JP2016032538A - Game machine - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a game machine capable of preventing a fraudulent modification during a commodity circulation process of the game machine, as well as having a high level security.SOLUTION: A game machine 1 includes a first control part and a mounting part to which a mounting body can be mounted. The game machine 1 includes: abnormal operation processing means for executing abnormal operation processing when the mounting body is not mounted to the mounting part, in a state where the power is supplied to the game machine 1; and normal operation processing means for executing normal operation processing when the mounting body is mounted to the mounting part.SELECTED DRAWING: Figure 3

Description

  The present invention relates to a game machine having a mounting portion for a control board.

  The act of illegally remodeling a game table has been regarded as a problem in order to obtain a large amount of game media illegally. In order to counter this, for example, Patent Document 1 discloses a game machine in which security is enhanced by authenticating a control computer in order to prevent unauthorized modification and the like.

Patent No. 4679740

However, in the case of the invention described in Patent Document 1, since the main board and the payout control board to be authenticated are distributed together with the game machine, it is necessary to deal with a case where unauthorized modification is performed in the distribution process. It is difficult.
Therefore, in the present invention, it is possible to prevent illegal modification of the distribution process of the game table by distributing the game table main body and the mounting body mounted on the game table main body separately in the store, and security. The purpose is to provide a high gaming table.

In order to solve the above problems, the invention described in the claims has the following configuration.
(First invention)
A gaming table 1 including a first control unit (for example, main board 10) and a mounting unit (for example, dongle connecting device 90) to which a mounting body (for example, security dongle 13) can be mounted. In a state where the power is turned on and the mounting body is not mounted on the mounting portion, the abnormal operation processing means for executing the abnormal operation processing, and the mounting body is mounted on the mounting portion In this case, normal operation processing means for executing normal operation processing is provided.

In the present invention, the “mounting body” can be used as a control unit in which a circuit such as an IC is incorporated, or can simply store information.
“Attached body is not attached” means that the attached body is not attached to the attachment part, but it is attached, but the attachment is incomplete. This includes a state in which there is a defect, a state in which a mounting body of a different model is mounted, a state in which a mounting body of an illegally modified product is mounted, and the like. The “state in which the attachment body is attached” is a state in which a genuine attachment body corresponding to the gaming table 1 is attached to the attachment portion.

  “Unusual operation processing means” is means provided in the gaming table 1 for executing an abnormal operation. For abnormal operation, stop gaming control at the gaming table 1, stop directing instructions to the sub-board 11, stop driving preparation when the gaming table 1 is installed in the store, stop gaming start processing (to start gaming) Necessary information cannot be read), notification that the game control, direction instruction, driving preparation processing, and game start processing are stopped, and notification that the mounting body is not mounted on the mounting portion are included. . In the above notification, for example, all LEDs are lit, an error code such as “EE” is displayed in the case of a 7-segment display, or a character or code indicating an error is displayed on the display device 84. , Generating a voice “warning connection” and a warning sound from the speaker 86. The “normal operation processing means” is means provided in the gaming table 1 for executing normal operation. In normal operation, control such as game or performance is executed without being restricted by abnormal operation processing.

According to the present invention, the gaming table 1 is formed so that a separately mounted body can be mounted later. The mounted body is distributed and managed separately from the game table main body, thereby preventing unauthorized modification in the distribution process of the game table.
(Second invention)
In the second invention, in addition to the features of the first invention, the gaming table 1 includes a main board 10 for controlling the game and a sub board 11 for controlling the effect. The main board 10 is a feature.

(Third invention)
According to a third aspect of the invention, in addition to the features of the first aspect, the gaming table 1 includes a main board 10 that controls a game and a sub board 11 that controls an effect. The first control unit includes: The sub-substrate 11 is characterized in that
(Fourth invention)
In addition to the features of the first to third inventions, the fourth invention includes a second control unit (for example, a payout control board 12) for authenticating the first control unit, and the second control unit includes The mounting portion (for example, dongle connection device 90) is formed.

Since this invention is comprised as mentioned above, there exists an effect as described below.
That is, it is possible to prevent unauthorized modification of the distribution process of the game table by distributing the game table main body and the mounting body mounted on the game table main body separately in the store, and a high security game table Can be provided.

It is a block diagram of the management system in embodiment of this invention. It is a block diagram of the key used for the flow of information and encryption in the embodiment of the present invention. It is a block diagram which shows the input and output in the game stand of embodiment of this invention. It is a sequence diagram which shows the specific example of the driving | operation preparation process in embodiment of this invention. It is a sequence diagram which shows the specific example of the driving | operation preparation process in embodiment of this invention. It is a sequence diagram which shows the specific example of the process at the time of the driving | operation in embodiment of this invention. It is a sequence diagram which shows the specific example of the key data change process in embodiment of this invention. It is a sequence diagram which shows the specific example of the key data change process in embodiment of this invention.

A management system for a gaming table 1 using the present invention will be described with reference to FIG.
In this management system, the machine history management server 3 manages various information, and the machine history management server 3 is connected to the in-store server 2 of each store.
The in-store server 2 is connected to a game machine 1, an IC medal lending device 4, a POS 5, and a hall computer 6 as required.
Furthermore, the gaming table 1 of the present embodiment is played using virtual game medals instead of actual game medals. The IC medal 7 is formed so that the number of virtual game medals can be stored as electronic information. Further, the IC medal 7 is formed so that information relating to authentication can be stored. In the present embodiment, “medal” refers to a virtual game medal unless otherwise specified.

With such an overall management system, the history of each gaming machine 1 is managed, fraud is prevented, and the machine history of the gaming machine 1 is managed.
FIG. 2 shows a configuration diagram of keys used for information flow and encryption.
In this embodiment, communication between devices, encryption of information related to authentication, and encryption of information to be written on the IC medal 7 are performed using a key based on a public key cryptosystem. In the public key cryptosystem, two pairs of keys are created. In the present embodiment, the machine history management server 3 issues all keys and ID information such as a gaming machine ID described later.

Here, there is a communication key as a key used when performing encrypted communication between devices. When communicating between devices, encryption is performed using the communication key of the transmitting device, and decryption is performed using the communication key corresponding to the communication key used for encryption at the receiving device. Can do.
An authentication key is used as a key used when encrypting or decrypting information related to device authentication, encrypting information to be written to the IC medal 7, and decrypting information read from the IC medal 7. is there. When encrypting and decrypting information, the encryption device uses the authentication key to encrypt, and the decryption device uses the authentication key corresponding to the authentication key used for encryption. Decryption can be performed.

Furthermore, the key of the present embodiment includes a key whose key data is periodically changed. For the combination of keys to be changed, create multiple sets of key data in advance, and change the key data of both to a different combination of key data based on the predetermined cumulative operating time of the gaming machine 1, the number of games, etc. can do.
(Amusement stand 1)
The gaming table 1 used in the management system has a rectangular box-shaped housing that opens on the front side, and a front door that can be opened and closed and locked in front of the housing.

  Inside the housing, a reel unit 80 having three rotating reels is installed in the upper part of the opening. Also, as shown in FIG. 3, the housing includes a main board 10 mainly responsible for game progress, a sub board 11 mainly responsible for various effects, and a payout control board 12 for lending and paying out medals. A dongle connection device 90 for connecting the security dongle 13 and an IC medal connection device 91 for connecting the IC medal 7 are provided. Here, the security dongle 13 is a storage medium in which information related to authentication is stored. Details will be described later.

On the front door of the gaming table 1, as operating devices, a lending switch 15 for lending the medal stored in the IC medal 7 to the gaming table 1, and a bet switch 16 for replacing the medal stored as credit with the inserted medal. , A start switch 17 for starting the rotation of the rotating reel, a stop switch 18 comprising three button switches for individually stopping the rotation of the rotating reel, and an adjustment for returning the inserted IC medal 7 A switch 19 is provided.
In addition, the front door is provided with a display device 84, a lamp 85, and a speaker 86 in order to perform various effects associated with the game. The display device 84 displays characters, figures, moving images, and the like using a liquid crystal display device or a dot matrix. Further, the front door displays a bet lamp 82 for notifying that a medal is betted, a credit display unit 83 for displaying the number of credited medals, and the number of medals stored in the IC medal 7. For this purpose, a medal number display section 87 is provided.

(Main board 10)
The main board 10 is used for control of lottery performed for each game, control of game progress, and the like. Various information can be transmitted to the in-store server 2.
As shown in FIG. 3, the main board 10 can perform one-way communication toward the sub-board 11 and bidirectional communication with the payout control board 12.
The main board 10 includes at least a main CPU 100 for controlling a lottery control and a game progression, a main security chip 110 for performing processing related to encryption and decryption, a ROM 120, and a RAM 130. I have. The main security chip 110, the main CPU 100, the ROM 120 and the RAM 130 may be integrated to form a one chip.

Further, the lending switch 15, the bet switch 16, the start switch 17, the stop switch 18, and the index sensor 80A are connected to the input side of the main board 10. Here, the index sensor 80A is a detection unit provided in the frame of the reel unit 80, and is for detecting the rotation of the rotating reel. On the other hand, the reel unit 80, the bet lamp 82, and the credit display unit 83 are connected to the output side of the main board 10.
Further, as shown in FIG. 2, the main board 10 has a gaming machine ID assigned to each gaming machine 1 at the time of shipment from the manufacturer, a first gaming machine authentication key A, a first sub board communication key E. Each key data of the first main / payout board communication key F and the first game machine communication key G is written. These data are stored in the ROM 120. Here, the first main / payout board communication key F and the first gaming machine communication key G each have one key data, and the first gaming machine authentication key A and the first sub board communication key E each include a plurality of key data. Has key data. In the first gaming machine authentication key A, one key data among a plurality of key data is selected as a key to be used this time, and this key data is stored in the RAM 130. Then, other key data is newly selected by a predetermined trigger in the key data changing process described later, and the key data stored in the RAM 130 is changed to the newly selected key data. In the first sub board communication key E, one key data is selected as a key to be used this time among a plurality of key data, and this key data is stored in the RAM 130. Then, other key data is newly selected by a predetermined trigger in the key data changing process described later, and the key data stored in the RAM 130 is changed to the newly selected key data.

The game machine ID and key data are issued by the machine history management server 3 and written to the main board 10 (ROM 120) before the game machine 1 is shipped. This writing is performed by the manufacturer of the chip to be written or the manufacturer of the game machine 1. Note that the gaming machine ID is assigned to be different for each gaming machine 1 even if it is the same model.
Here, information transmitted from the main board 10 to the in-store server 2 includes game table information and game history information.
The “game table information” is information related to device authentication, and includes at least the game table ID, the ROM information of the main board 10, and the cumulative operating time of the main board 10 (main CPU 100 and / or main security chip 110). It is. The “game history information” is information relating to the management of the number of medals, at least a store ID assigned to each store, a game table ID, IN information that is the number of medals lent to the game table 1, and OUT information that is the number of medals paid out from the gaming table 1 is included.

After the game machine information is encrypted with the first game machine authentication key A, the communication is encrypted with the first game machine communication key G and transmitted to the in-store server 2. The game history information is transmitted to the in-store server 2 after the communication is encrypted with the first gaming machine communication key G.
(Sub-board 11)
The sub-board 11 performs various effects control as the game progresses.
As shown in FIG. 3, the sub-board 11 can perform one-way communication from the main board 10 and the payout control board 12. The sub board 11 only receives information from the main board 10 and the payout control board 12, and cannot transmit information from the sub board 11.

The sub-board 11 includes at least a sub-CPU 200, a ROM 220, and a RAM 230 for controlling various effects and performing processing related to communication decoding. Note that the sub-CPU 200 may be provided with a separate security chip, and the communication decryption may be performed with the security chip, without the communication decoding performed by the sub CPU 200.
Further, the display device 84, the lamp 85, and the speaker 86 are connected to the output side of the sub-board 11.
As shown in FIG. 2, key data of the second sub-payout board communication key I ′ issued by the machine history management server 3 is written in the sub board 11 (ROM 220) before shipment from the manufacturer. . Note that the second sub board communication key E ′ is not written in the sub board 11 in advance, and the key data of the second sub board communication key E ′ selected by the history management server 3 is described later. Is acquired by the sub-board 11 via the IC medal 7 and stored in the RAM 230. This enables communication between the main board 10 and the sub board 11 by encryption.

(Discharge control board 12)
The payout control board 12 exchanges information with the IC medal 7 and controls the medal lending and payout. Also, authentication of the main board 10 (main CPU 100 and / or main security chip 110) is performed, and key data is transmitted to the sub board 11. Furthermore, various information can be transmitted to the in-store server 2.
As shown in FIG. 3, the payout control board 12 is capable of bidirectional communication with the main board 10 and unidirectional communication toward the sub board 11. In addition, information can be read from the dongle connection device 90, and information can be read from and written to the IC medal connection device 91.

  The payout control board 12 includes a payout control CPU 300 for exchanging information with the IC medal 7 and controlling the medal lending and paying out, processing related to encryption and decryption, and the main board 10 (main CPU 100 And / or a payout control security chip 310 for authenticating the main security chip 110), transmitting key data to the sub-board 11, and the like, and a ROM 320 and a RAM 330. The payout control security chip 310, the payout control CPU 300, the ROM 320, and the RAM 330 may be integrated to form a one chip.

Further, a settlement switch 19 is connected to the input side of the payout control board 12, and a medal number display section 87 is connected to the output side.
Here, as shown in FIG. 2, the payout control board 12 receives the store ID, the gaming machine ID, the first payout board authentication key B, the second main / payout board communication key F ′, Each key data of the second medal authentication key H ′, the first sub-payout board communication key I, and the first payout board communication key J is read and stored in the RAM 330. As a result, the payout control board 12 can execute all controls by the payout control board 12, such as authentication of the main board 10, transmission of key data to the sub board 11, and encryption communication with the in-store server 2.

  Information transmitted from the payout control board 12 to the in-store server 2 includes payout board information and medal content information. “Payout board information” is information relating to device authentication, and includes at least a store ID, a gaming machine ID, and a cumulative operation time of the payout control board 12 (payout control CPU 300 and / or payout control security chip 310). Yes. The “medal content information” is information relating to the management of the number of medals, and is assigned at least for each store ID, game table ID, last writing time when information is written in the IC medal, and each IC medal 7. IC medal ID, IC medal issuance date, medal number information and the like are included.

The payout board information is encrypted with the first payout board authentication key B and then transmitted to the in-store server 2 after the communication is encrypted with the first payout board communication key J. The medal content information is transmitted to the in-store server 2 after the communication is encrypted with the first payout board communication key J.
(Dongle connection device 90)
The dongle connection device 90 is a device for reading information from the security dongle 13 as a storage medium. The dongle connection device 90 is provided with a mounting portion (not shown). The security dongle 13 is formed so as to be attachable to the attachment portion.

By attaching the security dongle 13 to the dongle connecting device 90, the payout control board 12 can read ID information such as a store ID and a gaming machine ID and key data from the security dongle 13.
The dongle connecting device 90 may be formed integrally with the payout control board 12.
(Security dongle 13)
The security dongle is used for authentication processing for preventing unauthorized copying and tampering of programs. The security dongle 13 in the present embodiment is an external storage medium such as an SD card or a USB memory in which ID information or key data that is information related to authentication is stored. As described above, when the security dongle 13 is attached to the dongle connection device 90 and ID information and key data are read into the payout control board 12, the payout control board 12 can authenticate the main board 10 and It becomes possible to transmit key data.

The security dongle 13 includes the store ID of the store to be shipped issued by the machine history management server 3, the game machine ID, the first payout board authentication key B, the second main before shipping from the manufacturer. Each key data of the payout board communication key F ′, the second medal authentication key H ′, the first sub-payout board communication key I, and the first payout board communication key J is written. Here, the first payout board authentication key B, the second main / payout board communication key F ′, the first sub-payout board communication key I, and the first payout board communication key J have one key data. The 2-medal authentication key H ′ has a plurality of key data.
In the payout control board 12, one key data among the plurality of key data of the second medal authentication key H ′ is selected as a key to be used this time, and other key data is selected in the key data changing process described later. Done.

This security dongle 13 is the property of the manufacturer of the gaming machine 1. Information such as a gaming machine ID and key data is written in the security dongle 13 and shipped to the store separately from the gaming machine 1 itself. When the store where the game machine 1 is installed is changed, the security dongle 13 is once returned to the manufacturer, and after the store ID is rewritten, it is shipped to a new store. Further, when the game machine 1 is discarded, the security dongle 13 is returned to the manufacturer.
(IC medal connection device 91)
The IC medal connection device 91 is a device for reading information from the IC medal 7 as a storage medium and writing information to the IC medal 7. The IC medal connection device 91 is provided with a communication unit (not shown). When the IC medal 7 inserted from the medal slot of the gaming table 1 reaches the communication unit, communication with the payout control board 12 is performed. Is possible. Specifically, the IC medal connection device 91 can read the encrypted information from the IC medal 7 and transmit it to the payout control board 12. It is also possible to receive encrypted information from the payout control board 12 and write it into the IC medal 7.

Further, when the IC medal connecting device 91 receives the operation signal of the settlement switch 19 from the payout control board 12, the IC medal 7 is paid out from the medal slot.
The IC medal connection device 91 may be formed integrally with the payout control board 12.
(Operation processing at the gaming table 1 when it is not normal)
As described above, in the present embodiment, unless the payout control board 12 reads ID information or key data from the security dongle 13, the payout control board 12 does not perform control, and the gaming table 1 does not operate normally. Here, a state where the security dongle 13 is not attached to the dongle connection device 90 is defined as an abnormal time. “The state where the security dongle 13 is not attached” means that the dongle connection device 90 is not attached with the security dongle 13 but is attached, but the attachment is incomplete. This includes a state in which a part is damaged or missing, a state in which a security dongle 13 of a different model is attached, a state in which a security dongle 13 of an illegally modified product is attached, and the like. When an abnormal time is reached, an abnormal operation process is executed.

  Specifically, in a state where the security dongle 13 is not attached, the main board 10 cannot communicate with the payout control board 12, or cannot receive a command received from the payout control board 12, and from the payout control board 12 When other error signals are received, it is determined that the operation is not normal. Then, the main board 10 stops the game control on the game board 1, stops the production instruction to the sub board 11, stops the driving preparation process when the game board 1 is installed in the store, and reads the information of the IC medal 7. Perform processing such as stopping. At the same time, a notification that the game control, the production instruction, the driving preparation process, and the reading of the information of the IC medal 7 are stopped, or the notification that the security dongle 13 is not attached to the dongle connecting device 90. Do.

In the notification by the main board 10 described above, the main board 10 controls the LEDs and the 7-segment display provided on the gaming table 1, and the fact that the game control is stopped or the dongle connecting device 90 is equipped with the security dongle 13 Notify that it is not. For example, in the case of an LED, all lights up, and in the case of a 7-segment display, an error code such as “EE” is displayed.
Note that the sub-board 11 may execute an abnormal operation process. In this case, in a state where the security dongle 13 is not attached, the sub board 11 cannot communicate with the payout control board 12, cannot decode the command received from the payout control board 12, When an error signal is received, it is determined that it is abnormal. Then, the sub board 11 controls the speaker 86, the lamp 85, and the display device 84 to notify that the game control is stopped, the dongle connection device 90 is not equipped with the security dongle 13, and the like. For example, it is possible to generate a sound “warning error” or a warning sound from the speaker 86, turn on the lamp 85, or display characters or codes indicating an error on the display device 84.

The payout control board 12 may execute an abnormal operation process. In this case, the payout control board 12 determines that the state in which the security dongle 13 is not attached is abnormal. Then, the payout control board 12 controls the medal number display unit 87 to notify that the security dongle 13 is not attached to the dongle connection device 90. Further, an error signal can be transmitted to the main board 10 or the sub board 11.
Further, in addition to or in place of the notification in the gaming table 1, error information at the time of non-normality may be transmitted from the gaming table 1 to the in-store server 2, and the received in-store server 2 may perform notification.

(In-store server 2)
The in-store server 2 is a server used by the store, and receives information transmitted from the game machine 1, transmits / receives information to / from the IC medal lending device 4, and transmits / receives information to / from the history management server 3. In addition, the game machine 1 and the IC medal lending device 4 in the store are managed.
The in-store server 2 is not limited to being installed in the store, but may be installed outside the store.
The in-store server 2 uses the second gaming machine communication key G ′ for decrypting the information encrypted and transmitted by the first gaming machine communication key G of the main board 10, and the first paying board communication key J of the dispensing control board 12. A second payout board communication key J ′ for decrypting the encrypted information transmitted, and a key for encrypting and decrypting communication with the IC medal lending device 4, and a first medal lending device communication key K Second medal lending device communication key K ′ corresponding to the key, and a key for performing encryption and decryption of communication with the history management server 3, and the first server communication corresponding to the second server communication key D ′ Has key D. One key data is written in each of the second gaming machine communication key G ′, the second payout board communication key J ′, the second medal lending device communication key K ′, and the first server communication key D.

  Here, the information received from the game board 10 includes the game board information and game history information transmitted from the main board 10, and the payout board information and medal content information transmitted from the payout control board 12, as described above. The information received from the IC medal lending device 4 includes IC medal lending device information and IC medal management information, and the information transmitted to the IC medal lending device 4 includes specific information and management information. Furthermore, information transmitted to the machine history management server 3 includes game machine information, payout board information, IC medal lending device information, and total information, and information received from the machine history management server 3 includes specific information.

  “IC medal lending device information” is information relating to device authentication, and includes at least information relating to the store ID and the number of medals. The “IC medal management information” is information relating to lending management of the IC medal 7, and includes at least a store ID, an IC medal ID, an IC medal issuance date / time, and medal number information. The “specific information” is information related to device authentication, and includes ID information such as a store ID and a game machine ID, and key data such as a first medal authentication key H and a second sub board communication key E ′. ing. The “management information” is information for managing the gaming table 1 and the IC medal lending device 4, and includes at least information related to the gaming table ID and the lending rate. “Total information” is information on the balance of the medals of the gaming machine 1 and includes data aggregated based on the IN information and OUT information of the gaming machine 1 and the number of medals stored in the IC medal 7. It is.

Of the information transmitted and received by the in-store server 2, the game machine information, the payout board information, the IC medal lending device information, and the specific information are information that only passes through the in-store server 2, It is never acquired. This is because the in-store server 2 does not have an authentication key. Therefore, in-store server 2 without an authentication key cannot browse or rewrite information related to device authentication.
(History management server 3)
The machine history management server 3 includes ID information and key data written in the gaming machine 1 by the manufacturer of the gaming machine 1 or a chip supplier, and ID information and keys written in the IC medal lending device 4 by the equipment manufacturer. Data issuance and management. Moreover, it is formed so as to be able to communicate with the in-store server 2 of each store, stores information transmitted from each game machine and the IC medal lending device 4, and transmits specific information to the in-store server 2 of each store. Is.

  The machine history management server 3 has a second server communication key D ′ corresponding to the first server communication key D, which is a key for performing transmission / reception with the in-store server 2. Also, the second gaming machine authentication key A ′ for decrypting the game machine information encrypted and transmitted from the main board 10, and the payout board information encrypted and transmitted from the payout control board 12 are decrypted. The second payout board authentication key B ′ for encryption for decrypting the IC medal lending device information encrypted and transmitted from the IC medal lending device 4 or when transmitting specific information to the IC medal lending device 4 The second medal lending device authentication key C ′ is provided. Further, the machine history management server 3 has a second sub board communication key E ′ used in the gaming machine 1 and a first medal authentication key H used in the IC medal lending device 4. Of the keys possessed by the history management server 3, the second payout board authentication key B ′, the second medal lending device authentication key C ′, and the second server communication key D ′ each have one key data. On the other hand, each of the second gaming machine authentication key A ′, the second sub-board communication key E ′, and the first medal authentication key H has a plurality of key data and is used by the machine history management server 3 this time and next time. Key data is managed. Then, for each key data of the second gaming machine authentication key A ′, the second sub board communication key E ′, and the first medal authentication key H, new key data to be used next time is selected in the key data changing process described later. The

In the machine history management server 3, the received information and the decrypted game machine information, the payout board information, and the IC medal lending device information are collated with the received information and the information possessed by the machine history management server 3. Confirm that the equipment is identical, that is, that there is no board replacement or unauthorized modification. When the identity of the device is confirmed, the specific information is encrypted with the second medal lending device authentication key C ′, and then the communication is encrypted with the second server communication key D ′ and transmitted to the in-store server 2. doing.
The specific information transmitted here is the second sub-board corresponding to the store ID, the transmission date of the specific information, the key data of the first medal authentication key H, the number of games that can be used, and the game table ID as the game table data used this time. There is key data of the communication key E ′ and key data of the second sub board communication key E ′ corresponding to the gaming machine ID as gaming machine data to be used next time. The game table data includes the number of games that can be played.

The reason why the game table data to be used next time is transmitted in advance is to allow the game to be executed even if the store side cannot obtain new game table data due to a network error or the like. In this embodiment, since the selection interval of the key data is set to one week, even if a network error occurs and new game machine data cannot be received for one week, the next week will be used for the next week. By using the received game table data, repair and game can be performed together for one week.
(IC medal lending device 4)
The IC medal lending device 4 issues and manages the IC medal 7. Various information is transmitted to and received from the in-store server 2. The IC medal lending device 4 is shipped from the equipment manufacturer to the store with the store ID and the key data of the first medal lending device authentication key C and the first medal lending device communication key K written therein. The key used by the IC medal lending device 4 is the first medal authentication key H, but the key data of the first medal authentication key H is not written in the IC medal lending device 4 in advance, and the operation at the time of installation is performed. This is a key for receiving key data from the history management server 3 for the preparation process. The first medal authentication key H is a key that is periodically changed, and the key data transmitted from the history management server 3 is changed. When the key data change fails, the IC medal lending device 4 notifies a predetermined error. Specifically, the LED or lamp 85 provided in the IC medal lending device 4 is blinked, or an error code is displayed on the 7-segment display.

Here, the information received from the in-store server 2 includes specific information and management information. Information transmitted to the in-store server 2 includes IC medal lending device information and IC medal management information.
The specific information is acquired after the communication is decrypted with the first medal lending device communication key K and then decrypted with the first medal lending device authentication key C. The management information is acquired after the communication is decrypted with the first medal lending device communication key K.
Further, after the IC medal lending device information is encrypted with the first medal lending device authentication key C, the communication is encrypted with the first medal lending device communication key K and then transmitted to the in-store server 2. The IC medal management information is transmitted to the in-store server 2 after the communication is encrypted with the first medal lending device communication key K.

When the IC medal lending device 4 lends the IC medal 7, the specific information including the store ID, the game table ID corresponding to the number of games that can be played, the key data of the corresponding second sub-board communication key E ′, and the like The lending information for playing the game on the table 1 is encrypted using the first medal authentication key H and then written on the IC medal 7. The lending information includes an IC medal ID, an IC medal issuance date, an expiration date that is the expiration date of the IC medal 7, and medal number information that is information on the number of medals.
(IC medal 7)
The IC medal 7 is a storage medium in which the lending information and the specific information are stored, and is for providing the lending information and the specific information to the gaming machine 1.

  Here, as described above, the lending information written on the IC medal 7 includes the IC medal ID, the IC medal issuance date, the expiration date, the medal number information, and the specific information includes the store ID, the number of games, and the like. The key data of the second sub board communication key E ′ corresponding to the gaming machine ID as the gaming machine data used this time, and the second sub board communication key E corresponding to the gaming machine ID as the gaming machine data to be used next time. There is key data for '. The game table data includes the number of games that can be played. The gaming machines 1 included in the number of games that can be played are gaming machines 1 that have the same medal lending rate, but if the lending rate in the store is one, all gaming machines 1 in the store or the same island It may be a gaming table 1 or the like arranged. As described above, game machine data to be used next time is also written in advance in preparation for a network error or the like.

In some stores, medals are lent out at a plurality of rental rates, and the gaming machines 1 that can be played at each rental rate are limited. In such a case, an IC medal 7 in which medal number information corresponding to the lending rate is stored can be used. The IC medal lending device 4 can be provided with a lending rate selecting means, and the medal number information of the IC medal 7 corresponding to the lending rate selected by the player at the time of lending the IC medal 7 can be stored.
Furthermore, medal number information corresponding to each lending rate can be written in the IC medal 7. In such a case, it is necessary to store a lending rate for each gaming machine 1, or it is necessary to be able to select a lending rate for each gaming machine 1.

  The player inserts the IC medal 7 in which the lending information and the specific information are written and issued in the IC medal lending device 4 into a medal insertion slot (not shown) of the game table 1. When the IC medal 7 is set in the dongle connection device 90, the information on the IC medal 7 is decrypted by the second medal authentication key H ′ on the payout control board 12 and read out. Then, the decrypted specific information and the information written in the gaming machine 1 are collated, and the key data of the second sub board communication key E ′ is stored in the sub board 11 when the store ID and the gaming machine ID match. Is sent. Then, when the sub board 11 acquires the key data of the second sub board communication key E ′, information transmission from the main board 10 to the sub board 11 becomes possible. Further, virtual medals can be bet or credited based on the medal number information included in the decrypted lending information. Then, the medal number information is written in the IC medal 7 for each game or at the time of payment.

(Installation flow of game machine 1 and IC medal rental device 4)
First, the case where the manufacturer of the gaming machine delivers the gaming machine 1 to the store will be described.
The manufacturer makes a game machine registration application and a dongle registration application to the machine history management server 3 when the installation store becomes clear. The main board 10 includes a gaming machine ID as gaming machine registration information, a first gaming machine authentication key A, a first sub board communication key E, a first main / payout board communication key F, and a first gaming machine. The key data of the communication key G is written, the key data of the second sub-payout board communication key I ′ is written in the sub-board 11, and the game machine ID, the store ID, and the first pay-out are written in the security dongle 13. The key data of the board authentication key B, the second main / payout board communication key F ′, the second medal authentication key H ′, the first sub-payout board communication key I, and the first payout board communication key J is written. Then, the game table 1 main body and the security dongle 13 are shipped separately to the store, and then the dongle connecting device 90 is mounted with the security dongle 13 and installed in the store.

  In this way, the gaming table 1 installed in a specific store may be temporarily removed from the specific store and installed in another store. At this time, although the game table ID remains as it is, the store ID is changed. In this case, the security dongle 13 is first returned to the manufacturer once, and the store ID is rewritten. Then, a dongle change application is made from the manufacturer to the machine history management server 3, and the store ID is changed among the information related to the game machine 1 stored in the machine history management server 3. Also, the security dongle 13 in which the new store ID is written is shipped to the new store.

Further, when the game table 1 is discarded, the security dongle 13 is returned to the manufacturer. In addition, a dongle discard application is made to the machine history management server 3 from the manufacturer, and the machine history management server 3 erases the information on the gaming machine 1 stored in the machine history management server 3.
In this way, from the time of manufacture / sales of the gaming machine 1 to the transfer and disposal, the machine history management server 3 determines which gaming machine is installed in which store based on the information written in the security dongle 13. Or whether it has been discarded.
Next, when the IC medal lending device 4 is delivered from the equipment manufacturer that manufactures the IC medal lending device 4 to the store, the medal lending device registration application is first made to the machine history management server 3 from the equipment manufacturer. The store ID and the key data of the first medal lending device authentication key C and the first medal lending device communication key K are written in the IC medal lending device 4 and installed in the store. The IC medal lending device 4 can be installed, for example, one for one game stand 1, one for two game stands 1, or one for each island.

(Operation preparation process)
As described above, it is assumed that the gaming table 1 and the IC medal lending device 4 are installed in the store. Then, an operation preparation process is performed as follows.
As shown in FIG. 4, first, when the power of the gaming machine 1 is turned on and initialization processing of each device is performed, it is confirmed whether or not the security dongle 13 is connected to the dongle connection device 90. At this time, if the security dongle 13 is not connected to the dongle connection device 90 of the gaming table 1, the abnormal operation process is executed as described above.

  When the security dongle 13 corresponding to the gaming table 1 is normally attached to the dongle connection device 90, normal operation processing is executed. Specifically, on the payout control board 12, the game table ID, the store ID, and the key data are read from the security dongle 13. In the gaming machine 1, the gaming machine ID written on the main board 10 is encrypted with the first main / payout board communication key F and transmitted to the payout control board 12. The payout control board 12 decrypts the received information with the second main / payout board communication key F ′, and then compares the acquired gaming machine ID with the gaming machine ID written in the security dongle 13. At this time, when the game table IDs match, the main board 10 is authenticated and the game can be controlled.

On the other hand, if the gaming machine IDs do not match, an authentication error occurs. At this time, the sub board 11 controls the display device 84, the lamp 85, and the speaker 86 to notify that the authentication of the main board 10 has failed. Note that the payout control board 12 may notify an error by controlling an LED, a 7-segment display or the like provided on the game table 1.
Next, after the game board information is encrypted with the first game machine authentication key A on the main board 10, the communication is encrypted with the first game machine communication key G and then transmitted to the in-store server 2. Then, the in-store server 2 decrypts the received information with the second gaming machine communication key G ′, and then encrypts the communication again with the first server communication key D and transmits it to the history management server 3. The machine history management server 3 decrypts the received information with the second server communication key D ′, and further decrypts it using the second gaming machine authentication key A ′ to obtain gaming machine information.

Further, the payout control board 12 encrypts the payout board information with the first payout board authentication key B, and then encrypts the communication with the first payout board communication key J and transmits it to the in-store server 2. Then, the in-store server 2 decrypts the received information with the second payout board communication key J ′ and then encrypts the communication again with the first server communication key D and transmits it to the history management server 3. The history management server 3 decrypts the received information with the second server communication key D ′ and then decrypts it using the second payout board authentication key B ′ to obtain the payout board information.
Further, the IC medal lending device 4 encrypts the IC medal lending device information with the first medal lending device authentication key C, and then encrypts the communication with the first medal lending device communication key K and transmits it to the in-store server 2. . Then, the in-store server 2 decrypts the received information with the second medal lending device communication key K ′, encrypts the communication again with the first server communication key D, and transmits it to the history management server 3. The history management server 3 decrypts the received information with the second server communication key D ′ and then decrypts it using the second medal lending device authentication key C ′ to obtain IC medal lending device information. ing.

In addition, when decryption of game machine information, payout board information, and IC medal lending device information fails, the machine history management server 3 records the type of information that could not be decrypted, the store ID, and the like as a security log. The in-store server 2 is notified that the decryption has failed.
The machine history management server 3 compares the newly acquired gaming machine information, payout board information, and medal lending machine information with the gaming machine information, payout board information, and medal lending machine information stored in advance in the machine history management server 3. If the identity of the device is confirmed, the device is authenticated and the game machine 1 is permitted to operate. Specifically, the machine history management server 3 collates the gaming machine ID and ROM information included in the acquired gaming machine information with the gaming machine ID and ROM information stored in the machine history management server 3, and if they match The key data to be used this time and the key data to be used next time are selected one by one from the plurality of key data possessed by the second sub board communication key E ′. Further, the gaming machine ID and the shop ID included in the acquired payout board information are collated with the gaming machine ID and the shop ID stored in the machine history management server 3, and if they match, the plurality of first medal authentication keys H have. One key data to be used this time is selected from the key data. In addition, when a plurality of gaming machines 1 are installed in a store for one IC medal lending device 4, all the gaming table IDs and store IDs are checked by checking the payout board information of all the plurality of gaming machines 1 If the two match, the key data of the first medal authentication key H may be selected.

  Next, as shown in FIG. 5, the machine history management server 3 is directed to the in-store server 2 as a store ID, key data of the first medal authentication key H, and game machine ID as game machine data used this time as specific information. And the key data of the corresponding second sub board communication key E ′, the game machine ID as the game machine data to be used next time, and the key data of the corresponding second sub board communication key E ′ are transmitted. Here, the game table data includes the number of games that can be played. When transmitting the specific information from the machine history management server 3, first, after encrypting the specific information to be transmitted with the second medal lending device authentication key C ′, the communication is encrypted with the second server communication key D ′. To the in-store server 2. The in-store server 2 decrypts the received specific information with the first server communication key D, encrypts the communication again with the second medal lending device communication key K ′, and transmits it to the IC medal lending device 4. Then, the IC medal lending device 4 decrypts the received specific information with the first medal lending device communication key K, and further decrypts it using the first medal lending device authentication key C to obtain the specific information.

The IC medal lending device 4 collates the store ID included in the acquired specific information with the store ID stored in advance in the IC medal lending device 4, and if they match, it is included in the acquired specific information. The key data of the first medal authentication key H is stored. If the store IDs do not match, the IC medal lending device 4 notifies a predetermined error. Specifically, an LED or a lamp provided in the IC medal lending device 4 is blinked, or an error code is displayed on a 7-segment display.
Then, the IC medal lending device 4 uses the store ID as the specific information, the game table ID as the game table data to be used this time, the key data of the corresponding second sub board communication key E ′, and the game table data to be used next time. The game machine ID and the corresponding key data of the second sub-board communication key E ′ are encrypted with the first medal authentication key H and written to the IC medal 7. Here, the game table data includes the number of games that can be played. Then, the IC medal 7 is issued from the IC medal lending device 4 and is inserted into the gaming machine 1. When the IC medal 7 is inserted into the IC medal connection device 91 from the medal slot, the payout control board 12 decrypts the specific information with the second medal authentication key H ′. Then, the gaming machine ID and the shop ID included in the decrypted information are respectively compared with the gaming machine ID and the shop ID read from the security dongle 13, and if both IDs match, the payout control board 12 Transmits the key data of the second sub board communication key E ′ to the sub board 11 after encrypting the communication with the first sub / payout board communication key I.

The sub board 11 decrypts the information received from the payout control board 12 with the second sub / payout board communication key I ′ to obtain the key data of the second sub board communication key E ′.
On the other hand, if either the gaming table ID or the store ID does not match, a key transmission error occurs, and the sub board 11 cannot receive the key data. At this time, the sub-board 11 that cannot receive the key data controls the display device 84, the lamp 85, and the speaker 86 to notify that the reception of the key data has failed. Note that the payout control board 12 may notify an error by controlling an LED, a 7-segment display or the like provided on the game table 1.

As described above, the sub-board 11 obtains the key data of the second sub-board communication key E ′, so that the communication from the main board 10 can be decrypted. Then, the main board 10 transmits a release instruction command so that the effect by the sub board 11 is permitted. At this time, the release instruction command is transmitted to the sub-board 11 after the communication is encrypted with the first sub-board communication key E. The sub board 11 decrypts the release instruction command using the acquired second sub board communication key E ′. When the decryption is successful and the decrypted release instruction command is executed, the production by the sub-board 11 is permitted.
On the other hand, since the key data of the second sub circuit board communication key E ′ is not key data corresponding to the first sub circuit board communication key E, when the decryption of the release instruction command fails, or the communication command is altered by an illegal act. If the sub-board 11 determines that there has been a cancellation error, the sub-board 11 cannot correctly read the information transmitted by the main board 10 and information transmission becomes impossible. At this time, the sub-board 11 notifies the display device 84, the lamp 85, the speaker 86, and the like that information transmission from the main board 10 is not performed.

Note that the above operation preparation process is not limited to when the equipment is installed, but is executed when the power of each gaming machine 1 is turned on at the start of store operations, or when a setting value associated with the so-called play rate is changed. May be. The driving preparation process can also be performed by the player. For example, the driving preparation process may be executed when the player borrows the IC medal 7 and inserts the IC medal 7 into the gaming table 1. In this case, the game can be performed as soon as the driving preparation process is completed.
(Process during game)
Next, as shown in FIG. 6, the overall flow will be described on the assumption that a game is played by borrowing an IC medal 7 from the IC medal lending device 4.

First, as a result of the driving preparation process as described above, the IC medal lending device 4 uses the store ID, the game table ID as the game table data used this time, and the corresponding second sub board communication key E ′ as the specific information. Data, a game machine ID as game machine data to be used next time, and key data of the corresponding second sub board communication key E ′ are stored.
Here, it is assumed that the player borrows the IC medal 7 from the IC medal lending device 4. Then, at the time of lending, lending information and specific information are encrypted in the IC medal 7 after being encrypted with the first medal authentication key H.

  Then, the player inserts the IC medal 7 into the gaming table 1 where the game is performed. When the IC medal 7 is inserted into the IC medal connection device 91 from the medal slot, the payout control board 12 decrypts the lending information and the specific information with the second medal authentication key H ′. Here, in the payout control board 12, the store ID and the gaming machine ID included in the decrypted specific information are compared with the shop ID and the gaming machine ID read from the security dongle 13. If the store IDs do not match (when an IC medal 7 from a different store is inserted), the store IDs match but no gaming machine ID exists (when an IC medal 7 is inserted into the gaming machine 1 having a different lending rate) When the expiration date of the IC medal 7 has passed, an IC medal error occurs and the medal is not lent out to the main board 10. At this time, the sub-board 11 controls the display device 84, the lamp 85, and the speaker 86 to notify that the inserted IC medal 7 cannot be used. Note that the payout control board 12 may notify an error by controlling an LED, a 7-segment display or the like provided on the game table 1. Then, when a return slot is separately provided in the medal insertion slot or the gaming table 1, the IC medal 7 is returned from the return slot.

On the other hand, when the IC medal 7 is loaned by the IC medal lending device 4, the IC medal management information is encrypted with the first medal lending device communication key K of the IC medal lending device 4, and then transmitted to the in-store server 2, In 2, the second medal lending device communication key K ′ is decrypted and acquired.
In the gaming table 1, information relating to the lending and paying out of medals is exchanged between the main board 10 and the payout control board 12. Specifically, the main board 10 transmits a medal lending request and the medal number information of medals to be paid out as a result of the game, and the payout control board 12 lends to the main board 10. Information on the number of medals to be received is transmitted. Information exchange between the main board 10 and the payout control board 12 uses the first main / payout board communication key F of the main board 10 and the second main / payout board communication key F ′ of the payout control board 12 to encrypt communication. It is done after becoming.

It should be noted that exchange of information regarding medal lending and payout is performed throughout the game. On the payout control board 12, the medal number information on the IC medal 7 is rewritten every game, every certain number of games, every certain time, or when operated by the player such as when the settlement switch 17 is pressed.
In the gaming table 1, when the game starts normally, information related to the effect is transmitted from the main board 10 to the sub-board 11. Communication according to this instruction is encrypted using the first sub board communication key E and the second sub board communication key E ′ of the main board 10.

Further, each time a game is played, game history information is transmitted from the main board 10 to the in-store server 2 after the communication is encrypted with the first game table communication key G, and the second game table communication key G is stored in the store server 2. Decrypted with 'and obtained. Further, the medal content information is transmitted from the payout control board 12 to the in-store server 2 after the communication is encrypted with the first payout board communication key J, and is decrypted by the in-store server 2 with the second payout board communication key J ′. To be acquired.
Then, the in-store server 2 performs a fraud check by comparing the difference number of medals obtained from the IN information and OUT information included in the game history information with the difference number of medals determined from the medal number information included in the medal content information. be able to. Note that when a fraud is detected, an alarm may be issued to the POS 5 or the hall computer 6. Further, the sales of the gaming machine 1 and the like can be totaled from the acquired game history information and medal content information, and can be transmitted to the machine history management server 3 after being encrypted with the first server communication key D as the total information.

(Key data change process)
Next, processing for periodically changing key data will be described with reference to FIGS.
First, as shown in FIG. 7, in the gaming machine 1, the main board 10 and the payout control board 12 record the accumulated operation time, and a certain time (for example, one week) has elapsed since the previous key data was selected. Is monitoring. When it is determined that the operation time has passed a certain time, the key data of the first gaming machine authentication key A, the first sub board communication key E, and the second medal authentication key H ′ is automatically changed. . Specifically, the main board 10 selects one key data to be newly used from a plurality of key data possessed by the first gaming machine authentication key A. The main board 10 selects one key data to be newly used from a plurality of key data possessed by the first sub board communication key E. Further, the payout control board 12 selects one key data to be newly used from a plurality of key data possessed by the second medal authentication key H ′.

On the other hand, when the above-described operation preparation process is executed or at a predetermined timing, the game board information is sent from the main board 10 and the payout board information is sent from the payout control board 12 to the machine history management server 3, respectively. Here, the predetermined opportunity includes the completion of automatic change of key data in the gaming machine 1, the power-on at the start of store operation, the arrival of a specific day of the week, and the passage of a predetermined operating time .
The machine history management server 3 inquires the accumulated operation time included in the acquired gaming machine information and the payout board information, and changes a predetermined time (change interval in the main board 10 and the payout control board 12) Check if the same time, here a week) is reached. If the predetermined time has been reached, the acquired gaming machine information and the payout board information are collated with the gaming machine information and the payout board information stored in the machine history management server 3. As a result, when the identity of the main board 10 and the payout control board 12 can be confirmed, new key data is selected.

Specifically, the machine history management server 3 uses key data 1 to be used next time from a plurality of key data possessed by the second sub board communication key E ′ when the gaming machine ID and ROM information included in the gaming machine information match. Select one. Then, the key data selected as the key to be used next time in the previous key data changing process is selected as the key data to be used this time.
Further, when the game board ID and the store ID included in the payout board information match, one key data to be used this time is selected from a plurality of key data possessed by the first medal authentication key H. When a plurality of gaming machines 1 are installed for one IC medal rental device 4, the payout board information of all of the plurality of gaming machines 1 is collated, and all the gaming machine IDs and the store IDs match. In this case, the key data of the first medal authentication key H may be selected.

Further, simultaneously with the selection of the key data of the second sub board communication key E ′ and the first medal authentication key H, the machine history management server 3 uses the plurality of key data possessed by the second gaming machine authentication key A ′ this time. Select the key data to be used.
Note that the selection of key data in the machine history management server 3 and the selection of key data in the game machine 1 are both executed with the same logic. For example, the key data to be paired can be arranged in the same order, and both key data can be selected in a predetermined order or an order calculated by a predetermined arithmetic expression. Thereby, it is possible to prevent a mismatch between the key data selected on the gaming machine 1 and the key data selected on the machine history management server 3.

  Subsequently, as shown in FIG. 8, the history management server 3 uses the store ID, the key data of the first medal authentication key H, the game table ID as the game table data used this time, and the specific information as to the in-store server 2. The key data of the corresponding second sub circuit board communication key E ′, the game machine ID as the game machine data to be used next time, and the key data of the corresponding second sub circuit board communication key E ′ are transmitted. Here, the game table data includes the number of games that can be played. This specific information is encrypted with the second medal lending device authentication key C ′, and further encrypted with the second server communication key D ′, and then transmitted to the in-store server 2.

  The in-store server 2 decrypts the received specific information with the first server communication key D, then re-encrypts it with the second medal lending device communication key K ′, and transmits it to the IC medal lending device 4. Then, the IC medal lending device 4 decrypts the received specific information with the first medal lending device communication key K, and further decrypts it with the first medal lending device authentication key C. Key data of 1 medal authentication key H, gaming machine ID as gaming machine data used this time and key data of corresponding second sub-board communication key E ′, gaming machine ID as gaming machine data to be used next time and corresponding first data 2. Obtain key data of sub-board communication key E ′. Here, in the IC medal lending device 4, when the newly acquired store ID is matched with the store ID stored in advance in the IC medal lending device 4, the first medal authentication key of the IC medal lending device 4 is matched. The key data of H is changed to the newly received key data. If the store ID does not match in the IC medal lending device 4 and the change to the new key data fails, the IC medal lending device 4 reports a predetermined error. Specifically, an LED or a lamp provided in the IC medal lending device 4 is blinked, or an error code is displayed on the 7-segment display.

  Next, the second sub-board communication key E ′ is sent to the gaming machine 1 via the IC medal 7. Then, it is transmitted from the payout control board 12 of the game table 1 to the sub board 11. The transmission / reception method of the second sub board communication key E ′ is the same as the operation preparation process shown in FIG. Then, the key data changing process is completed by changing the key data of the second sub board communication key E ′ of the sub board 11 to the newly selected and transmitted key data of the second sub board communication key E ′. . Note that if either the gaming table ID or the store ID does not match on the payout control board 12, a key transmission error occurs, and the sub board 11 cannot receive new key data. At this time, the sub-board 11 that cannot receive new key data controls the display device 84, the lamp 85, and the speaker 86 to notify that the key data reception has failed. Note that the payout control board 12 may notify an error by controlling an LED, a 7-segment display or the like provided on the game table 1.

  On the other hand, the second sub board communication key E ′ of the sub board 11 includes the key data to be used next time (after change) in addition to the key data to be used this time (before change) at the time of the previous key data change process. Has been written. Therefore, when the store ID and the gaming machine ID do not match on the payout control board 12, or when a communication error occurs between the machine history management server 3 and the in-store server 2, the sub board 11 has new key data. Is not received, the following processing is executed. First, the sub-board 11 tries to receive information from the main board 10 with the key data used (before change) of the already-written second sub-board communication key E ′. If reception fails or decryption of original information fails even if reception is successful, another attempt is made to receive information from the main board 10 with the key data to be used (after change). As a result, when reception and decryption to the original information are successful, the effect control of the sub-board 11 is possible, and a game can be performed as usual until the next change process. However, if the key data to be used next time (after the change) fails to be received or decrypted to the original information, a release error occurs. At this time, the sub-board 11 notifies the display device 84, the lamp 85, the speaker 86, and the like that information transmission from the main board 10 is not performed.

(Management of the number of medals on game machine 1)
In the gaming table 1, the number of medals changes in accordance with betting and credits at the game, winning a winning combination, and the like. Here, the management of the number of medals executed on the payout control board 12 from when the IC medal 7 is inserted into the game table 1 until it is paid out at the time of payment will be described.
For example, it is assumed that the player borrows an IC medal 7 having 100 medals from the IC medal lending device 4. When the IC medal 7 is inserted into the IC medal connection device 91 from the medal insertion slot of the gaming table 1, the medal number information is read out on the payout control board 12, and “100” is displayed on the medal number display portion 87. Is done. It is assumed that the player operates the bet switch 16 to bet three medals for the game and simultaneously operates the lending switch 15 to credit 50 cards. Then, information related to the medal lending request is transmitted from the main board 10 to the payout control board 12, and in response to this, the medal number information for a total of 53 pieces is sent from the payout control board 12 to the main board 10. The As a result, “50” is displayed on the credit display unit 83, the three bet lamps 82 are lit, and “47” is displayed on the medal number display unit 87.

At this time, when a game is played and if the player loses the role lottery, if three more medals are bet in the next game, “47” is displayed on the credit display section 83. If 10 medals are paid out in this game, “50” is displayed on the credit display unit 83, information on the remaining 7 medals is transmitted to the payout control board 12, and the medal number display unit 87 displays “54” is displayed.
If the player operates the checkout switch 17 provided on the gaming table 1 at this time, “0” is displayed on the credit display portion 83 of the gaming table 1 and 50 cards credited to the main board 10 are displayed. Is sent to the payout control board 12. Then, 50 is added to the medal number information stored in the IC medal 7, and “104” is displayed on the medal number display portion 87. Then, when a return slot is separately provided in the medal insertion slot or the gaming table 1, the IC medal 7 is returned from the return slot.

  Thus, when the player operates the bet switch 16 and the lending switch 15, the medal number information is transmitted from the payout control board 12 to the main board 10. On the other hand, when paying out by winning a winning combination, credits are added up to the maximum credit value of “50”, but for more than that, medal number information is transmitted from the main board 10 to the payout control board 12, The number of medals on the payout control board 12 is added, and information on the number of medals is written in the IC medal 7. At the time of payment, the medal number information remaining in the credit is transmitted from the main board 10 to the payout control board 12, the medal number of the payout control board 12 is added, and the information on the number of medals is written in the IC medal 7. It is. Then, the IC medal 7 is returned to the player.

When the number of medals stored in the IC medal 7 becomes zero, the IC medal 7 may be collected by a collecting device (not shown) provided in the game table 1.
(Summary)
In this embodiment, the payout control board 12 reads information related to authentication stored in the security dongle 13 to exchange information with the IC medal 7, authentication of the main board 10, and key to the sub board 11. Data can be transmitted. This security dongle 13 is shipped to the store separately from the game board 1 main body on which the main board 10, the sub board 11 and the payout control board 12 are mounted, and then to the dongle connection device 90 of the game board 1 main body at the store. It is installed and installed in the store. The gaming table 1 cannot operate normally unless the security dongle 13 is attached and ID information and key data related to authentication are not read into the payout control board 12. Therefore, illegal distribution of the gaming table 1 in the distribution stage can be prevented by distributing the gaming table 1 and the security dongle 13 separately.

  The security dongle 13 of the present embodiment needs to write information related to authentication such as a store ID. This writing is performed by the manufacturer of the chip to be written or the manufacturer of the game machine 1. Even if the security dongle 13 in which the information related to authentication is not written is attached to the game table 1, the game cannot be performed. In addition, when changing the store where the game machine 1 is installed, it is necessary to return the security dongle 13 to the manufacturer once and rewrite the store ID. Further, when discarding the gaming machine 1, it is necessary to return the security dongle 13 to the manufacturer of the gaming machine 1. The information related to authentication written in the security dongle 13 is managed in the machine history management server 3, and the machine history management server 3 can grasp all the movements of the game machine 1.

  No ID information or key data is written in the payout control board 12 of the present embodiment, and the store ID, the game machine ID, the first payout board authentication key B, the second main The key data of the payout board communication key F ′, the second medal authentication key H ′, the first sub-payout board communication key I, and the first payout board communication key J are written. However, the present invention is not limited to this, and part of the ID information and key data written in the security dongle 13 such as the second main / payout board communication key F ′ and the first sub / payout board communication key I is paid out. It may be written on the control board 12 side.

  In the present embodiment, the security dongle 13 is formed as an external storage medium that provides authentication information to the payout control board 12, but the present invention is not limited to this. For example, the dongle connection device 90 may be connected to the main board 10, and the security dongle 13 may be formed as an external storage medium that provides authentication information to the main board 10, or the dongle connection device 90 is connected to the sub board 11. The security dongle 13 may be formed as an external storage medium that provides the sub-board 11 with information related to authentication. The security dongle 13 may be formed as an apparatus integrated with the payout control board 12 instead of an external storage medium such as an SD card or a USB memory. In this case, the manufacturer of the game machine writes ID information and key data as information related to authentication in the storage unit of the payout control board 12. The payout control board 12 is shipped separately from the main body of the gaming machine 1 and connected to a connection portion (not shown) of the gaming machine 1 in the store.

In the present embodiment, the communication between the main board 10, the sub board 11 and the payout control board 12 inside the gaming table 1, the communication between the gaming table 1 and the in-store server 2, the IC medal lending device 4 and the in-store server 2 Communication and communication between the in-store server 2 and the machine history management server 3 are all performed by communication encrypted with a communication key, which makes the system difficult to cheat.
In addition, the gaming machine information, the payout board information, the IC medal lending device information, and the specific information related to authentication are all encrypted with the authentication key. Here, since the in-store server 2 does not have an authentication key, it is not possible to perform an illegal acquisition or falsification of information related to the authentication in the store.

  Further, the first gaming machine authentication key A for encrypting the gaming machine information, the second gaming machine authentication key A ′ for decrypting, and the first sub for performing encryption between the main board 10 and the sub board 11. Substrate communication key E, second sub-board communication key E ′ for decrypting, first medal authentication key H for encrypting lending information and specific information of IC medal 7, and second medal authentication key for decrypting For H ′, the key data is changed at a predetermined opportunity. If one of the paired keys is illegally acquired and the key data is analyzed, the key data will be changed even if the other key is duplicated, so the use of the duplicated key should be prevented. Can do. That is, for a key for exchanging information important for security, security can be further improved by making the key data changeable.

  By the way, the key data changing process in the first gaming machine authentication key A, the first sub board communication key E, and the second medal authentication key H ′, the second gaming machine authentication key A ′, and the second sub board communication key E ′. The key data changing process for the first medal authentication key H is an independent process. The key data changing process of the first gaming machine authentication key A, the first sub board communication key E, and the second medal authentication key H ′ is based on the accumulated operation time of the main board 11 or the payout control board 12 of the gaming machine 1. Executed. On the other hand, since the machine history management server 3 also acquires the accumulated operating time of the gaming machine 1, the key data changing process performed by the machine history management server 3 is almost the same time as the key data changing process in the gaming machine 1. Executed. Even if the change process of the second sub board communication key E ′ is not completed due to a communication error or the like, the second sub board communication key E ′ is added to the key data to be used this time (before the change) next time. Since it also has key data to be used (after change), it is possible to play a game until the next change process. As for the first medal authentication key H, key data to be used next time may be prepared in addition to the key data to be used this time.

The public key cryptosystem is adopted for the key used in the present embodiment, but the common key cryptosystem may be adopted for a key that does not require security as important. Although the security is lower than that of the public key cryptosystem, the encryption and decryption processes can be accelerated.
Further, in the present embodiment, the key data change process is performed every time the operating time of the gaming table 1 passes a certain time. However, the present invention is not limited to this, and a specific day of the week, a predetermined number of games, a big bonus, It may be executed when the number of special games such as AT games, the set value is changed, or the like. Furthermore, the key data changing process may be executed by combining these multiple triggers.

In addition, in the key data changing process, when changing by time information, an RTC (real time clock) may be provided on the substrate, thereby measuring the time information.
Furthermore, in the present embodiment, the key data of the first sub board communication key E is automatically changed in the main board 10 and the key data of the second sub board communication key E ′ corresponding to the first sub board communication key E. Is acquired from the history management server 3 and changed. However, the present invention is not limited to this, and the key data of the second sub board communication key E ′ is automatically changed in the sub board 11, and the key data of the first sub board communication key E corresponding to the second sub board communication key E ′ is changed. It may be acquired from the history management server 3 and changed.

In the machine history server 3 of the present embodiment, when the gaming machine information is collated and the gaming machine ID etc. match, the key data of the second sub board communication key E ′ is also collated, and the payout board information is collated to store ID, etc. However, the present invention is not limited to this. For example, when the payout board information is collated and the store ID is matched, the key data of the second sub board communication key E ′ is selected, or when the medal lending information is collated and the store ID is matched, the first medal authentication is performed. The key data of the key H can be selected.
In the gaming table 1 of the present embodiment, as an abnormal operation process in the state where the security dongle 13 is not attached to the dongle connecting device 90, the game control in the gaming table 1 is stopped, the production instruction to the sub board 11 is stopped, Processing such as stopping the driving preparation process when the game machine 1 is installed in the store and stopping reading the information of the IC medal 7 is performed. At the same time, a notification that the game control, the production instruction, the driving preparation process, and the reading of the information of the IC medal 7 are stopped, or that the security dongle 13 is not attached to the dongle connecting device 90 is notified. Done. Also, when an authentication error occurs that fails to authenticate the main board 10, when a key transmission error occurs when the sub board 11 cannot receive key data, and when a release error occurs when information cannot be transmitted from the main board 10 to the sub board 11 Each of them is notified of an error.

Not only the above case, but also when the writing of information to the IC medal 7 has failed, or when an error occurs during communication from the gaming machine 1 to the in-store server 2, an error can be notified. Further, the in-store server 2 may perform error notification. Specifically, the main board 10 or the payout control board 12 may transmit error information to the in-store server 2 at the time of an abnormality or an error, and the in-store server 2 that has received the error information may perform error notification. it can.
The in-store server 2 receives the game history information and medal content information of all the gaming tables 1, so that it can monitor the store sales state and the behavior of each gaming table 1. Further, the in-store server 2 can total sales of the gaming machine 1 and the like from the acquired game history information and medal content information, and can transmit the total information to the machine history management server 3. As a result, the machine history management server 3 can monitor the store sales state and the history of each gaming machine 1.

  Depending on the store, there may be a plurality of medal lending rates for playing on the gaming table 1, but in this embodiment, the in-store server 2 manages the gaming table 1 that can be played for each lending rate. It is possible. Specifically, the in-store server 2 stores the lending rate corresponding to each gaming machine 1 as management information and transmits the management information to the IC medal lending device 4. The IC medal lending device 4 writes the gaming machine data of the gaming machine 1 having the same lending rate to the IC medal 7 based on the management information. As a result, even if an IC medal 7 having a different loan rate is inserted into the game table 1, the game becomes impossible.

The in-store server 2 may acquire and store information related to events such as door opening / closing, change of setting values, communication errors, etc., from the main board 10 or the payout control board 12 in the gaming machine 1. As a result, it is possible to investigate the cause when an illegal act occurs. The timing for transmitting information related to each event to the in-store server 2 may be performed at the end of store operation, when the gaming machine 1 is turned on, or whenever an event occurs.
The store is provided with a POS 5 for exchanging the medal and prize when a medal that can be played remains in the IC medal 7 at the end of the game. When exchanging the prize, the IC medal 7 is taken out from the game table 1 and inserted into a reading device (not shown) provided in the POS 5 so that the exchange can be easily performed. In this case, the POS 5 can decrypt the lending information encrypted by the payout control board 12 by acquiring the key data of the first medal authentication key H from the in-store server 2 in the same manner as the IC medal lending device 4. it can.

  In this embodiment, an IC medal is employed as a storage medium to be inserted into the game table 1 for playing a game, but an IC card, a magnetic card, or the like may be employed.

1 Amusement stand 2 In-store server
3 History management server 4 IC medal lending device
5 POS 6 Hall computer
7 IC medal 10 Main board
11 Sub board 12 Delivery control board
13 Security dongle 15 Lending switch
16 Bet switch 17 Start switch
18 Stop switch 19 Checkout switch
80 reel unit 80A index sensor
82 Bet lamp 83 Credit display
84 Display 85 Lamp
86 Speaker 87 Medals display area
90 Dongle connection device 91 IC medal connection device
100 main CPU 110 main security chip
120 ROM 130 RAM
200 Sub CPU
220 ROM 230 RAM
300 payout control CPU 310 payout control security chip
320 ROM 330 RAM
A 1st game machine authentication key A '2nd game machine authentication key
B 1st payout board authentication key B '2nd payout board authentication key
C 1st medal lending device authentication key C '2nd medal lending device authentication key
D 1st server communication key D '2nd server communication key
E 1st sub board communication key E '2nd sub board communication key
F 1st main / payout board communication key F '2nd main / payout board communication key
G 1st gaming machine communication key G '2nd gaming machine communication key
H 1st medal authentication key H '2nd medal authentication key
I 1st Sub / Payment Board Communication Key I '2nd Sub / Payment Board Communication Key
J 1st payout board communication key J '2nd payout board communication key
K 1st medal lending device communication key K '2nd medal lending device communication key

Claims (4)

A gaming machine comprising a first control unit and a mounting unit on which a mounting body can be mounted,
In the state where the power is turned on to the game table,
An abnormal operation processing means for executing an abnormal operation processing when the mounting body is not mounted on the mounting portion;
A game table comprising: normal operation processing means for executing normal operation processing when the mounting body is mounted on the mounting portion. The gaming table has a main board that controls the game and a sub board that controls the production,
The gaming table according to claim 1, wherein the first control unit is a main board. The gaming table has a main board that controls the game and a sub board that controls the production,
The gaming table according to claim 1, wherein the first control unit is a sub-board. A second control unit for authenticating the first control unit;
4. The game table according to claim 1, wherein the mounting part is formed in the second control part.