JP2018029761A - Game system and game device - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a game system and a game jig capable of preventing fraudulent use and thereby improving security performance.SOLUTION: A game system includes: a game machine developing jig 500 connectable to a P machine 2; and a security dongle 506 connectable to the game machine developing jig 500 and holding authentication information for making the P machine 2 into an operable state. The game machine developing jig 500 uses the authentication information held in the security dongle 506 by being connected to the P machine 2 and by additional connection of the security dongle 506, and thereby making the P machine 2 into an operable state. The security dongle 506 becomes invalid after an elapse of a prescribed period.SELECTED DRAWING: Figure 17

Description

  The present invention relates to a gaming device connected to a gaming machine in which a game is performed, and a gaming system including the gaming device.

  There is a gaming machine that can be played by connecting to a gaming device and obtaining authentication of a host device. However, at the time of development of the gaming machine, every time the operation of the gaming machine is confirmed, it is necessary to obtain authentication by connecting to the host device via the gaming device, and the operation is complicated. Therefore, Patent Document 1 provides a gaming device (game jig, development unit) that can confirm the operation of the gaming machine without being connected to a host device.

JP-A-2015-134104

  However, the development unit described in Patent Document 1 can be used without distinction between mass-produced game machines and non-mass-produced game machines. Therefore, it was possible to operate the gaming machine without connecting the mass-produced gaming machine to the development unit and obtaining the authentication of the host device. When it is possible to operate a mass-produced game machine without obtaining the higher-level device authentication, the development unit is illegally taken out and connected to the mass-produced game machine. Could be done. That is, the gaming jig such as the development unit described in Patent Document 1 has a problem in that it cannot prevent unauthorized use and security cannot be sufficiently secured.

  The present invention has been conceived in view of such circumstances, and an object of the present invention is to provide a gaming system and a gaming jig capable of preventing unauthorized use and improving security.

(1) The present invention provides a connection device (for example, a gaming machine development jig 500) that can be connected to a gaming machine (for example, a sealed circulation pachinko machine (P unit 2), a medal-free slot machine (S unit 2S), etc.). )When,
An authentication device (for example, security dongle 506) that is connectable to the connection device and holds authentication information for making the gaming machine operable;
The connection device is connected to the gaming machine, and the authentication device is connected to make the gaming machine operable by using the authentication information held by the authentication device (for example, a mass-produced product) In the process for confirming the operation of the P base 2, in addition to the first specific process, a mutual authentication process using a board authentication key as shown in FIG. 13 between the SC board 502 and the P base 2),
The authentication information is invalidated after the elapse of a predetermined period (for example, the security dongle 506 invalidates the held authentication ID (authentication information) when the validity period expires).

  According to said structure, since authentication information becomes invalid after progress for a predetermined period, unauthorized use of an authentication apparatus can be prevented and security can be improved.

(2) Another configuration of the present invention provides authentication information for enabling an operation state of a gaming machine (for example, a sealed circulation pachinko machine (P 2), a medal-free slot machine (S 2S), etc.). A gaming device (for example, security dongle 506) having information holding means for holding,
The gaming apparatus operates the gaming machine using the authentication information held by the information holding means when connected to the gaming machine via a connection device (for example, a gaming machine development jig 500). (For example, in the process for confirming the operation of the mass-produced P base 2, in addition to the first specific process, a board authentication key as shown in FIG. 13 is provided between the SC board 502 and the P base 2. Mutual authentication processing using
The authentication information is invalidated after the elapse of a predetermined period (for example, the security dongle 506 invalidates the held authentication ID (authentication information) when the validity period expires).

  According to said structure, since authentication information becomes invalid after progress for a predetermined period, unauthorized use of an authentication apparatus can be prevented and security can be improved.

  (3) In the above (1), the authentication device invalidates the authentication information in accordance with the time keeping means (for example, the timer unit 506a) and the time keeping means that the predetermined period has passed. (For example, when the cumulative activation time reaches the valid period, the timer unit 506a invalidates the held authentication ID (authentication information)).

  According to said structure, even if it is a case where an authentication apparatus leaks outside, authentication information can be invalidated and security can be improved.

  (4) In the above (1) and (3), the authentication device can be connected to an authentication terminal (for example, an authentication PC 590), and is connected to the authentication terminal in an updated server (for example, the management server 600). ) To update the authentication information (for example, the security dongle 506 overwrites the authentication ID (authentication information) and the expiration date information downloaded from the management server 600 by the authentication PC 590 to create a new one. (Updated to authentication ID (authentication information) and expiration date information).

  According to the above configuration, since it is necessary to always connect to the update server when updating the authentication information, the location of the authentication device can be confirmed, and the security can be improved.

  (5) In the above (1), (3), (4), the predetermined period of the authentication information can be set from a plurality of periods (for example, the length of the expiration date to be updated is set at random) Publish information).

  According to the above configuration, since the predetermined period of the authentication information is not constant, even if the authentication device leaks to the outside, it cannot be guaranteed that the gaming machine will be operated for a certain period of time, which hinders the operation of an unauthorized authentication device. Can be given.

  (6) In the above (1), (3) to (5), the authentication information further includes notification means that can notify in advance the end of the predetermined period of the authentication information (for example, the authentication PC 590 includes the security dongle 506 connected). The remaining effective period (the end of the predetermined period) is displayed and notified to the user by voice or the like).

  According to said structure, since the end of a predetermined period is alert | reported previously, the update of authentication information can be prompted within a predetermined period.

(7) In the above (1), (3) to (6), the connection device includes:
First connection means (for example, plaintext connection connector 505) connectable to the gaming machine other than the mass-produced product;
Second connection means (for example, encryption connection connector 504) connectable with the mass-produced game machine;
When the gaming machine other than the mass-produced product is connected to the first connection means, the first specific processing means (for example, other than the mass-produced product, which can execute the first specifying process for confirming the operation of the gaming machine) In the process for confirming the operation of the P stand 2, the game points are added / subtracted so that the game on the P stand 2 is possible, and the counting process for counting the acquired game points as a score),
When the gaming machine as a mass-produced product is connected to the second connecting means, second identifying processing means (for example, P units of mass-produced product) capable of executing a second identifying process for confirming the operation of the gaming machine. In addition to the first specific process, a mutual authentication process using a board authentication key as shown in FIG. 13 is provided between the SC board 502 and the P base 2 in addition to the first specific process. ,
The authentication device (eg, security dongle 506) is connectable to the first connection means,
The second identification processing unit is authenticated with the authentication device connected to the first connection unit (for example, the gaming machine development jig 500 and the security dongle 506 record the authentication ID, and the authentication ID The second specifying process can be executed after the process of performing mutual authentication by transmitting and receiving the message (for example, the authentication determination process with the P base 2 is started when the dongle authentication is determined to be OK). To do).

  According to the above configuration, since the second specifying process can be executed only after the authentication device is connected to the first connection means and authentication is performed, the gaming jig is used illegally. Can be prevented.

It is a front view which shows a card unit and a pachinko gaming machine. It is a perspective view which shows the state which open | released the glass door and front frame of the pachinko game machine. It is a figure which shows a mode before the game board is attached to a front frame, and after being attached. It is a block diagram which shows the control circuit used for a card unit and a pachinko game machine. It is explanatory drawing for demonstrating the notification process when abnormality is detected as a result of mutual authentication. It is explanatory drawing for demonstrating the various data memorize | stored in the card unit side and the pachinko game machine side, and its transmission / reception. It is explanatory drawing explaining the outline of the command and response transmitted / received between a card unit and a pachinko gaming machine. It is a figure which shows an example of a process with the card unit and the pachinko game machine at the time of power activation. It is a figure for demonstrating the encryption key used for communication between a key management server and communication control IC. It is explanatory drawing explaining the outline of the command and response transmitted / received between CU control part 323 and security chip (SC) 325b. It is explanatory drawing explaining the outline of the command and response transmitted / received between CU control part 323 and security chip (SC) 325b. It is a figure for demonstrating the starting process at the time of power activation of CU control part 323, and hall installation. It is a figure for demonstrating the process of power activation and normal start-up of the CU control part. It is a figure for demonstrating the process at the time of the power activation of CU control part 323, and factory shipment. It is a block diagram for demonstrating the structure of a game machine development jig. It is a flowchart for demonstrating the process for making P production | game of mass-produced goods a game with a game machine development jig. It is a flowchart for demonstrating the process in a security dongle. It is a flowchart for demonstrating the process performed while connecting the P units of mass-produced goods to a game machine development jig. It is a sequence diagram for demonstrating the authentication determination processed between a security dongle, a game machine development jig, and P units. It is the schematic for demonstrating the process which updates the authentication ID (authentication information) currently hold | maintained with the security dongle 506. FIG. It is the schematic for demonstrating the front surface of a game machine development jig. It is the schematic for demonstrating the back surface of a game machine development jig. It is a block diagram at the time of connecting P machines other than a mass-produced product to a game machine development jig. It is a block diagram at the time of connecting P units of mass-produced goods to a game machine development jig. It is the schematic for demonstrating the structure of the game machine development jig | tool at the time of operate | moving in jig | tool independent operation mode. It is the schematic for demonstrating the system for collecting the communication log transmitted from several game machine development jig | tool and providing it to a user.

Embodiments according to the present invention will be described below with reference to the drawings.
<Configuration of pachinko machines>
First, the configuration of the pachinko gaming machine according to the present embodiment will be described with reference to FIG. A plurality of game islands (not shown) arranged in the game hall (hall) may be abbreviated as an enclosed circulation pachinko game machine (hereinafter referred to as a game machine, a pachinko machine, or a P machine) as an example of a game machine. ) 2 is attached. A card unit (which may be abbreviated as CU hereinafter) 3 as an example of a gaming device is installed in a one-to-one correspondence with the P table 2 at a side position on the predetermined side of the P table 2. Yes. Note that the card unit is taken as an example of the gaming device according to the present embodiment, but the present invention is not limited to this, but it is connected to the P stand 2 to collect game information such as jackpots and abnormality notifications, and the number of winnings. It may be a calling lamp device or the like.

  The P stand 2 encloses a pachinko ball (game ball) as an example of a game medium inside, and the player operates the hitting operation handle 25 to drive the launch motor 18 (see FIG. 4). It is configured so that a game can be played by hitting balls one by one into the game area 27 in front of the game board 26. Specifically, a touch sensor is provided around the batting operation handle 25, and the player's hand touches the touch sensor while the player is operating the batting operation handle 25, and the player's hand. Is detected by the touch sensor, and the firing motor 18 is driven. In this state, the hitting momentum is adjusted in accordance with the amount of rotation of the hitting operation handle 25 by the player, and the ball is shot into the game area 27.

  The firing strength of the pachinko ball (hereinafter simply referred to as the firing strength T) can be adjusted in accordance with the amount of rotation of the hitting ball operating handle 25 (hereinafter also simply referred to as the handle operating amount), and the handle operating amount is increased. The firing intensity T increases accordingly. Therefore, the player can adjust the firing strength T so that the pachinko ball passes through the region he / she aims by adjusting the handle operation amount.

  The P stand 2 shown in FIG. 1 is a so-called first type pachinko gaming machine, and a variable display device (also referred to as a special symbol) 278 is provided in the center of the game area 27. In addition, the game area 27 is provided with a plurality of types of winning holes through which the inserted pachinko balls can be won. In the game area 27 shown in FIG. 1, one large winning opening (variable winning ball apparatus) 271, three normal winning holes 272, 273, 274 and three start winning holes 275, 276, 277 are shown. ing. In particular, the start winning opening 276 is configured by an electric tulip that can be changed between a first state (for example, an open state) that is advantageous to the player and a second state (for example, a closed state) that is disadvantageous to the player. .

  The variable display device 278 includes a variable display unit capable of variably displaying a plurality of types of identification information (symbols), and based on the detection signals of the start winning balls won in each start winning opening 275, 276, 277. Start variable display of multiple types of identification information. When the display result of the variable display device is a combination of specific identification information (for example, a glance), a big hit state is established and the big prize opening 271 is opened.

  Further, the display result of the variable display device 278 becomes a combination of predetermined special identification information (for example, a combination of probability variation symbols such as 777) out of a combination of jackpot symbols (a slotted pattern), so that the probability variation big hit state And a probability variation state (probability variation state) in which the probability of occurrence of the jackpot is improved after the end of the jackpot state.

  Pachinko balls that have been driven into the game area 27 are won in any of the winning openings or are collected in the out opening 154 without winning. The pachinko balls won in any one of the winning openings and the pachinko balls collected in the out opening 154 are returned again to the hitting ball launch position through the collection path in the P stand 2. Then, when the player operates the hitting operation handle 25, the pachinko ball at the hitting position is again shot into the game area 27.

  The P base 2 is fitted with a connection surface 54 a provided on the front surface of the P base 2 by installing the CU 3 in a lateral position to extend the indicator 54 extending from the CU 3. Therefore, a display 54 is provided at a position below the game area 27 in the P table 2. The display 54 is composed of a liquid crystal display device, and displays various effect images linked to the display of the points, the remaining card amount, or the variable display device 278 to the player. The display 54 is fitted to the P base 2 by connecting a connection terminal (not shown) provided on the back surface to a connection terminal 54 b provided on the connection surface 54 a of the P base 2. Thus, if it is the structure which fits the indicator 54 of CU3 to the connection surface 54a of P stand 2, CU3 and P stand 2 can be connected more strongly and fraud can be prevented. Furthermore, fraud can be further prevented by preventing the connection and locking with the display 54 from being released unless the glass door 6 or the lower door provided with the hitting operation handle 25 is opened. The display 54 is not limited to the structure formed integrally with the CU 3 and fitted to the connection surface 54a of the P base 2 as shown in FIG. 1, but is formed independently from the CU 3 and is formed on the front surface of the P base 2. The structure which can be attached may be sufficient.

  In addition, a game ball number display for displaying the number of game balls is provided above the connection surface 54a of the P stand 2. The game ball number display 29 is composed of a 7-segment LED display, and is controlled by the payout controller 171. The game ball number display 29 displays the number of game balls, the error number of the error that has occurred, and the like. The game ball number display 29 is not limited to a 7-segment LED display, and may be a liquid crystal display, an organic EL display, or other display.

  Furthermore, a counting button 28 for counting the game balls to the holding balls is provided at the left side of the game ball number display 29 on the P stand 2. In the present embodiment, the counting operation is repeatedly executed according to the time for which the counting button 28 is kept pressed. It should be noted that, regardless of the pressing duration time, if the button is pressed once, a predetermined number (for example, 100 balls) may be counted from the gaming ball to the holding ball, or the counting button 28 is pressed once. All of the game balls currently owned by the player may be counted regardless of the pressing time (regardless of whether the button is pressed for a long time). Further, the counting speed is further improved when a card return operation is performed, and a smooth card return process is realized.

  Thus, since the counting button 28 is provided on the P table 2 side, the operability of the player sitting facing the P table 2 can be improved as compared with the case where the counting button 28 is provided on the CU 3 side. . In addition, the P platform 2 is provided with speakers 270 for outputting music data to be reproduced in accordance with the effects displayed on the variable display device 278 at the upper right position and the upper left position of the game area 27. In addition, the position and the number of speakers are not limited to the configuration shown in FIG. 1, and the position and the number may be changed as necessary.

  The P stand 2 according to the present embodiment can be divided into a game board 26 and another front frame (game machine frame) 5. In particular, the game board 26 is different for each model of pachinko gaming machine developed by each company, while the front frame 5 is a common common frame regardless of the model. For this reason, it is sufficient for the game store to replace only the game board 26 when replacing a new stand.

<Configuration of card unit>
Next, the configuration of the CU 3 according to the present embodiment will be described with reference to FIG. This CU3 is a visitor card (also referred to as a general card) having a prepaid function, which is a game recording medium issued to general players who have not registered as a member, or a member player who has registered as a member in the playground. A membership card, which is a game recording medium issued to, is accepted. Visitor cards and membership cards are composed of IC cards.

  The CU 3 that accepts these cards has a function of converting the game value (for example, the remaining card amount, the number of balls, or the number of balls, etc.) owned by the player specified by the record information of the card into “game ball data”. . In the P stand 2, a ball game corresponding to the number of balls specified by the data of the game balls is made possible. That is, “game ball data” is data indicating the number of remaining balls that can be fired. In the following description, “game ball data” is simply referred to as “game ball” in the same manner as a stored ball and a holding ball.

  On the front side of the CU 3, there are provided a bill insertion slot 302 for inserting bills, a card insertion / discharge port 309 for inserting member cards and visitor cards, and the like. A membership card or a visitor card inserted into the card insertion / discharge port 309 is received by a card reader / writer (not shown), and information recorded on the card is read.

  On the front side of the CU 3, when a member card is received, the display unit 312 is identified by a member card ID (also simply referred to as a card ID or C-ID) recorded on the member card and a member card ID. A replay button 319 for performing a replay game using the number of stored balls is provided.

  The display 312 displays the prepaid balance recorded on the inserted game recording medium (card) (also referred to as the card balance or simply the balance), but can display the number of game balls and various other information. In addition, the surface is configured with a transparent touch panel, and various operations can be input by touching various display items displayed on the display unit of the display 312 with a finger.

  When the replay button 319 is operated, if the number of possessed balls acquired by the player is recorded on the inserted card, a part of the number of possessed balls is withdrawn and converted into a game ball, and the converted game ball is converted into a converted game ball. Based on this, it is possible to play a game with the P stand 2. On the other hand, if the inserted card is a membership card and the number of possession balls is not recorded and the storage ball is recorded in the hall management computer, etc., a part of the storage ball is withdrawn and becomes a game ball. It is converted and the game by P stand 2 becomes possible. That is, when both the stored ball and the holding ball are stored in association with the inserted card, the holding ball is withdrawn preferentially. Separately from the replay button 319, a dedicated ball payout button for withdrawing the holding ball may be provided, and the replay button 319 may be a button dedicated to the withdrawal of the stored ball.

  Here, the “storing ball” is a ball deposited in the hall with a ball acquired before the previous day, and becomes a game ball by paying out the saving ball. The storage ball is a game medium deposited in a game hall, and is generally managed by a hall management computer or other management computer installed in the game hall.

  “Mochitama” is a ball acquired on the day and becomes a game ball by paying out the possessionball. The number of possessed balls is the number of balls that the player possesses as a result of the player playing the game with the gaming machine on the card, and the number of balls that have not yet been deposited in the game hall. That is. Generally, the number of balls that the player has acquired on the day of the game hall is called “mochidama”, and the number of balls that the player has acquired before the previous day and that has been deposited in the amusement hall is “save ball”. Say.

  A “game ball” is a ball that can be fired by a gaming machine. As described above, the data on the number of game balls is generated in exchange for withdrawing the remaining amount of the prepaid card, holding balls, or storing balls.

  Note that the number of possessed balls may be managed by a management device for managing the number of possessed balls set in the game hall. In short, the difference between “sold balls” and “mochidama” is the number of balls that have been deposited in the amusement hall as a result of a storage operation for depositing in the amusement hall, or is still deposited in the amusement hall. It is a point whether it is the number of balls of the stage which is not.

  In this embodiment, the stored ball data is not recorded directly on the membership card, but stored in association with the membership card number on a server installed in a game hall such as a hall management computer, and the corresponding storage ball is searched based on the membership card number. It is configured to be able to. On the other hand, Mochitama records directly on the card. However, the present invention is not limited to this, and both may be stored in the hall server 801 in association with the card number. In the case of a visitor card, Mochitama is recorded directly on the visitor card. However, the present invention is not limited to this, and the ball may be stored in the hall server 801 in association with the card number. When the hall server 801 stores the card number in association with the card number, data that can specify the time stored in the hall server 801 may be written on the card (member card, visitor card) and discharged. Also, the prepaid balance is written directly on a card (member card, visitor card) and discharged.

  Note that the timing for storing the holding balls in a card (member card, visitor card) or hall server is stored at regular intervals every time the counting button 28 is operated and counting processing is performed, for example. It is conceivable that the timing is such that it is stored in a lump or when the card is returned.

  Also, when the player finishes the game and returns the card from CU3, the possession ball stored in CU3 is temporarily stored in the hall server 801 as a stored ball, and the day when the player receives the card return When the card is inserted into the same or another CU3 again on the same day, only the possession balls for the day that are once stored as accumulated balls are stored again in the CU3, and the game balls are added within the range of the possession balls. You may be able to do it.

  The banknote inserted into the banknote insertion slot 302 is taken in by a currency discriminator (not shown), and its authenticity and banknote type are identified.

  An IR (Infrared) photosensitive unit (also referred to as an IR light receiving unit) 320, a ball lending button (also referred to as a lending button) 321, and a card return button 322 are further provided on the front side of the CU 3. The IR photosensitive unit 320 is an IR photosensitive unit 320 that receives an infrared signal from a remote controller (not shown) possessed by an attendant at a game arcade, converts the infrared signal into an electronic signal, and outputs the electronic signal. The ball lending button 321 is a button for performing an operation (conversion operation to a game ball) for withdrawing the remaining amount recorded on the inserted card and using it for a game by the P stand 2. The card return button 322 is operated when the player ends the game, and the number of game balls determined at the end of the game on the inserted card (the number of balls at the time of card insertion−the number of conversions to game balls + count) This is an operation button for memorizing and discharging the number of possessed balls counted by the operation.

  Next, referring to FIG. 2, the P base 2 is opened and closed with respect to the frame-like outer frame 4 by a front frame (hereinafter also referred to as a cell) 5 and a glass door 6 with the left side edge as a swing center. It is provided as possible.

  A pair of upper and lower engaging protrusions 6a and 6b are provided in the vicinity of the edge of the front frame 5 opposite to the center of swing (the free end side). The engagement protrusions 6a and 6b are pressed downward by a spring (not shown). On the other hand, engagement receiving pieces 7a and 7b are provided at positions facing the engagement protrusions 6a and 6b of the outer frame 4. When the front frame 5 in the open state is pressed against the outer frame 4, the engagement protrusions 6a and 6b get over the engagement receiving pieces 7a and 7b. Move and become locked.

  Then, a game attendant inserts a key into the keyhole 10 shown in FIG. 1 and performs an unlocking operation (for example, clockwise rotation), thereby a pair of upper and lower engaging protrusions 6a against the biasing force of the spring, 6b is pushed upward, and as a result, the engagement projections 6a and 6b are disengaged from the engagement receiving pieces 7a and 7b to be unlocked, and the front frame 5 is released.

  Further, the front frame 5 is also provided with an engagement projection 8 for the glass door 6, and an engagement hole 9 is provided in the glass door 6 portion facing the engagement projection 8. The engaging protrusion 8 is pressed downward by a spring (not shown), and the engaging protrusion 8 is pushed up by the lower edge portion of the engaging hole 9 by pressing the opened glass door 6 against the front frame 5. As a result of getting over, the engagement protrusion 8 is pushed down by the biasing force of the spring, and the engagement protrusion 8 and the engagement hole 9 are engaged with each other to be locked. In this state, the game hall clerk inserts the key into the key hole 10 shown in FIG. 1 and performs an unlocking operation (for example, counterclockwise rotation), so that the engaging protrusion 8 is pulled up against the spring biasing force. Then, the engagement between the engagement protrusion 8 and the engagement hole 9 is released, and the lock door is released, and the glass door 6 is opened.

  A front frame open detection switch 13 is provided at a position in contact with the outer frame 4 in a lower part of the front frame 5 and it is detected that the front frame 5 is opened. Further, a glass door open detection switch 12 is provided in a contact portion with the glass door 6 in the upper part of the front frame 5, and the glass door open detection switch 12 detects that the glass door 6 has been opened.

  The number of opening times of the glass door opening detection switch 12 and the front frame opening detection switch 13 is counted by a counter (not shown). The counting counter is equipped with a CPU, ROM, RAM, etc., and can be operated by a backup power source even when the power supply of the P stand 2 is interrupted. The number of times the glass door 6 and the front frame 5 are detected to be opened even when the power source is turned off at night or the like. And the count value can be transmitted to the payout control unit 171. Here, the backup power source is, for example, a capacitor or a storage battery provided in the P base 2.

  A main control board 16 is provided on the back surface of the game board 26 (the surface opposite to the surface facing the glass door 6). Since the back surface of the outer frame 4 is closed, the main control board 16 becomes detachable from the game board 26 by first opening the front frame 5 and removing the game board 26 from the front frame 5. That is, in order to remove the main control board 16 from the game board 26 or replace the semiconductor chip provided on the main control board 16, it is necessary to open the front frame 5. The work can be detected without fail. Therefore, if the main control board 16 is illegally removed from the game board 26 or the semiconductor chip provided on the main control board 16 is illegally exchanged, the front frame opening detection switch 13 can always detect.

  Further, a payout control board 17 is provided on the back surface of the front frame 5. The payout control board 17 also needs to be removed from the back surface of the front frame 5 after first opening the front frame 5. Therefore, if the dispensing control board 17 is illegally removed from the back surface of the front frame 5 or the semiconductor chip provided on the dispensing control board 17 is illegally replaced, the front frame opening detection switch 13 can always detect.

  Next, the structure which installs the game board 26 in the front frame 5 is demonstrated. FIG. 3 is a view showing the game board 26 before and after being attached to the front frame 5. As shown in FIG. 3, attachment mechanisms 34a and 34b are provided on the back surface of the front frame 5 so as to be openable and closable around hinges 35a and 35b, respectively. The attachment mechanisms 34a and 34b have a U-shaped shape and have a bottom having a width corresponding to the game board 26. By pushing the game board 26 into the front frame 5 in the direction of the arrow in FIG. 3B, the game board 26 is fixed by the attachment mechanisms 34a and 34b as shown in FIG. 3A. When the game board 26 is fixed by the attachment mechanisms 34a and 34b, the convex drawer connector 32 provided on the game board 26 side is coupled to the concave drawer connector 33 provided on the front frame 5 side. Here, the convex drawer connector 32 and the concave drawer connector 33 are floating connectors having flexibility with respect to displacement.

<Configuration of card unit and pachinko machine>
FIG. 4 is a block diagram showing the configuration of the CU 3 and the P stand 2. With reference to FIG. 4, the outline of the control circuit of CU3 and P stand 2 is demonstrated.

  The CU 3 is provided with a CU control unit 323 composed of a microcomputer or the like. The CU control unit 323 is a main control function unit of the CU 3, and includes a CPU (Central Processing Unit) as a control center, a ROM (Read Only Memory) that stores programs and control data for operating the CPU, A RAM (Random Access Memory) functioning as a work area for the CPU, an input / output interface for maintaining signal consistency with peripheral devices, and the like are provided.

  The CU control unit 323 is provided with an external communication unit (not shown) for communicating with a hall management computer and a hall server 801 (see FIG. 5) for security management. Connected to the CU control unit 323 is a security board (SC board) 325 for communicating with the payout control board 17 of the P table 2 while ensuring security. The security board 325 is a security monitoring function unit of the CU3. Note that the CU control unit 323 may be provided on the security board 325, or the CU control unit 323 may be provided on a board different from the security board 325. The CU 3 is provided with a connecting portion (not shown) to the P stand 2 side, and the P stand 2 is provided with a connecting portion (not shown) to the CU 3 side. These connection parts are constituted by connectors, for example. The connection between the CU 3 and the P base 2 will be described with respect to an embodiment in which wiring is electrically connected via a connector. However, necessary information (for example, identification information or addition) between the CU 3 and the P base 2 is described. As long as the information on the number of balls is communicable, any connection method such as wired or wireless may be used.

  The security board 325 on the CU 3 side and the payout control board 17 on the P stand 2 side are communicably connected via this connector and connection wiring. The security board 325 is provided with a communication control IC 325a for controlling communication between the security board 325 and the payout control board 17, and a security chip (SC) 325b for monitoring the security of the P base 2. The SC 325b further includes a fraud detection unit 1325. The fraud detection unit 1325 performs fraud detection by monitoring the game ball addition request information notified from the CU control unit 323 to the P-unit 2, and manages the key when fraud is detected. The server 800 (see FIG. 5) is notified. Further, the setting value (constant) for fraud detection is notified from the key management server 800 as board control information.

  To the CU control unit 323, the authenticity and type of the banknote are identified by the above-described money identifier, and the identification result signal is input. In addition, when the IR photosensitive unit 320 receives infrared rays emitted from a remote controller owned by an attendant at the game hall, a light reception signal is input to the CU control unit 323. The card reader / writer reads the information recorded in the inserted card into the CU control unit 323, and the read information is input to the CU control unit 323. The CU control unit 323 writes the information to the card reader / writer. When data is transmitted, the card reader / writer writes the data to the inserted card. The card recording information includes a card ID. The CU control unit 323 stores the card ID read by the card reader / writer until the game ends.

  The CU control unit 323 manages and stores the player's possession balls when the player is playing. Data such as the remaining amount or the number of game balls is output from the CU control unit 323 to the display control unit 350, and is converted into display data by the display control unit 350. The display data converted by the display control unit 350 is transmitted to the display 312 provided on the front face of the CU 3 and the display 54 arranged on the front face of the P stand 2 as shown in FIG. The display data transmitted to the display 54 is first input to the relay board 14. The display 312 and the display 54 display images corresponding to the display data. Further, when the player operates a touch panel provided on the surface of the display 312, the operation signal is input to the CU control unit 323 via the display control unit 350. When the player operates the ball lending button 321, the operation signal is input to the CU control unit 323. The ball lending button 321 is not limited to the configuration provided in the CU 3, and may be configured so as to be provided in the P platform 2 and input an operation signal to the CU control unit 323. When the player operates the replay button 319, the operation signal is input to the CU control unit 323. When the player operates the card return button 322, the operation signal is input to the CU control unit 323.

  The P base 2 has a main control board 16 that controls the progress of the game of the P base 2, a payout control board 17 that manages and stores game balls, and a drive control of the launch motor 18 based on commands from the payout control board 17 A launch control board 31, a variable display device 278, and an effect control board 15 that controls the display of the variable display device 278 based on a command transmitted from the main control board 16.

  The main control board 16 and the effect control board 15 are provided on the game board 26. The main control board 16 is equipped with a game control microcomputer as the main control unit 161. The main control unit 161 is a main control function unit of the gaming machine. A microcomputer for gaming machine control includes a CPU (Central Processing Unit) as a control center, a ROM (Read Only Memory) that stores programs and control data for operating the CPU, and a RAM (RAM that functions as a work area for the CPU). Random Access Memory) and an input / output interface for maintaining signal consistency with peripheral devices. The main controller 161 is connected to a winning sensor 162 and a radio wave sensor 163 provided on the game board 26.

  When a ball wins each start winning opening 275, 276, 277, the main control unit 161 draws a random number for determining a big hit (or further including a small hit) / off and stores the random number. This is called reserved storage. The maximum value of the number of reserved memories is “4”, for example. When the variable display device 278 is ready to start a new variable display, the main control unit 161 digests one reserved memory, makes a jackpot determination based on the reserved memory, and derives the display result from the variable start. The variable display time to reach is determined from multiple types. Further, when the big hit is determined, it is also determined whether or not the probability fluctuation is caused. The main control unit 161 transmits the result of the jackpot determination (including whether or not to change the probability) and information regarding the variable display time to the effect control unit 151 mounted on the effect control board 15 as commands.

  The variable display command transmitted from the main control unit 161 to the effect control unit 151 specifies a variable start command indicating the start of variable display, a display result command indicating the result of variable display (big hit / out), and a variable display pattern. A variable display time command that is possible, a variable stop command that indicates the timing for deriving and displaying a variable display result, and the like are included. Furthermore, the commands transmitted from the main control unit 161 to the production control unit 151 include a command that can identify the progress status of the big hit during the big hit, a command that indicates the occurrence of a new reserved memory, and the occurrence of an error in the gaming state. There are commands to show.

  The effect control unit 151 determines the variable display content of the variable display device 278 based on these commands transmitted from the main control unit 161. For example, the effect control unit 151 specifies a variable display result and a variable display time based on a command transmitted from the main control unit 161, determines a stop symbol, and a variable display pattern (reach presence / absence, reach type). In addition, the effect pattern of the notice effect related to the big hit or reach is determined. The effect control unit 151 controls display of the variable display device 278 according to the determined variable display content.

  The effect control board 15 is also connected to the display 54 via the relay board 14 of the CU3. The effect control unit 151 transmits a display control signal for variable display or the like to the variable display device 278 and transmits a display control signal for performing display in conjunction with the display of the variable display device 278 to the display unit 54. Is possible. The relay board 14 and the display 54 may be provided on the P platform 2 side. In this case, the effect control board 15 on the P table 2 side is directly connected to the relay board 14 on the P table 2 side without going through the CU 3.

  The payout control board 17 is provided on the front frame 5. The payout control board 17 is equipped with a payout control microcomputer which is a payout control unit 171. The payout control unit 171 is a payout control function unit of the gaming machine. The payout control microcomputer includes a CPU (Central Processing Unit) as a control center, a ROM (Read Only Memory) storing a program for operating the CPU and control data, and a RAM (RAM) functioning as a work area of the CPU. Random Access Memory) and an input / output interface for maintaining signal consistency with peripheral devices.

  Further, a firing ball detection switch 903, an out ball detection switch 701, a foul ball detection switch 33A, a counting button 28, and a radio wave sensor 173 are provided on the payout control board 17 in an electrically connected state. The radio wave sensor 173 is for detecting an illegal act of illegally transmitting radio waves and mainly turning on the ball raising switch (upper) 41a. A detection signal of the radio wave sensor 173 is input to the payout control unit 171 via an input port (not shown) of the payout control board 17. The ball raising switch (upper) 41a detects the launch of a game ball by changing from on to off, and based on the detection, the payout control unit 171 subtracts “1” from the number of game balls.

  Accordingly, when the ball raising switch (upper) 41a is always turned on by an improper radio wave, the number of game balls is not subtracted no matter how many balls are fired. Such radio fraud is detected by the radio wave sensor 173.

  From main control board 16 to payout control board 17, main control chip ID, winning opening information, round information, connection confirmation signal, winning detection signal, starting winning opening winning information, error information, number of symbols determined, jackpot information, manufacturer specific Jackpot information is sent.

  The main control chip ID (also referred to as main chip ID) is a chip ID recorded on the main control board 16 of the P base 2 and is transmitted to the payout control board 17 when the power of the P base 2 is turned on. Information. The winning opening information is information including the type of winning opening (start winning opening, ordinary winning opening, large winning opening) and the number of winning balls (the number of balls to be paid out when a game ball enters the winning opening). This is transmitted to the payout control board 17 when the power of the table 2 is turned on. The round information is information on the number of rounds when a big hit is made, and is transmitted to the payout control board 17 when the power of the P unit 2 is turned on.

  The connection confirmation signal is a signal for confirming that the main control board 16 and the payout control board 17 are connected, and a signal of a predetermined voltage is constantly supplied from the main control board 16 to the payout control board 17. The payout control board 17 is configured to control the operation on the condition that the payout control board 17 receives the predetermined voltage signal. The winning detection signal is a detection signal of a pachinko ball that has won a winning opening other than the starting winning opening. Upon receiving this detection signal, the payout control board 17 performs control to add the number of balls to be given to one winning ball to the number of game balls and the number of added balls.

  The start winning award winning information is information indicating that a pachinko ball has won a prize in any of the starting winning awards. The error information is information for notifying the payout control board 17 when an error occurs while the main control board 16 is performing game control.

  The symbol determination number of times is information on symbols determined as display results of the variable display device for winnings at each start winning opening.

  The jackpot information is information indicating that a jackpot has occurred. The breakdown includes common jackpot information indicating a jackpot common to each manufacturer and manufacturer-specific jackpot information indicating a manufacturer-specific jackpot. The common jackpot information is a jackpot commonly used by each gaming machine manufacturer, such as 15 round jackpots, and includes probability variation information when a probability change occurs with the jackpot. When the time-short state (control state for shortening the variable display time of the variable display device) occurs, the time-shortage information is included. The manufacturer-specific big hit is a big hit state that is adopted only by a certain gaming machine manufacturer, such as sudden probability change (surprise).

  A health check command and a winning ball number acceptance command are transmitted from the payout control board 17 to the main control board 16. The health check command is a command for checking whether or not the main control board 16 is operating normally. The prize ball number acceptance command is a command indicating that the additional number of balls has been accepted.

  An out ball detection signal is input from the out ball detection switch 701 to the payout control board 17. The payout control board 17 to which this out ball detection signal is input subtracts and updates the number of in-game balls (the number of floating balls floating in the game area 27). In the payout control board 17 to which the foul ball detection signal is input from the foul ball detection switch 33A, the addition ball number and the game ball number are added and updated, and the game ball number is subtracted and updated. A shot detection signal is input from the shot detection switch 903 to the payout control board 17. The payout control board 17 to which the fired ball detection signal is input updates the number of in-game balls by subtraction.

  The security board 325 of the CU 3 and the payout control board 17 of the P stand 2 are electrically connected, and various commands are transmitted from the security board 325 to the payout control board 17. Conversely, various responses are transmitted from the payout control board 17 to the security board 325.

  In addition to the payout control board 17, the front frame 5 is provided with a launch control board 31, a launch motor 18, and a game ball number display 29. The game ball number indicator 29 may be directly attached to the front frame 5, but it may be attached to the front frame 5 like an upper plate or a lower plate provided on the front side of a normal pachinko gaming machine in which balls are paid out. And may be provided in such a manner that it can be rotated. The same applies to the display 54. The payout control unit 171 of the payout control board 17 displays the number of game balls currently owned by the player on the game ball number display 29.

  A firing control signal and a firing permission signal are output from the dispensing control board 17 to the firing control board 31. Upon receiving this, the launch control board 31 outputs a signal for exciting the launch motor 18 of the launcher. Thereby, the pachinko ball is in a state where it is bullet-launched into the game area 27. The firing control board 31 emits a firing motor excitation output to drive the firing motor 18 when a touch ring input signal for detecting that the player is touching the hitting ball operating handle 25 is input.

  The launch intensity sensor 19 detects the launch intensity T of the pachinko ball by the launch motor 18. For example, the firing intensity sensor 19 detects, as the firing intensity T, a value obtained by converting an analog value output from a variable resistor configured to change the electrical resistance value according to the handle operation amount into a digital value. Hereinafter, as an example, it is assumed that the firing strength T varies from 0 (minimum value) to 99 (maximum value) according to the amount of steering operation. The detection result of the launch intensity sensor 19 is output to the payout control board 17 and the CU 3 via the launch control board 31.

  A display 54 and a relay board 14 extending from the CU 3 are provided on the front surface of the P base 2. The display unit 54 receives display data (display control signal) from the display control unit 350 of the CU 3 via the relay board 14. Further, the display unit 54 receives display data (display control signal) from the effect control board 15 via the relay board 14.

  The relay board 14 outputs a display control signal from one of the effect control board 15 and the display control unit 350 to the display 54 and outputs the display control signal to the display 54 based on the display control signal from the effect control board 15 or the display control unit 350. A switching circuit 141 for displaying an image is mounted.

  In the present embodiment, the display 54 extending from the CU 3 provided on the front surface of the P base 2 is configured to be controlled on the CU 3 side, but instead, the display 54 on the P base 2 side is configured. Or a display control board on the P base 2 side so that display control can be performed on the P base 2 side. In this case, the display control board controls display of the display 54 based on a command from the payout control unit 171.

  The RAM clear switch 293 is a switch for erasing gaming machine information and game information stored in the RAM of the P unit 2, and after the P unit enters an error state, the store clerk operates the switch to initialize It becomes possible to return to the state. The RAM clear switch 293 is operated by a store clerk after the card is discharged, for example.

<Pachinko ball circulation route>
Here, with reference to FIG. 1 and FIG. 4, the circulation route of the pachinko ball in the P stand 2 will be outlined.

  When the player operates the hitting operation handle 25, the firing motor 18 is driven. As a result, one pachinko ball that has been supplied to the launch position is shot by the hitting hammer and the pachinko ball is driven into the game area 27.

  The detection of the play of the game ball is detected when the ball raising switch (upper) 41a is changed from on to off. This detection is detected by a port input on the payout control board 17 (see FIG. 4) on which the payout control unit 171 is provided. Based on the detection, the payout control unit 171 subtracts “1” from the number of game balls. To do.

  Out of balls that have been driven into the game area 27, the out balls that have entered the out port 154 (see FIG. 1) flow down the out ball flow path and are detected by an out ball detection switch 701 provided in the middle. . The foul balls flow down through the foul ball return path and are detected by a foul ball detection switch 33A provided in the middle of the foul balls.

  All winning balls that have won the winning opening and the variable winning ball device are collected on the back of the gaming machine and guided to the collection ball passing path. Similarly, out balls and foul balls are also guided to the collection ball passing path. A firing ball detection switch 903 is provided in the collection ball passage route. For this reason, the winning ball, the out ball, and the foul ball are all detected by the firing ball detection switch 903. That is, the fired ball detection switch 903 is a switch that detects all of the bullets that have been bulleted. When the number detected by the switch and the number of shots of the pachinko balls shot by the firing motor 18 become equal, it can be determined that all the pachinko balls that have been driven are collected.

  Therefore, in the present embodiment, the difference between the number of shots detected by the shot ball detection switch 903 and the number of bullets is calculated. When this difference is not zero, the balls that have been driven into the game area 27 have not been collected. It is determined that it is not. By making this determination, it can be determined whether the game area 27 is rolling, or whether there is a floating ball that does not fall due to being caught between nails or the like in the game area.

<Notification processing for abnormalities occurring in card units and pachinko machines>
FIG. 5 is an explanatory diagram for explaining a notification process when an abnormality is detected as a result of mutual authentication.

  Referring to FIG. 5, when an abnormality occurs in CU control unit 323, security board 325, payout control unit 171, or main control board 16, notification is given in the direction indicated by the arrow in FIG. For the abnormality mentioned here, the CU control unit 323, the security board 325, the payout control unit 171, or the main control board 16 is replaced with another illegally manufactured one, or malfunction or failure occurs due to noise or the like. Or offline status due to disconnection or the like. The key management server 800 shown in FIG. 5 is a key management server that stores the SID and authentication key of the CU communication control unit in association with each serial ID (also referred to as SID) of the electronic component inside the CU 3. is there. The key management server 800 is a server that can communicate with the main control board 16.

<Transmission / reception mode between card unit side and pachinko machine side>
Next, FIG. 6 is a schematic diagram showing main data among various data stored on each of the CU 3 side and the P stand 2 side and its transmission / reception mode. With reference to FIG. 6, main data among various data stored on each of the CU (card unit) 3 side and the P unit (pachinko gaming machine) 2 side and a transmission / reception mode thereof will be described.

  In the present embodiment, the fluctuation of the number of game balls is calculated on the P stand 2 side, and the current latest game ball number is stored and managed. The current number of game balls is also calculated and stored on the CU 3 side, but the number of game balls is based on information transmitted from the P stand 2 side. On the other hand, the CU3 side manages and stores the number of possessed balls (the number of cards possessed), the number of stored balls, and the remaining card amount (remaining amount).

  FIG. 6 shows RAM storage data provided in the CU control unit 323 on the CU 3 side and RAM storage data mounted on the payout control board 17 on the P base 2 side. First, when the power supply is turned on for the first time when the P unit (pachinko gaming machine) 2 and the CU (card unit) 3 are electrically connected after being installed in the game hall, the payout control board on the P unit 2 side 17 has a main chip ID (main control chip ID) transmitted from the main control board 16, transmits the main chip ID to the CU3 side, and also issues a payout chip ID (payout) stored in the payout control board 17 itself. Control chip ID) is transmitted to the CU3 side. Note that the communication between the CU 3 and the P base 2 is performed via the security board 325 (communication control ICs 325a and SC 325b) and the PIF circuit 326 as shown in FIG. Data, communication commands, and the like communicated between each other are relayed by the security board 325 (communication control ICs 325a and SC325b) and the PIF circuit 326. Therefore, for example, if communication between the communication control IC 325a and the SC 325b occurs and communication between the CU 3 and the P stand 2 cannot be performed, the CU control unit 323 transmits a status information request command to the SC 325b in the CU 3. Does not reach P stand 2.

  On the CU3 side, the transmitted main chip ID and payout chip ID are stored. Next, data of the connection time, that is, the time at which communication is started after the CU 3 side and the P base 2 side are connected is transmitted from the CU 3 side to the P base 2 side, and the transmitted connection time is transmitted on the P base 2 side. Remember.

  In this state, three pieces of information of the main chip ID, the payout chip ID, and the connection time identified on the CU3 side are stored on the CU3 side and the P stand 2 side. When the power is turned on thereafter, the three pieces of information, that is, the main chip ID, the payout chip ID, and the previous connection time data are transmitted from the P stand 2 side to the CU 3 side.

  On the CU 3 side, the transmitted data is collated with the data already stored, and it is determined whether or not the same P base 2 is connected as in the previous time. As for the connection time data, every time the power is turned on, new connection time data in which communication between the CU 3 side and the P base 2 side is started is transmitted from the CU 3 side to the P base 2 side. Time data is stored on the P table 2 side.

  Both the CU and the P platform transmit the “sequential number” added to the message. Further, both the CU and the P platform store the “serial number” received from the other party. There are three types of “serial number”: “normal serial number”, “additional serial number”, and “counting serial number”. “Normal sequence number” indicates the sequence number of the message. “Normal serial number” is transmitted by counting up (+1) the serial number received at the time of transmission on the CU3 side (primary station side) with an initial value “1”. However, the “normal serial number” is not counted up at the time of retransmission. P station 2 side (secondary station side) transmits the received serial number as it is. Note that there is no response if the serial number continuity is not established. The “additional serial number” is a serial number used when the CU 3 requests the P unit 2 to add game balls. The “counting serial number” is a serial number used when the P stand 2 requests the CU 3 to count game balls.

  Only the CU3 has the right to update the normal serial number. When the normal serial number that is the same as the transmitted normal serial number is returned, the CU 3 backs up and stores the normal serial number and transmits the updated normal serial number. Only the CU3 has the addition update right of the addition serial number. When making an addition request, the CU 3 transmits an addition serial number added to the addition serial number that has been used for communication to the P unit 2 until then. The P platform 2 returns the same addition serial number when accepting the request. When rejecting the request, the previously received addition sequence number (the addition sequence number received this time-1) is returned. Only the P-unit 2 has the counting update number addition update right. When making a request for counting, the P platform 2 transmits a counting sequence number added to the counting sequence number used for communication to the CU 3 until then. When CU3 accepts the request, it returns the same counting sequence number. When rejecting the request, the received counting sequence number (counting sequence number-1 received this time) is returned.

  In the following, with regard to “normal serial number”, a configuration will be described in which the serial number received by the CU 3 during transmission is counted up (+1) and transmitted. However, the present invention is not limited to this configuration. Each of the P base 2 and the CU 3 or the serial number received by the P base 2 at the time of transmission is counted up (+1), and the other is the received serial number. May be transmitted as it is.

  The “addition serial number” and “counting serial number” are special serial numbers that are counted up in the addition request processing and the count request processing, respectively. Hereinafter, a description will be given of a configuration in which “normal serial number” is also counted up when the “additional serial number” and “counting serial number” are counted up. However, the present invention is not limited to this configuration, and may be configured to stop the “normal sequence number” from being counted up when the “additional sequence number” and the “counting sequence number” are counted up. In the following, “normal serial number” is simply referred to as “serial number”. The “additional sequence number” and “counting sequence number” are also collectively referred to as “request sequence number”.

<Frame configuration used in communication>
Next, communication between the CU 3 and the P base 2 according to the present embodiment will be described in more detail. A message used in the communication is composed of a frame having a predetermined format. Transmission data (message) is always transmitted in units of one frame. That is, the divided transmission of the message is not performed. Moreover, when transmitting a message | telegram continuously, the space | interval of 1 millisecond or more is opened.

  One frame of transmission data includes a data length, a normal sequence number, an addition sequence number, a counting sequence number, a command, and a data portion. “Data length” indicates the data length of the transmission data (serial number to data portion (business message range)). “Command” is a command code of the message. The “data part” is data of a message.

<Commands and responses sent and received between the CU and the P platform>
Next, with reference to FIG. 7, the outline of the command and response transmitted / received between CU (card unit) 3 and P stand (pachinko game machine) 2 is demonstrated.

  FIG. 7 shows the transmission direction, whether the data to be transmitted is a command or a response, the name of transmission information, and its outline.

<Main sequence in communication between CU and P platform>
<< Send command and response >>
First, transmission of commands and responses between the CU 3 and the P base 2 will be described. A command is transmitted from CU3 (primary station) to P station 2 (secondary station), and P station 2 returns a response to CU3 in response to the command. In other words, the business message transmission is a command / response system in which the CU 3 is the primary station and the P stand 2 is the secondary station.

  The period from the transmission of the first command to the P unit 2 from the CU 3 to the transmission of the next command is controlled to 200 ms, that is, 0.2 seconds. Further, the period from the transmission of the response from the P base 2 to the CU 3 until the transmission of the next response is controlled to 200 ms, that is, 0.2 seconds.

  Thus, both a command and a response are transmitted between the CU 3 and the P base 2 at an interval of 200 ms. On the other hand, by operating the hitting operation handle 25, the P platform 2 hits 100 pachinko balls into the game area 27 per minute, so the hitting time interval is 0.6 seconds. As a result, a plurality of commands and responses are transmitted and received while firing one ball.

  Therefore, responses for notifying the amount of change in the number of game balls are sequentially transmitted from the P platform 2 to the CU 3 at intervals shorter than the ball firing time interval. As a result, the P stand 2 can finely notify the CU 3 of the amount of change in the number of game balls.

  Here, the transmission interval of the command and the response is set to 200 ms, but the transmission interval may be longer or shorter than this. For example, the transmission interval may be a firing time interval of the P platform 2. It is also possible to match with

<< Communication line disconnection detection on CU side >>
Next, processing when communication disconnection is detected on the CU3 side will be described. When the response is not received within 200 ms after the CU 3 transmits a command to the P unit 2, the same command is transmitted to the P unit 2 again. Further, if a response cannot be received within 200 ms, a second retransmission is performed in which the same command is transmitted to the P unit 2. Resend the same command to P-unit 2 up to 14 times. If the response is not received from the P-unit 2 even after the 14th retransmission, the CU 3 determines that the communication is abnormal after 3 seconds and sets “communication interruption”. This communication abnormality may be caused when the connector of the CU 3 and the connector of the P base 2 are disconnected, or the connection wiring is disconnected or the power supply of the P base 2 is disconnected. CU3 does not increment the serial number when retransmitting the command.

<< Communication line disconnection detection on P side >>
Processing when communication disconnection is detected on the P platform 2 side will be described. A command is transmitted from the CU 3 to the P unit 2, and the P unit 2 returns a response to the CU 3 in response to the command. Thereafter, when the state in which the command from the CU 3 is not transmitted to the P stand 2 continues for 3 seconds, the P stand 2 determines that the communication is cut off, stops the driving of the firing motor 18 and stops the game. The cause of this communication disconnection may be the disconnection of the connector of CU3 and the connector of P base 2, disconnection of connection wiring, or power supply disconnection of CU3.

  It should be noted that the command and response for detecting communication disconnection on the P platform 2 side include recovery request / recovery response, recovery request 2 / recovery response 2, communication start request / communication start response, notification end request / communication end response, and communication Does not include test request / communication test response command and response.

<< Power-on >>
Next, connection sequence processing at power-on will be described. The sequence process shown in FIG. 8 is a process executed when communication is resumed after the communication between the CU 3 and the P platform 2 is normally completed. More specifically, it is executed when communication is resumed after the power of the CU 3 is turned off while the card is not inserted. A typical example is a case where the power supply is turned off at the amusement hall after one day of business is finished, and the power supply is turned on at the start of business the next day.

  First, power is turned on. When the power is turned on, communication is started after the firing motor 18 is stopped on the P stand 2 to stop the game. Thereafter, an authentication sequence is started, and information including the main chip ID and the payout chip ID is transmitted from the P base 2 to the CU3. The CU 3 sends the received main chip ID and payout chip ID to the upper management server, asks whether the main chip ID and the payout chip ID are properly registered, and has the result returned. . If it is properly registered, an appropriate authentication result is obtained.

  After the authentication sequence, the CU 3 transmits a count history request command including a serial number = 255 to the P unit 2. The P platform 2 returns a response of the counting history response including the serial number = 255, the counting history result indicating the presence / absence of the history, and the stored data of the counting history 1 and the counting history 2 to the CU 3. Next, the CU 3 transmits a recovery request including the previous last transmission sequence number and the previous last transmission count sequence number to the P unit 2 and requests recovery information from the P unit 2. The P unit 2 refers to the previous last transmission count sequence number notified from the CU 3 and executes count recovery processing. Specifically, the P-unit 2 refers to the last transmission count sequence number last time, and if the CU 3 has not performed the counting process, it is assumed that no counting request has been made, and if the CU 3 has already performed the counting process, Subtract the number of balls from the previous number of game balls to determine the game balls.

  After executing the count recovery process, the P table 2 returns the game information recovery data backed up inside the P table 2 (specifically, the payout control board 17) to the CU 3 as a response (recovery response). The recovery information includes a previous last transmission sequence number, a previously inserted card ID, a previous card insertion time, a previous last transmission addition sequence number, a previous gaming machine information, and the like.

  When the CU3 that has received the recovery response has not executed the process of the last transmission addition serial number included in the recovery information, the CU3 performs the recovery process of the CU3 using the previous gaming machine information included in the recovery information. When the addition ball recovery process is performed, the CU 3 transmits a recovery request 2 to the P base 2 and transmits recovery data to the P base 2. This recovery data includes the previous last transmission serial number and the number of additional balls.

  In response to this, the P platform 2 executes an addition recovery process based on the received recovery data, and returns the result as a response to the CU 3 (recovery response 2). When the P stand 2 cannot receive the additional balls, the recovery process NG is returned as a recovery result.

  This recovery process is a process for recovering the consistency of each other's data between the CU 3 and the P stand 2 and is not only executed at power-on, but also when a trouble occurs and is recovered. Executed.

  The CU 3 counts up the serial number each time a command such as a recovery request is transmitted. However, it does not count up when retransmitting a command. When the P unit 2 receives a command having the same serial number as the previously received serial number, it determines that a communication failure has occurred and the CU 3 has retransmitted the command. The CU 3 transmits a command, and backs up the serial number when a response with the same serial number is notified from the P unit 2. When transmitting the response corresponding to the received command, the P platform 2 notifies the CU 3 of the received serial number as it is. The P unit 2 backs up the serial number when the response is transmitted.

  After the authentication sequence is completed, the CU 3 transmits a recovery request command to the P unit 2 with the serial number “1”. The P platform 2 returns the received serial number “1” as it is to the CU 3 as a response to the recovery response. Further, the CU 3 transmits the command of the recovery request 2 to the P unit 2 with the serial number “2”. The P base 2 returns the response of the recovery response 2 to the CU 3 as it is with the received serial number “2”.

  Thereafter, the CU 3 counts up the serial number to “3”, and transmits a communication start request command to the P unit 2. When the CU 3 does not transmit the recovery request 2, the serial number is “2” which is one countdown (−1). In response to this, the P unit 2 clears the recovery data. Then, the P platform 2 returns a response to the communication start response to the CU 3 with the received serial number “3”. Thereafter, a status information request command and a status information response response are transmitted and received between the CU 3 and the P platform 2.

  The CU 3 counts up the serial number to “4”, and transmits a status information request command to the P unit 2. The status information request command includes information on the unit price of the balls. By transmitting the ball unit price to the P unit 2, the P unit 2 can recognize whether the unit unit price set by the CU 3 is 4 yen per ball or 1 yen per ball. In addition, since the status information request command is transmitted in a cycle of 200 ms as described above, it is possible to transmit information on the unit price of balls up to three times to the P stand 2 during a cycle of 600 ms that the game ball is fired. is there. Therefore, it is possible to change the ball unit price for each game ball played on the P stand 2. If the unit price can be managed for each game ball in a small number (for example, one ball unit), the player's request (for example, a desire to play a game slowly with a small amount, or the remaining number of game balls in a short time) It is possible to provide a variety of games tailored to the demand for consumption. The command of the status information request transmitted from the CU 3 to the P stand 2 described below includes the ball unit price information, but is not clearly described when the information of the unit price is not directly related to the content of the sequence to be described.

  In response to this, the P table 2 updates the gaming machine information, the gaming information, and the previous last transmission serial number, and backs up the updated data every time the response of the status information response is transmitted. Then, the P platform 2 returns the response of the status information response to the CU 3 with the received serial number “4”. The response of the status information response does not include information on the unit price of the ball. This is to prevent illegally changing the information of the ball unit price currently being played on the P stand 2 and transmitting it to the CU 3 and illegally executing the ball unit price of the game ball managed by the CU 3. . As a result, the security of the gaming system can be improved.

  In response to this, the CU 3 updates the previous last transmission sequence number, and backs up the updated data every time a response to the status information response is received.

  Thereafter, the CU 3 counts up the serial number to “5” and transmits a status information request command to the P base 2, and the P base 2 sends the response of the status information response to the CU 3 with the received serial number “5”. Reply to

<Encryption key used for communication between key management server and communication control IC>
Next, an encryption key used for communication between the key management server and the communication control IC will be described. FIG. 9 is a diagram for explaining an encryption key used for communication from the key management server to the communication control IC 325a. First, encryption keys used for communication between the key management server and the communication control IC 325a mainly include a board shipment key, a board initial key, a board authentication key, a main authentication key, a temporary authentication key, and an effective key (commercial). , Communication key 1 (session key) and communication key 2 (session key). The board shipment key is used for communication between the CU control unit and the SC, and is used only for encryption of a communication test message before shipment. The board initial key is used for communication between the CU control unit and the SC, and is received by the CU control unit 323 during the initial communication with the hall server, and stored in the RAM of the CU control unit 323. The SC 325b generates a substrate initial key from the embedded information at the time of manufacture and stores it in the RAM. Authentication communication (substrate initial key mode) using the substrate initial key is permitted (timed operation) only for a limited period. Here, in the board initial key mode, as described above, it is necessary to communicate normally with the hall server at least once to acquire the board initial key, and thus security is ensured.

  Here, the “limited period” is a limited period of two days, for example. In this way, by enabling timed operation, even if the key cannot be exchanged with the key management server immediately after the system is installed in the hall, the hall will start operating immediately after the system is installed. It becomes possible. In addition, as a limited period, you may set the period defined in one day, for example to every morning from 9:00 to 17:00.

  The above-described board initial key mode has a restriction that enables authentication communication using the board initial key for a limited period of time, but the present invention is not limited to this, and the amount of money that can be used ( Card balance or cash) may be limited. Alternatively, when the number of symbol variations in the variable display device reaches a certain number, the game may be forcibly terminated and the gaming machine may be controlled to be disabled. Alternatively, when the cumulative number of jackpots reaches a certain number, the game may be forcibly terminated and the gaming machine may be controlled to be disabled. In addition, it may be possible to allow only a game by inserting cash and prevent a game using the remaining card amount, or to limit the game to a game using a holding ball.

  The board authentication key is an encryption key that is used for communication between the CU control unit and the SC and is received as part of the board security information from the key management server. By performing authentication communication using the board authentication key, the communication mode (board authentication key mode) is switched from the timed operation using the board initial key to the permanent operation (normal operation). This board authentication key is stored in the RAM of the CU control unit and the RAM of the SC.

  In both the timed operation using the board initial key and the permanent operation using the board authentication key, the CU control unit 323 receives the valid key stored in the hall server, and the SC 325b receives the valid key as the communication control IC 325a. This is realized by enabling communication between the P platform and the CU.

  This authentication key is used for communication between the SC and the communication control IC, is generated by the SC 325b from the update information received from the key management server, and is stored in the RAM of the SC 325b. The communication control IC 325a is also similar to the SC 325b. Are generated from the update information and stored in the RAM of the communication control IC 325a. Note that this authentication key may be acquired from a key management server or the like. Further, the CU control unit 323 and the communication control IC 325a may generate themselves without receiving update information from a key management server or the like. In addition, the CU control unit 323 and the communication control IC 325a themselves generate predetermined second data by acquiring predetermined first data from a key management server or the like, and this authentication key is obtained from the first data and the second data. You may make it produce | generate.

  The temporary authentication key is used for communication between the SC and the communication control IC, and until the authentication key is generated (or until a set allowable time (for example, two days) elapses), the SC 325b and Used for encryption communication with the communication control IC 325a. The encrypted communication using the temporary authentication key (temporary authentication key mode) is allowed (timed operation) only for a limited period (for example, 2 days). SC 325b and communication control IC 325a store temporary authentication keys in their respective ROMs from the manufacturing stage. The valid key (commercial) is a key that is received by the SC 325b via the CU control unit 323 and transmitted (set) to the communication control IC 325a during initial communication with the hall server. Communication with P devices becomes possible by setting the effective key. The valid key is data for activating the communication control IC 325a. In other words, the valid key is permission information for permitting communication between the CU and the P platform.

  The communication key 1 (session key) is used for communication between the CU control unit and the SC, is used for business message communication for gaming machines, and is created every business day by the SC 325b using some variable. For example, a counter value (random number) or date / time information may be used as the variable. The communication key 2 (session key) is used for communication between the SC and the communication control IC, and is used for business message communication for gaming machines.

  Note that even if the key described above has a configuration in which the key data is embedded in each part as it is, the information for generating the key data is stored in each part. The key data may be generated by using the key.

  Next, a method for acquiring an encryption key and a method for performing encrypted communication using the acquired encryption key will be described. First, the SC 325b acquires an effective key via the CU control unit 323 at the first communication with the hall server. The SC 325b transmits (sets) the acquired effective key to the communication control IC 325a, thereby enabling communication with the P units. The CU control unit 323 receives the board initial key at the first communication with the hall server, and stores it in the RAM of the CU control unit 323. The SC 325b generates a substrate initial key from the embedded information at the time of manufacture and stores it in the RAM. The SC 325b performs cryptographic authentication with the CU control unit 323 using the acquired substrate initial key, and performs cryptographic communication with the CU control unit 323 in a timely manner using the substrate initial key. In addition, the hall server that has received the connection request sent from the CU control unit 323 when the power is turned on returns a unified store code for identifying the game arcade where the hall server is installed to the CU control unit 323. Specifically, the unified store code is transmitted from the input / output interface of the hall server to the CU control unit 323 according to the control of the CPU of the hall server.

  On the other hand, authentication is performed between the CU control unit 323 and the SC 325b using the board manufacturer code stored as initial information in both. The board manufacturer code is a code that identifies the manufacturer that manufactured the security board 325. A board connection request and a board connection response are exchanged on the condition that the authentication using the board manufacturer code is successful. The unified store code is included in the board connection request transmitted from the CU control unit 323 to the SC 325b, and the SC 325b acquires the unified store code by receiving the board connection request.

  Next, the CU control unit 323 requests the board security information from the key management server and receives the board security information transmitted from the key management server via the hall server, so that the board security information is included in the board security information. Get the board authentication key. The CU control unit performs cryptographic authentication with the SC using the acquired board authentication key, and performs cryptographic communication with the SC using the board authentication key. Note that the CU control unit 323 does not change the key from the initial board key to the board authentication key immediately after obtaining the board authentication key, but changes the key on condition that the gaming machine is in a non-operating state. To do.

  The board authentication key may be generated by the CU control unit 323 itself instead of being acquired from the key management server or the like, and the CU control unit 323 itself acquires predetermined first data from the key management server or the like. Predetermined second data may be generated, and a board authentication key may be generated from the first data and the second data.

  Next, SC 325b performs cryptographic communication with communication control IC 325a using the stored temporary authentication key. Then, the SC decrypts the update information acquired from the key management server by performing cryptographic communication with the CU control unit using the board authentication key, and inquires about the board inquiry number. If the inquiry board inquiry number matches, the SC generates a main authentication key from the update information and performs cryptographic communication with the communication control IC 325a using the generated main authentication key. The authentication key is not stored in the communication control IC 325a from the time of shipment, and is generated from the update information in the same manner as the SC 325b.

  Next, the SC notifies the CU control unit of the communication key 1 and performs communication with the CU control unit using the communication key 1 so that business message communication with the gaming machine is possible. It becomes. In addition, the SC sets an effective key for the communication control IC, thereby receiving a notification of the communication key 2 from the communication control IC and performing communication with the communication control IC thereafter using the communication key 2. As a result, business message communication with the gaming machine becomes possible.

<Commands and responses sent and received between the CU control unit and the SC>
Next, communication within the CU 3 shown in FIG. 4 will be described. In particular, communication between the CU control unit 323 and the security chip (SC) 325b of the security board 325 will be described. First, with reference to FIGS. 10 and 11, an outline of commands and responses transmitted and received between the CU control unit 323 and the security chip (SC) 325b will be described.

  10 and 11 show the transmission direction, whether the data to be transmitted is a command or a response, the name of transmission information, and its outline.

<Main sequence in communication between CU control unit and SC>
Next, a process executed by the CPU in the CU control unit 323 and a process executed by the security chip (SC) 325b will be described with reference to FIGS.

  First, with reference to FIG. 12, a process for starting up the CU control unit 323 when the power is turned on and the hall is installed will be described. FIG. 12 shows a sequence when the power supply is first turned on after the CU 3 is installed in the game arcade, and in particular, a startup sequence at the time of hall installation using the board initial key will be described.

  First, when the power of the CU3 is turned on, the CU control unit 323 and the SC325b are activated. When the power is first turned on after the CU 3 is installed in the amusement hall, the CU control unit 323 receives the board initial key A and the board initial key A message authentication code (specifically from the hall server) (from the hall server). For example, a valid key (for commercial / P shipment) such as a MAC key is also acquired. Here, the board initial key A is an encryption key that is downloaded from the hall server and stored in the CU control unit 323 when first communicating with the host device after being delivered to the amusement hall, and is installed in the key management center. This is an encryption key used for communication between the CU control unit 323 and the SC 325b until the board information (board serial ID and board authentication key) stored in the key management server is acquired. The board initial key A is decrypted using the board manufacturer code, while the MAC key of the board initial key A is similarly decrypted using the board manufacturer code. Such decryption is performed by a decryption method in accordance with an encryption method such as DES (Data Encryption Standard), AES (Advanced Encryption Standard), or IDEA (International Data Encryption Algorithm).

  Thereafter, the CU control unit 323 and the SC 325b execute a board manufacturer code authentication sequence, a board initial key authentication sequence, and a security board information inquiry sequence.

  The board manufacturer code authentication sequence authenticates the board manufacturer code between the CU control unit 323 and the SC 325b using a challenge / response method. After processing the board manufacturer code authentication sequence, the CU control unit 323 then transmits a board connection request command including at least information on the unified store code, the gaming machine number (game machine number), and the current time to the SC 325b. The SC 325b holds the received unified store code, gaming machine number, and current time information. Further, the SC 325 b transmits a response of the board connection response including the connection result and security information to the CU control unit 323. The CU control unit 323 transmits the security information acquired from the SC 325b to the key management center.

  Specifically, the CU control unit 323 notifies the SC 325b of CU control unit specific information (unified store code, unit number, current time), and transmits a board connection request command for requesting connection with the gaming machine.

  After receiving the board connection request command from the CU control unit 323, the SC 325b retains the information on the unified store code, the bedtime, and the current time, and when the previous unified store code matches, the CU control unit 323 A response of the board connection response notifying that the connection request has been accepted (OK) is returned.

  On the other hand, when it does not coincide with the previous unified store code, a response of the substrate connection response notifying that the connection request is not accepted (NG) is returned to the CU control unit 323, and the substrate stored in the RAM In addition to clearing the authentication key, a transition is made to a substrate initial key mode (see FIG. 12), which is a mode for proceeding with the substrate initial key as an encryption key. At this time, the CU control unit 323 acquires security information such as a board connection request result from the SC 325b.

  Next, the CU control unit 323 and the SC 325b perform the substrate initial key authentication sequence using the substrate initial key acquired from the hall server as the encryption key, and authentication is OK when the substrate initial key authentication is completed.

  Thereafter, the CU control unit 323 and the SC 325b perform the security board information inquiry sequence using the board initial key obtained from the hall server as the encryption key, and the acquisition is OK when the security board information can be obtained. The security board information is acquired from the key management server of the key management center, and includes a board serial ID, a board authentication key, and the like. The board authentication key is an encryption key that is downloaded from a key management server installed in the key management center and used for communication between the CU control unit 323 and the SC 325b. The key management server stores the board authentication key in association with the board serial number or the like.

  When the security board information can be acquired by the security board information inquiry sequence, the SC 325b performs authentication with the communication control IC 325a.

  Thereafter, the CU control unit 323 and the SC 325b use the board initial key acquired from the hall server as the encryption key, perform a communication key exchange sequence, and exchange a communication key for business message communication.

  Thereafter, the CU control unit 323 and the SC 325b use the substrate initial key as the encryption key, perform a communication key exchange sequence, and generate a communication key. In the communication key exchange sequence, the substrate authentication key is used as the encryption key when the substrate information can be acquired in the substrate information acquisition sequence. However, when the substrate information cannot be acquired, the substrate initial key is used as the encryption key for a limited time. Specifically, the communication key is generated using a random number and current time data. The method for generating this communication key (session key) is not limited to random number and current time data, but any variable data other than the key used for mutual authentication between encrypted communication devices can be used. Also good. The communication key exchange sequence is for exchanging a key (communication key) used for encryption communication with a gaming machine in order to enable gaming by the gaming machine.

  When the communication key can be generated by the communication key exchange sequence, the SC 325b acquires the gaming machine control board information from the communication control IC 325a.

  Thereafter, the CU control unit 323 and the SC 325b use the communication key acquired from the communication key exchange sequence as the encryption key, perform the security board information inquiry 2 sequence, and inquire / notify the gaming machine control board information. The gaming machine control board information includes a main control board number (main control chip ID of the main control board 16), a frame control board number (payout chip ID of the payout control board 17), and the like. The security board information inquiry 3 sequence is performed only when there is security information 3 notified from the CU control unit 323 to the SC 325b.

  Next, the CU control unit 323 transmits a board information request command to the SC 325b to request the SC 325b for the state of the security board and the gaming machine. The SC 325b returns a response of the substrate state response including the substrate state = operation possible to the CU control unit 323. Note that the CU control unit 323 performs processing suitable for each board state when the security board cannot be operated. Specifically, the CU control unit 323 returns the processing to the communication key exchange sequence when receiving the response of the substrate state response including the substrate state = communication key request (unusable). That is, when the SC 325b determines that the communication key has not been generated normally in the communication key exchange sequence, the SC 325b transmits a response of the substrate state response including the substrate state = communication key request (unusable) to the CU control unit 323. .

  The CU control unit 323 returns the processing to the security board information inquiry 2 sequence when receiving a board state response response including the board state = security board information inquiry instruction notification 2 request (operation impossible). That is, when the SC 325b determines that the main control board number and the frame control board number cannot be normally acquired in the security board information inquiry 2 sequence, the board state = security board information inquiry instruction notification 2 request (operation not possible). ) Including the response of the substrate state response including) is transmitted to the CU control unit 323.

  The CU control unit 323 repeatedly transmits a substrate state request to the SC 325b when receiving a response of the substrate state response including the substrate state = operation disabled. That is, the SC 325b transmits a response of the substrate state response including the substrate state = operation not possible to the CU control unit 323 when determining that it is not normal other than the communication key exchange sequence and the security substrate information inquiry 2 sequence.

  By performing the above processing, the CU control unit 323 and the SC 325b can perform business message communication with the gaming machine. By performing business telegram communication with this gaming machine, gaming can be performed on the gaming machine. The business message communication with the gaming machine is operated using a communication key (session key). The communication at this time is time-limited communication as described above, and is allowed only for a certain period (for example, 2 days). The communication mode performed through the above processing is the restricted communication mode (substrate initial key mode (substrate initial key operation)). If a certain period (for example, 2 days) is exceeded in this timed operation, the temporary operation is stopped and the overage is notified from the SC 325b to the key management server via the CU control unit 323 and the hall server. The

  Thereafter, the CU 3 makes a count history request to the P base 2, and the P base 2 returns a response of a count history response including the count history result, the count history 1, and the count history 2 to the CU 3.

  Next, with reference to FIG. 13, the power-on / normal startup process of the CU control unit 323 will be described. FIG. 13 shows a sequence when the power is normally turned on after the CU 3 is installed in the game hall, and in particular, a startup sequence using a board authentication key will be described.

  First, when the power of the CU3 is turned on, the CU control unit 323 and the SC325b are activated. When the power is first turned on after the CU 3 is installed in the amusement hall, the CU control unit 323 receives the board serial ID key, the board from the host device (specifically, from the key management server via the hall server). The MAC key of the authentication key version, the board authentication key A, and the board authentication key A is acquired. The board serial ID key is decrypted using the board initial key, the board initial key A is decrypted using the board serial ID, and the MAC key of the board initial key A is similarly decrypted using the board serial ID. Is done. Such decryption is performed by a decryption method according to an encryption method such as DES, AES, IDEA or the like.

  Thereafter, the CU control unit 323 and the SC 325b execute a board manufacturer code authentication sequence, a board authentication key authentication sequence, and a security board information inquiry sequence.

  The board manufacturer code authentication sequence authenticates the board manufacturer code between the CU control unit 323 and the SC 325b using a challenge / response method. After processing the board manufacturer code authentication sequence, the CU control unit 323 transmits a board connection request command including at least information on the unified store code, the gaming machine number, and the current time to the SC 325b. The SC 325b retains the received unified store code, game machine number, and current time information, and compares the received unified store code with the previously held unified store code. If the received unified store code does not match the previously held unified store code, the SC 325b transitions to the board initial key sequence. Further, the SC 325 b transmits a response of the board connection response including the connection result and security information to the CU control unit 323. The CU control unit 323 transmits the security information acquired from the SC 325b to the key management center. Next, the CU control unit 323 and the SC 325b perform the board authentication key authentication sequence using the board authentication key acquired from the key management server as the encryption key.

  Thereafter, the CU control unit 323 and the SC 325b perform the security board information inquiry sequence using the board authentication key acquired from the key management server as the encryption key only when the key is updated.

  The SC 325b executes authentication with the communication control IC 325a when the board authentication key can be authenticated by the board authentication key authentication sequence and there is no key update, or when there is a key update and authentication can be performed by the security board information inquiry sequence. .

  Thereafter, the CU control unit 323 and the SC 325b use the board authentication key as the encryption key, perform a communication key exchange sequence, and generate a communication key. Specifically, the communication key is generated using a random number and current time data. The method for generating this communication key (session key) is not limited to random number and current time data, but any variable data other than the key used for mutual authentication between encrypted communication devices can be used. Also good. The communication key exchange sequence is for exchanging a key (communication key) used for encryption communication with a gaming machine in order to enable gaming by the gaming machine.

  When the communication key can be generated by the communication key exchange sequence, the SC 325b further acquires the gaming machine control board information from the communication control IC 325a.

  Thereafter, the CU control unit 323 and the SC 325b use the communication key acquired from the communication key exchange sequence as the encryption key, perform the security board information inquiry 2 sequence, and inquire / notify the gaming machine control board information. The gaming machine control board information includes a main control board number, a frame control board number, and the like. The security board information inquiry 3 sequence is performed only when there is security information 3 notified from the CU control unit 323 to the SC 325b.

  Next, the CU control unit 323 transmits a board information request command to the SC 325b to request the SC 325b for the state of the security board and the gaming machine. The SC 325b returns a response of the substrate state response including the substrate state = operation possible to the CU control unit 323. Note that the CU control unit 323 performs processing suitable for each board state when the security board cannot be operated. Specifically, the CU control unit 323 returns the processing to the communication key exchange sequence when receiving the response of the substrate state response including the substrate state = communication key request (unusable). That is, when the SC 325b determines that the communication key has not been generated normally in the communication key exchange sequence, the SC 325b transmits a response of the substrate state response including the substrate state = communication key request (unusable) to the CU control unit 323. .

  The CU control unit 323 returns the processing to the security board information inquiry 2 sequence when receiving a board state response response including the board state = security board information inquiry instruction notification 2 request (operation impossible). That is, when the SC 325b determines that the main control board number and the frame control board number cannot be normally acquired in the security board information inquiry 2 sequence, the board state = security board information inquiry instruction notification 2 request (operation not possible). ) Including the response of the substrate state response including) is transmitted to the CU control unit 323.

  The CU control unit 323 repeatedly transmits a substrate state request to the SC 325b when receiving a response of the substrate state response including the substrate state = operation disabled. That is, the SC 325b transmits a response of the substrate state response including the substrate state = operation not possible to the CU control unit 323 when determining that it is not normal other than the communication key exchange sequence and the security substrate information inquiry 2 sequence.

  By performing the above processing, the CU control unit 323 and the SC 325b can perform business message communication with the gaming machine. By performing business telegram communication with this gaming machine, gaming can be performed on the gaming machine. A communication key (session key) is used for business message communication with this gaming machine. Communication at this time is a normal communication mode (board authentication key mode (board authentication key operation)) without restriction as in the restricted communication mode.

  Next, with reference to FIG. 14, the process of turning on the power of the CU control unit 323 and starting up at the time of factory shipment will be described. FIG. 14 shows a sequence at the time of factory shipment before the CU 3 is shipped to the amusement hall, and in particular, a factory shipment start-up sequence using a board shipment key will be described. This sequence is a process in the CU control unit 323 and the SC 325b that is not connected to the host device at the time of factory shipment.

  First, when the power of the CU3 is turned on, the CU control unit 323 and the SC325b are activated. The CU control unit 323 and the SC 325b execute a board manufacturer code authentication sequence and a board initial key authentication sequence.

  The board manufacturer code authentication sequence authenticates the board manufacturer code between the CU control unit 323 and the SC 325b using a challenge / response method. After processing the board manufacturer code authentication sequence, the CU control unit 323 and the SC 325b perform the board initial key authentication sequence using the board initial key as the encryption key. However, since the CU3 is not yet installed in the amusement hall because of the factory shipment stage, the CU control unit 323 cannot obtain the board initial key from the hall server of the amusement hall. The result is NG.

  Thereafter, the CU control unit 323 transmits a board connection request command including at least information on the unified store code, the gaming machine number, and the current time to the SC 325b. The SC 325b holds the received unified store code, gaming machine number, and current time information. Further, the SC 325 b transmits a response of the board connection response including the connection result and security information to the CU control unit 323. The CU control unit 323 transmits the security information acquired from the SC 325b to the key management center. Next, since the board initial key authentication sequence is authentication NG, the CU control unit 323 requests the board shipping key used for testing the security board 325 from the SC 325b, and obtains the board shipping key from the SC 325b. To do. Then, the CU control unit 323 and the SC 325b perform the board shipping key authentication sequence using the board shipping key acquired from the SC 325b as the encryption key.

  If the board shipping key can be authenticated by the board shipping key authentication sequence, the SC 325b performs authentication with the communication control IC 325a.

  Thereafter, the CU control unit 323 and the SC 325b use the board shipment key as the encryption key, perform a communication key exchange sequence, and generate a communication key. Specifically, the communication key is generated using a random number and current time data. The method for generating this communication key (session key) is not limited to random number and current time data, but any variable data other than the key used for mutual authentication between encrypted communication devices can be used. Also good. The communication key exchange sequence is for exchanging a key (communication key) used for encryption communication with a gaming machine in order to enable gaming by the gaming machine.

  When the communication key can be generated by the communication key exchange sequence, the SC 325b acquires the gaming machine control board information from the communication control IC 325a.

  Thereafter, the CU control unit 323 and the SC 325b use the communication key acquired from the communication key exchange sequence as the encryption key, perform the security board information inquiry 2 sequence, and inquire / notify the gaming machine control board information. The gaming machine control board information includes a main control board number, a frame control board number, and the like.

  Thereafter, the CU 3 makes a communication test request to the P unit 2, and the P unit 2 transmits a communication test response to the CU 3.

  Next, the CU control unit 323 transmits a board information request command to the SC 325b to request the SC 325b for the state of the security board and the gaming machine. The SC 325b returns a response of the substrate state response including the substrate state = operation possible to the CU control unit 323. Note that the CU control unit 323 performs processing suitable for each board state when the security board cannot be operated. Specifically, the CU control unit 323 returns the processing to the communication key exchange sequence when receiving the response of the substrate state response including the substrate state = communication key request (unusable). That is, when the SC 325b determines that the communication key has not been generated normally in the communication key exchange sequence, the SC 325b transmits a response of the substrate state response including the substrate state = communication key request (unusable) to the CU control unit 323. .

  The CU control unit 323 returns the processing to the security board information inquiry 2 sequence when receiving a board state response response including the board state = security board information inquiry instruction notification 2 request (operation impossible). That is, when the SC 325b determines that the main control board number and the frame control board number cannot be normally acquired in the security board information inquiry 2 sequence, the board state = security board information inquiry instruction notification 2 request (operation not possible). ) Including the response of the substrate state response including) is transmitted to the CU control unit 323.

  The CU control unit 323 repeatedly transmits a substrate state request to the SC 325b when receiving a response of the substrate state response including the substrate state = operation disabled. That is, the SC 325b transmits a response of the substrate state response including the substrate state = operation not possible to the CU control unit 323 when determining that it is not normal other than the communication key exchange sequence and the security substrate information inquiry 2 sequence.

  By performing the above processing, the CU control unit 323 and the SC 325b can communicate with the gaming machine only by the communication test message. By performing communication of this communication test message, a communication test at the time of factory shipment is performed. The CU3 that has passed the factory communication test is delivered to the amusement hall, and the first power-on sequence is the hall installation sequence described with reference to FIG. 12, and is executed after obtaining the board authentication key. The sequence is the normal startup sequence described with reference to FIG.

<Amusement machine development jig>
In order to play a game, the P table 2 needs to be connected to the CU 3 as described with reference to FIGS. Specifically, mutual authentication such as connecting the P unit 2 to the CU 3 that has obtained the substrate authentication key from the key management server, which is the host device, and performing a substrate authentication key authentication sequence between the CU 3 and the P unit 2 is performed. If there is not, the game with P stand 2 is not possible. However, each time the operation of the P base 2 under development is checked, the board authentication key authentication sequence is performed with the P base 2 under development by connecting to the CU 3 that has obtained the board authentication key from the key management server. Performing mutual authentication is complicated and burdensome to the developer. Therefore, in the development of P stand 2, it is under development only by connecting to the gaming machine development jig described below, instead of connecting to the CU 3 as described in FIGS. This makes it possible to check the operation of the P stand 2. That is, the gaming machine development jig operates the P table 2 using an authentication ID (authentication information) held by a security dongle 506 (authentication device or gaming device) described later without being connected to a host device. It is a connection device. The gaming machine development jig can be operated not only by connecting the P platform 2 under development so as to be able to play games but also by connecting the mass-produced P platform 2 so as to be able to play games. For example, when the operation check is performed separately from the host device in order to verify the mass-produced P stand 2, the mass-produced P stand 2 can be connected to a gaming machine development jig. Here, the mass-produced P units 2 include P units that have passed the certification and can be installed in the game hall, P units that have been developed and manufactured at the production plant, and P units that can be purchased in the market. The P stand 2 other than the mass-produced products include the P stand 2 under development, the P stand 2 of the prototype, the P stand 2 of the sample shipment that cannot be used for normal business even if it is installed in the amusement hall.

  FIG. 15 is a block diagram for explaining the configuration of the gaming machine development jig. A gaming machine development jig 500 shown in FIG. 15 includes a jig control board 501, an SC board 502, a connection changeover switch 503, an encryption connection connector 504, and a plaintext connection connector 505. The jig control board 501 is a control board for controlling the gaming machine development jig 500 and controls the P table 2 connected to the gaming machine development jig 500 to be able to play games. Specifically, the jig control board 501 performs a counting process for adding and subtracting the game points as performed by the CU control unit 323 of the CU3 and counting the acquired game points to the P stand 2. . The jig control board 501 is a main control function unit of the gaming machine development jig 500, and is a CPU as a control center, a ROM that stores programs for operating the CPU, control data, and the like, and a work area for the CPU. A functioning RAM, an input / output interface for maintaining signal consistency with peripheral devices, and the like are provided. Similarly to the security board 325, the SC board 502 functions as a security monitoring function unit of the CU 3 and transmits / receives a ciphertext command so that the mass-produced P unit 2 can be played. Similarly to the security board 325, the SC board 502 is provided with a communication control IC for controlling communication between the security board 325 and the payout control board 17 and a security chip (SC) for monitoring the security of the P unit 2. It has been.

  The connection changeover switch 503 communicates with the mass-produced P unit 2 connected to the encryption connection connector 504 using ciphertext, or communicates with the P unit 2 under development connected to the plaintext connection connector 505 using plaintext. It is a switch that switches whether to do. The encryption connector 504 is a connector for connecting to the mass-produced P-base 2 and is a PIF circuit (not shown) which is a parallel interface circuit of the gaming machine development jig 500 and a payout control unit 171 ( (Not shown) so as to be communicable with a parallel signal. The plaintext connector 505 is a connector for connecting to the P platform 2 under development. The plaintext connection connector 505 can be connected to a security dongle 506 which is an example of an authentication device or a game device as described later, in addition to connecting the P platform 2 under development.

  The gaming machine development jig 500 is mass-produced into the plaintext connector 505 (first connection means) other than mass-produced products (for example, P-unit 2 under development, P-unit 2 of prototype, P-unit 2 of sample shipment). When the P stand 2 other than the commercially available P stand 2 is connected, the process (first specific process) for confirming the operation of the P stand 2 can be executed. Specifically, as a process (first specific process) for confirming the operation of the P machine 2 other than the mass-produced product, a game in which game points are added / subtracted and acquired so that a game on the P machine 2 can be performed. A counting process for counting points with points is included. In addition, the gaming machine development jig 500 performs a process (second identification) for confirming the operation of the P stand 2 when the mass production P stand 2 is connected to the encryption connector 504 (second connecting means). Process). Specifically, the process for confirming the operation of the P-unit 2 for mass-produced products (second specifying process) is in addition to the process for confirming the operation of the P-unit 2 other than the mass-produced product (first specifying process). Thus, a mutual authentication process using a board authentication key as shown in FIG. 13 is included between the SC board 502 and the P base 2. In other words, the gaming machine development jig 500 functions as the CU 3 having acquired the board serial ID and board authentication key from the host device, and is operating in normal business with the mass-produced P stand 2 installed in the game hall. The state can be reproduced. The process for confirming the operation of the P stand 2 other than the mass-produced product (first specifying process) and the process for confirming the operation of the P stand 2 for the mass-produced product (second specifying process) are the same process. There may be different processes.

  The gaming machine development jig 500 can execute a process (second specifying process) for confirming the operation of the mass-produced P stand 2 for the purpose of verifying the mass-produced P stand 2. In other words, by connecting the mass-produced P stand 2 to the gaming machine development jig 500, the operation of the P stand 2 can be confirmed without obtaining authentication of the key management server that is the host device. However, if the gaming machine development jig 500 is illegally taken out and connected to the mass-produced P unit 2, an unauthorized game that has not been authenticated by the key management server may be executed on the mass-produced P unit 2. It becomes possible. Therefore, in the gaming machine development jig 500, simply connecting the mass-produced P stand 2 to the encryption connection connector 504 does not allow the P stand 2 to be operated in a gameable manner, and the security dongle 506 is attached to the plaintext connection connector 505. Need to connect. Therefore, even if the gaming machine development jig 500 is illegally taken out, it is possible to prevent an illegal game from being executed unless the security dongle 506 managed separately is illegally taken out.

  Although not shown, the security dongle 506 performs a device-side authentication process for authenticating the connection connector (authentication connection means) connectable to the plaintext connection connector 505 and the gaming machine development jig 500. An authentication processing unit (apparatus side authentication processing means). When the authentication processing unit is connected to the plaintext connection connector 505, the authentication processing unit executes device-side authentication processing. Here, various processing can be considered for the device side authentication processing of the gaming machine development jig 500 and the security dongle 506, but in the following embodiments, the gaming machine development jig 500 and the security dongle 506 are respectively authenticated IDs. A process for performing mutual authentication by transmitting / receiving the authentication ID to / from each other will be described. However, the authentication processing of the gaming machine development jig 500 and the security dongle 506 is not limited to this, and even if the gaming machine development jig 500 transmits the authentication ID to the security dongle 506 and authenticates the security dongle 506, The security dongle 506 may authenticate the gaming machine development jig 500 by transmitting an authentication ID to the gaming machine development jig 500. The authentication processing unit (device-side authentication processing means) has a recording unit (information holding means) for holding authentication information for making the P stand 2 operable, and the recording unit includes a game machine development process. Information (authentication information) is recorded (held) in an authentication ID used for an authentication process with the tool 500, an authentication key necessary for an authentication process with the P platform 2, and the like.

  The authentication ID (authentication information) held in the security dongle 506 has a valid period (predetermined period) and becomes invalid when it is outside the valid period (when the predetermined period has elapsed). Therefore, even if the security dongle 506 is illegally taken out, the gaming machine development jig 500 connected to the security dongle 506 can operate the mass-produced P stand 2 only within the valid period. That is, if the authentication ID (authentication information) held in the security dongle 506 is not updated, the security dongle 506 cannot operate the mass-produced P-unit 2 and the security is improved. Note that the security dongle 506 invalidates the held authentication ID (authentication information) when it is outside the valid period. However, the security dongle itself does not invalidate the held authentication ID (authentication information), but determines whether it is within the valid period on the connected gaming machine development jig 500 side, and invalid authentication ID (authentication) Information) may be processed.

  Hereinafter, a configuration for invalidating the authentication ID (authentication information) held in the security dongle 506 itself when it is outside the valid period will be described. First, the security dongle 506 has a timer unit 506a (timer) for measuring the effective period. The timer unit 506a resets the cumulative activation time at the timing when the authentication ID (authentication information) is updated, and sets a valid period (for example, 1000 hours). Here, the cumulative activation time is an accumulation of time when the security dongle 506 is connected to the gaming machine development jig 500 and the gaming machine development jig 500 is activated. That is, the cumulative activation time is the cumulative time during which communication is performed between the gaming machine development jig 500 and the security dongle 506. Of course, the cumulative start-up time can be obtained by connecting the security dongle 506 to the gaming machine development jig 500 and accumulating the time during which the mass-produced P-unit 2 is activated among the times when the gaming machine development jig 500 is activated. Good.

  The timer unit 506a measures the cumulative activation time and determines whether or not the valid period has been reached. The security dongle 506 can be connected to the gaming machine development jig 500 and operate the mass-produced P-unit 2 until the cumulative activation time of the timer unit 506a reaches the valid period. However, when the cumulative activation time of the timer unit 506a reaches the valid period, the timer unit 506a invalidates the held authentication ID (authentication information). Therefore, when the cumulative activation time of the timer unit 506a reaches the valid period, the security dongle 506 cannot be connected to the gaming machine development jig 500 and operate the mass-produced P-unit 2.

  As a means for invalidating the authentication ID (authentication information), it is conceivable to delete the authentication ID (authentication information) itself. However, the means for invalidating the authentication ID (authentication information) is not limited to this, and even if the security dongle 506 is connected to the gaming machine development jig 500, the mass-produced P-unit 2 cannot be operated. It suffices if the authentication ID (authentication information) can be invalidated. As a means for invalidating the authentication ID (authentication information), for example, a part of the held authentication ID (authentication information) that prevents the authentication ID (authentication information) from being output to the gaming machine development jig 500 The method of restricting access to the held authentication ID (authentication information) can be considered.

  Next, a process for enabling the mass-produced P stand 2 to be played using the gaming machine development jig 500 will be specifically described with reference to a flowchart. Here, the process for making the mass-produced P base 2 playable is performed by performing mutual authentication processing using a board authentication key as shown in FIG. 13 between the SC board 502 and the P base 2. This means that ciphertext communication is possible between the SC board 502 and the P base 2 (encrypted connection communication). FIG. 16 is a flowchart for explaining processing for enabling the mass-produced P-unit 2 to be played using the gaming machine development jig 500. First, the jig control board 501 determines whether or not the connection changeover switch 503 has selected the ciphertext side (step S160). When the connection changeover switch 503 is not selected to use the ciphertext (step S160: NO), the jig control board 501 determines whether the mass-produced P stand 2 is connected to the cipher connection connector 504 or not. First, a process of disconnecting the encryption connection communication from the connection with the P platform 2 is performed (step S169). When the connection changeover switch 503 is selected to use the ciphertext (step S160: YES), the jig control board 501 determines whether or not the mass-produced P stand 2 is connected to the encryption connection connector 504. (Step S161).

  If the mass-produced product P base 2 is not connected to the encryption connector 504 (step S161: NO), the jig control board 501 is not connected to the encryption connector 504 and the mass-produced product P base 2 is connected to the P-unit 2. 2 is disconnected and the encryption connection communication is disconnected (step S169). When the mass-produced P stand 2 is connected to the encryption connector 504 (step S161: YES), the jig control board 501 determines whether or not the security dongle 506 is connected to the plaintext connector 505 ( Step S162).

  When the security dongle 506 is not connected to the plaintext connector 505 (step S162: NO), the jig control board 501 cannot perform the authentication process by the security dongle 506, so the connection with the P base 2 is not connected. Processing for disconnecting the encryption connection communication is performed (step S169). When the security dongle 506 is connected to the plaintext connection connector 505 (step S162: YES), the jig control board 501 transmits an authentication request command to the security dongle 506 connected to the plaintext connection connector 505 ( Step S163). The authentication request command includes an authentication ID on the jig control board side for performing an authentication process between the gaming machine development jig 500 and the security dongle 506.

  Processing in the security dongle 506 to which an authentication request command is transmitted from the gaming machine development jig 500 will be described. FIG. 17 is a flowchart for explaining processing in the security dongle 506. First, the security dongle 506 determines whether an authentication request command is received from the jig control board 501 (step S163a). If an authentication request command has not been received from the jig control board 501 (step S163a: NO), the processing in the security dongle 506 ends. On the other hand, when an authentication request command is received from the jig control board 501 (step S163a: YES), the timer unit 506a determines whether or not the cumulative activation time has reached the valid period (step S163b). When the accumulated activation time has reached the valid period (step S163b: YES), the timer unit 506a invalidates the authentication ID (authentication information) held in the security dongle 506 (step S163c). When the timer unit 506a invalidates the held authentication ID (authentication information), the security dongle 506 does not return an authentication response response including the authentication ID on the security dongle side to the jig control board 501 (step S163d). .

  On the other hand, when the cumulative activation time has not reached the valid period (step S163b: NO), the timer unit 506a determines that the held authentication ID (authentication information) is valid (step S163f). If the authentication ID (authentication information) held by the security dongle 506 is valid, an authentication response including an authentication ID on the security dongle side for performing authentication processing between the gaming machine development jig 500 and the security dongle 506 is displayed. The response is returned to the jig control board 501 (step S163g). Returning to FIG. 16, the jig control board 501 determines whether or not the response of the authentication response returned from the security dongle 506 has been received (step S164). When the response of the authentication response is not received from the security dongle 506 (step S164: NO), the jig control board 501 cannot perform the authentication process by the security dongle 506, so the connection with the P base 2 is not connected, Processing for disconnecting the encryption connection communication is performed (step S169). On the other hand, when the response of the authentication response is received from the security dongle 506 (step S164: YES), the jig control board 501 performs authentication determination when the response of the authentication response is received from the security dongle 506 (step S165).

  Here, in the authentication determination, since authentication processing between the gaming machine development jig 500 and the security dongle 506 is first performed, mutual authentication is performed based on the authentication IDs transmitted and received from each other. If it is possible to determine that the security dongle 506 is an authentication device compatible with the gaming machine development jig 500 by the mutual authentication, it is possible to authenticate the mass-produced product P 2 connected to the encryption connector 504 next in the authentication determination. It is determined whether or not the game machine is a special game machine. When the connection between the gaming machine development jig 500 and the security dongle 506 is authenticated, communication is started between the gaming machine development jig 500 and the security dongle 506 and the mass-produced P units connected to the encryption connection connector 504 are started. 2 is acquired from the security dongle 506 for an authentication key or the like necessary for the authentication process with the authentication key 2. Information such as an authentication key to be acquired may be included in an authentication ID (authentication information). The gaming machine development jig 500 uses the authentication key acquired from the security dongle 506 to perform the authentication processing described with reference to FIGS. The security dongle 506 may include information in the authentication key or the like in the response of the authentication response and transmit the information to the gaming machine development jig 500 simultaneously with the authentication ID.

  Even if the correspondence between the security dongle 506 and the gaming machine development jig 500 is one-to-one, a single security dongle 506 can be used for a plurality of gaming machine development jigs 500 (for example, a certain manufacturer, a plurality of gaming machines in a hall). Even if the machine development jig 500) can be authenticated (when mutual authentication is performed in the above-described authentication determination), the plurality of security dongles 506 (for example, the main authentication apparatus and the spare authentication apparatus) have the same gaming machine development jig 500. May be authenticable. Further, the mass-produced P-unit 2 that can be authenticated with the authentication key of the security dongle 506 is not limited to one model or version, but includes a plurality of models, versions, models of a plurality of manufacturers, and the like.

  When the authentication determination is NG (step S165: NO), the jig control board 501 performs a process of disconnecting the connection with the P base 2 and disconnecting the encryption connection communication (step S169). When the authentication determination is OK (step S165: YES), the jig control board 501 performs processing for connecting to the P base 2 and starting encryption connection communication (step S166). Thereafter, the jig control board 501 executes processing during connection with the mass-produced P stand 2.

  Next, a process executed while the gaming machine development jig 500 is connected to the mass-produced P stand 2 will be described. FIG. 18 is a flowchart for explaining a process executed while the mass-produced P stand 2 is connected to the gaming machine development jig 500. When the power is turned on, the gaming machine development jig 500 prevents fraud by performing the process shown in FIG. 16 with the mass-produced P stand 2. However, if authentication is performed only when the power is turned on, it may be removed from the gaming machine development jig 500 and used illegally. Therefore, the gaming machine development jig 500 authenticates not only when the power is turned on but also when connected to the mass-produced P-unit 2, so that the mass-produced P-unit 2 is removed from the gaming machine development jig 500 and unauthorized. Preventing use.

  Specifically, the gaming machine development jig 500 starts an authentication process while the gaming machine is connected after a predetermined time (for example, 1 hour) has elapsed (step S170). First, the jig control board 501 determines whether or not the mass-produced P stand 2 is connected to the encryption connector 504 (step S171).

  If the mass-produced product P base 2 is not connected to the encryption connector 504 (step S171: NO), the jig control board 501 is not connected to the cipher connection connector 504 so that the mass-produced P table 2 is connected to the P unit 2. 2 is disconnected and the encryption connection communication is disconnected (step S179). When the mass-produced P stand 2 is connected to the encryption connector 504 (step S171: YES), the jig control board 501 determines whether or not the security dongle 506 is connected to the plaintext connector 505 ( Step S172).

  When the security dongle 506 is not connected to the plaintext connector 505 (step S172: NO), the jig control board 501 cannot perform the authentication process by the security dongle 506, so the connection with the P base 2 is not connected. Processing for disconnecting the encryption connection communication is performed (step S179). When the security dongle 506 is connected to the plaintext connection connector 505 (step S172: YES), the jig control board 501 stores the identification ID stored in the security dongle 506 connected to the plaintext connection connector 505. An authentication request command including information is transmitted (step S173).

  Since the processing in the security dongle 506 to which the authentication request command is transmitted from the gaming machine development jig 500 is the same as the processing shown in FIG. 17, detailed description will not be repeated. The jig control board 501 determines whether or not a response of the authentication response returned from the security dongle 506 has been received (step S174). When the response of the authentication response is not received from the security dongle 506 (step S174: NO), the jig control board 501 cannot perform the authentication process by the security dongle 506, so the connection with the P base 2 is not connected, Processing for disconnecting the encryption connection communication is performed (step S179). On the other hand, when the response of the authentication response is received from the security dongle 506 (step S174: YES), the jig control board 501 performs the authentication determination when receiving the response of the authentication response from the security dongle 506 (step S175). When the authentication determination is NG (step S175: NO), the jig control board 501 performs a process of disconnecting the connection with the P base 2 and disconnecting the encryption connection communication (step S179). When the authentication determination is OK (step S175: YES), the jig control board 501 performs processing for connecting to the P base 2 and starting encryption connection communication (step S176). Thereafter, the jig control board 501 executes processing during connection with the mass-produced P stand 2.

  Next, authentication determination processed between the security dongle 506, the gaming machine development jig 500, and the P stand 2 will be described in more detail. FIG. 19 is a sequence diagram for explaining authentication determination processed between the security dongle 506, the gaming machine development jig 500, and the P stand 2. First, the gaming machine development jig 500 transmits an authentication request command including an identification ID stored on the gaming machine development jig side to the security dongle 506. The security dongle 506 determines whether or not the timer unit 506a has counted the cumulative activation time and has reached the valid period. If the cumulative activation time has not reached the valid period, an authentication request is received from the jig control board 501. When the command is received, an authentication response response including information in the identification ID stored on the security dongle side is returned to the jig control board 501. The security dongle 506 does not return an authentication response response itself to the jig control board 501 if the cumulative activation time of the timer unit 506a has reached the valid period. Of course, the security dongle 506 invalidates the held authentication ID (authentication information) and does not include the identification ID stored on the security dongle side even if an authentication request command is received from the jig control board 501. A response of the response may be returned to the jig control board 501. The gaming machine development jig 500 (mainly the jig control board 501) and the security dongle 506 perform mutual authentication based on the authentication IDs transmitted and received from each other, and determine whether or not the authentication is possible. It is determined to be OK.

  The gaming machine development jig 500 can start authentication determination processing with the P base 2 when the dongle authentication is determined to be OK. First, the gaming machine development jig 500 transmits an authentication request command to the P machine 2 using the authentication key acquired from the security dongle 506. Upon receiving the authentication request command from the gaming machine development jig 500, the P platform 2 returns an authentication response response including information in the stored identification information, authentication key, etc. to the gaming machine development jig 500. These authentication processes are the same as the authentication process using the key management server, which is the host device, as described with reference to FIGS. Therefore, detailed description is omitted. The gaming machine development jig 500 determines that the gaming machine authentication is OK if the authentication process with the P stand 2 is OK using the authentication key acquired from the security dongle 506.

  The gaming machine development jig 500 can start communication processing with the P-unit 2 when the gaming machine authentication is determined to be OK. First, the gaming machine development jig 500 transmits a communication start request command to the P machine 2. Upon receiving a communication start request command from the gaming machine development jig 500, the P platform 2 returns a communication start response response to the gaming machine development jig 500. With these communication start processes, it is possible for the gaming machine development jig 500 and the P stand 2 to perform encrypted communication like the CU 3 and the P stand 2 as described above. In other words, the business message is encrypted and transmitted / received between the gaming machine development jig 500 and the P platform 2 after the communication start process.

  Note that the authentication determination is not limited to when the power is turned on, but is performed at regular intervals as described with reference to FIG. Therefore, the gaming machine development jig 500 transmits an authentication request command including information in the stored identification ID and the like to the security dongle 506 after a certain time (for example, 1 hour). The security dongle 506 determines whether or not the timer unit 506a has counted the cumulative activation time and has reached the valid period. If the cumulative activation time has not reached the valid period, an authentication request is received from the jig control board 501. When the command is received, a response of the authentication response including information in the stored identification information or the like is returned to the jig control board 501. If the cumulative activation time of the timer unit 506a has reached the valid period, the security dongle 506 invalidates the held authentication ID (authentication information) and receives an authentication request command from the jig control board 501. However, the response itself of the authentication response is not returned to the jig control board 501. Of course, if the cumulative activation time of the timer unit 506a has reached the valid period, the security dongle 506 returns an authentication response response that does not include the identification ID stored on the security dongle side to the jig control board 501. May be. The gaming machine development jig 500 (mainly the jig control board 501) and the security dongle 506 perform mutual authentication based on the authentication IDs transmitted and received from each other, and determine whether or not the authentication is possible. It is determined to be OK. Subsequent processing is the same processing as when the power is turned on, and therefore description thereof will not be repeated.

  As described above, the gaming machine development jig 500 includes the plaintext connection connector 505 for connecting to the P base 2 other than the mass-produced product and the encryption connection connector 504 for connecting to the P base 2 of the mass-produced product. The jig control board 501 has a first specific process for confirming the operation of the P base 2 when the P base 2 other than the mass production product is connected to the plaintext connection connector 505, and the mass production product for the encryption connection connector 504. When the P table 2 is connected, the second specifying process for confirming the operation of the P table 2 can be executed. The plaintext connection connector 505 is further connectable to an authentication device, and the jig control board 501 executes an authentication process for authenticating with the security dongle 506 connected to the plaintext connection connector 505, and after the authentication is performed. The second specifying process can be executed. For this reason, the P machine 2 that is a mass-produced product cannot be operated with only the gaming machine development jig 500, so that it is possible to prevent the gaming machine development jig 500 from being used illegally.

  The gaming machine development jig 500 has a limited security dongle 506 (a security dongle that can be mutually authenticated with the gaming machine development jig 500 in the above-described authentication determination), and the jig control board 501 has no security dongle. When 506 (a security dongle that cannot be mutually authenticated with the gaming machine development jig 500 in the above-described authentication determination) is connected to the plaintext connector 505, the second specifying process cannot be executed. Specifically, when the dongle authentication shown in FIG. 19 is NG, the authentication process between the gaming machine development jig 500 and the P stand 2 is not started, so communication cannot be performed and the operation check of the mass produced P stand 2 is performed. This process (second specific process) cannot be executed. By limiting the security dongle 506 corresponding to the gaming machine development jig 500, security can be improved and unauthorized use can be further prevented. Note that disabling the execution of the second specific process is not limited to disabling all of the processes for confirming the operation of the mass-produced P-unit 2, but the processes included in the first specific process May be made executable.

  The gaming machine development jig 500 is limited to the corresponding mass-produced P platform 2 (P machines capable of mutual authentication with the gaming machine development jig 500 in the above-described authentication determination), and the jig control board 501 is not supported. When the mass-produced P-unit 2 (P-unit that cannot be mutually authenticated with the gaming machine development jig 500 in the above-described authentication determination) is connected to the encryption connector 504, the operation of the mass-produced P-unit 2 is confirmed. The process (second specific process) cannot be executed. Specifically, when the gaming machine authentication shown in FIG. 19 is NG, the communication start process between the gaming machine development jig 500 and the P stand 2 is not executed, so that the communication cannot be performed and the second specifying process cannot be executed. By limiting the mass-produced P-base 2 corresponding to the gaming machine development jig 500, the security is improved, and the mass-produced P-base 2 that can operate even if used illegally is limited. Note that disabling the execution of the second specific process is not limited to disabling all of the processes for confirming the operation of the mass-produced P-unit 2, but the processes included in the first specific process May be made executable. Further, the P machine 2 other than the corresponding mass-produced product may be limited in the gaming machine development jig 500. In this case, the jig control board 501 performs processing for confirming the operation of the P stand 2 other than the mass-produced product when the P stand 2 other than the mass-produced product is connected to the plaintext connector 505 (first specific process). ) Is not executable.

  The jig control board 501 enables the operation of the P base 2 without connecting the security dongle 506 to the encryption connection connector 504 when the P base 2 other than the mass-produced product is connected to the plaintext connection connector 505. Development efficiency can be improved by reducing the complexity of connecting to the P stand 2 other than the mass-produced product, particularly the P stand 2 under development.

  The jig control board 501 can output information (for example, identification information of the gaming machine development jig 500) that can identify the connected gaming machine development jig 500 to the P base 2 connected to the encryption connector 504. Is possible. Therefore, the P stand 2 can store which gaming machine development jig 500 is connected as a connection history, and can specify the connection with the illegally used gaming machine development jig 500. Become. Therefore, unauthorized use of the gaming machine development jig 500 can be prevented. The identification information of the gaming machine development jig 500, which is information that can identify the gaming machine development jig 500, includes the serial number of the jig control board 501, the SC board ID of the SC board 502, and the authentication ID of the security dongle 506. Etc. are included. Further, the identification information of the gaming machine development jig 500 may include the time at which the P unit 2 is connected to the encryption connector 504.

  The jig control board 501 determines whether or not the security dongle 506 is connected to the plaintext connection connector 505 every predetermined period (for example, 1 hour) when the mass-produced P stand 2 is connected to the encryption connection connector 504. Determine. Therefore, since the authentication determination is not performed only when the power is turned on, the P stand 2 can be prevented from being removed from the gaming machine development jig 500 and used illegally thereafter.

  The gaming machine development jig 500 (gaming jig) functions as a gaming system for confirming the operation of the P stand 2 by operating together with the security dongle 506 (authentication device).

<Update of authentication ID (authentication information) held>
As described above, the authentication ID (authentication information) held in the security dongle 506 becomes invalid when the cumulative activation time of the timer unit 506a reaches the valid period. When the authentication ID (authentication information) becomes invalid, the mass-produced P-unit 2 cannot be operated even if the security dongle 506 is connected to the gaming machine development jig 500. Therefore, it is necessary to update the authentication ID (authentication information) held by the security dongle 506 before the cumulative activation time of the timer unit 506a reaches the valid period. Hereinafter, processing for updating the authentication ID (authentication information) held in the security dongle 506 will be described. FIG. 20 is a schematic diagram for explaining a process for updating the authentication ID (authentication information) held in the security dongle 506.

  Specifically, the authentication ID (authentication information) held in the security dongle 506 is updated using an authentication PC 590 (authentication terminal) that can be connected to the security dongle 506. The authentication PC 590 has a port (for example, a parallel port) for connecting the security dongle 506 and is also connected to the management server 600 (update server) via the Internet line 601. The management server 600 stores the global IP information of the authentication PC 590, and can communicate only with the registered authentication PC 590. Further, since a one-time password (hereinafter referred to as a one-time pass), which will be described later, is used for authentication between the management server 600 and the authentication PC 590, security is ensured even in communication using the Internet line 601. can do. The management server 600 can issue an authentication ID (authentication information) to be updated and information about an expiration date to be updated based on a request from the authentication PC 590. Information history is managed.

  First, the security dongle 506 connected to the gaming machine development jig 500 is removed, and the security dongle 506 removed for update processing is connected to the authentication PC 590. With the security dongle 506 connected, the authentication PC 590 starts up the authentication ID issuing WEB site and starts communication with the management server 600. When communication with the management server 600 is started, the authentication PC 590 prompts for input of a management ID and a password (PASSWORD), and requests input of a one-time pass that is valid only once in order to improve security. When these inputs are made and communication with the management server 600 is authenticated, the management server 600 issues an authentication ID (authentication information) to be updated and information about an expiration date to be updated based on a request from the authentication PC 590. The authentication ID (authentication information) issued by the authentication PC 590 and the expiration date information are downloaded and written in the security dongle 506. The security dongle 506 is updated to new authentication ID (authentication information) and expiration date information by overwriting the authentication ID (authentication information) and expiration date information downloaded from the management server 600 by the authentication PC 590.

  The security dongle 506 can confirm the remaining valid period (the end of the predetermined period) by connecting to the authentication PC 590, and can extend the valid period by updating to new valid period information (for example, When the remaining effective period is 10 hours, the effective period can be extended to 1000 hours by performing the update process). The authentication PC 590 can display the remaining effective period (the end of the predetermined period) of the connected security dongle 506 and notify the user by voice or the like, and warns when it is less than a certain period (for example, the remaining 5 hours). Alarm notification such as sound may be performed.

  The management server 600 issues information by randomly setting the length of the expiration date to be updated. Specifically, the management server 600 selects at random from a plurality of expiration dates to be updated (for example, 100 hours, 500 hours, 1000 hours, 1500 hours) and issues the information as expiration date information to be updated. As a result, the expiration date of the security dongle 506 does not become a fixed length, so even if the security dongle 506 leaks to the outside, it cannot be guaranteed that the P unit 2 will always operate for a certain period of time, and an unauthorized security dongle 506 can be hindered. Of course, the management server 600 can also issue information by setting the length of the expiration date to be updated to be constant.

  As described above, the gaming machine development jig 500 includes the encryption connector 504 for connecting to the mass-produced P stand 2, the connector (plaintext connector 505) for connecting to the security dongle 506, and the connector. When the security dongle 506 is connected, an authentication process for performing authentication for enabling the mass-produced P-unit 2 connected to the encryption connector 504 using the authentication ID (authentication information) held by the security dongle 506 is performed. And the authentication ID (authentication information) becomes invalid when it is outside the valid period. Therefore, since the gaming machine development jig 500 cannot operate the mass-produced P stand 2 when the authentication ID (authentication information) is outside the valid period, it can improve the security.

  The security dongle 506 also includes a timer unit 506a that counts time, and an invalidating unit that invalidates the authentication ID (authentication information) in response to the cumulative activation time reaching the valid period by the timer unit 506a. Therefore, even if the security dongle 506 leaks outside, the authentication ID (authentication information) can be invalidated and the security can be improved.

  Further, the security dongle 506 can be connected to the authentication PC 590, and can update the authentication ID (authentication information) by connecting to the management server 600 while being connected to the authentication PC 590. Therefore, since it is necessary to always connect to the management server 600 when updating the authentication ID (authentication information), the location of the security dongle 506 can be confirmed, and security can be improved.

  The validity period of the authentication ID (authentication information) can be set from a plurality of periods. For this reason, since the validity period of the authentication ID (authentication information) is not constant, even if the security dongle 506 leaks to the outside, it cannot be guaranteed that the P-unit 2 will always operate for a certain period of time, and unauthorized operation of the security dongle 506 Can be hindered.

  Further, the end of the valid period of the authentication ID (authentication information) can be notified in advance by the authentication PC 590. Therefore, the authentication PC 590 notifies the end of the valid period in advance, and can prompt the update of the authentication ID (authentication information) within the valid period.

<Configuration of game machine development jig>
Next, the configuration of the gaming machine development jig 500 will be described in more detail with reference to the drawings. FIG. 21 is a schematic diagram for explaining the front surface of the gaming machine development jig 500. FIG. 22 is a schematic view for explaining the back side of the gaming machine development jig 500. A first display unit 521, a second display unit 522, an operation switch, and a power switch 532 are provided on the front surface of the gaming machine development jig 500. The operation switches include a connection switch 523, a dip switch 524, a display switch up / down switch 525, a RAM clear switch 526, an error release switch 527, a ball lending switch 528, a return switch 529, an automatic ball lending switch 530, and a reserve switch 531. It is.

  The first display unit 521 displays various data such as data corresponding to the display type number. The second display unit 522 displays a display type number, an error code, and the like. The connection changeover switch switches between connecting the game board 26, connecting the P platform 2 to the plaintext connection connector 505, and connecting the P platform 2 to the encryption connection connector 504. The dip switch 524 is a switch for performing various initial settings. Specifically, the DIP switch 524 can perform initial settings such as a hall pulse division ratio, a hall pulse counter initialization, an operation mode, an IP address setting, an IP address forced operation, and a program update. Here, in the Hall-con-pulse frequency division ratio, it is set whether one pulse to be output to the Hall-con is 10 ball units or 1 ball unit. In the initialization of the hall-con pulse counter, it is set whether or not to initialize the pulse counter to be output to the hall controller having the number of out balls, the number of winning balls, the number of balls lent, and the number of counting balls when the power is turned on. The operation mode is set to the jig single operation mode or the PC connection mode. The IP address forced operation sets whether to perform a forced operation (operate with an address set at the time of shipment). In the program update, whether to update the program inside the gaming machine development jig 500 is set.

  The display switching up / down switch 525 is a switch for switching the display type number displayed on the second display unit 522. The RAM clear switch 526 is a switch for outputting a RAM clear signal to the game board 26 when the game board 26 is connected. The RAM clear switch 526 outputs a RAM clear signal to the game board 26 while being pressed. The error cancel switch 527 is a switch for canceling the error. For example, when an abnormality occurs in the communication control board or the like, the error is released by operating the error release switch 527. The ball lending switch 528 is a switch for performing a ball lending operation for a game ball on the connected P stand 2. The return switch 529 is a switch for performing a card return operation on the connected P table 2. Thereafter, when the count button 28 of the P platform 2 is pressed, a maximum of 65535 counts are performed with a single press. The automatic ball lending switch 530 is a switch for automatically lending game balls to the connected P platform 2. For example, when the number of game balls on the P stand 2 becomes 5 balls or less, a ball lending is automatically made for a set number of balls (for example, 125 balls). The spare switch 531 is a spare operation button that can be set by the user.

  On the back of the gaming machine development jig 500, various connection connectors, an attached power outlet 545, a power plug 546, and a ground terminal 547 are provided. The various connection connectors include a LAN connector 540, a first Hall-con connection connector 541, a second Hall-con connection connector 542, an encryption connection connector 504, a plaintext connection connector 505, an attached power connection connector 543, and a game board connection connector 544. It is out. The LAN connector 540 is a connector for connecting the gaming machine development jig 500 to the LAN. The first hall control connector 541 and the second hall control connector 542 are connectors for connecting the gaming machine development jig 500 to the hall control. The encryption connector 504 is a connector for connecting the mass-produced P stand 2. The plaintext connector 505 is a connector for connecting the P stand 2 other than the mass-produced product. The attached power supply connector 543 is a connector for connecting to an attached power supply that supplies power to the game board 26 connected to the game board connection connector 544. The game board connection connector 544 is a connector for connecting the game board 26.

  Next, the case where the P stand 2 is connected to the gaming machine development jig 500 will be described. FIG. 23 is a block diagram when the P machine 2 other than the mass-produced product is connected to the gaming machine development jig 500. FIG. 24 is a block diagram in the case where the mass production P stand 2 is connected to the gaming machine development jig 500. In FIG. 23, when the P stand 2 other than the mass-produced product composed of the game board 26 equipped with the development CPU and the front frame (game machine frame) 5 equipped with the development CPU is connected to the plaintext connection connector 505. It is a block diagram. The game board 26 loaded with the development CPU and the front frame (game machine frame) 5 loaded with the development CPU are connected by a drawer connector. Further, the gaming machine development jig 500 is connected to the PC 570 via the LAN, and is connected to the hall computer 580 via the first hall controller connection connector 541 and the second hall controller connection connector 542. Unit information (information relating to CU3) from the gaming machine development jig 500 is output as a pulse to the hall computer 580 via the first hall-con connector 541, and gaming machine information (P unit 2) from the gaming machine development jig 500 is output. Information) is output as a pulse to the hall computer 580 via the second hall-con connector 542.

  In FIG. 24, a block in the case where a mass-produced P stand 2 constituted by a gaming board 26 equipped with a cryptographic CPU and a front frame (gaming machine frame) 5 equipped with a cryptographic CPU is connected to a cryptographic connector 504. FIG. Note that the connection between the gaming board 26 loaded with the encryption CPU and the front frame (game machine frame) 5 loaded with the encryption CPU is made by a drawer connector. Further, the gaming machine development jig 500 is connected to the PC 570 via the LAN, and is connected to the hall computer 580 via the first hall controller connection connector 541 and the second hall controller connection connector 542. Unit information (information relating to CU3) from the gaming machine development jig 500 is output as a pulse to the hall computer 580 via the first hall-con connector 541, and gaming machine information (P unit 2) from the gaming machine development jig 500 is output. Information) is output as a pulse to the hall computer 580 via the second hall-con connector 542.

  Since the process of switching between the case where the mass production P platform 2 is connected to the gaming machine development jig 500 and the case where the P platform 2 other than the mass production product is connected has been described above, detailed description will not be repeated.

  Next, as described above, the operation mode of the gaming machine development jig 500 includes the jig single operation mode and the PC connection mode. In the jig single operation mode, the P machine 2 is operated only by the gaming machine development jig 500, and the gaming machine information of the P machine 2 and the unit information from the gaming machine development jig 500 functioning as a CU (card unit) are displayed. It is the structure which is totaled and displayed. In the PC connection mode, the P machine 2 is operated by the gaming machine development jig 500 connected to the PC, and the gaming machine information of the P machine 2 and the unit information from the gaming machine development jig 500 functioning as a CU are totaled. It is a configuration to display. FIG. 25 is a schematic diagram for explaining the configuration of the gaming machine development jig 500 when operating in the jig single operation mode.

  The gaming machine development jig 500 shown in FIG. 25A is connected to the host PC 590 via the LAN, or connected to the hall computer 580 via the first hall controller connection connector 541 and the second hall controller connection connector 542. By doing so, it is possible to output aggregated information to the host PC 590 and the hall computer 580.

  When the gaming machine development jig 500 is operated in the jig single operation mode, the gaming machine development jig 500 displays the information of the connected P stand 2 on the second display unit 522 as the display type number, and displays the first display. The data is displayed on the part 521 as data corresponding to the display type number. The user can switch the display type number by operating the display switching up / down switch 525 and can display data corresponding to the switched display type number on the first display unit 521. As shown in FIG. 25B, there are 19 types of display type numbers from “number of game balls” of “01” to “launch strength” of “19”.

<Data collection for multiple game machine development jigs>
The gaming machine development jig 500 can check the gaming state of the P table 2 by operating the P table 2 in the jig single operation mode, and can also provide game state information to the host PC 590 and the hall computer 580. It can also be sent. In FIG. 25, the configuration for collecting the gaming state information of the P 2 from one gaming machine development jig 500 has been described. Next, the gaming state information transmitted from the plurality of gaming machine development jigs 500 will be described. A system for collecting (communication log) and providing it to a user will be described. FIG. 26 is a schematic diagram for explaining a system for collecting communication logs transmitted from a plurality of gaming machine development jigs 500 and providing them to the user.

  Specifically, the gaming machine development jig 500 transmits information including the gaming state of the P mass 2 of the mass-produced product in operation as a communication log from the LAN connector 540 (see FIG. 22) every 200 milliseconds, for example. The LAN wirings extending from the LAN connectors 540 of the plurality of game machine development jigs 500 are connected to a hub 591 (HUB), and are connected to a data collection server 592. In other words, the data collection server 592 is connected to a plurality of gaming machine development jigs 500 via the hub 591 and can collect communication logs transmitted from the respective gaming machine development jigs 500. In the system shown in FIG. 26, instead of the host PC 590 and hall computer 580 shown in FIG. 25A, the data collection server 592 collects game state information from a plurality of gaming machine development jigs 500. .

  The data collection server 592 can collect the gaming state of each gaming machine development jig 500 by collecting communication logs, and can store the totaled results in a database. For example, the gaming machine development jig 500 collects jackpot information, probability variation information, error information, and the like included in the status information response (see FIG. 7) transmitted from the P platform 2 to the gaming machine development jig 500 in a communication log. To the data collection server 592. The data collection server 592 collects necessary information from the communication log and periodically updates the database information.

  A development manager PC 593 can be connected to the data collection server 592. The PC 593 for the person in charge of development may be connected to the data collection server 592 via the Internet line or directly to the data collection server 592. The development manager PC 593 can acquire necessary data such as the game state of the P-unit 2 by connecting to the data collection server 592. For example, the development staff PC 593 can acquire data necessary for the test for the P platform 2 from the data collection server 592 and submit it to the application organization. Further, the PC 593 for the person in charge of development can feed back the error information of the operating P unit 2 and analyze the acquired error information to feed back the development of the P unit 2.

<Slot machine>
Another example of a gaming machine is a slot machine. In the description so far, the slot machine is also abbreviated as “S” in the following because of the fact that the pachinko gaming machine is abbreviated as “P”, and the above-described configuration can be similarly applied.

  When a slot machine (S units), which is an example of a gaming machine, is applied to the above gaming system, for example, a reel, various sensor parts attached to the reels, and a main control board for controlling the reels correspond to P gaming boards. However, other configurations correspond to the front frame of the P units. However, the various detection switches 41a, 701, and 33, the firing control board 31, and the firing motor 18 in the front frame shown in FIG.

  A conventional S unit is provided with a credit function. When this function is enabled, the credit is subtracted when the number of bets is set, and the credit is added when a winning occurs. However, there is an upper limit for credits, and when a winning occurs when the number of credits reaches the upper limit value, medals are paid out from the hopper.

  On the other hand, in the S units according to the present embodiment, game points are subtracted when the bet number is set, and game points are added when a winning occurs. Further, when the game points reach a predetermined number, a display for prompting a counting operation is made, and the gaming points are converted into points by performing the counting operation. For this reason, it is not necessary to pay out medals when the credit reaches the upper limit unlike the conventional S units. As a result, it is not necessary to provide a hopper on the S platform according to the present embodiment.

  As a result, the amusement hall does not need to secure a large number of medals, reducing the economic burden. The game arcade is also freed from operations such as replenishment / collection of medals and maintenance operations to deal with clogged medals. The player is relieved from the hassle of inserting medals for each betting operation after the credit is full, and can easily concentrate on the game.

  On the other hand, if S units become medalless, a player who has won a large number of medals will not be able to act to show off his arms by stacking boxes with medals beside the seat. Inconvenience arises. However, in this embodiment, since the function of displaying the dollar box is provided as described above, it is possible to prevent such inconvenience. In addition, it is desirable for the dollar box display in the case of S units to have a large number of medals loaded instead of a large number of balls.

  When S machines are applied as a gaming machine, each type of data is expressed as follows using two types of data, “Points” and “Game Points”, and “Credit” and “Credit Excess Points”. It is also possible to configure a gaming system that is converted. Note that these four types of data are displayed on the S displays 510 or 29S.

  First, when a conversion operation (lending operation, saving medal payout operation, point payout operation) from the remaining amount of a prepaid card, a saving medal, or a point is detected, each is withdrawn and converted into a game point. The

  A game point is data corresponding to a medal in a conventional slot machine. For this reason, for example, it is desirable to display the number of game points on the display 510 or the display 29S, and to display the number of medal images corresponding to the game points. For example, when a pseudo-insertion medal operation (for example, an operation of pushing a medal) such that a player touches the medal image and inserts it into the slot machine is detected, the medal image disappears and the game points are subtracted. Instead, one bet is set. By performing such a pseudo medal insertion operation three times, the bet number is set to the maximum value of three.

  Thereafter, when a pseudo medal insertion operation is further detected, a credit is added in accordance with the detection. An upper limit value (for example, 50) is set for the credit, and when the credit exceeds the upper limit value, a credit excess point is added.

  The betting amount setting can be performed using the game points as described above, and can also be performed using credits. That is, if the one-sheet BET switch 5S is operated, 1 is added to the betting number setting value and 1 is subtracted from the credit. If the MAXBET switch 6S is operated, the bet number is set to 3, and the credit is subtracted according to the bet number setting.

  As a result of the game, when a winning occurs, a number of points corresponding to the winning is added to the credit. When a winning that exceeds the upper limit of credit occurs, the score for the excess is stored as a credit excess point. This credit excess point corresponds to a medal to be paid out when a winning occurs exceeding the upper limit of credit in the conventional slot machine. For this reason, for example, it is desirable to display the credit excess points on the display 510 or the display 29S and to display the number of medal images corresponding to the credit excess points. Further, it is desirable to change the color of this medal image so that it can be distinguished from the medal image corresponding to the game point.

  Further, it is desirable that the credit excess points are converted into game points by the player's operation. For example, when a pseudo medal conversion operation (for example, an operation of pushing a medal) is performed such that the player touches the medal image corresponding to the credit excess point and converts it to a game point, the medal image disappears and the credit excess Points are subtracted and game points are added.

  Alternatively, if the credit becomes less than the upper limit value, the credit excess point may be automatically converted into credit.

  When the player performs a counting operation, each of the game points, credits, and credit excess points is counted and converted into points. As a result, the player's points are posted as “card possession number + game points + credits + credit excess points”. The “card possession number” is the number of points before conversion (the number of possessions currently owned by the player) that has not been converted into game points.

  In the above description, the four types of data of points, game points, credits, and credit excess points may be stored on both sides by exchanging data between the CU and S units. You may memorize | store only in the S stand side only by CU side. Further, the credit excess point may be a target for dollar box display.

  Moreover, although the example using a credit excess point was demonstrated in the above description, it is not necessary to use a credit excess point. In this case, when the credit limit is exceeded, it may be added to the game points.

<Modifications and feature points>
Next, modifications and feature points of the present embodiment described above are listed.

  (1) In this embodiment, game points are added by consuming card power. Alternatively, game points are added by consuming stored balls (stored medals). That is, the card frequency or the stored ball is converted into game points. On the other hand, the card power and the stored balls are not converted into points (count balls, count medals). However, the card power and the stored ball may be once converted into points.

  (2) In the present embodiment, game points are converted into points by counting operation. The conversion rate in this case is 1: 1. However, the conversion rate in the case of conversion may be other than 1: 1. For example, when 100 game points are converted, 97 points obtained by subtracting three of them may be converted into points. Or you may make it convert into the number of game balls obtained by multiplying a predetermined ratio of less than 100% with respect to a point.

  (3) The recording medium for recording the holding point in an identifiable manner may use a mobile terminal such as a smartphone. In this case, the communication unit for communicating with the mobile terminal is provided in the CU, and the CU recognizes the ID stored in the mobile terminal by holding the mobile terminal over the communication unit. The game is made possible by the procedure as described. On the other hand, at the end of the game, the portable terminal is again held over the communication unit, so that the score at the end of the game is added to the player's score through the ID.

  (4) In this embodiment, in the communication between the CU and the gaming machine, a command-response method is adopted in which the CU is a primary station and the gaming machine is a secondary station. The relationship between and may be reversed. Alternatively, instead of adopting such a communication system having a master-slave relationship, a system may be employed in which both send data to the other party when a request to communicate occurs.

  (5) In this embodiment, by connecting a plurality of P units 2 (a plurality of P units 2 that can be connected even if the model is limited) to one gaming machine development jig 500, Although it has been described that the process for confirming the operation of the P base 2 can be executed, the present invention is not limited to this. For example, the configuration may be such that only one P-unit 2 can perform processing confirmation for one gaming machine development jig 500. In this case, even if the P model 2 is of the same model, if the identification information (for example, main control chip ID) of the gaming machine is different, the process for confirming the operation cannot be executed. Therefore, even higher security can be ensured with the gaming machine development jig 500.

  (6) In this embodiment, the jig control board 501 can output information that can identify the connected gaming machine development jig 500 to the P base 2 connected to the encryption connector 504. Although described, the present invention is not limited to this. For example, the jig control board 501 can record and output information that can identify the P platform 2 connected to the encryption connector 504. Specifically, since the jig control board 501 acquires the main control chip ID to communicate with the P base 2 connected to the encryption connector 504, the main control chip ID is used as information that can identify the P base 2. It is possible to record and display or output data as a connection history together with the connection time.

  (7) In the present embodiment, the connection changeover switch 503 communicates with the mass-produced P-unit 2 connected to the encryption connection connector 504 using ciphertext, or is connected to the plaintext connection connector 505 using plaintext. However, the switch is not limited to a switch composed of hardware, and may be a switch composed of software. Further, the connection changeover switch 503 is not limited to the case where the user operates and switches the connector to communicate, and the connector for automatically communicating by identifying the connected P stand 2 may be switched.

  (8) In the present embodiment, the configuration in which the game machine development jig 500 is provided with one encryption connection connector 504 and one plaintext connection connector 505 is described, but the present invention is not limited to this. For example, the gaming machine development jig 500 may have a plurality of encryption connection connectors 504 and a plurality of plaintext connection connectors 505. In this case, in order to execute the process (second specifying process) for confirming the operation of the plurality of P units 2 connected to the plurality of encryption connection connectors 504, one of the plurality of plaintext connection connectors 505 is provided. It is only necessary to connect the security dongle 506. Note that the P machine 2 that can be operated at the same time is limited by providing the game machine development jig 500 with one encryption connection connector 504 and one plaintext connection connector 505 as in the present embodiment. Even if it is used illegally, it has the merit that damage can be minimized.

  (9) In the present embodiment, it has been described that the timer unit 506a measures the cumulative activation time and determines whether or not the valid period has been reached, but the present invention is not limited to this. For example, the timer unit 506a may determine whether or not the set valid period is counted down to 0 (zero) time without counting the cumulative activation time.

  (10) In the present embodiment, the case has been described where the authentication ID (authentication information) held is immediately invalidated when the cumulative activation time reaches the valid period. However, when the cumulative activation time reaches the valid period, the authentication ID (authentication information) held by the timer unit 506a is immediately invalidated, and the mass production P unit 2 in operation is suddenly stopped. Inconvenience may occur. Therefore, even when the gaming machine development jig 500 is connected to the mass-produced P platform 2, even if the cumulative activation time reaches the valid period, the authentication ID (authentication information) held by the timer unit 506 a is immediately invalidated. Instead, after notifying that the authentication ID (authentication information) held in the security dongle 506 is outside the valid period, the apparatus is held for a period during which the apparatus can be safely stopped (for example, 10 minutes). The authentication ID (authentication information) may be invalidated.

  (11) In the present embodiment, if the cumulative activation time of the timer unit 506a has reached the valid period, the authentication ID (authentication information) held is invalidated and an authentication request command is received from the jig control board 501. Even when the response of the authentication response is not returned to the jig control board 501, it has been described. However, the present invention is not limited to this, and when the cumulative activation time of the timer unit 506a reaches the valid period, the security dongle 506 invalidates the held authentication ID (authentication information), but the information other than the identification ID is deleted. The response of the authentication response including it may be returned to the jig control board 501.

  (12) In the present embodiment, the authentication ID (authentication information) updated by the management server 600 and the information on the expiration date to be updated are issued as a set, and the authentication ID (authentication information) and the expiration date information of the security dongle 506 are issued. Explained to update. However, the present invention is not limited to this, and only the expiration date information to be updated by the management server 600 is issued and the expiration date information of the security dongle 506 is updated, so that the held authentication ID (authentication information) is continued. And may be used.

  (13) In the present embodiment, the data collection server 592 collects communication logs transmitted to the gaming machine development jig 500, and totals the gaming state of each gaming machine development jig 500 from the collected communication logs. , Explained that the results of aggregation were stored in the database. However, the present invention is not limited to this, and the data collection server 592 includes a collection PC that collects communication logs transmitted to the gaming machine development jig 500 and the gaming state of each gaming machine development jig 500 from the collected communication logs. May be configured separately from a totaling server that stores the totaled results in a database.

  (14) In the present embodiment, the example in which the held authentication ID (authentication information) is invalidated by the timer unit 506a of the security dongle 506 has been described. However, the present invention is not limited to this, and the authentication ID (authentication information) held by the security dongle 506 may be invalidated on the jig control board 501 side. Further, in the present embodiment, an example has been described in which the authentication ID (authentication information) itself is deleted and the authentication ID (authentication information) is actively invalidated when the cumulative activation time of the timer unit 506a reaches the valid period. . However, the present invention is not limited to this, and when the cumulative activation time reaches the valid period on the security dongle 506 side or the jig control board 501 side, the authentication ID (authentication information) itself held is not erased and cannot be authenticated. It may be a passive invalidation. Furthermore, in the present embodiment, it has been described that the authentication ID (authentication information) is invalidated when the cumulative activation time reaches the valid period. However, the present invention is not limited to this, and the authentication ID (authentication information) may be invalidated when the cumulative activation count or cumulative authentication count reaches the valid count.

  The embodiment disclosed this time should be considered as illustrative in all points and not restrictive. The scope of the present invention is defined by the terms of the claims, rather than the description above, and is intended to include any modifications within the scope and meaning equivalent to the terms of the claims.

  2 Pachinko machine, 2S slot machine, 3 card unit, 16 main control board, 17 payout control board, 26 game board, 54, 312 display, 309 card insertion / discharge port, 319 replay button, 320 IR light receiving unit, 321 Lending button, 322 Return button, 161 Main control unit, 325 Display control unit, 171 Payout control unit, 323 CU control unit.

Claims (2)

A connection device connectable to a gaming machine;
An authentication device that is connectable to the connection device and holds authentication information for making the gaming machine operable;
The connection device is connected to the gaming machine, and the authentication device is connected to make the gaming machine operable by using the authentication information held by the authentication device.
The gaming system, wherein the authentication information is invalidated after a predetermined period. A gaming device having information holding means for holding authentication information for making a gaming machine operable.
When the gaming device is connected to the gaming machine via a connection device, the gaming machine is made operable using the authentication information held by the information holding means,
The gaming apparatus, wherein the authentication information is invalidated after a predetermined period.

Images