevertheless, it is possible to cope with an abnormal situation where proper plaintext cannot be decrypted.

(11-3) In the gaming system according to (11-1) or (11-2) above, the encrypted communication between the first control means and the second control means cannot receive an encrypted communication text. The retransmission of the encrypted message is executed within a predetermined number of times (twice),
The decryption means executes the key update decryption process (S155 and S161 in FIG. 143 (a)) within the range of the number of executions corresponding to the specified number of times.

  According to such a configuration, since the key update process by the key update unit is performed in response to the transmission / reception of the ciphertext, the key update process can be re-encrypted when the ciphertext cannot be received. It is caused by transmission. Therefore, if the key update decryption process is performed within the range of the number of executions corresponding to the specified number of times that the re-transmission of the ciphertext is performed, the wrinkles should be eliminated. Therefore, the key update decryption process is executed within the range of the number of executions corresponding to the specified number of times, and it is possible to prevent security from being lowered as much as possible by performing the key update decryption process many times.

(11-4) According to another aspect of the present invention, a gaming device (card processing device 3) including first control means (CU control unit 323) and second control means (security chip 325B) that perform cryptographic communication with each other. ) And
Both the first control means and the second control means are
A key for independently updating an encryption key (down counter in FIG. 135 (a), upstream counter in FIG. 135 (b)) used for encrypted communication by the same updating method in the first control means and the second control means. Key update means for performing update processing (update processing of counters in FIGS. 135 (c) to 141);
Encryption means for generating ciphertext using the key updated by the key update means (FIG. 135 (c), S105 in FIG. 142 (a));
Decryption means (FIG. 136) for receiving the ciphertext generated by the encryption means and decrypting it using the key updated by the key update means, and S133) in FIG. 142 (b);
The key update means performs the key update process according to transmission / reception of ciphertext (FIGS. 135 (c) to 141; one transmission or reception (ciphertext data length 96 bytes) / (key length 16 bytes). ) = 6 is added and updated),
When the decryption means is unable to decrypt the received ciphertext due to the key update process trap between the key update means of the first control means and the key update means of the second control means, Key update decryption processing that attempts to perform decryption within a predetermined number of times by updating the key included in the control means that could not perform decryption (S150 to S162 in FIGS. 138, 139, and 143 (a)) ).

  According to such a configuration, when the received ciphertext cannot be decrypted due to a key update process trap between the key update unit of the first control unit and the key update unit of the second control unit, In order to try within the range of the predetermined number of times of decryption by updating the key included in the control means that could not be decrypted, after decrypting each other's keys, try to decrypt while updating the key A process for repairing the key mismatch is performed, which makes it possible to repair and restore the key mismatch.

  (11-5) In the gaming machine of the above (11-4), both the first control means and the second control means are appropriate by the decryption means even if the key update decryption process is performed a predetermined number of times. In addition, error processing means (S162 in FIG. 143 (a)) for executing error processing when decryption into a plaintext is not possible is further included.

  According to such a configuration, even if the key update / decryption process is performed a predetermined number of times, an error process is performed when decryption to an appropriate plaintext is not performed. Nevertheless, it is possible to cope with an abnormal situation where proper plaintext cannot be decrypted.

(11-6) In the gaming machine according to (11-4) or (11-5) above, the encrypted communication between the first control means and the second control means cannot receive an encrypted communication text. The retransmission of the encrypted message is executed within a predetermined number of times (twice),
The decryption means executes the key update decryption process (S155 and S161 in FIG. 143 (a)) within the range of the number of executions corresponding to the specified number of times.

  According to such a configuration, since the key update process by the key update unit is performed in response to the transmission / reception of the ciphertext, the key update process can be re-encrypted when the ciphertext cannot be received. It is caused by transmission. Therefore, if the key update decryption process is performed within the range of the number of executions corresponding to the specified number of times that the re-transmission of the ciphertext is performed, the wrinkles should be eliminated. Therefore, the key update decryption process is executed within the range of the number of executions corresponding to the specified number of times, and it is possible to prevent security from being lowered as much as possible by performing the key update decryption process many times.

(12-1) The present invention relates to first control means (CU control unit 323 or CU3, P stand 2, jet counter, POS terminal, etc.) and second control means (security chip 325B or CU3) that perform cryptographic communication with each other. A gaming system including a P stand 2, a jet counter, a POS terminal, etc.
Both the first control means and the second control means are
A key for independently updating an encryption key (down counter in FIG. 135 (a), upstream counter in FIG. 135 (b)) used for encrypted communication by the same updating method in the first control means and the second control means. Key update means for performing update processing (update processing of counters in FIGS. 135 (c) to 141);
Encryption means for generating ciphertext using the key updated by the key update means (FIG. 135 (c), S105 in FIG. 142 (a));
Decryption means (FIG. 136) for receiving the ciphertext generated by the encryption means and decrypting it using the key updated by the key update means, and S133) in FIG. 142 (b);
The key update means includes
The key update processing is performed in accordance with transmission / reception of ciphertext (FIGS. 135 (c) to 141; one transmission or reception (ciphertext data length 96 bytes) / (key length 16 bytes) = 6 is added) Update), and
When the key update processing trap occurs between the key update means of the first control means and the key update means of the second control means, and the decryption means cannot decrypt the ciphertext, the mutual keys Initialization processing means (FIG. 73, FIG. 141, FIG. 142 (a), FIG. 143 (b)) for performing the initialization processing of FIG.

  According to such a configuration, when the received ciphertext cannot be decrypted due to a key update process trap between the key update unit of the first control unit and the key update unit of the second control unit, Mutual key initialization processing is performed, which makes it possible to restore and restore the key conflict.

  (12-2) In the gaming system of (12-1) above, the initialization processing means generates a random number and generates an initial key using the random number (S101 in FIG. 142 (a)), A process of sharing the key between the first control means and the second control means is performed (S103 in FIG. 142 (a), S130 and S131 in FIG. 142 (b)).

  According to such a configuration, a random number is generated by the initialization process, an initial key is generated using the random number, and the key is shared between the first control unit and the second control unit. In addition, a random key is generated by generating a random number of the initial key itself, and security during initialization processing can be maintained as much as possible.

(12-3) In the gaming system according to (12-2), the shared processing by the initialization processing unit is a predetermined key different from an encryption method using a key updated by the key updating unit. (This authentication key) is a process of encrypting the initial key and transmitting the encrypted initial key to the partner control means to share the key (SE1 by S103 in FIG. 142 (a)). R is encrypted using this authentication key in the mode, and R is decrypted using this authentication key in the SE1 mode in S130 of FIG. 142 (b), and plaintext R is stored in S131).

  According to such a configuration, the process of sharing the key by the initialization processing unit encrypts the initialization key using a predetermined key different from the encryption method using the key updated by the key update unit. Therefore, it is possible to maintain security against the leakage of the key when transmitting the initialization key.

(12-4) Another aspect of the present invention is a gaming device (card processing device 3) comprising first control means (CU control unit 323) and second control means (security chip 325B) that perform cryptographic communication with each other. Because
Both the first control means and the second control means are
A key for independently updating an encryption key (down counter in FIG. 135 (a), upstream counter in FIG. 135 (b)) used for encrypted communication by the same updating method in the first control means and the second control means. Key update means for performing update processing (update processing of counters in FIGS. 135 (c) to 141);
Encryption means for generating ciphertext using the key updated by the key update means (FIG. 135 (c), S105 in FIG. 142 (a));
Decryption means (FIG. 136) for receiving the ciphertext generated by the encryption means and decrypting it using the key updated by the key update means, and S133) in FIG. 142 (b);
The key update means includes
The key update processing is performed in accordance with transmission / reception of ciphertext (FIGS. 135 (c) to 141; one transmission or reception (ciphertext data length 96 bytes) / (key length 16 bytes) = 6 is added) Update), and
When the key update processing trap occurs between the key update means of the first control means and the key update means of the second control means, and the decryption means cannot decrypt the ciphertext, the mutual keys Initialization processing means (FIG. 73, FIG. 141, FIG. 142 (a), FIG. 143 (b)) for performing the initialization processing of FIG.

  According to such a configuration, when the received ciphertext cannot be decrypted due to a key update process trap between the key update unit of the first control unit and the key update unit of the second control unit, Mutual key initialization processing is performed, which makes it possible to restore and restore the key conflict.

  (12-5) In the gaming machine of (12-4), the initialization processing means generates a random number and generates an initial key using the random number (S101 in FIG. 142 (a)), A process of sharing the key between the first control means and the second control means is performed (S103 in FIG. 142 (a), S130 and S131 in FIG. 142 (b)).

  According to such a configuration, a random number is generated by the initialization process, an initial key is generated using the random number, and the key is shared between the first control unit and the second control unit. In addition, a random key is generated by generating a random number of the initial key itself, and security during initialization processing can be maintained as much as possible.

(12-6) In the gaming machine according to (12-5), the shared processing by the initialization processing unit is a predetermined key different from an encryption method using a key updated by the key updating unit. (This authentication key) is a process of encrypting the initial key and transmitting the encrypted initial key to the partner control means to share the key (SE1 by S103 in FIG. 142 (a)). R is encrypted using this authentication key in the mode, and R is decrypted using this authentication key in the SE1 mode in S130 of FIG. 142 (b), and plaintext R is stored in S131).

  According to such a configuration, the process of sharing the key by the initialization processing unit encrypts the initialization key using a predetermined key different from the encryption method using the key updated by the key update unit. Therefore, it is possible to maintain security against the leakage of the key when transmitting the initialization key.

(13-1) The present invention is connected to a gaming machine (pachinko machine 2, slot machine 2S) in which a game is performed using a predetermined gaming point (game ball, gaming point), and to be communicable with the gaming machine, A gaming device (card unit 3) for enabling a game on the gaming machine using a player's own gaming value (prepaid balance, number of balls, or number of balls), and the game points are displayed. A gaming system including display means (displays 54, 312, 510),
The gaming machine is
Specific means (microcomputer for gaming machine control, addition ball number counter, subtraction ball number counter, addition number counter, subtraction number counter) for specifying the amount of change of the game points (number of addition balls, number of subtraction balls);
Information transmission means (payout control unit 171) for transmitting update information capable of specifying the amount of change to the gaming device;
The gaming device is:
Information receiving means (communication control IC 325a) for receiving the update information;
The display means is controlled, the display of the game points is updated based on the update information, and the game points are set to a predetermined value based on detection of a predetermined conversion operation (operation of the counting buttons 28 and 28S). Display control means (display control unit 350) for performing conversion display for conversion to holding points.

  According to said structure, in order to process a game result so that identification is possible with a recording medium, the step which converts the game point obtained by the game into a score once by operation of a player arises. Therefore, a new system using game points can be provided without causing confusion to players who are accustomed to the conventional game system for counting game media obtained by games. In addition, display of gaming points and display of conversion from gaming points to holding points on the display means are controlled on the gaming device side, so the control burden on the gaming machine side can be reduced.

(13-2) According to another aspect of the present invention, a predetermined game point (game ball, game point) is connected to a game machine (pachinko machine 2, slot machine 2S) in which a game is performed using a predetermined game point. A gaming device (card unit 3) for enabling a game on the gaming machine using a player's own gaming value (a prepaid balance, the number of balls, or the number of balls),
Information receiving means (communication control IC 325a) for receiving from the gaming machine update information that can identify the amount of change in the gaming points;
The display means for displaying the game points is controlled, the display of the game points is updated based on the update information, and the predetermined conversion operation (operation of the counting buttons 28 and 28S) is detected based on the detection. Display control means (display control unit 350) for performing conversion display for converting game points into predetermined points.

  According to said structure, in order to process a game result so that identification is possible with a recording medium, the step which converts the game point obtained by the game into a score once by operation of a player arises. Therefore, a new system using game points can be provided without causing confusion to players who are accustomed to the conventional game system for counting game media obtained by games. In addition, since the display of game points and the display of conversion from game points to points are controlled on the gaming apparatus side, the control burden on the gaming machine side can be reduced.

(13-3) The gaming system according to (13-1) above,
A score processing means for processing the score so as to be identifiable by a recording medium owned by the player (the CU control unit 323 records the score on the card or transmits the card ID and the score to the server for storage). In addition.

  According to the above configuration, a player who is accustomed to the conventional game system can specify the points by using the recording medium owned by the player as in the conventional game system for counting the game media obtained by the game. Can be further prevented.

(13-4) The gaming system according to (13-1) or (13-3) above,
The display means is provided in the gaming machine (FIGS. 1 and 150).

  According to the above configuration, by providing the display means on the game side, it is possible to make it easier for the player facing the gaming machine to easily view the display contents, and in comparison with the case where the display means is provided on the gaming device side, Equipment costs can be reduced.

(13-5) The gaming system according to any one of (13-1), (13-3), and (13-4),
The gaming machine is
Game parts (game board 26, reels and various sensor parts attached to the reels) provided with game control means (main control board) for controlling the progress of the game;
A game frame configured to selectively attach different types of game components (P front frame 6, reels in S units, various sensor parts attached to the reels, and configurations other than the main control board for controlling the reels) Including
The display means is provided in the game frame (FIGS. 1 and 150).

  According to the above configuration, since the display means is provided in the versatile game frame of the gaming machine, the display means can be reused even when the gaming parts are changed by changing the gaming parts.

(13-6) The gaming system according to any one of (13-1), (13-3), (13-4), and (13-5),
The gaming machine is
In order to store the amount of change (latest game machine information) transmitted by the information transmission unit as the update information, and to back up the amount of change (previous game machine information) transmitted by the information transmission unit once as the update information Change amount storage means (addition ball counter, subtraction ball counter, addition ball number, subtraction ball number, addition counter, subtraction counter, addition number, subtraction number of FIG. 151),
Arrival determination means for determining whether or not the update information has arrived at the gaming device based on predetermined information (serial number) transmitted from the gaming device (FIG. 50: status information response sent to the CU) The payout control unit 171 determines whether or not the response is a retransmission due to not reaching the CU by a serial number),
The gaming device includes confirmation information transmitting means (FIG. 50: transmits serial number to P machines) that transmits information that can confirm arrival of the update information to the gaming machine when the update information is received. ,
The information transmission means uses the update information that can identify the total value of the change amounts stored in the change amount storage means when the arrival determination means determines that the update information has not arrived. (FIG. 50: Current addition / subtraction balls as current ball-related information is cumulatively added to the data without clearing the data of the previous addition / subtraction balls, which is the previous game machine information, to 0 and transmitted. ).

  According to the above configuration, when it is not determined that the update information has arrived, update information that can specify the sum of the change amounts stored in the change amount storage means is transmitted to the gaming device. The gaming device can collect information relating to gaming points reliably and efficiently.

(14-1) The present invention is connected to a gaming machine (pachinko machine 2, slot machine 2S) in which a game is performed using a predetermined score (game ball, game point) and the gaming machine, so that a game can be performed. Game device (card unit 3) for enabling a game on the gaming machine using the game value (prepaid balance, number of possessed balls, or number of stored balls) owned by the user, and display means for displaying the score A game system including (displays 54, 312, 510),
The gaming machine is
Score storage means for storing the score (game ball counter in FIG. 8, game score counter in FIG. 151);
Score updating means for updating the score in response to the game situation and an update request from the gaming device (FIG. 45: payout control unit 171 for calculating the number of game balls based on the number of added balls and the number of subtracted balls, FIG. 38) FIG. 39: a payout control unit 171) for adding the number of game balls based on the number of balls added from the CU;
Specific means (microcomputer for game machine control, addition ball number counter, subtraction ball number counter, addition number counter, subtraction number counter) for specifying the amount of change in the score (number of added balls, number of subtracted balls) by the score update means When,
Update information transmitting means (payout control unit 171) for transmitting update information capable of specifying the amount of change to the gaming device;
Determining whether or not there is an unprocessed update request due to the communication disabled state when recovering from a communication disabled state where communication between the gaming machine and the gaming device is not possible Means (FIG. 51, FIG. 52: payout control unit 171 for determining whether there is an unprocessed additional ball number based on the CU serial number and the P stand serial number);
A first score correction means (FIG. 51: payout control unit 171 for setting the number of game balls = 50 + 125) for correcting the score when it is determined by the determination means that there is an unprocessed update request;
Correction information transmitting means for transmitting correction information capable of specifying the score after correction by the first score correcting means to the gaming apparatus (FIG. 51: CU including the number of game balls after correction = 175 in the recovery data) A payout control unit 171) to transmit,
The gaming device is:
Update information receiving means (communication control IC 325a) for receiving the update information;
Display control means (CU control unit 323 and display control unit 350) for controlling the display means and updating the display of the score based on the update information;
Update request transmitting means for transmitting the update request to the gaming machine (FIGS. 38, 39, 51, and 52: a CU control unit 323 and a communication control IC 325a that transmit the number of additional balls to P units);
Based on the correction information transmitted from the gaming machine after recovering from the incommunicable state, second score correction means for correcting the score to be displayed on the display means (FIG. 51: Receiving a recovery response to play the game CU control unit 323) to correct the number of balls = 175,
The display control means displays the score corrected by the second score correction means on the display means after recovering from the communication disabled state (displays the number of game balls = 175 on the display 54).

  According to the above configuration, when the incommunicable state that occurs after the score update request is transmitted from the gaming device to the gaming machine is restored, depending on whether or not the update request has been processed on the gaming machine side Since the score is corrected by the gaming machine and the display based on the score after the correction is made on the display means, when the communication disabled state is restored, both the gaming device and the gaming machine are brought into a matched state. be able to. As a result, it is possible to provide a strong gaming system in preparation for the occurrence of an incommunicable state. Further, since the display means is controlled by a gaming device, the control burden on the gaming machine can be reduced.

(14-2) According to another aspect of the present invention, a game player (pachinko machine 2, slot machine 2S) in which a game is played using a predetermined score (game ball, game point) is communicably connected. A gaming device (card unit 3) for enabling a game in the gaming machine using a possessed gaming value (a prepaid balance, a number of balls, or a number of balls),
Update request transmission means for transmitting the score update request to the gaming machine (FIG. 38, FIG. 39, FIG. 51, FIG. 52: CU control unit 323 and communication control IC 325a for transmitting the number of balls to be added),
Update information receiving means (communication control IC 325a) for receiving update information capable of specifying the amount of change in the score from the gaming machine;
Display control means (CU control unit 323 and display control unit 350) for controlling display means and updating the display of the score based on the update information;
51. Correction information receiving means for receiving, from the gaming machine, correction information capable of specifying a corrected score when recovering from an incommunicable state where communication between the gaming machine and the gaming device is not possible (FIG. 51: A communication control IC 325a and a CU control unit 323) for receiving recovery data including the number of game balls after correction = 175 from P units;
Score correction means for correcting the score to be displayed on the display means based on the correction information (FIG. 51: CU control unit 323 that receives the recovery response and corrects the number of game balls = 175),
The display control means displays the score corrected by the score correction means on the display means after recovering from the communication disabled state (displays the number of game balls = 175 on the display 54).

  According to the above configuration, when the incommunicable state that occurs after the score update request is transmitted from the gaming device to the gaming machine is recovered, the score is corrected at the gaming machine based on the recovery information including the update request. Since the display based on the corrected score is displayed on the display means, when the incommunicable state is restored, the game device and the gaming machine can be brought into a matched state. As a result, it is possible to provide a gaming apparatus for constructing a strong gaming system in preparation for the occurrence of a communication disabled state. Further, since the display means is controlled by a gaming device, the control burden on the gaming machine can be reduced.

(14-3) The gaming system according to (14-1) above,
The gaming machine is
Transmitted update information storage means (addition ball number, subtraction ball number, addition number of FIG. 151, subtraction number of FIG. 8) for storing the update information transmitted to the gaming device before the communication disabled state,
Update information storage means for storing the update information (addition ball number counter in FIG. 8, subtraction ball number counter addition number counter in FIG. 151),
The correction information transmission means transmits the update information stored in the transmitted update information storage means and the update information stored in the update information storage means (FIG. 51: last game machine information and latest information). A recovery response including game machine information).

  According to said structure, after recovering from a communication impossible state, since it can receive the said update information memorize | stored in the said transmitted update information storage means and the said unsent update information storage means in a game device, communication is impossible. Whether the update information transmitted from the gaming machine immediately before the state did not reach the gaming device or when the gaming machine could not transmit the update information due to the occurrence of the communication disabled state, At the time of recovery, it can be reflected in the score on the display means.

(14-4) The gaming system according to (14-1) or (14-3) above,
The gaming device is:
A recording medium receiving means (card reader / writer) for receiving a recording medium capable of specifying a gaming value owned by the player;
First received information storage means (CU control unit 323 for storing card ID) for storing information (card ID) recorded on the recording medium received by the recording medium receiving means;
An acceptance information transmitting means (FIG. 36: a CU control unit 323 for transmitting a card ID to P cards and a communication control IC 325a) for transmitting information recorded on the recording medium received by the recording medium receiving means to the gaming machine. Including
The gaming machine includes second reception information storage means (FIG. 36: a payout control unit 171 for backing up a card ID) that stores information recorded in the recording medium transmitted from the reception information transmission means,
The correction information transmission means transmits the information recorded on the recording medium stored in the second reception information storage means together with the correction information (FIG. 51, FIG. 52: recovery data including a card ID to the CU. Send),
The second score correcting means matches the information recorded on the recording medium transmitted from the correction information transmitting means with the information recorded on the recording medium stored in the first reception information storing means. Sometimes, the score to be displayed on the display means is corrected (FIGS. 51 and 52: When the card ID and the insertion time match, the number of game balls is corrected to 175).

  According to the above configuration, after recovering from the communication disabled state, the information recorded on the recording medium stored on the gaming device side and the information recorded on the recording medium stored on the gaming machine side are Since the score display is corrected when they match, the score display can be corrected for a case where a game that has been interrupted due to the occurrence of a communication disabled state is resumed after the communication disabled state is restored.

(14-5) A gaming system according to any one of (14-1), (14-3) and (14-4),
The gaming device is:
Game device side score storage means for storing the score (the number of game balls in FIG. 8 and the number of game points in FIG. 151);
Score storage update means for updating the score stored in the game device-side score storage means based on the update information (based on the total subtraction number of balls by adding the number of game balls based on the total number of added balls in FIG. 8) The number of game balls is subtracted, the number of game points is added based on the total number of additions in FIG. 151, and the number of game points is subtracted based on the total number of subtractions).
The display control means displays the score stored in the game device side score storage means on the display means (displays the number of game balls and game points stored on the CU side),
The score storage update means updates the score stored in the game device side score storage means without waiting for a response from the gaming machine to the update request transmitted by the update request transmission means (FIG. 38). FIG. 39: The number of game balls is updated to 50 + 125 without waiting for a reply of the game ball number addition result from the P units).

  According to the above configuration, the update request can be promptly reflected in the display of the score, and it takes too long until the update request is reflected in the display of the display means, resulting in a sense of incongruity. There is no such thing as

(15-1) The present invention is connected to a gaming machine (pachinko machine 2, slot machine 2S) in which a game is played using a predetermined score (game ball, game point), and the gaming machine so as to be able to communicate. Game device (card unit 3) for enabling a game on the gaming machine using the game value (prepaid balance, number of possessed balls, or number of stored balls) owned by the user, and display means for displaying the score A game system including (displays 54, 312, 510),
The gaming machine is
Score storage means for storing the score (game ball counter in FIG. 8, game score counter in FIG. 151);
Score updating means for updating the score according to the game situation (FIG. 45: payout control unit 171 for calculating the number of game balls based on the number of added balls and the number of subtracted balls, FIG. 38, FIG. 39: added balls from the CU A payout control unit 171) for adding the number of game balls based on the number;
Specific means (microcomputer for game machine control, addition ball number counter, subtraction ball number counter, addition number counter, subtraction number counter) for specifying the amount of change in the score (number of added balls, number of subtracted balls) by the score update means When,
Update information transmitting means (payout control) for transmitting update information capable of specifying the amount of change together with arrival confirmation information (serial number) updated in accordance with a predetermined update pattern to confirm arrival of the update information Part 171),
When recovering from an incommunicable state in which communication between the gaming machine and the gaming device is not possible, the score correction information (FIG. 51: number of game balls = 50 + 125) is displayed before the incommunicable state. Correction information transmission means for transmitting to the gaming device together with the arrival confirmation information at the time of final communication (FIG. 51: payout control unit 171 for transmitting the recovery data including the number of game balls after correction = 175 to the CU) Including
The gaming device is:
Update information receiving means (communication control IC 325a) for receiving the update information;
Display control means (CU control unit 323 and display control unit 350) for controlling the display means (displays 54, 312, 510) and updating the display of the score based on the update information;
Correction information receiving means for receiving the correction information and the arrival confirmation information transmitted from the correction information transmitting means (FIG. 51: Communication control for receiving recovery data including P game balls after correction = 175 from P units IC 325a and CU control unit 323),
Score correction means for correcting the score to be displayed on the display means based on the correction information and the arrival confirmation information transmitted from the correction information transmission means after recovery from the communication disabled state (FIG. 51: recovery response) CU control unit 323) that receives and corrects the number of game balls = 175,
The display control means displays the score corrected by the score correction means on the display means after recovering from the communication disabled state (displays the number of game balls = 175 on the display 54).

  According to the above configuration, when the communication disabled state is restored, the score correction information is transmitted from the gaming machine to the gaming device together with the arrival confirmation information at the time of the final communication before the communication disabled state. In the device, since the display of the score is corrected based on the correction information and the arrival confirmation information, when the incommunicable state is recovered, the game device and the gaming machine should be in a state of being consistent. Can do. As a result, it is possible to provide a strong gaming system in preparation for the occurrence of an incommunicable state. Further, since the display means is controlled by a gaming device, the control burden on the gaming machine can be reduced.

(15-2) Another aspect of the present invention is connected to a gaming machine (pachinko machine 2, slot machine 2S) in which a game is played using a predetermined score (game ball, game point), so that the player A gaming device (card unit 3) for enabling a game in the gaming machine using a possessed gaming value (a prepaid balance, a number of balls, or a number of balls),
Update information receiving means (communication) for receiving update information capable of specifying the amount of change of the score from the gaming machine together with arrival confirmation information (serial number) updated in accordance with a predetermined update pattern for confirming arrival of the update information Control IC 325a),
Display control means (CU control unit 323 and display control unit 350) for controlling display means and updating the display of the score based on the update information;
When recovering from a communication disabled state where communication between the gaming machine and the gaming device is not possible, the correction information of the score, together with the arrival confirmation information at the time of the final communication before entering the communication disabled state Correction information receiving means (FIG. 51: communication control IC 325a and CU control unit 323 for receiving recovery data including the number of game balls after correction = 175) from the P machines received from the gaming machine,
Score correction means for correcting the score to be displayed on the display means based on the correction information and the arrival confirmation information transmitted from the gaming machine after recovering from the communication disabled state (FIG. 51: receiving a recovery response) CU control unit 323) for correcting the number of game balls to 175,
The display control means displays the score corrected by the score correction means on the display means after recovering from the communication disabled state (displays the number of game balls = 175 on the display 54).

  According to the above configuration, when the communication disabled state is restored, the score correction information is transmitted from the gaming machine to the gaming device together with the arrival confirmation information at the time of the final communication before the communication disabled state. In the device, since the display of the score is corrected based on the correction information and the arrival confirmation information, when the incommunicable state is recovered, the game device and the gaming machine should be in a state of being consistent. Can do. As a result, it is possible to provide a gaming apparatus for constructing a strong gaming system in preparation for the occurrence of a communication disabled state. Further, since the display means is controlled by a gaming device, the control burden on the gaming machine can be reduced.

(15-3) The gaming system according to (15-1) above,
The gaming machine is
Transmitted update information storage means (addition ball number, subtraction ball number, addition number of FIG. 151, subtraction number of FIG. 8) for storing the update information transmitted to the gaming device before the communication disabled state,
Update information storage means for storing the update information (addition ball number counter in FIG. 8, subtraction ball number counter addition number counter in FIG. 151),
The correction information transmission means transmits the update information stored in the transmitted update information storage means and the update information stored in the update information storage means (FIG. 51: last game machine information and latest information). A recovery response including game machine information).

  According to the above configuration, after the recovery from the communication disabled state, in the gaming device, the update information stored in the transmission update information storage unit and the untransmitted update information storage unit can be received. Recovering from a communication-disabled state both when the update information sent from the gaming machine immediately before has not reached the gaming device and when the gaming machine cannot send update information due to the occurrence of a communication-disabled state In this case, it is possible to reflect the score on the display means.

(15-4) The gaming system according to (15-1) or (15-3) above,
The gaming device is:
A recording medium receiving means (card reader / writer) for receiving a recording medium capable of specifying a gaming value owned by the player;
First received information storage means (CU control unit 323 for storing card ID) for storing information (card ID) recorded on the recording medium received by the recording medium receiving means;
An acceptance information transmitting means (FIG. 36: a CU control unit 323 for transmitting a card ID to P cards and a communication control IC 325a) for transmitting information recorded on the recording medium received by the recording medium receiving means to the gaming machine. Including
The gaming machine includes second reception information storage means (FIG. 36: a payout control unit 171 for backing up a card ID) that stores information recorded in the recording medium transmitted from the reception information transmission means,
The correction information transmission means transmits the information recorded on the recording medium stored in the second reception information storage means together with the correction information (FIG. 51, FIG. 52: recovery data including a card ID to the CU. Send),
The score correction unit is configured to match information recorded on the recording medium transmitted from the correction information transmission unit with information recorded on the recording medium stored in the first reception information storage unit. The score to be displayed on the display means is corrected (FIGS. 51 and 52: When the card ID and the insertion time can be matched, the number of game balls is corrected to 175).

  According to the above configuration, after recovering from the communication disabled state, the information recorded on the recording medium stored on the gaming device side and the information recorded on the recording medium stored on the gaming machine side are Since the score display is corrected when they match, the score display can be corrected for a case where a game that has been interrupted due to the occurrence of a communication disabled state is resumed after the communication disabled state is restored.

(15-5) A gaming system according to any one of (15-1), (15-3) and (15-4),
The update information transmitting means transmits the score stored in the score storage means in addition to the update information and the arrival confirmation information (the value of the game ball counter (number of game balls) in FIG. 8). 151 (the value of the game point counter (the number of game points) in FIG. 151 is transmitted.)
The gaming device is:
Game device side score storage means for storing the score (the number of game balls in FIG. 8 and the number of game points in FIG. 151);
Update information storage means for storing the update information (total added ball number and total subtracted ball number in FIG. 8, total added number and total subtracted number in FIG. 151);
Information updating means for updating the game device-side score storage means and the update information storage means based on the update information (addition / subtraction update of the number of game balls in FIG. 8, addition / subtraction update of the number of game points in FIG. 151);
A match determination means for determining a match between the score stored in the game device-side score storage means after the update by the information update means and the score transmitted from the update information transmission means (the number of game balls in FIG. 8) Match determination and game score match determination in FIG. 151).

  According to the above configuration, since the score is stored on the gaming device side, even if one score disappears on the gaming machine side and the gaming device side, the score remains on the other, Can be secured. In addition, when the score storage is updated on the gaming device side, a match determination between the updated score and the score stored on the gaming machine side is performed, so that both the gaming device and the gaming machine It is possible to prevent inconvenience that the operation is continued while the stored scores do not match. When it is determined that they do not coincide with each other, an alarm sound is generated or a warning is displayed, or in addition to or instead of this, a process for matching both scores is performed. It is possible. In the case of matching both scores, for example, the score on the gaming machine side may be matched with the score stored on the gaming machine side, or conversely, the score on the gaming machine side is used for gaming. You may make it match the score memorize | stored by the apparatus side.

(16-1) The present invention is connected to a gaming machine (pachinko machine 2, slot machine 2S) in which a game is performed using a predetermined score (game ball, game point), and the game machine so as to be able to communicate. Game device (card unit 3) for enabling a game on the gaming machine using the game value (prepaid balance, number of possessed balls, or number of stored balls) owned by the user, and display means for displaying the score A game system including (displays 54, 312, 510),
The gaming machine is
Score storage means for storing the score (game ball counter in FIG. 8, game score counter in FIG. 151);
Score updating means for updating the score according to the game situation (FIG. 45: payout control unit 171 for calculating the number of game balls based on the number of added balls and the number of subtracted balls, FIG. 38, FIG. 39: added balls from the CU A payout control unit 171) for adding the number of game balls based on the number;
Specific means (microcomputer for game machine control, addition ball number counter, subtraction ball number counter, addition number counter, subtraction number counter) for specifying the amount of change in the score (number of added balls, number of subtracted balls) by the score update means When,
Update information transmitting means (payout control) for transmitting update information capable of specifying the amount of change together with arrival confirmation information (serial number) updated in accordance with a predetermined update pattern to confirm arrival of the update information Part 171),
A game machine side arrival confirmation information storage means for storing the arrival confirmation information used for the final communication with the gaming apparatus (storage of “serial number” on the P platform side in FIG. 8, S in FIG. 151) Memory of the "serial number" on the table side)
When the game machine and the gaming apparatus are unable to communicate with each other and recover from an incommunicable state, the score correction information (FIG. 51: number of game balls = 50 + 125) is stored in the gaming machine side arrival confirmation information. Correction information transmission means for transmitting to the gaming device together with the arrival confirmation information stored in the means (FIG. 51: The recovery data including the number of game balls after correction = 175 and the final transmission serial number are transmitted to the CU. A payout control unit 171),
The gaming device is:
Update information receiving means (communication control IC 325a) for receiving the update information;
Display control means (CU control unit 323 and display control unit 350) for controlling the display means and updating the display of the score based on the update information;
Game device side arrival confirmation information storage means for storing the arrival confirmation information used for the final communication with the gaming machine (storage of “serial number” on the CU side in FIGS. 8 and 151);
Correction information receiving means for receiving the correction information and the arrival confirmation information transmitted from the correction information transmitting means (FIG. 51: P recovery data including the number of game balls after correction = 175 and the final transmission serial number) Communication control IC 325a and CU control unit 323) received from
Based on the arrival confirmation information received by the correction information receiving means and the arrival confirmation information stored in the gaming apparatus side arrival confirmation information storage means, a correction mode of the score to be displayed on the display means Correction mode determining means to determine (FIGS. 51 to 53: The CU compares the final transmission sequence number Np received from the P units with the stored P unit final transmission sequence number Nc, and if Np ≦ Nc, the latest While the recovery process is performed only with the gaming machine information, if Np> Nc, it is determined that the recovery process is performed with the latest gaming machine information and the previous gaming machine information)
Based on the correction information and the correction mode determined by the correction mode determination unit, score correction unit for correcting the score to be displayed on the display unit (FIG. 51: Receives a recovery response and corrects the number of game balls = 175. CU control unit 323),
The display control means displays the score corrected by the score correction means on the display means after recovering from the communication disabled state (displays the number of game balls = 175 on the display 54).

  According to the above configuration, when the communication disabled state is restored, the score correction information is transmitted from the gaming machine to the gaming device together with the arrival confirmation information at the time of the final communication before the communication disabled state. In the device, the correction mode of the score is determined based on the arrival confirmation information stored by itself as the one used for the final communication and the arrival confirmation information received from the gaming machine side, and based on the correction mode and the correction information Since the display of the score is corrected, when the incommunicable state is recovered, the game device and the gaming machine can be matched. As a result, it is possible to provide a strong gaming system in preparation for the occurrence of an incommunicable state. Further, since the display means is controlled by a gaming device, the control burden on the gaming machine can be reduced.

(16-2) Another aspect of the present invention is connected to a gaming machine (pachinko machine 2, slot machine 2S) in which a game is performed using a predetermined score (game ball, game point), and a player A gaming device (card unit 3) for enabling a game in the gaming machine using a possessed gaming value (a prepaid balance, a number of balls, or a number of balls),
Update information receiving means (communication) for receiving update information capable of specifying the amount of change of the score from the gaming machine together with arrival confirmation information (serial number) updated in accordance with a predetermined update pattern for confirming arrival of the update information Control IC 325a),
Display control means (CU control unit 323 and display control unit 350) for controlling display means (displays 54, 312, 510) and updating the display of the score based on the update information;
Game device side arrival confirmation information storage means for storing the arrival confirmation information used for the final communication with the gaming machine (storage of “serial number” on the CU side in FIGS. 8 and 151);
When the gaming machine and the gaming device are recovered from a communication incapable state where communication is not possible, the score correction information is used to confirm the arrival that was used for the final communication before the communication disabled state. Correction information receiving means (FIG. 51: communication control IC 325a and CU control unit 323 for receiving recovery data from P units including the number of game balls after correction = 175 and the final transmission serial number) received from the gaming machine together with information ,
Based on the arrival confirmation information received by the correction information receiving means and the arrival confirmation information stored in the gaming apparatus side arrival confirmation information storage means, a correction mode of the score to be displayed on the display means Correction mode determining means to determine (FIGS. 51 to 53: The CU compares the final transmission sequence number Np received from the P units with the stored P unit final transmission sequence number Nc, and if Np ≦ Nc, the latest While the recovery process is performed only with the gaming machine information, if Np> Nc, it is determined that the recovery process is performed with the latest gaming machine information and the previous gaming machine information)
Based on the correction information and the correction mode determined by the correction mode determination unit, score correction unit for correcting the score to be displayed on the display unit (FIG. 51: Receives a recovery response and corrects the number of game balls = 175. CU control unit 323),
The display control means displays the score corrected by the score correction means on the display means after recovering from the communication disabled state (displays the number of game balls = 175 on the display 54).

  According to the above configuration, when the communication disabled state is restored, the score correction information is transmitted from the gaming machine to the gaming device together with the arrival confirmation information at the time of the final communication before the communication disabled state. In the device, the correction mode of the score is determined based on the arrival confirmation information stored by itself as the one used for the final communication and the arrival confirmation information received from the gaming machine side, and based on the correction mode and the correction information Since the display of the score is corrected, when the incommunicable state is recovered, the game device and the gaming machine can be matched. As a result, it is possible to provide a gaming apparatus for constructing a strong gaming system in preparation for the occurrence of a communication disabled state. Further, since the display means is controlled by a gaming device, the control burden on the gaming machine can be reduced.

(16-3) The gaming system according to (16-1) above,
The gaming machine is
Transmitted update information storage means (addition ball number, subtraction ball number, addition number of FIG. 151, subtraction number of FIG. 8) for storing the update information transmitted to the gaming device before the communication disabled state,
Update information storage means for storing the update information (addition ball number counter in FIG. 8, subtraction ball number counter addition number counter in FIG. 151),
The correction information transmitting means transmits the update information stored in the transmitted update information storage means and the update information stored in the update information storage means (FIG. 51: last game machine information and latest information). And send a recovery response including game machine information),
The correction mode determining means corrects the score using the update information stored in the transmitted update information storage means and the update information stored in the update information storage means (FIG. 1). 51-FIG. 53: The CU compares the last transmission sequence number Np received from the P units with the stored P unit final transmission sequence number Nc, and if Np> Nc, the latest game table information and the previous game table information And the second correction mode for correcting the score using the update information stored in the update information storage means (FIGS. 51 to 53: CU is the last transmission sequence number received from the P units) Np is compared with the stored P last transmission serial number Nc, and if Np ≦ Nc, the recovery mode is determined only from the latest gaming machine information).

  According to said structure, after recovering from a communication impossible state, since it can receive the said update information memorize | stored in the said transmitted update information storage means and the said unsent update information storage means in a game device, communication is impossible. Whether the update information transmitted from the gaming machine immediately before the state did not reach the gaming device or when the gaming machine could not transmit the update information due to the occurrence of the communication disabled state, At the time of recovery, it can be reflected in the score on the display means.

(16-4) The gaming system according to (16-1) or (16-3) above,
The gaming device is:
A recording medium receiving means (card reader / writer) for receiving a recording medium capable of specifying a gaming value owned by the player;
A first reception information storage means for storing information (card ID) recorded on the recording medium received by the recording medium reception means, a CU control unit 323 for storing a card ID,
An acceptance information transmitting means (FIG. 36: a CU control unit 323 for transmitting a card ID to P cards and a communication control IC 325a) for transmitting information recorded on the recording medium received by the recording medium receiving means to the gaming machine. Including
The gaming machine includes second reception information storage means (FIG. 36: a payout control unit 171 for backing up a card ID) that stores information recorded in the recording medium transmitted from the reception information transmission means,
The correction information transmission means transmits the information recorded on the recording medium stored in the second reception information storage means together with the correction information (FIG. 51, FIG. 52: recovery data including a card ID to the CU. Send),
The score correction unit is configured to match information recorded on the recording medium transmitted from the correction information transmission unit with information recorded on the recording medium stored in the first reception information storage unit. The score to be displayed on the display means is corrected (FIGS. 51 and 52: When the card ID and the insertion time can be matched, the number of game balls is corrected to 175).

  According to the above configuration, after recovering from the communication disabled state, the information recorded on the recording medium stored on the gaming device side and the information recorded on the recording medium stored on the gaming machine side are Since the score display is corrected when they match, the score display can be corrected for a case where a game that has been interrupted due to the occurrence of a communication disabled state is resumed after the communication disabled state is restored.

(16-5) The gaming system according to (16-3) or (16-4) above,
The update information transmission means stores the update information in the transmitted update information storage means together with the score at the time of transmission when the update information is transmitted (transmits the number of added balls and the number of subtracted balls in FIG. 8). Each time, the previous game table information is rewritten with the added ball number and the subtracted ball number, and the game ball counter at the time of transmission is stored in the game ball counter. The information is rewritten to the addition number and the subtraction number, and the game point counter at the time of transmission is stored in the game point counter).
The correction information transmission means is stored in the update information and score stored in the transmitted update information storage means, the update information stored in the update information storage means, and the score storage means. The score is transmitted (FIG. 51: a recovery response including the previous game machine information, the latest game machine information, and the number of game balls is transmitted),
The score correction means transmits from the correction information transmission means when information indicating non-communication with the gaming machine (CU serial number = 0 in FIG. 51) is stored in the gaming apparatus side arrival confirmation information storage means. It correct | amends to the score currently memorize | stored in the said score memory | storage means (it correct | amends to the number of game balls = 450 of FIG. 51).

  According to the above configuration, if information indicating non-communication with the gaming machine is stored, it is considered that the gaming device has been replaced. In such a case, the score received from the gaming machine Is displayed as it is, so that even when the gaming device is replaced, an accurate score corresponding to the gaming situation in the previous gaming machine can be displayed on the display means.

(16-6) The gaming system according to any one of (16-1), (16-3), (16-4), and (16-5),
In the case where the arrival confirmation information received by the correction information receiving means indicates non-communication with the gaming device (final transmission serial number = 0 in FIGS. 54 and 56), The score is not corrected (the recovery in FIGS. 54 and 56 is not performed).

  According to the above configuration, when non-communication with the gaming device is indicated, it is considered that the gaming machine has been replaced. In such a case, the score is not corrected on the gaming device side. Therefore, it is possible to prevent the score from being corrected to a value different from the original value due to information from the newly replaced gaming machine.

(17-1) The present invention provides first control means (CU control unit 323 or CU3, P stand 2, jet counter, POS terminal, etc.) and second control means (security chip 325b or CU3) that perform cryptographic communication with each other. A gaming system including a P stand 2, a jet counter, a POS terminal, etc.
First encrypted communication processing means (encrypted communication in SE1 mode) for performing encrypted communication between the first control means and the second control means;
Secondly, after the encrypted communication by the first encrypted communication processing means, the encrypted communication having a higher security level than the encrypted communication by the first encrypted communication processing means is performed between the first control means and the second control means. Encryption communication processing means (SE2 mode encryption communication),
The second cryptographic communication processing means is
The first key used for generating the ciphertext to be transmitted from the first control unit to the second control unit (the down counter in FIG. 135 (a)) is the same in the first control unit and the second control unit. A first key update means (first counter update process in FIG. 135 (c) to FIG. 141) for performing a first key update process independently updated by an update method;
First encryption means for generating ciphertext using the first key updated by the first key update means (FIG. 135 (c), S105 in FIG. 142 (a), encryption using a down counter); ,
First decryption means (FIG. 136, FIG. 142 (FIG. 136), wherein the second control means receives the ciphertext generated by the first encryption means and decrypts it using the first key updated by the first key update means. b) S133, composite using down counter)
Second key update for independently updating the second key used for generating the ciphertext to be transmitted from the second control means to the first control means by the same update method in the first control means and the second control means. Second key updating means for performing the processing (upward counter updating processing in FIGS. 135 (c) to 141);
Second encryption means for generating ciphertext using the second key updated by the second key update means (FIG. 135 (c), S105 in FIG. 142 (a), encryption using an upward counter); ,
Second decryption means for receiving the ciphertext generated by the second encryption means by using the second key received by the first control means and updated by the second key update means (FIGS. 136 and 142). b) S133, a composite using an up counter)
The first key update means performs the first key update process in accordance with transmission / reception of ciphertext (FIG. 135 (c) to FIG. 141: addition and update of down counter),
The second key update means performs the second key update process in accordance with transmission / reception of ciphertext (FIG. 135 (c) to FIG. 141: addition and updating of the upstream counter).

  According to the above configuration, the second cryptographic communication in which the cryptographic communication is performed by the first cryptographic communication processing unit and the cryptographic communication having a higher security level than the cryptographic communication by the first cryptographic communication processing unit is performed after the cryptographic communication. Since the encryption communication by the processing means is performed, even if the security of the encryption communication by the first encryption communication processing means is broken, the encryption communication by the second encryption communication processing means which is the encryption communication with a high security level performed thereafter. It is possible to maintain security by high-level encryption communication by the second encryption communication processing means. Moreover, the encrypted communication by the second encrypted communication processing means is a fixed key that does not change because the key used for generating the ciphertext is independently updated by the same update method in the first control means and the second control means. Security is improved compared to encrypted communication by.

(17-2) In the gaming system according to (17-1), the first control is performed by encrypting an initial first key before being updated by the first key updating means by the first encryption communication processing means. Key sharing means for distributing the first key by distributing from one of the means and the second control means to the other (FIG. 130: generating the value of the initial vector part for downlink and transmitting it from the SC to the CU control part, S101 To S103),
The initial second key before being updated by the second key updating means is encrypted by the first encrypted communication processing means and distributed from one of the first control means and the second control means to the other second. Second key sharing means for sharing the key (FIG. 130: Generate the value of the upstream initial vector part and transmit it to the CU control part, S101 to S103).

  According to the above configuration, the initial first key and the initial second key need to be shared between the first control means and the second control means, but the initial first key and the initial second key are Since the data is encrypted by one encryption communication processing means and distributed from one of the first control means and the second control means to the other, the security during key sharing can be maintained.

(17-3) In the gaming system of (17-2) above, the first key is a first initial vector portion that takes over without updating the data of the initial first key (FIG. 135 (a): downlink Initial vector part R1) and a first updating part to be updated (FIG. 135 (a): message counter part N and cipher block counter part I),
The second key includes a second initial vector portion (FIG. 135 (b): upstream initial vector portion R2) that takes over without updating the data of the initial second key, and a second update portion (FIG. 135) that is updated. 135 (b): a message counter unit N and a cipher block counter unit I),
The first key update unit updates the first update unit without updating the first initial vector unit (S105 to S110),
The second key update unit updates the second update unit without updating the second initial vector unit (S105 to S110),
The first initial vector portion and the second initial vector portion have different values (R1 and R2 have different values),
The first key sharing means distributes and shares the first initial vector part as the initial first key (FIG. 130),
The second key sharing means distributes and shares the first initial vector portion as the initial second key (FIG. 130).

  According to the above configuration, since the first initial vector portion and the second initial vector portion that are not updated are distributed and shared as an initial key, the cause when decryption by the decryption means becomes impossible Thus, it is possible to find out whether the update unit updated by the key update unit has been misunderstood or whether the initial vector unit has been misunderstood for some reason.

(17-4) In the gaming system of the above (17-2) or (17-3), the first key sharing means sets a new first initial vector portion each time encrypted communication is newly started. Is distributed and shared as the first key (encrypted communication is newly started each time the power is turned on, and a communication key exchange sequence is executed (FIG. 123). ),
The second key sharing means distributes and shares the new first initial vector portion as the initial second key each time encrypted communication is newly started (encrypted communication is newly generated each time the power is turned on. The communication key exchange sequence is started and executed (FIG. 123), and the value of the downstream initial vector portion is distributed (FIG. 130).

  According to the above configuration, the new first initial vector unit and the second initial vector unit are distributed and shared every time encryption communication is newly started. New cryptographic communication using the initial vector portion is performed, and it is possible to prevent a decrease in security due to continuous use of the key.

(17-5) In another aspect of the present invention, a first control unit (CU control unit 323 or CU3, P stand 2, jet counter, POS terminal, etc.) and a second control unit (security chip) that perform cryptographic communication with each other. 325b or CU3, P stand 2, jet counter, POS terminal, etc.)
First encrypted communication processing means (encrypted communication in SE1 mode) for performing encrypted communication between the first control means and the second control means;
Secondly, after the encrypted communication by the first encrypted communication processing means, the encrypted communication having a higher security level than the encrypted communication by the first encrypted communication processing means is performed between the first control means and the second control means. Encryption communication processing means (SE2 mode encryption communication),
The second cryptographic communication processing means is
The first key used for generating the ciphertext to be transmitted from the first control unit to the second control unit (the down counter in FIG. 135 (a)) is the same in the first control unit and the second control unit. A first key update means (first counter update process in FIG. 135 (c) to FIG. 141) for performing a first key update process independently updated by an update method;
First encryption means for generating ciphertext using the first key updated by the first key update means (FIG. 135 (c), S105 in FIG. 142 (a), encryption using a down counter); ,
First decryption means (FIG. 136, FIG. 142 (FIG. 136), wherein the second control means receives the ciphertext generated by the first encryption means and decrypts it using the first key updated by the first key update means. b) S133, composite using down counter)
Second key update for independently updating the second key used for generating the ciphertext to be transmitted from the second control means to the first control means by the same update method in the first control means and the second control means. Second key updating means for performing the processing (upward counter updating processing in FIGS. 135 (c) to 141);
Second encryption means for generating ciphertext using the second key updated by the second key update means (FIG. 135 (c), S105 in FIG. 142 (a), encryption using an upward counter); ,
Second decryption means for receiving the ciphertext generated by the second encryption means by using the second key received by the first control means and updated by the second key update means (FIGS. 136 and 142). b) S133, a composite using an up counter)
The first key update means performs the first key update process in accordance with transmission / reception of ciphertext (FIG. 135 (c) to FIG. 141: addition and update of down counter),
The second key update means performs the second key update process in accordance with transmission / reception of ciphertext (FIG. 135 (c) to FIG. 141: addition and updating of the upstream counter).

  According to the above configuration, the second cryptographic communication in which the cryptographic communication is performed by the first cryptographic communication processing unit and the cryptographic communication having a higher security level than the cryptographic communication by the first cryptographic communication processing unit is performed after the cryptographic communication. Since the encryption communication by the processing means is performed, even if the security of the encryption communication by the first encryption communication processing means is broken, the encryption communication by the second encryption communication processing means which is the encryption communication with a high security level performed thereafter. It is possible to maintain security by high-level encryption communication by the second encryption communication processing means. Moreover, the encrypted communication by the second encrypted communication processing means is a fixed key that does not change because the key used for generating the ciphertext is independently updated by the same update method in the first control means and the second control means. Security is improved compared to encrypted communication by.

(17-6) In the control device according to (17-5), the first control means encrypts an initial first key before being updated by the first key update means by the first encryption communication processing means. And first key sharing means for distributing the first key by distributing from one of the second control means to the other (FIG. 130: generating the value of the initial vector part for downlink and transmitting it from the SC to the CU control part, S101 S103)
The initial second key before being updated by the second key updating means is encrypted by the first encrypted communication processing means and distributed from one of the first control means and the second control means to the other second. Second key sharing means for sharing the key (FIG. 130: Generate the value of the upstream initial vector part and transmit it to the CU control part, S101 to S103).

  According to the above configuration, the initial first key and the initial second key need to be shared between the first control means and the second control means, but the initial first key and the initial second key are Since the data is encrypted by one encryption communication processing means and distributed from one of the first control means and the second control means to the other, the security during key sharing can be maintained.

(17-7) In the control device of (17-6), the first key is a first initial vector portion that takes over without updating the data of the initial first key (FIG. 135 (a): downstream An initial vector part R1), and a first update part to be updated (FIG. 135 (a): message counter part N and cipher block counter part I),
The second key includes a second initial vector portion (FIG. 135 (b): upstream initial vector portion R2) that takes over without updating the data of the initial second key, and a second update portion (FIG. 135) that is updated. 135 (b): a message counter unit N and a cipher block counter unit I),
The first key update unit updates the first update unit without updating the first initial vector unit (S105 to S110),
The second key update unit updates the second update unit without updating the second initial vector unit (S105 to S110),
The first initial vector portion and the second initial vector portion have different values (R1 and R2 have different values),
The first key sharing means distributes and shares the first initial vector part as the initial first key (FIG. 130),
The second key sharing means distributes and shares the first initial vector portion as the initial second key (FIG. 130).

  According to the above configuration, since the first initial vector portion and the second initial vector portion that are not updated are distributed and shared as an initial key, the cause when decryption by the decryption means becomes impossible Thus, it is possible to find out whether the update unit updated by the key update unit has been misunderstood or whether the initial vector unit has been misunderstood for some reason.

(17-8) In the control device according to (17-6) or (17-7), the first key sharing means sets a new first initial vector portion to the initial value every time encryption communication is newly started. Delivered and shared as the first key (encrypted communication is newly started each time the power is turned on, and a communication key exchange sequence is executed (FIG. 123). ,
The second key sharing means distributes and shares the new first initial vector portion as the initial second key each time encrypted communication is newly started (encrypted communication is newly generated each time the power is turned on. The communication key exchange sequence is started and executed (FIG. 123), and the value of the downstream initial vector portion is distributed (FIG. 130).

  According to the above configuration, the new first initial vector unit and the second initial vector unit are distributed and shared every time encryption communication is newly started. New cryptographic communication using the initial vector portion is performed, and it is possible to prevent a decrease in security due to continuous use of the key.

(18-1) The present invention relates to first control means (CU control unit 323 or CU3, P stand 2, jet counter, POS terminal, etc.) and second control connected to the first control means in a communicable manner. Means (security chip 325b or CU3, P stand 2, jet counter, POS terminal, etc.) and third control means (communication control IC 325a or CU3, P stand 2, connected to the second control means, A game system including a jet counter, a POS terminal, etc.
The first control means stores second control means identification information for identifying the second control means that is an authentication partner (stores a board serial ID),
The third control means stores third control means identification information for identifying the third control means and the second control means identification information (stores ID information and the like),
The second control means stores the second control means identification information (substrate serial ID) and the third control means identification information (ID information, etc.),
A challenge code (challenge code in FIG. 131) is generated between the first control means and the second control means using the second control means identification information stored in the second control means, and It transmits to the first control means (board serial ID authentication response 1 in FIG. 131), and the first control means uses the stored second control means identification information from the received challenge code to the response code ( 131 is generated and returned to the second control means (substrate serial ID authentication request 2 in FIG. 131), and the second control means uses the stored second control means identification information. The first challenge response authentication process for determining the suitability of the received response code is performed (response code check in FIG. 131),
Between the second control means and the third control means,
Using the second control means identification information stored in the second control means, a challenge code is generated and transmitted to the third control means, and the second control stored in the third control means Using the means identification information, a response code is generated from the received challenge code and sent back to the second control means, and the second control means receives the stored second control means identification information. A second challenge response authentication process (first authentication sequence in FIG. 146) for determining the suitability of the response code,
A challenge code is generated using the third control means identification information stored in the third control means and transmitted to the second control means, and the third control stored in the second control means. Using the means identification information, a response code is generated from the received challenge code and sent back to the third control means, and the third control means receives the stored third control means identification information. The third challenge response authentication process (second authentication sequence in FIG. 146) for determining the suitability of the response code is performed.

  According to the above configuration, the challenge code is transmitted from one control means to the other control means between the first control means and the second control means and between the second control means and the third control means. Since the response code is generated from the challenge code received using the identification information stored in the control means and sent back to one of the control means, challenge-response authentication is performed. Even if the challenge code or response code is leaked, it is difficult to specify the stored identification information, and it is possible to prevent fraudulent acts on the control means due to the leakage of the identification information as much as possible.

(18-2) In the gaming system of (18-1), the first control means and the second control means store pairing authentication information used for mutual authentication (authentication consisting of a common key). Remember key etc.),
Between the first control means and the second control means,
The first control means executes arithmetic processing using the authentication information and transmits the result data of the arithmetic processing to the second control means (device authentication request 2 in FIG. 132), and the second control means A first authentication process (verification of a random number B and verification of an authentication key or the like by a MAC check) that performs arithmetic processing on the result data using the authentication information and checks consistency with the result data;
The second control unit executes a calculation process using the authentication information and transmits result data of the calculation process to the first control unit (device authentication request 1 in FIG. 132), and the first control unit The result data is subjected to a calculation process using the authentication information to perform a second authentication process for checking consistency with the result data (compounding random number A and verifying an authentication key or the like by MAC check) .

  According to the above configuration, since authentication processing using the pair authentication information stored in the first control means and the second control means is also executed, a more reliable mutual authentication is performed. It becomes possible and security is improved. Moreover, since this authentication process also transmits / receives the result data obtained by executing the calculation process using the stored authentication information, even if the transmitted / received result data leaks out, the authentication information It is difficult to specify and it is possible to prevent fraudulent acts against the control means due to information leakage as much as possible.

(18-3) In the gaming system according to (18-1) or (18-2), mutual authentication other than the first challenge response authentication process is performed between the first control means and the second control means. Process (device authentication sequence in FIG. 124)
When proper authentication is not performed as a result of the first challenge response authentication process, the mutual authentication process is executed without performing an inappropriate notification at the authentication stage, and an inappropriate notification is sent as a summary of all authentication results. (FIG. 132: The board authentication result notification after the equipment authentication sequence notifies the board serial ID authentication and the equipment authentication result).

  According to the above configuration, since mutual authentication processing other than the first challenge response authentication processing is also performed between the first control means and the second control means, even if the security of one authentication processing is broken. The security of mutual authentication can be maintained by the other authentication process.

  In addition, for example, when the first challenge response authentication process and the mutual authentication process other than that are performed, if the authentication result of the first challenge response authentication process alone is inappropriate, the authentication result of the single challenge notification is notified. In this case, it is known that the authentication process determined to be inappropriate is the first challenge response authentication process, which is not preferable in terms of security. However, if the authentication is not performed properly as a result of the first challenge response authentication process, The mutual authentication process is executed without performing the inappropriate notification at the authentication stage, and all the authentication results are summed up and the inappropriate notification is given. Thus, security can be improved.

(18-4) According to another aspect of the present invention, there is provided a connection unit for connecting to a gaming machine (pachinko machine 2, slot machine 2S) in which a game is played by a player, and the game in the gaming machine A gaming device (card unit 3) for enabling
First control means (CU control unit 323);
Second control means (security chip 325b) communicatively connected to the first control means;
And third control means (communication control IC 325a) connected to the second control means so as to be communicable,
The first control means stores second control means identification information for identifying the second control means that is an authentication partner (stores a board serial ID),
The third control means stores third control means identification information for identifying the third control means and the second control means identification information (stores ID information and the like),
The second control means stores the second control means identification information (substrate serial ID) and the third control means identification information (ID information, etc.),
A challenge code (challenge code in FIG. 131) is generated between the first control means and the second control means using the second control means identification information stored in the second control means, and It transmits to the first control means (board serial ID authentication response 1 in FIG. 131), and the first control means uses the stored second control means identification information from the received challenge code to the response code ( 131 is generated and returned to the second control means (substrate serial ID authentication request 2 in FIG. 131), and the second control means uses the stored second control means identification information. The first challenge response authentication process for determining the suitability of the received response code is performed (response code check in FIG. 131),
Between the second control means and the third control means,
Using the second control means identification information stored in the second control means, a challenge code is generated and transmitted to the third control means, and the second control stored in the third control means Using the means identification information, a response code is generated from the received challenge code and sent back to the second control means, and the second control means receives the stored second control means identification information. A second challenge response authentication process (first authentication sequence in FIG. 146) for determining the suitability of the response code,
A challenge code is generated using the third control means identification information stored in the third control means and transmitted to the second control means, and the third control stored in the second control means. Using the means identification information, a response code is generated from the received challenge code and sent back to the third control means, and the third control means receives the stored third control means identification information. The third challenge response authentication process (second authentication sequence in FIG. 146) for determining the suitability of the response code is performed.

  According to the above configuration, the challenge code is transmitted from one control means to the other control means between the first control means and the second control means and between the second control means and the third control means. Since the response code is generated from the challenge code received using the identification information stored in the control means and sent back to one of the control means, challenge-response authentication is performed. Even if the challenge code or response code is leaked, it is difficult to specify the stored identification information, and it is possible to prevent fraudulent acts on the control means due to the leakage of the identification information as much as possible.

(18-5) In the gaming machine of the above (18-4), the first control means and the second control means store a pair of authentication information used for mutual authentication (authentication consisting of a common key). Remember key etc.),
Between the first control means and the second control means,
The first control means executes arithmetic processing using the authentication information and transmits the result data of the arithmetic processing to the second control means (device authentication request 2 in FIG. 132), and the second control means A first authentication process (verification of a random number B and verification of an authentication key or the like by a MAC check) that performs arithmetic processing on the result data using the authentication information and checks consistency with the result data;
The second control unit executes a calculation process using the authentication information and transmits result data of the calculation process to the first control unit (device authentication request 1 in FIG. 132), and the first control unit The result data is subjected to a calculation process using the authentication information to perform a second authentication process for checking consistency with the result data (compounding random number A and verifying an authentication key or the like by MAC check) .

  According to the above configuration, since authentication processing using the pair authentication information stored in the first control means and the second control means is also executed, a more reliable mutual authentication is performed. It becomes possible and security is improved. Moreover, since this authentication process also transmits / receives the result data obtained by executing the calculation process using the stored authentication information, even if the transmitted / received result data leaks out, the authentication information It is difficult to specify and it is possible to prevent fraudulent acts against the control means due to information leakage as much as possible.

(18-6) In the gaming machine according to (18-4) or (18-5), mutual authentication other than the first challenge response authentication process is performed between the first control means and the second control means. Process (device authentication sequence in FIG. 124)
When proper authentication is not performed as a result of the first challenge response authentication process, the mutual authentication process is executed without performing an inappropriate notification at the authentication stage, and an inappropriate notification is sent as a summary of all authentication results. (FIG. 132: The board authentication result notification after the equipment authentication sequence notifies the board serial ID authentication and the equipment authentication result).

  According to the above configuration, since mutual authentication processing other than the first challenge response authentication processing is also performed between the first control means and the second control means, even if the security of one authentication processing is broken. The security of mutual authentication can be maintained by the other authentication process.

  In addition, for example, when the first challenge response authentication process and the mutual authentication process other than that are performed, if the authentication result of the first challenge response authentication process alone is inappropriate, the authentication result of the single challenge notification is notified. In this case, it is known that the authentication process determined to be inappropriate is the first challenge response authentication process, which is not preferable in terms of security. However, if the authentication is not performed properly as a result of the first challenge response authentication process, The mutual authentication process is executed without performing the inappropriate notification at the authentication stage, and all the authentication results are summed up and the inappropriate notification is given. Thus, security can be improved.

(18-7) According to still another aspect of the present invention, there is provided a second control unit (security chip 325b) having a connection unit communicably connected to the first control unit (CU control unit 323), and the second control. A control device (security board 325) including third control means (communication control IC 325a) communicatively connected to the means,
The third control means stores third control means identification information for identifying the third control means and second control means identification information for identifying the second control means (substrate serial ID and ID information are stored)
The second control means stores the second control means identification information (substrate serial ID) and the third control means identification information (ID information, etc.),
The second control means generates a challenge code (challenge code in FIG. 131) using the stored second control means identification information and outputs the challenge code (board serial ID authentication response 1 in FIG. 131). ), In the first control means, using the stored second control means identification information, a response code (response code in FIG. 131) is generated from the received challenge code, and the response code is sent to the connection unit. The first challenge is to determine the suitability of the received response code using the stored second control means identification information (when the board serial ID authentication request 2 in FIG. 131 is input). Response authentication processing is performed (response code check in FIG. 131),
Between the second control means and the third control means,
Using the second control means identification information stored in the second control means, a challenge code is generated and transmitted to the third control means, and the second control stored in the third control means Using the means identification information, a response code is generated from the received challenge code and sent back to the second control means, and the second control means receives the stored second control means identification information. A second challenge response authentication process (first authentication sequence in FIG. 146) for determining the suitability of the response code,
A challenge code is generated using the third control means identification information stored in the third control means and transmitted to the second control means, and the third control stored in the second control means. Using the means identification information, a response code is generated from the received challenge code and sent back to the third control means, and the third control means receives the stored third control means identification information. The third challenge response authentication process for determining the suitability of the response code is performed (second authentication sequence in FIG. 146).

  According to the above configuration, the challenge code is transmitted from one control means to the other control means between the first control means and the second control means and between the second control means and the third control means. Since the response code is generated from the challenge code received using the identification information stored in the control means and sent back to one of the control means, challenge-response authentication is performed. Even if the challenge code or response code is leaked, it is difficult to specify the stored identification information, and it is possible to prevent fraudulent acts on the control means due to the leakage of the identification information as much as possible.

(18-8) In the control device of (18-7), the second control means includes:
Storing authentication information paired with authentication information stored in the first control means (stores an authentication key or the like comprising a common key); and
When the first control means executes arithmetic processing using the authentication information and results data of the arithmetic processing is input from the connection unit (when the device authentication request 2 of FIG. 132 is input) Then, an authentication process is performed on the result data using the authentication information to check the consistency with the result data (a composite of random number B and verification of an authentication key or the like by MAC check).

  According to the above configuration, since authentication processing using the pair authentication information stored in the first control means and the second control means is also executed, a more reliable mutual authentication is performed. It becomes possible and security is improved. Moreover, since this authentication process also transmits / receives the result data obtained by executing the calculation process using the stored authentication information, even if the transmitted / received result data leaks out, the authentication information It is difficult to specify and it is possible to prevent fraudulent acts against the control means due to information leakage as much as possible.

(18-9) In the control device according to (18-7) or (18-8), the second control unit performs mutual authentication processing (device authentication sequence in FIG. 124) other than the first challenge-response authentication processing. Do,
When proper authentication is not performed as a result of the first challenge response authentication process, the mutual authentication process is executed without performing an inappropriate notification at the authentication stage, and an inappropriate notification is sent as a summary of all authentication results. (FIG. 132: The board authentication result notification after the equipment authentication sequence notifies the board serial ID authentication and the equipment authentication result).

  According to the above configuration, since mutual authentication processing other than the first challenge response authentication processing is also performed between the first control means and the second control means, even if the security of one authentication processing is broken. The security of mutual authentication can be maintained by the other authentication process.

  In addition, for example, when the first challenge response authentication process and the mutual authentication process other than that are performed, if the authentication result of the first challenge response authentication process alone is inappropriate, the authentication result of the single challenge notification is notified. In this case, it is known that the authentication process determined to be inappropriate is the first challenge response authentication process, which is not preferable in terms of security. However, if the authentication is not performed properly as a result of the first challenge response authentication process, The mutual authentication process is executed without performing the inappropriate notification at the authentication stage, and all the authentication results are summed up and the inappropriate notification is given. Thus, security can be improved.

(19-1) The present invention relates to first control means (CU control unit 323 or CU3, P stand 2, jet counter, POS terminal, etc.) and second control connected to be communicable with the first control means. A gaming system comprising means (security chip 325b or CU3, P stand 2, jet counter, POS terminal, etc.)
The first control means and the second control means comprise mutual authentication processing means (device authentication sequence of FIGS. 123 and 125) for performing mutual authentication processing using mutual authentication information (substrate initial key),
At least one of the first control means and the second control means does not store the authentication information at the manufacturing stage (the CU control unit does not store the board initial key) and carries it into the game hall. The authentication information is acquired and stored from the server at the stage where communication with the server is possible after being performed (FIG. 123: the substrate initial key downloaded from the host device by the CU control unit is stored),
The mutual authentication processing means derives an inappropriate authentication result when at least one of the first control means and the second control means does not store the authentication information (FIG. 125: Acquisition of board initial key). If you authenticate the device with none, the authentication result will be NG)
The first control means and the second control means are:
After the authentication information is stored, the mutual authentication process and various processes after the mutual authentication process are executed (the device authentication sequence and the communication key exchange sequence in FIG. 123 are executed),
Even before the authentication information is stored, the mutual authentication processing is executed (the device authentication sequence of FIG. 125 is executed), and an inappropriate authentication result (NG) is derived by the mutual authentication processing. Processing (FIG. 125: communication of communication test message by board shipping key) prepared for execution at the stage before the authentication information is stored is executed.

  According to the above configuration, the first control means and the second control means obtain the authentication information from the server when the communication with the server becomes possible after being carried into the amusement hall and use the authentication information. Mutual authentication processing is performed to ensure security. On the other hand, the mutual authentication process is executed even when the authentication information is not yet stored, and as a result, an inappropriate authentication result is derived, thereby preparing for execution at a stage before the authentication information is stored. It is controlled to execute the processing that is being performed. In other words, whether or not to execute the process prepared for executing the mutual authentication process executed for security assurance after obtaining the authentication information at the stage before the authentication information is stored. Complicating control by providing a special determination step that determines whether or not to execute processing prepared for execution at the stage before the authentication information is stored. Can be prevented.

  (19-2) In the gaming system of (19-1) above, the storage of the authentication information is performed when the power is turned on for the first time after being brought into the game hall (FIG. 123).

  According to the above configuration, the authentication information is stored when the power is turned on for the first time after being loaded into the amusement hall. After that, during actual operation in the amusement hall, between the first control means and the second control means. Mutual authentication processing for securing the security of the system is executed, and security during actual operation can be secured.

  (19-3) In the gaming system according to (19-1) or (19-2), the processing prepared for execution at the stage before the authentication information is stored is shipped to the game hall. This is a test process to be executed before communication (communication test message communication in FIG. 125).

  According to the above configuration, the process prepared to be executed at the stage before the authentication information is stored is a test process executed before shipping to the game hall, and as a result, the process is carried into the game hall. This test process is executed at a stage before the game is completed, and the tested product that has been subjected to the test process can be carried into the game arcade.

  (19-4) In the gaming system of the above (19-3), the test process is a process for executing encrypted communication of a test message using a test key stored in advance (FIG. 125: board shipment) Communication test message communication using a key).

  According to the above configuration, the test message is encrypted using the test key stored in advance and the test process is performed, so the security of the test message itself can be ensured.

(19-5) According to another aspect of the present invention, there is provided a gaming machine (CU3, P stand 2, S-th stage) including first control means and second control means connected to the first control means so as to be communicable. 2S, jet counter, POS, etc.)
The first control means and the second control means comprise mutual authentication processing means (device authentication sequence of FIGS. 123 and 125) for performing mutual authentication processing using mutual authentication information,
At least one of the first control means and the second control means does not store the authentication information at the manufacturing stage (the CU control unit does not store the board initial key) and carries it into the game hall. The authentication information is acquired and stored from the server at the stage where communication with the server is possible after being performed (FIG. 123: the substrate initial key downloaded from the host device by the CU control unit is stored),
The mutual authentication processing means derives an inappropriate authentication result when at least one of the first control means and the second control means does not store the authentication information (FIG. 125: Acquisition of board initial key). If you authenticate the device with none, the authentication result will be NG)
The first control means and the second control means are:
After the authentication information is stored, the mutual authentication process and various processes after the mutual authentication process are executed (the device authentication sequence and the communication key exchange sequence in FIG. 123 are executed),
Even before the authentication information is stored, the mutual authentication processing is executed (the device authentication sequence of FIG. 125 is executed), and an inappropriate authentication result (NG) is derived by the mutual authentication processing. Processing (FIG. 125: communication of communication test message by board shipping key) prepared for execution at the stage before the authentication information is stored is executed.

  According to the above configuration, the first control means and the second control means obtain the authentication information from the server when the communication with the server becomes possible after being carried into the amusement hall and use the authentication information. Mutual authentication processing is performed to ensure security. On the other hand, the mutual authentication process is executed even when the authentication information is not yet stored, and as a result, an inappropriate authentication result is derived, thereby preparing for execution at a stage before the authentication information is stored. It is controlled to execute the processing that is being performed. In other words, whether or not to execute the process prepared for executing the mutual authentication process executed for security assurance after obtaining the authentication information at the stage before the authentication information is stored. Complicating control by providing a special determination step that determines whether or not to execute processing prepared for execution at the stage before the authentication information is stored. Can be prevented.

  (19-6) In the gaming machine of the above (19-5), the storage of the authentication information is performed when the power is turned on for the first time after being loaded into the game hall (FIG. 123).

  According to the above configuration, the authentication information is stored when the power is turned on for the first time after being loaded into the amusement hall. After that, during actual operation in the amusement hall, between the first control means and the second control means. Mutual authentication processing for securing the security of the system is executed, and security during actual operation can be secured.

  (19-7) In the gaming machine of the above (19-5) or (19-6), the processing prepared to be executed at the stage before the authentication information is stored is shipped to the game hall. This is a test process executed before (communication test message communication in FIG. 125).

  According to the above configuration, the process prepared to be executed at the stage before the authentication information is stored is a test process executed before shipping to the game hall, and as a result, the process is carried into the game hall. This test process is executed at a stage before the game is completed, and the tested product that has been subjected to the test process can be carried into the game arcade.

  (19-8) In the gaming machine of the above (19-7), the test process is a process of performing encrypted communication of a test message using a test key stored in advance (FIG. 125: board shipping key) Communication test message communication using).

  According to the above configuration, the test message is encrypted using the test key stored in advance and the test process is performed, so the security of the test message itself can be ensured.

(20-1) The present invention relates to first control means (CU control unit 323 or CU3, P stand 2, jet counter, POS terminal, etc.) and second control connected to be communicable with the first control means. A gaming system comprising means (security chip 325b or CU3, P stand 2, jet counter, POS terminal, etc.)
Mutual authentication processing means (device authentication sequence in FIG. 123) for performing mutual authentication processing between the first control means and the second control means using a temporary operation key (substrate initial key);
An authentication key acquisition unit (substrate information acquisition sequence in FIGS. 123 and 127) for performing processing for acquiring the authentication key (substrate authentication key) on the condition that the authentication result by the mutual authentication processing unit is appropriate;
This operation processing means (business message communication with the gaming machine of FIG. 124) for executing the operation processing using the authentication key acquired by the authentication key acquisition means;
Temporary operation processing means for executing temporary operation processing using the temporary authentication key when the authentication key cannot be acquired as a result of processing by the authentication key acquiring means (FIG. 123: board serial ID authentication) The communication key exchange sequence (FIG. 130) is executed using the substrate initial key without executing the sequence and the device authentication sequence.

  According to the above configuration, since the process for obtaining the authentication key is executed on the condition that the mutual authentication process is performed using the temporary authentication key and the authentication result is appropriate, high security can be ensured. It becomes possible. In addition, when the authentication key cannot be acquired as a result of the acquisition process of the authentication key, a temporary operation process is executed using the temporary authentication key. It is possible to prevent inconveniences that cannot be achieved at all.

  (20-2) In the gaming system according to (20-1), the temporary operation processing means executes the temporary operation processing only within a predetermined period (for example, the operation is limited to two days). Tolerate).

  According to the above configuration, since the temporary operation process is executed only within a predetermined period, the temporary operation process in an unstable state when the authentication key cannot be obtained is allowed indefinitely. Can reduce security problems.

  (20-3) In the gaming system according to (20-1) or (20-2), the authentication key acquisition unit is a server (key management server) that stores the authentication key in association with an identification number. 800), an identification number (substrate serial number) is transmitted to obtain the main authentication key corresponding to the identification number (FIG. 127).

  According to the above configuration, the authentication key is stored in the server in association with the identification number, and the authentication key corresponding to the identification number is acquired by transmitting the identification number to the server. This authentication key can be acquired only if the authentication key is stored in the server in association with the identification number, and the authentication key can be acquired only when the authorized identification number registered with the authentication key is sent. Security is ensured.

(20-4) The gaming system according to (20-3) further includes a server (key management server 800) that stores the authentication key in association with the identification number,
The server receives information including an identification number (substrate serial ID) used for the apparatus shipped by a manufacturer that manufactures the apparatus that acquires and stores the main authentication key and the main authentication key. The main authentication key is stored in association with the included identification number (the board authentication key is stored in association with the board serial ID).

  According to the above configuration, the server receives the information including the identification number used for the device shipped by the manufacturer that manufactured the device that acquires and stores the authentication key and the authentication key, and is included in the information In order for the server to store this authentication key in association with the identification number, this authentication key can be acquired from the server only for legitimate devices shipped by the manufacturer, and devices other than the legitimate device shipped by the manufacturer can obtain this authentication key. Security can be secured by preventing inconvenience that can be acquired as much as possible.

(20-5) According to another aspect of the present invention, the first control unit (CU control unit 323 or CU3, P stand 2, jet counter, POS terminal, etc.) is connected to the first control unit so as to be communicable. A gaming machine (CU3, P table 2, jet counter, POS terminal, etc.) provided with a second control means (security chip 325b or CU3, P table 2, jet counter, POS terminal, etc.),
Mutual authentication processing means (device authentication sequence in FIG. 123) for performing mutual authentication processing between the first control means and the second control means using a temporary operation key (substrate initial key);
An authentication key acquisition unit (substrate information acquisition sequence in FIGS. 123 and 127) for performing processing for acquiring the authentication key (substrate authentication key) on the condition that the authentication result by the mutual authentication processing unit is appropriate;
This operation processing means (business message communication with the gaming machine of FIG. 124) for executing the operation processing using the authentication key acquired by the authentication key acquisition means;
Temporary operation processing means for executing temporary operation processing using the temporary authentication key when the authentication key cannot be acquired as a result of processing by the authentication key acquiring means (FIG. 123: board serial ID authentication) The communication key exchange sequence (FIG. 130) is executed using the substrate initial key without executing the sequence and the device authentication sequence.

  According to the above configuration, since the process for obtaining the authentication key is executed on the condition that the mutual authentication process is performed using the temporary authentication key and the authentication result is appropriate, high security can be ensured. It becomes possible. In addition, when the authentication key cannot be acquired as a result of the acquisition process of the authentication key, a temporary operation process is executed using the temporary authentication key. It is possible to prevent inconveniences that cannot be achieved at all.

  (20-6) In the gaming machine of the above (20-5), the temporary operation processing means executes the temporary operation processing only within a predetermined period (for example, operation is limited to two days) To do).

  According to the above configuration, since the temporary operation process is executed only within a predetermined period, the temporary operation process in an unstable state when the authentication key cannot be obtained is allowed indefinitely. Can reduce security problems.

  (20-7) In the gaming machine of the above (20-5) or (20-6), the authentication key acquisition means is a server (key management server 800) that stores the authentication key in association with the identification number. ), An identification number (substrate serial number) is transmitted to obtain the main authentication key corresponding to the identification number (FIG. 127).

  According to the above configuration, the authentication key is stored in the server in association with the identification number, and the authentication key corresponding to the identification number is acquired by transmitting the identification number to the server. This authentication key can be acquired only if the authentication key is stored in the server in association with the identification number, and the authentication key can be acquired only when the authorized identification number registered with the authentication key is sent. Security is ensured.

(21-1) The present invention relates to first control means (CU control unit 323 or CU3, P stand 2, jet counter, POS terminal, etc.) and second control connected to be communicable with the first control means. A gaming system comprising means (security chip 325b or CU3, P stand 2, jet counter, POS terminal, etc.)
Pre-shipment processing means for performing pre-shipment processing using a test key between the first control means and the second control means at a stage before shipment to the game hall (FIG. 125: communication by board shipping key) Test message communication),
After being delivered to the amusement hall, an actual operation processing means for performing processing during actual operation at the game hall using an authentication key (board authentication key) between the first control means and the second control means ( Business message communication) with the gaming machine of FIG.

  According to the above configuration, the pre-shipment processing is performed using the test key, while the actual operation processing is performed using the authentication key. Even if the test key is leaked, the actual operation is performed. As long as the authentication key at the time does not leak, security during actual operation can be maintained.

  (21-2) In the gaming system of (21-1) above, an initial key (substrate initial key) is acquired from the server (higher server 801) and used when the power is first turned on after being delivered to the game arcade. In addition, initial key use processing means (device authentication sequence and board information acquisition sequence in FIG. 123) for executing the above-described processing is further provided.

  According to the above-described configuration, since the initial key is acquired when the power is turned on for the first time when the game is turned on and the process using the initial key is executed, the process using the initial key to ensure security is performed thereafter. It becomes possible.

  (21-3) In the gaming system according to (21-2), the initial key use processing means executes processing for acquiring the authentication key from a server (the board information acquisition sequence of FIGS. 123 and 127). ).

  According to the above configuration, in acquiring an authentication key used for processing in actual operation from the server, an authentication key is obtained by acquiring an initial key from the server and executing processing using the initial key prior to that. Processing for acquiring from the server will be performed, and the processing for acquiring the authentication key from the server itself can be a process that guarantees security using the initial key, and security can be further improved. .

(21-4) In another aspect of the present invention, the first control unit (CU control unit 323 or CU3, P stand 2, jet counter, POS terminal, etc.) is connected to the first control unit so as to be communicable. A gaming machine (CU3, P table 2, jet counter, POS terminal, etc.) provided with a second control means (security chip 325b or CU3, P table 2, jet counter, POS terminal, etc.),
Pre-shipment processing means for performing pre-shipment processing using a test key between the first control means and the second control means at a stage before shipment to the game hall (FIG. 125: communication by board shipping key) Test message communication),
After being delivered to the amusement hall, an actual operation processing means for performing processing during actual operation at the game hall using an authentication key (board authentication key) between the first control means and the second control means ( Business message communication) with the gaming machine of FIG.

  According to the above configuration, the pre-shipment processing is performed using the test key, while the actual operation processing is performed using the authentication key. Even if the test key is leaked, the actual operation is performed. As long as the authentication key at the time does not leak, security during actual operation can be maintained.

  (21-5) In the gaming machine of (21-4) above, an initial key (board initial key) is acquired from the server (high-order server 801) and used when the power is first turned on after being delivered to the game arcade. Initial key use processing means (device authentication sequence and board information acquisition sequence in FIG. 123) for further executing processing is further provided.

  According to the above-described configuration, since the initial key is acquired when the power is turned on for the first time when the game is turned on and the process using the initial key is executed, the process using the initial key to ensure security is performed thereafter. It becomes possible.

  (21-6) In the gaming machine of the above (21-5), the initial key use processing means executes processing for acquiring the authentication key from the server (board information acquisition sequence of FIGS. 123 and 127). .

  According to the above configuration, in acquiring an authentication key used for processing in actual operation from the server, an authentication key is obtained by acquiring an initial key from the server and executing processing using the initial key prior to that. Processing for acquiring from the server will be performed, and the processing for acquiring the authentication key from the server itself can be a process that guarantees security using the initial key, and security can be further improved. .

(22-1) The present invention relates to first control means (security chip 325b or CU3, P stand 2, jet counter, POS terminal, etc.) and second control means connected to be communicable with the first control means. (Game control IC 325a, or CU3, P stand 2, jet counter, POS terminal, etc.)
Mutual authentication processing means (first authentication sequence to third authentication sequence in FIG. 146) for performing mutual authentication processing using an authentication key between the first control means and the second control means;
Authentication key update means for updating the authentication key (FIG. 147: the communication control IC updates the authentication key in accordance with an authentication key update request from the SC);
When the authentication key is updated by the authentication key updating unit, the mutual authentication processing unit performs the mutual authentication process again using the updated authentication key (FIG. 147: from the first authentication sequence again). Carry out authentication).

  According to the above configuration, the authentication key can be updated by the authentication key updating means, and when there is a possibility that the authentication key has leaked, the authentication key is updated to a new one, and the leaked authentication key It is possible to prevent cheating by. Further, when the authentication key is updated, the mutual authentication process is performed again using the updated authentication key, so that the result of the mutual authentication process using the new reliable authentication key can be obtained. .

  (22-2) In the gaming system according to (22-1), the mutual authentication processing means performs cryptographic communication using the authentication key between the first control means and the second control means. To mutually authenticate whether or not the identification information stored in the first control means and the identification information stored in the second control means are consistent with each other (by mutual encryption communication using an authentication key). Check the consistency of ID information etc.).

  According to the above configuration, mutual authentication is possible by checking the consistency of the identification information of both control means.

  (22-3) In the gaming system according to (22-1) or (22-2), when the authentication key update unit receives the update information of the authentication key from the server (key management server 800), An authentication key update process according to the update information is executed (FIG. 147: executed only when there is update information from the host device).

  According to the above configuration, the authentication key can be distributed and updated from the server when the authentication key needs to be updated.

(22-4) Another aspect of the present invention is a game including first control means (security chip 325b) and second control means (communication control IC 325a) connected to be communicable with the first control means. Equipment (CU3, P stand 2, jet counter, POS terminal, etc.)
Mutual authentication processing means (first authentication sequence to third authentication sequence in FIG. 146) for performing mutual authentication processing using an authentication key between the first control means and the second control means;
Authentication key update means for updating the authentication key (FIG. 147: the communication control IC updates the authentication key in accordance with an authentication key update request from the SC);
When the authentication key is updated by the authentication key updating unit, the mutual authentication processing unit performs the mutual authentication process again using the updated authentication key (FIG. 147: from the first authentication sequence again). Carry out authentication).

  According to the above configuration, the authentication key can be updated by the authentication key updating means, and when there is a possibility that the authentication key has leaked, the authentication key is updated to a new one, and the leaked authentication key It is possible to prevent cheating by. Further, when the authentication key is updated, the mutual authentication process is performed again using the updated authentication key, so that the result of the mutual authentication process using the new reliable authentication key can be obtained. .

  (22-5) In the gaming machine according to (22-4), the mutual authentication processing unit performs cryptographic communication using the authentication key between the first control unit and the second control unit. , Mutually authenticating whether or not the identification information stored in the first control means and the identification information stored in the second control means are consistent with each other (the mutual ID is obtained by encrypted communication using an authentication key). Check the consistency of information etc.).

  According to the above configuration, mutual authentication is possible by checking the consistency of the identification information of both control means.

  (22-6) In the gaming machine of (22-4) or (22-5), when the authentication key update unit receives the update information of the authentication key from the server (key management server 800), An authentication key update process according to the update information is executed (FIG. 147: executed only when there is update information from the host device).

  According to the above configuration, the authentication key can be distributed and updated from the server when the authentication key needs to be updated.

(23-1) The present invention provides a first control unit and a second control unit (CU control unit 323 and security chip 325b, security chip 325b and communication control IC 325a, or CU3, P stand 2, jet counter that perform cryptographic communication with each other) A combination of any two of the POS terminals),
Mutual authentication processing means for performing a plurality of types of mutual authentication processing with different authentication methods between the first control means and the second control means (device authentication sequence and substrate serial ID authentication sequence in FIG. 123, first in FIG. 148 Authentication sequence to third authentication sequence),
The result of executing all the plural types of mutual authentication without notifying the control means of the authentication partner of the authentication result when the authentication result of each mutual authentication by the mutual authentication processing unit is inappropriate. General notification means for summarizing abnormalities and notifying the control means of the authentication partner (FIG. 132: Notification of substrate serial ID authentication and device authentication results by notification of substrate authentication result after device authentication sequence. FIG. 148: First The authentication sequence to the third authentication sequence are collectively notified),
The mutual authentication processing means performs a re-authentication process in which the plurality of types of mutual authentication processes are again performed between the first control means and the second control means after the abnormality is collectively notified by the general notification means. Execute (FIG. 133: If the response is NG, retry at most twice. FIG. 148: Retry the authentication sequence from the first authentication sequence to the third authentication sequence at most twice).

  According to the above configuration, since a plurality of types of mutual authentication processes with different authentication methods are performed between the first control unit and the second control unit, the security of mutual authentication by a certain authentication method can be compared. Even if it is broken, mutual authentication security can be maintained by mutual authentication using other different authentication methods.

  In addition, for example, when the authentication result of each type of mutual authentication of each of the multiple types of mutual authentication is inappropriate, the type of mutual authentication is notified when the authentication result is notified to the control means of the authentication partner. However, it is not desirable for security because it is known that the authentication result is incorrect. In order to sum up the abnormalities of the results of executing all of the multiple types of mutual authentication and not to notify the control method of the other party of authentication, it is not possible to see which type of mutual authentication has occurred , Can improve security.

  In addition, after the overall notification of the abnormality, a re-authentication process is performed in which a plurality of types of mutual authentication processes are performed again between the first control unit and the second control unit. This can be confirmed again, and the reliability of mutual authentication can be improved.

  (23-2) In the gaming system according to (23-1), the first control unit and the second control unit are provided on the condition that the result of the re-authentication processing by the mutual authentication processing unit is inappropriate. Further includes a stopping means for stopping the subsequent processing (FIG. 133: communication thereafter is not performed. FIG. 148: waiting for resetting).

  According to the above configuration, since the subsequent processing by the first control unit and the second control unit is stopped on the condition that the result of the re-authentication process is inappropriate and the reliability is inappropriate, the result is inappropriate. Nevertheless, the inconvenience of stopping the subsequent processing can be reduced as much as possible.

  (23-3) In the gaming system of (23-1) or (23-2) above, on the condition that the result of the re-authentication processing by the mutual authentication processing means is inappropriate, to the management server It further includes abnormality notification processing means (FIG. 148: “communication control IC authentication abnormality” is notified to the host device) for executing processing for notifying occurrence of abnormality.

  According to the configuration described above, the management server is notified of the occurrence of an abnormality on the condition that the result of the re-authentication process is inappropriate and the result of the inappropriate authentication is highly reliable. The inconvenience of notifying the management server of the occurrence of an abnormality can be reduced as much as possible.

(23-4) In the gaming system according to any one of (23-1) to (23-3), the mutual authentication processing unit includes:
The second control means generates a challenge code and transmits it to the first control means, generates a response code from the challenge code received using the identification information stored in the first control means, and A first challenge response authentication process (first authentication sequence in FIG. 146) for returning to the control means and determining whether the received response code is appropriate or not by using the stored identification information in the second control means;
The first control means generates a challenge code and transmits it to the second control means, generates a response code from the challenge code received using the identification information stored in the second control means, and generates the first response code. A response is returned to the control means, and the first control means performs a second challenge response authentication process (second authentication sequence in FIG. 146) for determining the suitability of the received response code using the stored identification information. .

  According to the above configuration, the first control means and the second control means transmit the challenge code from one control means to the other control means and receive it using the identification information stored in the other control means. The challenge code and response code sent and received between the two gaming means are leaked because the challenge response method of authenticating the response code from the challenge code and returning it to one control means is performed. However, it is difficult to specify the stored identification information, and it is possible to prevent fraudulent acts on the gaming means due to leakage of the identification information as much as possible.

(23-5) Another aspect of the present invention is a game comprising first control means and second control means (CU control unit 323 and security chip 325b, security chip 325b and communication control IC 325a) that perform cryptographic communication with each other. Equipment (CU3, P stand 2, jet counter, POS terminal, etc.)
Mutual authentication processing means for performing a plurality of types of mutual authentication processing with different authentication methods between the first control means and the second control means (device authentication sequence and substrate serial ID authentication sequence in FIG. 123, first in FIG. 148 Authentication sequence to third authentication sequence),
The result of executing all the plural types of mutual authentication without notifying the control means of the authentication partner of the authentication result when the authentication result of each mutual authentication by the mutual authentication processing unit is inappropriate. General notification means for summarizing abnormalities and notifying the control means of the authentication partner (FIG. 132: Notification of substrate serial ID authentication and device authentication results by notification of substrate authentication result after device authentication sequence. FIG. 148: First The authentication sequence to the third authentication sequence are collectively notified),
The mutual authentication processing means performs a re-authentication process in which the plurality of types of mutual authentication processes are again performed between the first control means and the second control means after the abnormality is collectively notified by the general notification means. Execute (FIG. 133: If the response is NG, retry at most twice. FIG. 148: Retry the authentication sequence from the first authentication sequence to the third authentication sequence at most twice).

  According to the above configuration, since a plurality of types of mutual authentication processes with different authentication methods are performed between the first control unit and the second control unit, the security of mutual authentication by a certain authentication method can be compared. Even if it is broken, mutual authentication security can be maintained by mutual authentication using other different authentication methods.

  In addition, for example, when the authentication result of each type of mutual authentication of each of the multiple types of mutual authentication is inappropriate, the type of mutual authentication is notified when the authentication result is notified to the control means of the authentication partner. However, it is not desirable for security because it is known that the authentication result is incorrect. In order to sum up the abnormalities of the results of executing all of the multiple types of mutual authentication and not to notify the control method of the other party of authentication, it is not possible to see which type of mutual authentication has occurred , Can improve security.

  In addition, after the overall notification of the abnormality, a re-authentication process is performed in which a plurality of types of mutual authentication processes are performed again between the first control unit and the second control unit. This can be confirmed again, and the reliability of mutual authentication can be improved.

  (23-6) In the gaming machine according to (23-5), on the condition that the result of the re-authentication processing by the mutual authentication processing unit is inappropriate, the first control unit and the second control unit Further includes a stopping means for stopping the subsequent processing according to (FIG. 133: communication is not performed thereafter. FIG. 148: waiting for resetting).

  According to the above configuration, since the subsequent processing by the first control unit and the second control unit is stopped on the condition that the result of the re-authentication process is inappropriate and the reliability is inappropriate, the result is inappropriate. Nevertheless, the inconvenience of stopping the subsequent processing can be reduced as much as possible.

  (23-7) In the gaming machine of the above (23-5) or (23-6), there is an abnormality in the management server on the condition that the result of the re-authentication processing by the mutual authentication processing means is inappropriate. It further includes abnormality notification processing means (FIG. 148: “communication control IC authentication abnormality” is notified to the host device) for executing processing for notification of occurrence.

  According to the configuration described above, the management server is notified of the occurrence of an abnormality on the condition that the result of the re-authentication process is inappropriate and the result of the inappropriate authentication is highly reliable. The inconvenience of notifying the management server of the occurrence of an abnormality can be reduced as much as possible.

(23-8) In the gaming machine according to any one of (23-5) to (23-7), the mutual authentication processing unit includes:
The second control means generates a challenge code and transmits it to the first control means, generates a response code from the challenge code received using the identification information stored in the first control means, and A first challenge response authentication process (first authentication sequence in FIG. 146) for returning to the control means and determining whether the received response code is appropriate or not by using the stored identification information in the second control means;
The first control means generates a challenge code and transmits it to the second control means, generates a response code from the challenge code received using the identification information stored in the second control means, and generates the first response code. A response is returned to the control means, and the first control means performs a second challenge response authentication process (second authentication sequence in FIG. 146) for determining the suitability of the received response code using the stored identification information. .

  According to the above configuration, the first control means and the second control means transmit the challenge code from one control means to the other control means and receive it using the identification information stored in the other control means. The challenge code and response code sent and received between the two gaming means are leaked because the challenge response method of authenticating the response code from the challenge code and returning it to one control means is performed. However, it is difficult to specify the stored identification information, and it is possible to prevent fraudulent acts on the gaming means due to leakage of the identification information as much as possible.

(24-1) The present invention provides a first control unit (CU control unit 323) and a second control unit (CU control unit 323) that perform cryptographic communication with each other, and a third control unit that performs cryptographic communication with the second control unit. A gaming system comprising control means (communication control IC 325a),
Mutual authentication processing means for performing a plurality of types of mutual authentication processing with different authentication methods between the first control means and the second control means and between the second control means and the third control means (FIG. 123). Device authentication sequence and board serial ID authentication sequence, first authentication sequence to third authentication sequence in FIG. 148),
If the authentication result of each mutual authentication alone in the plural types of mutual authentication processing performed by the mutual authentication processing means is inappropriate, the plurality of types are not notified to the control means of the authentication partner. General notifying means for summarizing abnormalities in the result of executing all mutual authentications and notifying the control means of the authentication partner (FIG. 132: board serial ID authentication and device authentication authentication results in board authentication result notification after device authentication sequence) 148: General notification of the authentication sequence from the first authentication sequence to the third authentication sequence)
The mutual authentication processing means executes a re-authentication process in which the plurality of types of mutual authentication processes are performed again between the control means having the abnormality after the abnormality is collectively notified by the general notification means (FIG. 133: FIG. 133). If the response is NG, retry is made twice at maximum.FIG. 148: The authentication sequence from the first authentication sequence to the third authentication sequence is retried twice at maximum).

  According to the above configuration, a plurality of types of mutual authentication processes with different authentication methods are performed between the first control unit and the second control unit and between the second control unit and the third control unit. In addition, even if the security of mutual authentication by one authentication method is broken, the security of mutual authentication can be maintained by mutual authentication by another different authentication method.

  In addition, for example, when the authentication result of each type of mutual authentication of each of the multiple types of mutual authentication is inappropriate, the type of mutual authentication is notified when the authentication result is notified to the control means of the authentication partner. However, it is not desirable for security because it is known that the authentication result is incorrect. In order to sum up the abnormalities of the results of executing all of the multiple types of mutual authentication and not to notify the control method of the other party of authentication, it is not possible to see which type of mutual authentication has occurred , Can improve security.

  Furthermore, since the re-authentication process is performed again between the control means in which the abnormality occurred after the general notification of the abnormality, it is possible to check again whether the mutual authentication is really abnormal, and the reliability of mutual authentication Can be improved.

  (24-2) In the gaming system of (24-1) above, the subsequent processing is performed between inappropriate control means on condition that the result of the re-authentication process by the mutual authentication processing means is inappropriate. It further includes stop means for stopping (FIG. 133: communication is not performed thereafter. FIG. 148: waiting for reset).

  According to the above configuration, since the subsequent processing is stopped between improper control means on the condition that the result of the re-authentication process is improper and the reliability is improper, it is not improper. Therefore, the inconvenience of stopping the subsequent processing can be reduced as much as possible.

  (24-3) In the gaming system of (24-1) or (24-2) above, on the condition that the result of the re-authentication processing by the mutual authentication processing means is inappropriate, to the management server It further includes abnormality notification processing means (FIG. 148: “communication control IC authentication abnormality” is notified to the host device) for executing processing for notifying occurrence of abnormality.

  According to the above configuration, the server for management is abnormal on the condition that the result of the re-authentication process between the second control unit and the third control unit is inappropriate that the result of the re-authentication process is inappropriate. Since the occurrence notification is performed, the inconvenience of notifying the management server of the occurrence of the abnormality can be reduced as much as possible although it is not inappropriate.

(24-4) In the gaming system according to any one of (24-1) to (24-3), between the first control means and the second control means performed by the mutual authentication processing means. The mutual authentication process of
A challenge code (challenge code in FIG. 131) is generated using the second identification information stored in the second control means and transmitted to the first control means (board serial ID authentication response 1 in FIG. 131). In the first control means, using the stored second identification information, a response code (response code in FIG. 131) is generated from the received challenge code and returned to the second control means ( 131, the first challenge response authentication process (in FIG. 131) for determining the suitability of the response code received using the stored second identification information in the second control means. Response code check)
The mutual authentication process between the second control means and the third control means performed by the mutual authentication processing means is:
Using the third identification information stored in the third control means, a challenge code is generated and transmitted to the second control means, and the third identification information stored in the second control means Is used to generate a response code from the received challenge code and send it back to the third control means. In the third control means, the response code received using the stored third identification information A second challenge response authentication process (first authentication sequence in FIG. 146) for determining suitability;
A challenge code is generated using the second identification information stored in the second control means and transmitted to the third control means, and the second identification stored in the third control means. A response code is generated from the received challenge code using information and sent back to the second control means, and the response code received using the stored second identification information in the second control means And a third challenge response authentication process (second authentication sequence in FIG. 146) for determining whether or not the data is appropriate.

  According to the above configuration, one control means generates a response code from the challenge code transmitted from one control means to the other control means and received using the identification information stored in the other control means. It is difficult to specify the stored identification information even if the challenge code or response code transmitted / received between both control means is leaked because the challenge response method authentication is performed. Thus, it is possible to prevent fraudulent acts on the gaming means due to leakage of identification information as much as possible.

(24-5) According to another aspect of the present invention, the first control unit (CU control unit 323) and the second control unit (CU control unit 323) that perform cryptographic communication with each other, and the second control unit with each other perform cryptographic communication. A gaming device (CU3, P stand 2, jet counter, POS terminal, etc.) provided with third control means (communication control IC 325a) for performing
Mutual authentication processing means for performing a plurality of types of mutual authentication processing with different authentication methods between the first control means and the second control means and between the second control means and the third control means (FIG. 123). Device authentication sequence and board serial ID authentication sequence, first authentication sequence to third authentication sequence in FIG. 148),
If the authentication result of each mutual authentication alone in the plural types of mutual authentication processing performed by the mutual authentication processing means is inappropriate, the plurality of types are not notified to the control means of the authentication partner. General notifying means for summarizing abnormalities in the result of executing all mutual authentications and notifying the control means of the authentication partner (FIG. 132: board serial ID authentication and device authentication authentication results in board authentication result notification after device authentication sequence) 148: General notification of the authentication sequence from the first authentication sequence to the third authentication sequence)
The mutual authentication processing means executes a re-authentication process in which the plurality of types of mutual authentication processes are performed again between the control means having the abnormality after the abnormality is collectively notified by the general notification means (FIG. 133: FIG. 133). If the response is NG, retry is made twice at maximum.FIG. 148: The authentication sequence from the first authentication sequence to the third authentication sequence is retried twice at maximum).

  According to the above configuration, a plurality of types of mutual authentication processes with different authentication methods are performed between the first control unit and the second control unit and between the second control unit and the third control unit. In addition, even if the security of mutual authentication by one authentication method is broken, the security of mutual authentication can be maintained by mutual authentication by another different authentication method.

  In addition, for example, when the authentication result of each type of mutual authentication of each of the multiple types of mutual authentication is inappropriate, the type of mutual authentication is notified when the authentication result is notified to the control means of the authentication partner. However, it is not desirable for security because it is known that the authentication result is incorrect. In order to sum up the abnormalities of the results of executing all of the multiple types of mutual authentication and not to notify the control method of the other party of authentication, it is not possible to see which type of mutual authentication has occurred , Can improve security.

  Furthermore, since the re-authentication process is performed again between the control means in which the abnormality occurred after the general notification of the abnormality, it is possible to check again whether the mutual authentication is really abnormal, and the reliability of mutual authentication Can be improved.

  (24-6) In the gaming machine of the above (24-5), on the condition that the result of the re-authentication processing by the mutual authentication processing means is inappropriate, the subsequent processing is stopped between the inappropriate control means Further includes a stop means (FIG. 133: no subsequent communication is performed. FIG. 148: wait for reset).

  According to the above configuration, since the subsequent processing is stopped between improper control means on the condition that the result of the re-authentication process is improper and the reliability is improper, it is not improper. Therefore, the inconvenience of stopping the subsequent processing can be reduced as much as possible.

  (24-7) In the gaming machine of the above (24-5) or (24-6), there is an abnormality in the management server on the condition that the result of the re-authentication processing by the mutual authentication processing means is inappropriate. It further includes abnormality notification processing means (FIG. 148: “communication control IC authentication abnormality” is notified to the host device) for executing processing for notification of occurrence.

  According to the above configuration, the server for management is abnormal on the condition that the result of the re-authentication process between the second control unit and the third control unit is inappropriate that the result of the re-authentication process is inappropriate. Since the occurrence notification is performed, the inconvenience of notifying the management server of the occurrence of the abnormality can be reduced as much as possible although it is not inappropriate.

(24-8) In the gaming machine of any one of (24-5) to (24-7), mutual authentication between the first control means and the second control means performed by the mutual authentication processing means Processing is
A challenge code (challenge code in FIG. 131) is generated using the second identification information stored in the second control means and transmitted to the first control means (board serial ID authentication response 1 in FIG. 131). In the first control means, using the stored second identification information, a response code (response code in FIG. 131) is generated from the received challenge code and returned to the second control means ( 131, the first challenge response authentication process (in FIG. 131) for determining the suitability of the response code received using the stored second identification information in the second control means. Response code check)
The mutual authentication process between the second control means and the third control means performed by the mutual authentication processing means is:
Using the third identification information stored in the third control means, a challenge code is generated and transmitted to the second control means, and the third identification information stored in the second control means Is used to generate a response code from the received challenge code and send it back to the third control means. In the third control means, the response code received using the stored third identification information A second challenge response authentication process (first authentication sequence in FIG. 146) for determining suitability;
A challenge code is generated using the second identification information stored in the second control means and transmitted to the third control means, and the second identification stored in the third control means. A response code is generated from the received challenge code using information and sent back to the second control means, and the response code received using the stored second identification information in the second control means And a third challenge response authentication process (second authentication sequence in FIG. 146) for determining whether or not the data is appropriate.

  According to the above configuration, one control means generates a response code from the challenge code transmitted from one control means to the other control means and received using the identification information stored in the other control means. It is difficult to specify the stored identification information even if the challenge code or response code transmitted / received between both control means is leaked because the challenge response method authentication is performed. Thus, it is possible to prevent fraudulent acts on the gaming means due to leakage of identification information as much as possible.

(25-1) The present invention is connected to a gaming machine (pachinko machine 2, slot machine 2S) in which a game is performed using a predetermined score (game ball, game point) and the gaming machine, so that a game A gaming system comprising a gaming device (card unit 3) for enabling a game in the gaming machine using a gaming value (prepaid balance, number of possessed balls, or number of accumulated balls) possessed by a person ,
The gaming machine is
Score storage means for storing the score (game ball counter, game score counter);
Score update means for updating the score stored in the score storage means in accordance with the use in the game and the occurrence of winning (FIG. 45: payout for calculating the number of game balls based on the number of added balls and the number of subtracted balls Control unit 171, FIG. 38, FIG. 39: payout control unit 171) for adding the number of game balls based on the number of balls added from the CU,
Player identification information storage means (FIG. 36, FIG. 37: payout control unit 171 for storing card ID) for storing player identification information (card ID or the like) that can identify a player who is playing a game on the gaming machine. And further,
At the start of communication with the gaming device, the player specifying information and predetermined numerical information (card insertion time, etc.) stored in the player specifying information storing means and the score storing means are stored. The score is transmitted to the gaming device (FIG. 42: a card return response including the card ID and the card insertion time is transmitted to the CU),
The gaming device is:
Score specifying storage means (the number of game balls in FIG. 8, the number of game points in FIG. 151) for specifying and storing the current score when the player is playing a game with the gaming machine;
Accepting means (FIG. 53, FIG. 55, FIG. 57: exchanged) that accepts the input of the player specifying information and the predetermined numerical information stored in external storage means (host server 801 or card) other than the gaming machine CU receives the card insertion time from the host server 801 and reads the card ID from the re-inserted card)
When the player is connected to the gaming machine and communication is started, the player specifying information and the predetermined numerical information received by the receiving unit, the player specifying information transmitted from the gaming machine, and the predetermined Identical determination processing means (FIG. 51, FIG. 52: payout control unit 171 for determining whether the card ID and the insertion time coincide with each other) ) And
The score specifying storage means stores the score transmitted from the gaming machine as the current score when the same determination processing means obtains the same determination result (FIGS. 51 and 52). When the card ID and the insertion time match, the number of game balls = 175 is stored).

  According to the above configuration, the player specifying information and the predetermined numerical information transmitted from the gaming machine when the gaming device is connected to the gaming machine and communication is started, and the player specifying information received by the receiving means And a process for determining whether or not the same player is specified based on predetermined numerical information is performed, and when a determination result is obtained that the same player is obtained, the game is played at a stage before the start of communication. The score of the player who has been performed is stored and taken over as the score on the gaming device side after the start of communication, and the player can continue the game without suffering a disadvantage. Further, in determining the identity of the player, not only the player specifying information but also predetermined numerical information is used as the determination material, so that it is possible to determine the identity with higher reliability.

(25-2) In the gaming system according to (25-1), the gaming apparatus is a recording medium receiving means (card) for receiving a recording medium in which information capable of specifying a gaming value owned by the player is recorded. A reader / writer), the time when the recording medium accepting unit received the recording medium is transmitted to the gaming machine (FIG. 36: a card insertion notification including the insertion time is transmitted to the P machines),
The gaming machine transmits the transmitted time to the gaming device as the predetermined numerical information at the start of communication with the gaming device (FIGS. 53, 55, and 57: card insertion) Send recovery response with time).

  According to the above configuration, since the recording medium is received by the recording medium receiving means when the player starts the game as the predetermined information that is the material for determining the identity of the player, The player who started the game, that is, the player before the game device is connected to the gaming machine and communication is started, and the player after the game device is connected to the game machine and communication is started It is possible to make a determination based on information suitable for determining the identity.

  (25-3) In the gaming system of the above (25-1) or (25-2), the score specifying storage means passes a predetermined time after communication between the gaming machine and the gaming device is interrupted. The score transmitted from the gaming machine is stored as the current score on the condition that the communication has been started before (for example, on the condition that the communication has been restored before 20 minutes have passed).

  According to the above configuration, after a predetermined time has elapsed since the communication between the gaming machine and the gaming device is interrupted, the transmitted score is not stored as the current score by the gaming device, for example, Even when a time much longer than the replacement work time for replacement with a new gaming device has elapsed, it is possible to prevent wasteful storage control of scores.

(25-4) Another aspect of the present invention is a communication unit (communication control IC 325a) that communicates with a gaming machine (pachinko machine 2, slot machine 2S) in which a game is played using a predetermined score (game ball, game point). ), And a gaming device (card unit 3) for enabling a game in the gaming machine using a player's own gaming value (prepaid balance, number of balls, or number of balls),
Score specifying storage means (the number of game balls in FIG. 8, the number of game points in FIG. 151) for specifying and storing the current score when the player is playing a game with the gaming machine;
Stores player identification information (such as a card ID) and predetermined numerical information (such as a card insertion time) that are external storage means other than the gaming machine and can identify a player who is playing a game on the gaming machine. Receiving means (FIG. 53, FIG. 55, FIG. 57: the exchanged CU is the upper server 801) that accepts the input of the player specifying information and the predetermined numerical information from the external storage means (upper server 801 or card) Receiving the card insertion time from the card and reading the card ID from the reinserted card)
When the player is connected to the gaming machine and communication is started, the player specifying information and the predetermined numerical information received by the receiving unit, the player specifying information transmitted from the gaming machine, and the predetermined Identical determination processing means (FIG. 51, FIG. 52: payout control unit 171 for determining whether the card ID and the insertion time coincide with each other) ) And
The score specifying storage means stores the score transmitted from the gaming machine as the current score when the same determination processing means obtains the same determination result (FIGS. 51 and 52). When the card ID and the insertion time match, the number of game balls = 175 is stored).

  According to the above configuration, the player specifying information and the predetermined numerical information transmitted from the gaming machine when the gaming device is connected to the gaming machine and communication is started, and the player specifying information received by the receiving means And a process for determining whether or not the same player is specified based on predetermined numerical information is performed, and when a determination result is obtained that the same player is obtained, the game is played at a stage before the start of communication. The score of the player who has been performed is stored and taken over as the score on the gaming device side after the start of communication, and the player can continue the game without suffering a disadvantage. Further, in determining the identity of the player, not only the player specifying information but also predetermined numerical information is used as the determination material, so that it is possible to determine the identity with higher reliability.

(25-5) In the gaming machine of the above (25-4), the gaming machine receives a recording medium receiving means (card) for receiving a recording medium on which information capable of specifying a gaming value owned by the player is recorded. A reader / writer), the time when the recording medium accepting unit received the recording medium is transmitted to the gaming machine (FIG. 36: a card insertion notification including the insertion time is transmitted to the P machines),
The gaming machine transmits the transmitted time to the gaming device as the predetermined numerical information at the start of communication with the gaming device (FIGS. 53, 55, and 57: card insertion) Send recovery response with time).

  According to the above configuration, since the recording medium is received by the recording medium receiving means when the player starts the game as the predetermined information that is the material for determining the identity of the player, The player who started the game, that is, the player before the game device is connected to the gaming machine and communication is started, and the player after the game device is connected to the game machine and communication is started It is possible to make a determination based on information suitable for determining the identity.

  (25-6) In the gaming machine of the above (25-4) or (25-5), the score specifying storage means passes a predetermined time after communication between the gaming machine and the gaming machine is interrupted. The score transmitted from the gaming machine is stored as the current score on the condition that the communication has been started before (for example, on the condition that the communication has been restored before 20 minutes have passed).

  According to the above configuration, after a predetermined time has elapsed since the communication between the gaming machine and the gaming device is interrupted, the transmitted score is not stored as the current score by the gaming device, for example, Even when a time much longer than the replacement work time for replacement with a new gaming device has elapsed, it is possible to prevent wasteful storage control of scores.

  The embodiment disclosed this time should be considered as illustrative in all points and not restrictive. The scope of the present invention is defined by the terms of the claims, rather than the description above, and is intended to include any modifications within the scope and meaning equivalent to the terms of the claims.

  2 Pachinko machine, 2S slot machine, 3 card unit, 16 main control board, 17 payout control board, 26 game board, 54, 312 display, 309 card insertion / discharge port, 319 replay button, 320 IR light receiving unit, 321 Lending button, 322 return button, 323 main control unit, 325 display control unit.

Claims (2)

A gaming system comprising first control means and second control means connected to be communicable with the first control means,
Mutual authentication processing means for performing mutual authentication processing using a temporary operation key between the first control means and the second control means;
A main authentication key acquisition unit that performs a process of acquiring the main authentication key on condition that the authentication result by the mutual authentication processing unit is appropriate;
An operation processing means for executing an operation process using the authentication key acquired by the authentication key acquiring means;
A gaming system comprising temporary operation processing means for executing temporary operation processing using the temporary authentication key when the main authentication key cannot be acquired as a result of processing by the main authentication key acquiring means. . A gaming device comprising first control means and second control means connected to be communicable with the first control means,
Mutual authentication processing means for performing mutual authentication processing using a temporary operation key between the first control means and the second control means;
A main authentication key acquisition unit that performs a process of acquiring the main authentication key on condition that the authentication result by the mutual authentication processing unit is appropriate;
An operation processing means for executing an operation process using the authentication key acquired by the authentication key acquiring means;
A gaming machine comprising temporary operation processing means for executing temporary operation processing using the temporary authentication key when the main authentication key cannot be acquired as a result of processing by the main authentication key acquiring means.

Images