JP5284405B2 - GAME SYSTEM AND GAME DEVICE - Google Patents

Description

  The present invention includes a gaming system including a first control unit and a second control unit that perform cryptographic communication with each other, and a first control unit and a second control unit that perform cryptographic communication with each other. The present invention relates to a gaming device.

  Conventionally, for example, there is one that improves security by performing mutual authentication between various control devices provided in a gaming machine.

  In the conventional one described in Patent Document 1, a plurality of identifiers are stored in the game arithmetic processing device of the game control device and the game arithmetic processing device of the payout control device. The gaming arithmetic processing device randomly selects one identifier from a plurality of identifiers, transmits the selected identifier to the gaming arithmetic processing device on the gaming control device side, and the gaming arithmetic processing device on the gaming control device side If an identifier transmitted from the game processing device on the payout control device side is received, whether or not there is a match with the received identifier among the plurality of identifiers stored in the game operation device on the game control device side Determine. When there is a matching identifier, one identifier is randomly selected from a plurality of identifiers stored in the game processing device on the game control device side, and the selected identifier is used in the game operation processing on the payout control device side. The game arithmetic processing unit makes the same determination as the game arithmetic processing unit on the game control device side, and performs mutual authentication.

JP 2010-148616 A (paragraphs [0135] to [0141])

  In this conventional system, since identifiers are transmitted / received between the processing units for both games, if the transmitted / received identifiers are intercepted (eavesdropped) and leaked, the control device is illegally modified or illegally manufactured. The inconvenience of allowing an illegal act such as switching to the control device is caused. That is, for example, if an identifier that is always leaked from a gaming arithmetic processing device of a control device that has been illegally manufactured is output, it is determined that the authentication result is appropriate when the other gaming arithmetic processing device receives it. In order to be done, cheating cannot be found.

  That is, in this conventional system, since only mutual authentication is performed by one type of authentication method called mutual authentication using identifiers, if an identifier used for the mutual authentication leaks, monitoring of the mutual authentication is performed. There was a problem that security vulnerabilities occurred, such as allowing for illegal acts that could easily be avoided.

  The present invention has been conceived in view of such circumstances, and its purpose is to allow fraud that circumvents mutual authentication monitoring even if the security of mutual authentication by a certain type of system is broken. Is to prevent inconvenience.

Specific examples of means for solving the problems and their effects

(1) The present invention relates to first control means (main control section 323 or CU3, P stand 2, Z counter, POS terminal, etc.) and second control means (CU communication control section 80, Or CU3, P stand 2, Z counter, POS terminal, etc.)
Both the first control means and the second control means are:
Mutual authentication processing means (CU communication control unit authentication sequence in FIG. 7A) for performing a plurality of types of mutual authentication processing with different authentication methods between the first control means and the second control means;
The result of executing all of the plural types of mutual authentication without notifying the control means of the authentication partner of the independent authentication result when the independent authentication result of each mutual authentication by the mutual authentication processing unit is inappropriate. And general notifying means for summarizing the abnormalities and notifying the control means of the authentication partner (processing for notifying the abnormalities in FIG. 9, FIG. 12, and FIG. 14 collectively).

  According to such a configuration, since a plurality of types of mutual authentication processes with different authentication methods are performed between the first control unit and the second control unit, the security of mutual authentication by a certain authentication method is performed. Even if it is broken, mutual authentication security can be maintained by mutual authentication using other different authentication methods.

  In addition, for example, when the authentication result of each type of mutual authentication of each of the multiple types of mutual authentication is inappropriate, the type of mutual authentication is notified when the authentication result is notified to the control means of the authentication partner. However, it is not desirable for security because it is known that the authentication result is incorrect. In order to sum up the abnormalities of the results of executing all of the multiple types of mutual authentication and not to notify the control method of the other party of authentication, it is not possible to see which type of mutual authentication has occurred , Can improve security.

(2) In the gaming system of (1), the mutual authentication processing means includes:
The second control means generates a challenge code (challenge code A in FIG. 17), transmits it to the first control means (CU communication control unit serial ID authentication response 1), and stores it in the first control means A response code (response code A in FIG. 17) is generated from the challenge code received using the identification information (SID of the CU communication control unit) and sent back to the second control means, and the second control Means for determining whether the received response code is appropriate using the stored identification information (SID of the CU communication control unit) (in the CU communication control unit 80, whether the received response code is appropriate) Is determined using the SID of the CU communication control unit),
The first control means generates a challenge code and transmits it to the second control means (challenge code in FIG. 16), and the identification information (SID of the main control unit) stored in the second control means A response code (response code shown in FIG. 16) is generated from the challenge code received using, and is sent back to the first control means (BB serial ID authentication response 2). The first control means stores the response code The second challenge response authentication process (in the main control unit 323, determines the suitability of the received response code using the SID of the main control unit) that determines the suitability of the received response code using the identification information that is received. .

  According to such a configuration, the first control means and the second control means transmit the challenge code from one control means to the other control means and use the identification information stored in the other control means. The challenge code and response code sent and received between the two gaming means are leaked because the challenge response method of authenticating the response code from the challenge code received and sending it back to one control means is performed. Even so, it is difficult to specify the stored identification information, and it is possible to prevent fraudulent acts on the gaming means due to leakage of the identification information as much as possible.

(3) In the gaming system of (1) or (2), the first control means and the second control means are a pair of authentication information (authentication key consisting of a common key) used for mutual authentication. Remember
The mutual authentication processing means further includes:
The first control means executes arithmetic processing using the authentication information and transmits the result data of the arithmetic processing to the second control means (the main control unit uses the authentication key stored in the EEPROM) An encrypted random number B generated by encrypting the random number B is generated and transmitted to the CU communication control unit as a device authentication request 2 together with the MAC), and the second control unit calculates the result data using the authentication information First authentication for performing processing and returning the result data of the arithmetic processing to the first control means and checking the consistency between the result data returned by the first control means and the transmitted result data Processing (in the CU communication control unit, the consistency with the MAC is determined as a plaintext random number B combined with the received random number B);
The second control means executes arithmetic processing using the authentication information and transmits the result data of the arithmetic processing to the first control means (the CU communication control unit uses the authentication key stored in the EEPROM) An encrypted random number A obtained by encrypting the random number A is transmitted to the main control unit as a device authentication response 1 together with the MAC), and the first control means calculates the result data using the authentication information. A second authentication process is performed to check the consistency with the result data (in the main communication control unit, the consistency with the MAC is determined as a plaintext random number A combined with the received random number A). .

  According to such a configuration, the authentication process using the pair authentication information stored in the first control unit and the second control unit, which is used for mutual authentication, is also executed. Secure mutual authentication is possible and security is improved. Moreover, since this authentication process also transmits / receives the result data obtained by executing the calculation process using the stored authentication information, even if the transmitted / received result data leaks out, the authentication information It is difficult to identify and it is possible to prevent fraudulent acts on the gaming means due to information leakage as much as possible.

(4) Another aspect of the present invention is a gaming apparatus (card unit) including a first control unit (main control unit 323) and a second control unit (CU communication control unit 80) that perform cryptographic communication with each other. 3)
Both the first control means and the second control means are:
Mutual authentication processing means (CU communication control unit authentication sequence in FIG. 7A) for performing a plurality of types of mutual authentication processing with different authentication methods between the first control means and the second control means;
The result of executing all of the plural types of mutual authentication without notifying the control means of the authentication partner of the independent authentication result when the independent authentication result of each mutual authentication by the mutual authentication processing unit is inappropriate. And general notifying means for summarizing the abnormalities and notifying the control means of the authentication partner (processing for notifying the abnormalities in FIG. 9, FIG. 12, and FIG. 14 collectively).

  According to such a configuration, since a plurality of types of mutual authentication processes with different authentication methods are performed between the first control unit and the second control unit, the security of mutual authentication by a certain authentication method is performed. Even if it is broken, mutual authentication security can be maintained by mutual authentication using other different authentication methods.

  In addition, for example, when the authentication result of each type of mutual authentication of each of the multiple types of mutual authentication is inappropriate, the type of mutual authentication is notified when the authentication result is notified to the control means of the authentication partner. It is not desirable in terms of security because it is understood that the authentication result is inappropriate. However, when the independent authentication result of each mutual authentication is inappropriate due to the function of the general notification means, the authentication result of the independent authentication means In order to sum up the abnormalities of the results of executing all of the multiple types of mutual authentication and not to notify the control method of the other party of authentication, it is not possible to see which type of mutual authentication has occurred , Can improve security.

(5) In the gaming device of (4), the mutual authentication processing means includes:
The second control means generates a challenge code (challenge code A in FIG. 17), transmits it to the first control means (CU communication control unit serial ID authentication response 1), and stores it in the first control means A response code (response code A in FIG. 17) is generated from the challenge code received using the identification information (SID of the CU communication control unit) and sent back to the second control means, and the second control Means for determining whether the received response code is appropriate using the stored identification information (SID of the CU communication control unit) (in the CU communication control unit 80, whether the received response code is appropriate) Is determined using the SID of the CU communication control unit),
The first control means generates a challenge code and transmits it to the second control means (the challenge code in FIG. 16), and the identification information stored in the second control means (SID of the main control unit) A response code (response code shown in FIG. 16) is generated from the challenge code received using, and is sent back to the first control means (BB serial ID authentication response 2). The first control means stores the response code The second challenge response authentication process (in the main control unit 323, determines the suitability of the received response code using the SID of the main control unit) that determines the suitability of the received response code using the identification information that is received. .

  According to such a configuration, the first control means and the second control means transmit the challenge code from one control means to the other control means and use the identification information stored in the other control means. Because the challenge-response authentication is performed, in which a response code is generated from the received challenge code and sent back to one control means, the challenge code and response code sent and received between both control means are leaked. Even so, it is difficult to specify the stored identification information, and it is possible to prevent fraudulent acts on the control means due to leakage of the identification information as much as possible.

(6) In the gaming device of the above (4) or (5), the first control means and the second control means are a pair of authentication information (authentication key comprising a common key) used for mutual authentication. )
The mutual authentication processing means further includes:
The first control means executes arithmetic processing using the authentication information and transmits the result data of the arithmetic processing to the second control means (the main control unit uses the authentication key stored in the EEPROM) An encrypted random number B generated by encrypting the random number B is generated and transmitted to the CU communication control unit as a device authentication request 2 together with the MAC), and the second control unit calculates the result data using the authentication information First authentication for performing processing and returning the result data of the arithmetic processing to the first control means and checking the consistency between the result data returned by the first control means and the transmitted result data Processing (in the CU communication control unit, the consistency with the MAC is determined as a plaintext random number B combined with the received random number B);
The second control means executes arithmetic processing using the authentication information and transmits the result data of the arithmetic processing to the first control means (the CU communication control unit uses the authentication key stored in the EEPROM) An encrypted random number A obtained by encrypting the random number A is transmitted to the main control unit as a device authentication response 1 together with the MAC), and the first control means calculates the result data using the authentication information. A second authentication process is performed to check the consistency with the result data (in the main communication control unit, the consistency with the MAC is determined as a plaintext random number A combined with the received random number A). .

  According to such a configuration, the authentication process using the pair authentication information stored in the first control unit and the second control unit, which is used for mutual authentication, is also executed. Secure mutual authentication is possible and security is improved. Moreover, since this authentication process also transmits / receives the result data obtained by executing the calculation process using the stored authentication information, even if the transmitted / received result data leaks out, the authentication information It is difficult to specify and it is possible to prevent fraudulent acts against the control means due to information leakage as much as possible.

It is a front view which shows a card unit and a pachinko machine. It is explanatory drawing for demonstrating the various data memorize | stored in the card unit side and the pachinko machine side, and its transmission / reception. It is explanatory drawing for demonstrating the control aspect which memorize | stores game history data in each of the CU side and the P stand side. It is explanatory drawing for demonstrating the notification process at the time of detecting abnormality as a result of mutual authentication. It is a figure which shows the frame structure used by communication. It is a figure which shows an example of a process with the card unit and the pachinko machine at the time of power activation. (A) (b) is a figure which shows an example of the process of the subroutine program of the authentication sequence shown in FIG. 6, (a) is an authentication sequence at the time of CU power supply starting, (b) is at the time of game machine power supply start-up This is an authentication sequence. It is a figure which shows an example of the process of the subroutine program of the chip ID authentication sequence shown by FIG. It is a flowchart which shows the subroutine program at the time of the authentication key update of a serial ID authentication sequence. It is a flowchart which shows the subroutine program of the chip ID authentication sequence shown to Fig.7 (a) (b). It is a flowchart for demonstrating the case where there exists abnormality in the update of an authentication key in a serial ID authentication sequence. It is a flowchart for demonstrating the case where the authentication result of a CU communication control part is abnormal in a serial ID authentication sequence. It is a flowchart for demonstrating the case where the effective key of a CU communication control part is abnormal in a serial ID authentication sequence. It is a flowchart for demonstrating the serial ID authentication sequence at the time of normal. It is a flowchart for demonstrating a chip ID authentication sequence when the payout control authentication result is abnormal. It is a flowchart which shows the subroutine program of the BB serial ID authentication sequence shown in FIG. It is a flowchart which shows the subroutine program of the CU communication control part serial ID authentication sequence shown in FIG. It is a flowchart which shows the subroutine program of the apparatus authentication sequence shown in FIG. It is a flowchart which shows the memory | storage setting to the EEPROM of an authentication key. (A) is a figure which shows an example of the process of the business message sequence at the time of normality, (b) is a figure which shows an example of the process of the business message sequence at the time of abnormality. It is a figure which shows an example of a process when a card unit and a pachinko machine are reconnected. It is a flowchart for demonstrating the process of CU and P stand when a card | curd is inserted. It is a flowchart figure which shows the subroutine program of the process at the time of insertion shown in FIG. It is a figure which shows an example of a process with a card unit and a pachinko machine when consuming the balance of a prepaid card. It is a figure which shows an example of a process with the card unit and the pachinko machine at the time of a replay. It is a figure which shows an example of a process with a card unit and a pachinko machine in the case of subtracting the number of game balls according to an instruction on the card unit side. It is a figure which shows an example of a process with the card unit and the pachinko machine in a big hit. It is a figure which shows an example of a process with a card unit and a pachinko machine when the number of game balls in a pachinko machine runs out during a game. It is a figure which shows an example of a process with a card unit and a pachinko machine when returning a card. It is a figure which shows an example of a process with a card unit and a pachinko machine when a game is interrupted. It is a figure which shows an example of a process with a card unit and a pachinko machine when unlocking | releasing and releasing the lock | rock of the glass door in a pachinko machine. It is a figure which shows the modification of the process with a card unit and a pachinko machine when unlocking | releasing and releasing the glass door in a pachinko machine. It is a figure which shows an example of a process with a card unit and a pachinko machine when unlocking | releasing and releasing the cell (front frame) of a pachinko machine. It is a figure which shows an example of a process with a card unit and a pachinko machine when a pachinko machine is not connected when a power supply is started in the state where a card unit is holding a card. It is a figure which shows an example of a process with a card unit and a pachinko machine when the operation | movement instruction (no request | requirement operation | movement) from a card unit does not reach | attain a pachinko machine. It is a figure which shows an example of a process with a card unit and a pachinko machine in case the operation response from a pachinko machine (response with respect to no request | requirement operation | movement) does not reach | attain a card unit. It is a figure which shows an example of a process with a card unit and a pachinko machine when the operation instruction from a card unit (response to an addition request) does not reach the pachinko machine. It is a figure which shows an example of a process with a card unit and a pachinko machine when the operation response from a pachinko machine (response to an addition request) does not reach the card unit. It is a figure which shows an example of a process with a card unit and a pachinko machine when the operation instruction (subtraction request) from a card unit does not reach the pachinko machine. It is a figure which shows an example of a process with a card unit and a pachinko machine when the operation response from a pachinko machine (response to a subtraction request) does not reach the card unit. It is a figure which shows an example of a process with a card unit and a pachinko machine when a pachinko machine returns the response of addition refusal with respect to the addition request of a card unit. It is a figure which shows an example of a process with a card unit and a pachinko machine when a pachinko machine returns the subtraction rejection response with respect to the subtraction request | requirement of a card unit. It is a figure which shows an example of a process with a card unit and a pachinko machine when a pachinko machine returns the response of a rejection of a clear with respect to the clear instruction | indication request | requirement of a card unit. It is a figure which shows an example of a process with a card unit and a pachinko machine when a pachinko machine returns the response of permission rejection with respect to the game permission request | requirement of a card unit. It is a figure which shows an example of a process with a card unit and a pachinko machine when a pachinko machine returns the response of prohibition refusal with respect to the game prohibition request | requirement of a card unit. It is a figure which shows an example of a process with a card unit and a pachinko machine when a pachinko machine returns the response of glass door opening rejection with respect to the glass door opening request | requirement of a card unit. It is a figure which shows an example of a process with a card unit and a pachinko machine when a pachinko machine returns the response of a cell (front frame) opening rejection with respect to the cell (front frame) opening request | requirement of a card unit. It is a flowchart for demonstrating a money_receiving | payment process. It is a flowchart for demonstrating mode change (trial hit mode). It is a figure which shows an example of the recovery process of a card unit and a pachinko machine when the power failure in the card unit after reaching the operation response regarding addition / subtraction data occurs. It is a figure which shows an example of the recovery process of a card unit and a pachinko machine when a power failure has occurred in the card unit before the operation instruction is reached. It is a figure which shows an example of the recovery process of a card unit and a pachinko machine when a power failure occurs in a card unit before the operation response regarding addition / subtraction data is reached. It is a figure which shows an example of the recovery process of a card unit and a pachinko machine when a power failure occurs in the card unit before the addition request is reached. It is a figure which shows an example of the recovery process of a card unit and a pachinko machine when a power failure occurs in the card unit before reaching an operation response to the addition request. It is a figure which shows an example of the recovery process of a card unit and a pachinko machine when a power failure occurs in the card unit before the subtraction request is reached. It is a figure which shows an example of the recovery process of a card unit and a pachinko machine when a power failure occurs in the card unit before reaching an operation response to the subtraction request. It is a figure which shows an example of the recovery process of a card unit and a pachinko machine when a power failure occurs in the card unit before reaching the clear request. It is a figure which shows an example of the recovery process of a card unit and a pachinko machine when a power failure occurs in the card unit before reaching an operation response to the clear request. It is a figure explaining the display screen of the operation state displayed in conjunction with processing of a card unit and a pachinko machine when a card is inserted in a card unit. It is a figure which shows the typical example of the communication sequence between a card unit and the payout control part. It is a figure which shows the typical example of the communication sequence between a card unit and the payout control part. It is a figure which shows the typical example of the communication sequence between LSI and the display effect control board. It is a figure which shows the typical example of the communication sequence between LSI and the display effect control board. It is a figure which shows the typical example of the communication sequence between LSI and the display effect control board. It is a figure which shows the typical example of the communication sequence between LSI and the display effect control board. It is a figure which shows the example of a display in a display. (A) is a figure which shows the counter used for encryption and decryption of SE2 mode, (b) is explanatory drawing explaining the structure of block cipher encryption by SE2 mode. It is explanatory drawing explaining the mechanism of the block cipher decoding by SE2 mode. It is a figure which shows the encryption communication in the normal time when the receiving side which received the encryption communication text is decoded appropriately. It is a figure which shows the process at the time of abnormality when the operation response from a CU communication control part to the main control part does not arrive. It is a figure which shows the process at the time of abnormality when the operation instruction | indication from a main control part to a CU communication control part does not arrive. It is a figure which shows the process of the modification at the time of the abnormality which does not reach the operation | movement response shown in FIG. It is a figure which shows the modification of the process at the time of the abnormality which an operation instruction has not reached | attained. (A) is a flowchart which shows the encryption process by SE2 mode, (b) is a flowchart which shows the decryption process by SE2 mode. (A) is a flowchart showing specific control contents of the counter repair process shown in FIGS. 70 and 71, and (b) shows specific control contents of the repair process of the modification shown in FIGS. 72 and 73. It is a flowchart. It is explanatory drawing for demonstrating communication data, such as a command and a response, communicated between the high-order server 801 and CU3. It is explanatory drawing for demonstrating the content of the authentication inquiry ATT. It is explanatory drawing for demonstrating the content of the authentication result CMD. It is explanatory drawing for demonstrating the content of the authentication control information CMD. It is explanatory drawing for demonstrating the content of authentication operation | movement designation | designated CMD. It is a figure which shows the process of the starting sequence as a sequence from the time of power activation of CU to an on-run state. It is a figure which shows the process of the setting value change sequence as a sequence when information changes, such as a change of the setting value of security relevant information, after CU and a main control part will be in an online state. It is a figure which shows the example where operation | use permission was carried out in the authentication sequence when the authentication between the main control part and the CU communication control part is not implemented when it is an online state. It is a figure which shows the example by which the operation | movement with a time limit was permitted by the authentication sequence when the authentication between the main control part and the CU communication control part is not implemented when it is an online state. It is a figure which shows the example made into operation impossible by the authentication sequence when the authentication between the main control part 323 and CU communication control part is not implemented when it is an online state. It is a figure which shows an error notification sequence when a base abnormality is detected based on a base abnormality detection setting value. It is a block diagram which shows the main structures in the case of performing control which records the score at the time of CU failure to a player's own card using POS via a high-order server. It is a flowchart which shows the process performed by each of CU, a high-order server, and POS when control at the time of CU failure is performed. It is a perspective view which shows the state which opened the front door of the slot machine. It is explanatory drawing for demonstrating the various data currently stored in each of a card unit and a slot machine, and its transmission / reception aspect. It is a figure which shows the memory | storage control of the game history data in S machine and CU. It is a front view which shows the card unit and the pachinko machine in another example. It is explanatory drawing for demonstrating the control aspect which memorize | stores game history data in each of the CU side and the P stand side in a modification. It is a figure which shows the memory | storage control of the game history data in S stand and CU in a modification. It is a flowchart figure which shows the subroutine program in the modification of the process at the time of insertion shown in FIG.

  Hereinafter, embodiments of the present invention will be described with reference to the drawings. As a concept of terms used in the present embodiment, “gaming equipment” includes gaming machines (pachinko machines, slot machines, etc.), card units, Z counters, card issuing devices, clearing devices, hall management devices, prize exchanges. It is a concept that includes all devices installed in a game hall such as a device, and the “game device” is a concept that excludes only gaming machines from the “game device”.

  First, referring to FIG. 1, an enclosed circulating pachinko machine (hereinafter abbreviated as “pachinko machine” or “P”) 2, which is an example of a gaming machine, is attached to each gaming island (not shown) arranged in the game hall. A card unit (which may be abbreviated as CU hereinafter) 3 as an example of a gaming device is installed in a one-to-one correspondence with the pachinko machine 2 at a side position on a predetermined side of the pachinko machine 2. Yes. This card unit 3 is issued to a visitor card having a prepaid function which is a game recording medium issued to a general player who has not registered as a member, or to a member player who has registered as a member in the game hall. A pachinko machine that accepts membership cards, which are recorded game recording media, and uses the game value (for example, card balance, number of balls, number of balls, etc.) possessed by the player specified by the record information of the cards. 2 has a function for allowing the ball to be fired and playing. The visitor card and membership card are composed of IC cards. The pachinko machine 2 is provided with a pachinko ball enclosing portion as an example of a game medium enclosing portion, and the pachinko balls enclosed in the pachinko ball enclosing portion are circulated and fired into the game area and collected from the game area. The ball is reduced again to the pachinko ball enclosure.

  This pachinko machine 2 encloses a pachinko ball as an example of a game medium inside, and when the player operates the hitting operation handle 25, the hitting ball launching motor (not shown) is driven to make one shot of the enclosing ball. The game board 26 is configured so that it can be played one by one in the game area 27 in front of the game board 26.

  The pachinko machine 2 shown in FIG. 1 is a so-called first-type pachinko machine, which is not shown, but has a start port (1) and a start where a pachinko ball driven into the game area 27 can win a prize. And a variable display device that variably displays based on the detection signal of the start winning ball won in each of the start ports, and the display result of the variable display device is predetermined. A variable winning ball apparatus (also referred to as a big prize opening) or the like that is opened by a combination of specific identification information (for example, a glance) is provided. The start port (2) is composed of an electric tulip that can be changed between a first state (for example, an open state) that is advantageous to the player and a second state (for example, a closed state) that is disadvantageous to the player.

  When the variable winning ball apparatus is opened, a big hit state is achieved. In addition, since the display result of the variable display device is a combination of predetermined special identification information (for example, a combination of probability variation symbols such as 777) out of a combination of jackpot symbols (grooves), the probability variation big hit state is A probability variation state (probability variation state) in which the occurrence probability of the jackpot is improved after the occurrence of the jackpot state is generated. There are two large winning openings, a large winning opening (1) and a large winning opening (2). For example, when a big win is generated based on a winning at the starting port (1), the big winning port (1) is in the first state, and when a big hit is generated based on a winning at the starting port (2), the big winning port (2) is the first state. Furthermore, the game area 2 is provided with four normal winning holes (1) to (4).

  Pachinko balls that have been driven into the game area 27 win at any of the winning openings or are collected at the out opening (not shown) without winning. The pachinko balls won in the winning opening and the pachinko balls collected in the out mouth (not shown) are again returned to the hitting ball launch position through the collection path in the pachinko machine 2. Then, when the player operates the hitting operation handle 25, the pachinko ball at the hitting position is again shot into the game area 27.

  On the front side of the card unit 3, a bill insertion slot 302 for inserting bills, a protruding portion 305 formed to project forward from the front side of the device, and a card insertion / discharge port for inserting a membership card or a visitor card 309 etc. are provided. A membership card or a visitor card inserted into the card insertion / discharge port 309 is received by a card reader / writer (not shown), and information recorded on the card is read. In the protrusion 305 described above, the display 312 and the member card ID recorded on the member card and the number of stored balls specified by the member ID are used for the surface facing the player when the member card is received. An IR light receiving unit (not shown) for receiving an infrared signal from a remote control (not shown) possessed by an attendant of the game hall, converting it into an electronic signal and outputting it. Is provided.

  Furthermore, a lending button 321, a return button 322, and a call button 798 are provided between the display 312 and the replay button 319. The lending button 321 is a button operated to withdraw the prepaid balance specified by the inserted card and use it in the game. The return button 322 is a button operated when returning the card inserted into the card insertion / discharge port 309. The call button 798 is a button operated by the player when calling a staff member of the game hall.

  The display 312 displays a prepaid balance (also referred to as a card balance or simply a balance) recorded on the inserted game recording medium (card), and displays the number of game balls and other various information described later. In addition to being capable of being displayed, the surface is configured with a transparent touch panel, and various operations can be input by touching various display items displayed on the display unit of the display 312 with a finger.

  When the replay button 319 is operated and the number of possessed balls acquired by the player is recorded on the inserted card, it is possible to play with a pachinko machine by deducting from the number of possessed balls. If the card is a membership card, the number of possessed balls is not recorded, and the stored ball is recorded in the hall management computer 1 or the like, the game can be played by the pachinko machine 2 as it is withdrawn from the stored ball.

  The “storing ball” is a game medium deposited in a game hall, and is generally managed by the hall management computer 1 or other management computer installed in the game hall. On the other hand, “the number of possession balls” is the number of game balls owned by a player as a result of a player playing a game with a gaming machine on a card, and has not yet been deposited in the game hall. It is the number of balls. Generally, the number of balls that the player has acquired on the day of the game hall is called “mochidama”, and the number of balls that the player has acquired before the previous day and that has been deposited in the amusement hall is “save ball”. Say.

  Note that the number of possessed balls may be managed by a management device for managing the number of retained balls set in the game hall. In short, the difference between “sold balls” and “mochidama” is the number of balls that have been deposited in the amusement hall as a result of a storage operation for depositing in the amusement hall, or is still deposited in the amusement hall. It is a point whether it is the number of balls of the stage which is not.

  In the present embodiment, the stored ball data is not directly recorded on the member card, but is stored in the upper server such as the hall management computer 1 in association with the member card number, and the corresponding stored ball can be searched based on the member card number. Has been. On the other hand, Mochitama records directly on the card. However, the present invention is not limited to this, and both may be stored in the upper server in association with the card number.

  The banknote inserted into the banknote insertion slot 302 is taken in by a currency discriminator (not shown), and its authenticity and banknote type are identified.

  A display 54, a chance button 56, and a jog dial 57 are provided below the game area 27 in the pachinko machine 2. The display 54 is composed of a liquid crystal display device, and displays a display screen as will be described later with reference to FIG. 59 to the player. The jog dial 57 selects and designates various display items (icons) and the like on the display screen displayed on the display unit 54 when the player rotates. Then, when the player rotates the jog dial 57, various display items on the display screen displayed on the display 54 are sequentially moved and displayed, and the jog dial 57 is operated by rotating the jog dial 57. When the player presses the chance button 56 after designating the display item that the player wants to select, the selected display item is designated and the player's selection is confirmed.

  Next, with reference to FIG. 2, main data of various data stored on each of the CU side and the P base side and a transmission / reception mode thereof will be described.

  In the present embodiment, the current number of game balls is managed by calculating the fluctuation of the number of game balls on the P side on the CU side. The P game side also calculates and stores the current number of game balls, but the number of game balls is controlled so that when the number of game balls reaches 0 on the P table side, the P game player quickly stops hitting the ball. It is a secondary item used only for performing Since the main management of the number of game balls is performed on the CU side, it is not necessary to provide a function for strictly managing the number of game balls on the P table side, and the cost of the P game can be suppressed as much as possible.

  In particular, compared with the CU, the P units have a short replacement cycle at the game hall and are replaced early. For that reason, the running cost of the game hall where the enclosed game machine is introduced can be reduced by providing the CU side with a main management function related to the number of game balls on the P platform side to reduce the cost on the P platform side. There is an advantage.

  FIG. 2 shows the RAM storage data provided in the CU-side main control unit 323 and the RAM storage data mounted in the P-unit side payout control unit 17. First, when the power is turned on for the first time when the P unit (pachinko machine 2) and the CU (card unit 3) are electrically connected for the first time after being installed in the amusement hall, the payout control unit 17 on the P unit side ( 4) has the main chip ID transmitted from the main control board 16, transmits the main chip ID to the CU side, and transmits the payout chip ID stored in the payout control unit 17 itself to the CU side. To do.

  On the CU side, the transmitted main chip ID and payout chip ID are stored. Next, the connection time, that is, the data of the time when the CU side and the P base side are connected and the communication is started is transmitted from the CU side to the P base side, and the P connection side stores the transmitted connection time. .

  In this state, three pieces of information of the main chip ID, the payout chip ID, and the connection time identified on the CU side are stored on the CU side and the P base side. When the power is turned on thereafter, the three pieces of information, that is, the main chip ID, the payout chip ID, and the previous connection time data are transmitted from the P platform side to the CU side.

  On the CU side, the transmitted data and the already stored data are collated, and it is determined whether or not the same P units as in the previous time are connected. The connection time data includes new connection time data transmitted from the CU side to the P base side when communication between the CU side and the P base side is started each time the power is turned on. Is stored on the P platform side.

  Each time an operation instruction and an operation response are transmitted between the CU side and the P base side, the sequence number (SQN) is incremented by "1" and the sequence number is stored on the CU side and the P base side. The The SQN is a communication number for checking whether or not communication is properly performed by updating the number every time data is transmitted / received between the CU and the P platform. SQN is a number updated at the end of the communication number to be updated.

  A specific aspect of SQN backup in the CU and the P platform in the present embodiment will be described. The CU backs up and stores the SQN transmitted to the P units in response to the operation instruction. When the SQN is received from the P unit, the CU rewrites and stores the SQN stored in the backup with the received SQN. When the next operation instruction is transmitted, the SQN stored in the backup is updated by 1 and transmitted to the P units, and the transmitted SQN is stored in the backup. The CU repeats such processing.

  Similarly, in the P unit, the SQN received from the CU by the operation instruction is backed up and stored, and the next time the operation response is transmitted from the P unit to the CU, the SQN stored in the backup is updated by 1 and transmitted. The transmitted SQN is stored as a backup. When the next operation response is received, the SQN stored in the backup is rewritten and stored in the received SQN. Such processing is repeated on the P platform.

  As shown in FIGS. 41 and 50 to 58 described later, when a communication interruption occurs during communication, the SQN is backed up until the communication is reconnected. Since the operation response is always transmitted regardless of the time of occurrence (see FIGS. 41 and 50 to 58), the SQN stored in the backup until the communication is reconnected is always the last SQN transmitted. It has become. On the other hand, since the CU side is in a state in which an operation instruction is transmitted or an operation instruction is received according to the time of occurrence of communication disconnection (see FIGS. 41 and 50 to 58), the process until the communication is reconnected. The SQN stored during the backup is either the last transmitted or the last received.

  For example, an operation instruction is transmitted from the CU side to the P platform side, and the sequence number n at that time is transmitted, and the transmitted sequence number n is stored on the P platform side. Then, when the operation response is returned from the P platform side to the CU side, the stored sequence number n added by 1 (n + 1) is also transmitted. On the CU side, since the returned sequence number n + 1 is incremented by 1 from the already stored sequence number n, it is determined that data communication has been performed normally. Then, the sequence number of n + 2 is sent to the P platform side.

  Next, the current ball related information (the ball related information being counted) is transmitted from the P platform side to the CU side. This current ball related information is stored in the current ball related information storage area of the RAM. Specifically, when a pachinko ball that has been driven into the game area 27 wins and the additional ball number information is transmitted from the main control board 16 to the payout control unit 17, the additional ball counter is used to calculate the additional ball number. Counting is performed, and the value of the added ball counter (the number of added balls) is transmitted from the P stand to the CU side. If a pachinko ball is fired into the game area 27 and the fired ball is detected by the fired ball detection switch, a subtraction ball counter counts the number of fired balls as a subtraction ball number based on the detection signal, and the subtraction. The value of the number of balls counter (the number of subtraction balls) is transmitted from the P platform side to the CU side.

  Further, the pachinko ball has won the start opening (1) or the start opening (2), and the start opening (1) winning signal or the starting opening (2) winning signal has been transmitted from the main control board 16 to the payout control section 17. In this case, the payout control unit 17 counts the winning numbers on the P platform side using the starting port 1 winning number counter or the starting port 2 winning number counter, and transmits the count value from the P platform side to the CU side. Further, the payout control unit 17 counts the number of game balls at the present time with the game ball number counter based on the number of added balls and the number of subtraction balls, and the count value of the game ball number counter is changed from the P side to the CU side. Send to.

  On the P side, every time the value of the addition ball counter, subtraction ball counter, starting port 1 winning counter, starting port 2 winning counter, and game ball counter is transmitted to the CU side, After storing (rewriting) as backup data in the previous ball related information storage area, the values of the additional ball counter, subtracted ball counter, starting port 1 winning counter and starting port 2 winning counter as current ball related information are set to 0. clear. In the present embodiment, “clear” has the same meaning as “initialization”.

  As a result, in the storage area of the previous ball related information (current ball related information transmitted immediately before), the current ball related information transmitted to the CU side immediately before, the number of added balls, the number of subtracted balls, the number of winnings at the start opening 1 And the data of the number of start-up 2 winnings is stored as backup data. When the current ball related information is not transmitted from the P platform side to the CU side, this backup data includes not only the current counter value but also the previous counter value that was not transmitted at the next transmission. It is intended to enable transmission.

  On the CU side, in the cumulative data storage area in the RAM, the total number of added balls (total number of added balls), the total number of subtracted balls (total number of subtracted balls), the starting port (1) the total number of winning prizes (starting port (1) The total number of times), the start opening (2) the total number of winnings (start opening (2) total number of times), and the number of game balls are stored.

  The total number of added balls and the number of game balls are updated based on the value of the added ball number counter (number of added balls) transmitted from the P platform side. Also, the total number of subtraction balls and the number of game balls are updated based on the value of the subtraction ball counter (number of subtraction balls) transmitted from the P platform side. Further, the starting port (1) total winning number is updated based on the value of the starting port 1 winning number counter transmitted from the P unit, and the value of the starting port 2 winning number counter transmitted from the P unit side is updated. Based on the starting opening (2), the total number of winnings is updated. In this way, the CU can manage the latest number of game balls by updating the number of game balls according to the current ball related information transmitted one by one from the P cars. Similarly, the CU updates the total number of added balls, the total number of subtracted balls, the starting port (1), (2) the total number of winnings by updating the current ball related information transmitted from the P unit one by one. It becomes possible to manage information.

  The breakdown of the “number of added balls” is game ball acquired number information and back ball added information. The back ball is a foul ball. The “subtracted ball count” is also referred to as game ball shot count information.

  The CU receives the count value of the game ball counter (also referred to as game ball count or game ball total count information) in addition to the value of the addition ball counter and the subtraction ball counter from the P side. The number of game balls stored by itself is updated based on the values of the added ball number counter and the subtracted ball number counter, and the count value of the game ball counter sent from the P platform side is not used. For this reason, even if the number of game balls sent from the P side does not match the number of game balls managed on the CU side, the number of game balls on the CU side is sent from the P side. It is never updated with the number of balls.

  Further, the CU collates the value of the game ball counter transmitted from the P platform side with the current number of game balls updated on the CU side, and determines whether or not they match.

  The CU sends a normal (normal) operation request (command) and a normal (normal) operation response (with normal operation) (provided that a match (confirmation confirmation) has been made) Continue to receive (response). On the other hand, when it is determined that they do not match, the CU performs control to shift to an error state.

  As control to shift to the error state, the CU performs recovery processing, transmits a communication start request command to the P units, and uses the data correction request Bit1 data included in the command to determine the number of P game balls ( Processing to correct the game ball total number information) to the corrected number of game balls (game ball total number information) on the CU side is performed. As the correction process, correction is made to the number of game balls managed on the CU side. Instead, the number of game balls managed on the CU side and the game stored on the P stand side are stored. You may correct | amend to the average value with the number of balls.

  Further, instead of such correction processing, for example, an error notification is given by the display 312 or an error notification signal indicating that an error has occurred is transmitted to the hall management computer 1 (in this case, hall management). An error notification by the computer 1 may be performed), or a predetermined notification that prompts an artificial response by a staff member may be performed.

  In this way, the CU receives the values of the various counters transmitted from the P platform side, and calculates and manages the current number of game balls based on the value of the addition / subtraction ball number counter in particular. Has a main management function. For this reason, it is not necessary to provide a main management function for the P platform. Accordingly, the manufacturing cost of the gaming machine can be reduced. In the present embodiment, the number of game balls is also stored on the P side for the purpose of allowing the game to be immediately prohibited when the number of game balls reaches zero. However, a game ball counter for storing the number of game balls on the P platform side may not be provided.

  The CU performs a game ball number matching determination process for determining whether or not they match by comparing the calculated number of game balls at the present time with the value of the game ball number counter transmitted from the P platform side. And a function of performing control to shift to an error state when there is no match (error control at the time of mismatch).

  As described above, in this embodiment, the number of game balls is also stored on the P platform side, but it is determined whether or not the number of game balls matches the number of game balls managed and stored on the CU side. (CU side function). Therefore, even if a situation occurs in which the number of game balls stored on the gaming machine side does not match the number of game balls managed and stored on the CU side due to fraud or other circumstances, it can be checked. Here, although the determination function is provided on the CU side, for example, the number of game balls stored on the CU side and the game stored on the P stand side by the hall management computer 1 connected to the CU. The number of balls may be received and it may be determined whether or not both are consistent.

  As shown in FIG. 2, the CU further includes a storage area for storing a holding ball (storage ball) and a storage area for storing a card balance of a received (inserted) card. The main control unit 323 (see FIG. 4) of the CU receives the ball in response to an input requesting the use of the ball (for example, pressing input of a replay button (also referred to as a replay button) 319 provided on the CU). A predetermined number of balls are subtracted from the storage area to be stored. In addition, the main control unit 323 of the CU subtracts a predetermined value from a storage area for storing the card balance in response to an input requesting use of the card balance (for example, pressing input of the lending button 321).

  In addition, when the player performs an operation to deduct the value from the player's own game value (for example, the prepaid balance, the number of balls, or the number of balls) and use it for the game, the amount of the deducted ball The addition request ball number for adding the number to the game ball counter is transmitted from the CU side to the P stand side. On the P side, in response to this, the game ball number counter is added and updated.

  On the other hand, when an operation for performing a so-called wagon service order in which a player-owned game value is withdrawn and exchanged for a drink or the like is executed, the number of balls requested to be subtracted from the player-owned game value is To the P platform side. On the P platform side, the game ball counter is decremented and updated.

  FIG. 3 is an explanatory diagram for explaining a control mode in which game history data is stored on each of the CU side and the P platform side. Note that the game history data is data indicating a history of a game state generated when a player plays a game with the P table 2. For example, the start history (variable) is a variable display count of a variable display device. Display device variation start count), number of occurrences of jackpot, number of starts from previous jackpot to current jackpot, base value, and the like. This game history data includes game history data throughout the day on the P machines and game history data aggregated for each player on the P machines. As will be described in detail later, the former game history data is stored in the P game history data storage unit provided on both the P machine side and the CU side, and the latter game history data is stored on the P machine side and the CU side. Are stored in the current player game history data storage unit provided in both of them or in the backup storage unit provided only on the P platform side. In other words, the game history data throughout the day on the P machine and the game history data aggregated for each player on the P machine are stored in both the CU 3 and the P machine 2.

  Referring to FIG. 3, when a player plays a game with P stand 2, various game data such as a big hit and start (variable display device fluctuation start) are generated, and the game data is input to game history data management unit 291. Is done. The normal game data generated as a result of the player playing the game on the P units is totaled, for example, by the normal mode processing unit of the game history data management unit 291 provided in the payout control unit 17, and the totaled game history The data is input to the display effect control unit 292 provided on the display effect control board (not shown), and the game history data is accumulated and stored in the P game history data storage unit. The present P game history data storage unit can store game history data for 10 days including today's game history data. When the player operates the jog dial 57 and the chance button 56 described above to select and display the game history data on the day to be displayed, the game history data on the selected day is displayed on the display 54. The communication between the display effect control unit 292 and the game history data management unit 291 is a one-way communication from the game history data management unit 291 to the display effect control unit 292.

  On the other hand, the above-described game data input to the game history data management unit 291 is also transmitted to the game history data management unit 391 provided in the main control unit 323, for example, via the CU communication control unit 80 of the CU3. The game data is aggregated by the normal mode processing unit of the game history data management unit 391. The totaled game history data is stored in the P game history data storage unit of the data storage unit 392. This P stand game history data storage unit on the CU3 side is configured to store only the game history data of the day. If the player touches the display 312 configured with a touch panel to display the P game history data, the operation signal is input to the game history data management unit 391, and the game history data is displayed. Under the control of the management unit 391, the game history data of the day stored in the current P game history data storage unit is displayed on the display 312.

  On the other hand, the CU 3 is configured so that the game history data of the other P units 2 installed in the game hall can be displayed on the display 312. Specifically, when the player touches an operation button icon of the other P device information display displayed on the display 312, the operation signal is input to the game history data management unit 391, and the other P device information is displayed. The other P machine game history data request notification is transmitted from the game history data management unit 391 to the hall management computer 1 by the operation of the processing unit. The hall management computer 1 receives the game history data of the other P machines 2 via the other CU 3, and returns the received other P machine game history data to the game history data management unit 391. The game history data management unit 391 processes the returned other P game history data by the other P information processing unit, and processes the processed other P game history data in the data storage unit 392. Store in the history data storage unit. The stored other P game history data is displayed on the display 312.

  Furthermore, in the present embodiment, it is possible to aggregate game history data for each player who played a game on the P platform 2 and display the game history data for each player on the display units 54 and 312. In order to tabulate the game history data for each player, it is necessary to distinguish the players who are playing the game on the P unit 2. C-ID (card ID) stored in a member card possessed by a player who is a member is used as player identification information for distinguishing the player. The C-ID is an ID that is stored in a card and identifies the cards. The member card is issued to a player who becomes a member in the game hall, and the member and the member card have a one-to-one correspondence. Therefore, the C-ID stored in the member card can identify not only the member card but also a member player. Therefore, the C-ID stored in the member card functions as player identification information for identifying the player.

  As will be described in detail later, when a player who is a member inserts a member card into the CU 3, the C-ID stored in the inserted member card is read, and the C-ID is stored in the data storage unit 392. It is stored in the player game history data storage unit. On the other hand, the read C-ID is transmitted from the CU 3 to the P stand 2, and the P stand 2 transmits the received C-ID from the game history data management unit 291 to the display effect control unit 292, thereby displaying the display effect. The current player game history data storage unit of the control unit 292 is stored.

In this state, when the player plays a game with the P stand 2, the game history data from when the C-ID is stored in the current player game history data storage unit is the current player of the display effect control unit 292. Cumulatively stored in the game history data storage unit. If the player operates the jog dial 57 and the chance button 56 to display his / her own game history data, the game history a stored in the current player game history data storage unit is displayed on the display. 54. In addition, the game history data management unit 391 also counts the game history data by the normal mode processing unit based on the game data transmitted from the P unit 2, and stores the C in the current player game history data storage unit of the data storage unit 392. -The game history data accumulated by the normal mode processing unit from the stage where A is stored as an ID is accumulated and stored in the current player game history data storage unit. When the player touches the display 312 including a touch panel and performs an operation for displaying his / her game history data, the operation detection signal is input to the game history data management unit 391 and the game history data management unit 391. Controls the display 312 to display the game history a stored in the current player game history data storage unit of the data storage unit 392.

  As described above, the game history data throughout the day on the P platform and the game history data aggregated for each player on the P platform are displayed on both the P platform side and the CU side by the display switching operation. One game history data and the other game history data are switched and displayed.

  When a player playing a game on the P stand 2 pushes the return button 322 to return the member card inserted, the member card is discharged from the CU 3. Then, the game history data management unit 391 erases the C-ID and game history data stored in the current player game history data storage unit of the data storage unit 392. As a result, even if the display 312 is operated to display the game history a stored in the current player game history data storage unit, the game history a is not displayed on the display 312.

  On the other hand, when the membership card is discharged from CU3, a card return notification is transmitted from CU to P stand 2, and the game history data management unit 291 that receives the card return notification returns the card to the display effect control unit 292. Send a notification. In response to this, the display effect control unit 292 stores A as the C-ID stored in the current player game history data storage unit and the game history data a in the backup data storage unit, so that the current player game The C-ID and game history data in the history data storage unit are deleted. As a result, even if an operation for displaying the game history data a on the display 54 is performed, the game history data a is not displayed on the display 54.

  The return button 322 is normally operated when the game by the P table 2 is ended. However, the player temporarily stops the game, returns to the P table 2 where the game has been played again, and plays the game again. May resume. In such a case, usually after performing a game interruption operation described later, the card is ejected, the card is brought to the player, the player completes a small use, and the player returns to the same P stand 2 to return the card to the CU3. Although it is inserted, the player may press the return button 322 and remove the card from the P stand 2 without performing such a game interruption operation.

In such a case, when the same player who has left the P table 2 without playing another player returns to the P table 2 and inserts the membership card into the CU 3 again, he leaves. It is desirable to take over the previous game history data of the player and add and update the game history data after the game has been resumed to the game history data for cumulative storage. In order to realize this, the C-ID and game history data are backed up and stored in the backup data storage unit provided in the display effect control unit 292 described above. When the player who has returned to the P table 2 inserts the member card into the CU 3, the card information of the member card is read and the inserted card information including the C-ID of the member card is transferred from the CU 3 to the P table 2. Sent. In the P table 2, the game history data management unit 291 receives the C-ID included in the inserted card information, and transmits the received C-ID to the display effect control unit 292. The display effect control unit 292 compares the transmitted C-ID with the C-ID stored in the backup data storage unit and determines whether or not they match. If they match, it is determined that the same player as the player who has left the seat has resumed the game, and A as the C-ID and a as the game history data stored in the backup data storage unit are stored in the current game. It returns to the player game history data storage unit and stores it in the current player game history data storage unit. Then, the stored data in the backup data storage unit is deleted. Game history data generated after the player played a game with the P unit 2 in a state where the game history data stored in the backup data storage unit is stored in the current player game history data storage unit and taken over Is added and updated to the game history data a stored in the current player game history data storage unit and accumulated.

  On the other hand, if it is determined that the comparison result between the C-ID included in the inserted card information transmitted from the CU 3 and the C-ID stored in the backup data storage unit does not match, the backup data A as C-ID and a as game history data stored in the storage unit are deleted.

  As a modification, the following control may be performed after the communication between the game history data management unit 291 and the display effect control unit 292 is bidirectional communication.

  A comparison result between the C-ID stored in the backup data storage unit by the display effect control unit 292 and the C-ID transmitted from the CU 3, and a determination result as to whether or not they match is the display effect control unit. 292, and transmitted to the game history data management unit 391 of CU3 via the game history data management unit 291. In the game history data management unit 391, if the transmitted C-ID determination result matches, the game history data management unit 391 uses the C-ID determined to match as the current player game history of the data storage unit 392. Store in the data storage unit. In the case of the determination result that the C-ID determination results match, the game history data a is included in the C-ID determination result. The game history data management unit 391 that has received the game history data a stores the game history data a in the current player game history data storage unit of the data storage unit 392. Thereafter, if the player plays a game with the P stand 2, the game data is transmitted to the game history data management unit 391, and is aggregated by the normal mode processing unit of the game history data management unit 391. Is added and updated to the game history data a stored in the current player game history data storage unit and accumulated. In this state, if the player performs an operation of touching the display 312 to display his / her own game history data, the game history data stored in the current player game history data storage unit is displayed as described above. Displayed by the instrument 312.

  Note that the backup data storage unit of the display effect control unit 292 may be controlled so as to erase the backup data stored when a predetermined time (for example, 20 minutes) has elapsed.

  Furthermore, in this embodiment, a test hit mode (test mode) processing function is provided. This test hit mode is a mode in which a game machine manufacturer performs a shipment inspection at the time of game machine manufacture, an operation check at the time of game machine installation at a game hall, a display of the number of balls such as safe / out, a base check at the time of nail adjustment, etc. . When the attendant at the game hall performs an operation of shifting to the trial hit mode as an example of the non-operation mode to the CU 3 by using the remote controller, the trial hit mode processing unit of the game history data management unit 391 performs processing for shifting to the trial hit mode. Specifically, the test hit mode notification is transmitted to the P stand 2, and the game history data management unit 291 that has received the test hit mode notification transmits the test hit mode notification to the display effect control unit 292 by the operation of the test hit mode processing unit. . In response to this, the display effect control unit 292 stores game history data based on game data generated thereafter in the trial hit game history data storage unit. The trial hit game history data storage unit is configured by a storage area different from the P-unit game history data storage unit, the current player game history data storage unit, and the backup data storage unit described above. The game history data in the trial hit mode is stored in the part.

  The game history data stored in the trial hit game history data storage unit is displayed on the display 54.

  Also in CU3, by the operation of the trial hit mode processing unit of the game history data management unit 391, control is performed such that the P game history data transmitted from the P stand 2 is displayed on the display 312 as game history data in the trial hit mode. It is. The game history data based on the game data is aggregated, and the aggregated game history data is displayed on the display 312 as game history data in the trial hit mode.

  In this test hit mode, the number of added balls and subtracted balls as current ball related information, the number of added balls and subtracted balls as previous ball related information, and the number of game balls are transmitted from P stand 2 to CU3. In CU3, the total added ball number, the total subtracted ball number, and the game ball number described in FIG. 2 are not updated. When managing the addition / subtraction of the number of game balls on the P platform side in the test hit mode, the following control is performed.

  The P stand 2 that has received the test hit mode notification from the CU 3 saves the number of game balls shown in FIG. 2 stored in the normal mode in which the player is playing a game in the test hit mode storage area, Clear the number of game balls in mode. Then, the number of game balls in the trial hit mode is stored in the cleared storage area in the normal mode, and is added or subtracted. If the operation of canceling the test hit mode is performed by the remote controller and the normal mode return notification is transmitted from the CU 3, the P stand 2 clears the number of game balls added / subtracted during the test hit mode, and then in the test hit mode described above. The number of game balls retreated in the storage area is returned to the storage area for the number of game balls in the normal mode, and the game by the player is resumed by taking over the restored number of game balls. When the game is resumed by the player, as described based on FIG. 2, the number of added balls and the number of subtracted balls as current ball related information, the number of added balls and the number of subtracted balls as previous ball related information, The number of game balls is transmitted from the P stand 2 to the CU 3, and the CU 3 restarts the update of the new ball number from the total added ball number, the total subtracted ball number, and the game ball number immediately before the test hit mode.

  As another control method, even in the trial hit mode, the number of added balls, the number of subtracted balls and the number of game balls as current ball related information, and the number of added balls and subtracted balls as previous ball related information are May be transmitted to CU3. In that case, the P stand 2 that has received the trial hit mode notification from the CU 3 stores the number of added balls and the number of subtracted balls as the current ball related information shown in FIG. 2 stored in the normal mode in which the player is playing a game. The number of game balls and the number of added balls and the number of subtracted balls as previous ball related information are saved in the test hit mode storage area, and the ball number information in the normal mode is cleared. Then, the number of added balls, the number of subtracted balls and the number of game balls in the trial hit mode, and the number of added balls and the number of subtracted balls as the previous ball related information are stored in the cleared normal mode storage area and added / subtracted. . In CU3, the total added ball number, the total subtracted ball number, and the game ball number are saved in the test hit mode storage area when the test hit mode is shifted, and then the ball number information in the normal mode is cleared. And based on the number of added balls, the number of subtracted balls and the number of game balls as the current ball related information in the trial hit mode transmitted from the P stand 2, and the number of added balls and the number of subtracted balls as the previous ball related information The total added ball count, total subtracted ball count, and game ball count during the test hit mode are calculated and stored. On the other hand, at the end of the test hit mode, on the P platform, the number of added balls, the number of subtracted balls and the number of game balls as current ball related information added / subtracted during the test hit mode, and the number of added balls and subtracted balls as the previous ball related information Are cleared, and the number of added balls, the number of subtracted balls and the number of game balls as current ball related information saved in the test hit mode storage area, and the number of added balls and subtracted as previous ball related information The number of balls is returned to the storage area for the number of game balls in the normal mode, and the game by the player is resumed by taking over the restored ball number information. Further, similarly in CU3, at the end of the test hit mode, after clearing the total number of added balls, the total number of subtracted balls, and the number of game balls in the test hit mode, the test hit saved in the test hit mode storage area described above is used. When the mode is changed, the total added ball count, the total subtracted ball count, and the game ball count are returned to the storage area for the game ball count in the normal mode, and the game is resumed by taking over the restored ball count information.

  Even when in the test hit mode, the number of added balls, the number of subtracted balls and the number of game balls as current ball related information, and the number of added balls and subtracted balls as previous ball related information are transmitted from the P stand 2 to the CU 3 As yet another example of the above, an operation command for correcting the number of balls information may be transmitted from the CU 3 to the P stand 2 when the mode is changed. Specifically, the CU 3 transmits an operation command for clearing the ball number information to the P platform 2 together with the test hit mode notification. The P stand 2 that has received it transmits the number of added balls, the number of subtracted balls and the number of game balls as current ball related information, and the number of added balls and subtracted balls as previous ball related information to the CU3. Clear the ball count information. CU3 is the total number of added balls based on the number of added balls, the number of subtracted balls and the number of game balls as the current ball related information transmitted from the P stand 2, and the number of added balls and subtracted balls as the previous ball related information. Then, after calculating the total number of subtracted balls and the number of game balls and saving the number of balls information in the test hit mode storage area, the number of balls information in the normal mode is cleared. And based on the number of added balls, the number of subtracted balls and the number of game balls as the current ball related information in the trial hit mode transmitted from the P stand 2, and the number of added balls and the number of subtracted balls as the previous ball related information The total added ball count, total subtracted ball count, and game ball count during the test hit mode are calculated and stored. On the other hand, at the end of the test hit mode, the CU 3 clears the total number of added balls, the total number of subtracted balls, and the number of game balls in the test hit mode, and at the same time, the total number of added balls and the total subtraction saved in the test hit mode storage area. The number of balls and the number of game balls are returned to the storage area in the normal mode. And CU3 transmits the operation command which clears ball number information to the P stand 2 with the notice of the number of returned game balls and the return notification to normal mode. Receiving this, the P stand 2 clears the number of added balls, the number of subtracted balls and the number of game balls as the current ball related information calculated during the test hit mode, and the number of added balls and the subtracted balls as the previous ball related information. At the same time, the received number of game balls is stored, and the game is resumed by taking over the number of game balls.

  As described above, when managing the addition / subtraction of the number of game balls on the P platform side in the trial hit mode, control is performed to display the added / subtracted number of game balls on the display 54 of the P stand 2 during the trial hit mode. . In addition, even in the trial hit mode, the number of added balls, the number of subtracted balls and the number of game balls as current ball related information, and the number of added balls and subtracted balls as previous ball related information are transmitted from P stand 2 to CU3. When doing so, the display of the number of game balls may also be controlled on the display 312 of the CU3.

  Note that when returning from the test hit mode to the normal mode, the setting information (high probability state, etc.) on the P stand 2 side that affects the appearance may not be saved. That is, when the high probability state or the like is entered during the trial hit mode and the trial hit mode is terminated in that state, the normal mode may be started with the high probability state or the like.

  In the display 312, operation button icons such as a recount button are also displayed, and after the nail master who has viewed the game history data in the test hit mode displayed in the total display adjusts the nail based on the game history data, the game in the test hit mode is performed again. There is a case where it is desired to check the result of the nail adjustment by collecting the history data and displaying it. In such a case, the recount button icon is touch-operated. Then, the operation detection signal is input to the game history data management unit 391, and a recounting notice is transmitted from the game history data management unit 391 to the game history data management unit 291 of the P 2. Receiving it, the game history data management unit 291 transmits a recount command to the display effect control unit 292. In response to this, the display effect control unit 292 once erases the game history data stored in the test hit game history data storage unit, and then replays game data based on the game data generated thereafter, and stores the test hit game history data. Control to be stored in the unit is performed. Then, the game data of the trial hit game history data storage unit that has been newly counted is displayed on the display 54. On the other hand, on the CU 3 side, the trial hit mode processing unit uses the game history data based on the game data transmitted from the P unit 2 after the detection signal of the touch operation of the recount button icon is input to the game data management unit 391. And the trial hit mode game history data that has been added up again is displayed on the display 312.

  Then, when the remote control is operated to cancel the trial hit mode, a notification for releasing the trial hit mode is transmitted from the game history data management unit 391 to the P-unit 2, and the game history data management unit 291 that has received the notification transmits the notification. The notification is transmitted to the display effect control unit 292, and the display effect control unit 292 that receives the notification erases the game history data stored in the trial hit game history data storage unit.

  When there are no more game balls in the trial hit mode, a game ball addition command is sent from the CU side to the P units to allow game balls to be added. When there are no more game balls in the test hit mode, the game machine may automatically add game balls without sending a game ball addition command from the CU side to the P units, thereby enabling a game. Furthermore, instead of automatically adding game balls on the gaming machine side, it may be controlled so that the game can continue even if the game balls become zero.

  Similarly, in the case of a slot machine 2S, which will be described later, when there are no more points in the trial hit mode, a score addition command is sent from the CU side to the S units to allow the game to be added.

  The P table 2 is provided with a RAM clear switch 293. The RAM clear switch 293 is used to clear the stored data of the RAM by outputting a RAM clear signal to the main control board 16 and the payout control unit 17 described above when operated. If the RAM clear output signal is input to the game history data management unit 291, the RAM clear signal is input to the display effect control unit 292, and the data stored in the backup data storage unit of the display effect control unit 292 is stored. At the same time, the oldest stored data of 10 days of stored data in the P game history data storage unit is deleted, and the remaining 9 days of stored data are shifted one by one to the old day storage area. Remembered. As a result, the newest storage area (current day storage area) becomes an empty area. Today's game history data is stored in this empty area (current day storage area). In response to the output of the RAM clear signal, the game history data of the newest day (game history data before shifting to the old day) in the P game history data storage unit is displayed on the display effect control unit 292, game history. The data may be transmitted to the hall management computer 1 via the data management unit 291 and the game history data management unit 391 so that the data is backed up and stored in the hall management computer 1.

  In addition, the game history data management unit 291 that has received the RAM clear signal from the RAM clear processing unit 293 transmits a clear notification to the CU 3, and the game history data management unit 391 that has received the clear notification receives the P of the data storage unit 392. Control is performed to erase the game history data stored in the table game history data storage unit. As a result, the display of the current P game history data on the display 312 is erased (cleared).

  Note that while the card is held in the CU3, even if a RAM clear signal is output from the RAM clear switch 293, the game history data is not cleared.

  FIG. 4 is an explanatory diagram for explaining notification processing when an abnormality is detected as a result of mutual authentication.

  Referring to FIG. 4, when an abnormality occurs in main control unit 323, CU communication control unit 80, P-unit communication control unit 81, payout control unit 17, or main control board 16, this is indicated by an arrow in FIG. Notification is made. The abnormality mentioned here is that the main control unit 323, the CU communication control unit 80, the P-unit communication control unit 81, the payout control unit 17, or the main control board 16 is replaced with another illegally manufactured one, noise, etc. This includes a case where a malfunction occurs or a failure occurs due to the above, or an offline state due to disconnection or the like. The key management server 800 shown in FIG. 4 is a key management server that stores the SID and authentication key of the CU communication control unit in association with each SID of the main control unit. The key management server 803 is a key management server that can communicate with the main control board 16.

  First, when an abnormality occurs in the CU communication control unit 80 of the card unit 3, the main control unit 323 detects an abnormality as a result of the mutual authentication performed between the main control unit 323 and the CU communication control unit 80 described above. Detect. In this mutual authentication, in addition to the above-described serial ID authentication and device authentication, device authentication using a session key described later (see FIG. 6) is also included. .

  The serial ID (also referred to as SID) includes the serial ID (also referred to as BB serial ID) of the main control unit 323 and the serial ID of the CU communication control unit 80. In the ROM chip manufacturing stage of the CU communication control unit 80, The SID 80 (unique ID) of the CU communication control unit is stored. Further, at the manufacturing stage of CU3, the serial ID of the main control unit is written in the EEPROM 808 by a ROM writer or the like. The serial ID authentication includes BB serial ID authentication and CU communication control unit serial ID authentication, which will be described later.

  When the main control unit 323 detects an abnormality in the CU communication control unit 80, the main control unit 323 notifies the host server 801 to that effect and transmits an abnormality notification command to the display control unit 797 of the card unit 3. Then, the display control unit 797 is controlled to display that the display 312 indicates that an abnormality has occurred, and an abnormality notification lamp (not shown) is turned on or blinked to notify the abnormality. Further, the main control unit 323 transmits a signal indicating that an abnormality has occurred from the external communication unit to the hall management computer 1.

  Further, the occurrence of abnormality by the CU communication control unit 80 is also detected by the P-unit communication control unit 81. When the P-unit communication control unit 81 detects the occurrence of an abnormality, it notifies the payout control unit 17 to that effect, and the payout control unit 17 further notifies the main control board 16 to that effect. In response to the abnormality occurrence signal, the main control board 16 outputs a signal for turning on or blinking an abnormality notification lamp provided on the film plate or the like, and a signal indicating that an abnormality has occurred to the hall management computer 1. Send.

  When an abnormality occurs in the main control unit 323 of the card unit 3, the CU communication control unit 80 detects the occurrence of the abnormality by the above-described mutual authentication, and sends a signal (abnormality notification signal) indicating that to the P unit communication control unit. 81 is notified. In response to this, the P-unit communication control unit 81 notifies the payout control unit 17 that an abnormality has occurred. In response to this, the payout control unit 17 notifies the main control board 16 that an abnormality has occurred. As described above, the main control board 16 performs control for operating the abnormality notification lamp and transmits a signal indicating that an abnormality has occurred to the hall management computer 1.

  When the CU communication control unit 80 detects an abnormality in the P-unit communication control unit 81, the CU communication control unit 80 notifies the main control unit 323 of the fact, and the main control unit 323 notifies the host server 801 of the fact.

  As described above, when the CU communication control unit 80 detects an abnormality in the main control unit 323, the CU communication control unit 80 notifies the P unit communication control unit 81 to that effect. To the main control unit 323, and the notification destination of the occurrence of abnormality by the CU communication control unit 80 is different. The reason for this is that even if the control unit in which an abnormality has occurred is notified that an abnormality has occurred, no abnormality notification control is performed and no abnormality prevention measure is provided. Moreover, the CU communication control unit 80 has a communication control function but does not have an abnormality notification control function. Therefore, the abnormality notification cannot be controlled by itself, and for this reason, notification is made that an abnormality has occurred in the direction of the control unit opposite to the control unit where the abnormality has occurred. The P-unit communication control unit 81 that has received the notification of the occurrence of the abnormality from the CU communication control unit 80 notifies the payout control unit 17 to that effect, and the payout control unit 17 notifies that the abnormality has occurred. To notify. Upon receiving the notification, the main control board 16 performs the same control for abnormality notification as described above.

  When an abnormality occurs in the P-unit communication control unit 81, the fact is detected by the CU communication control unit 80, and the main control unit 323 is notified that the abnormality has occurred, and the main control unit 323 notifies the abnormality notification described above. In addition to performing control, the host server 801 is notified that an abnormality has occurred. Further, when an abnormality occurs in the P-unit communication control unit 81 and no abnormality occurs in the payout control unit 17, the fact that the payout control unit 17 has detected an abnormality is detected and the fact that the abnormality has occurred is mainly described. Notify the control board 16. In response to the notification, the main control board 16 performs the above-described abnormality notification control.

  When an abnormality occurs in the payout controller 17, the main control board 16 detects the abnormality and performs the above-described abnormality occurrence control. If an abnormality has occurred in the payout control unit 17 and no abnormality has occurred in the P-unit communication control unit 81, the P-unit communication control unit 81 detects the occurrence of the abnormality and indicates that the abnormality has occurred. Notify the controller 80. Upon receiving the notification, the CU communication control unit 80 notifies the main control unit 323 that an abnormality has occurred. In response to the notification, the main control unit 323 performs the above-described control for abnormality notification and notifies the host server 801 that an abnormality has occurred.

  When an abnormality occurs in both the P-unit communication control unit 81 and the payout control unit 17, the main control board 16 detects the occurrence of the abnormality and the CU communication control unit 80 also detects the occurrence of the abnormality.

  When an abnormality occurs in the main control board 16, the payout control unit 17 detects the abnormality and notifies the P-unit communication control unit 81 that the abnormality has occurred. In response to this, the P-unit communication control unit 81 notifies the CU communication control unit 80 that an abnormality has occurred, and the CU communication control unit 80 receives the notification and notifies the main control unit 323 that an abnormality has occurred. . In response to this, the main control unit 323 controls the above-described abnormality notification and notifies the host server 801 that an abnormality has occurred.

  As described above, the LSI 799 detects and notifies the main control board 16 when an abnormality occurs in the CU communication control unit 80, and detects the abnormality when an abnormality occurs in the main control board 16. The CU communication control unit 80 is notified that an abnormality has occurred. Similarly to the above-described CU communication control unit 80, this LSI 799 also does not perform control for abnormality notification even if notification is given to the control unit in which the abnormality has occurred when it is detected that abnormality has occurred. Therefore, a notification is sent to the control unit or control board on the opposite side of the control unit where the abnormality has occurred. The CU communication control unit 80 and the LSIs 799 and 999 are not connected to abnormality notification means such as an abnormality notification lamp or an abnormality notification display, and have a function of performing abnormality notification control themselves even when an abnormality is detected. Not.

  In the control of FIGS. 3 and 4 described above, the pachinko machine 2 is shown as an example of the gaming machine, but a slot machine 2S described later may be used as an example of the gaming machine.

  FIG. 5 is a diagram showing a configuration of a frame used for communication in the gaming machine. In FIG. 5, transmission data (business plan text) is always transmitted in units of one frame. One frame of transmission data includes a data length, a command code, a command size, command data, a random number, a MAC, and a CRC.

  “Data length” indicates the data length of transmission data (command code to MAC). “Command code” is a command code of a business plan. “Command size” is the data size of command data. “Command data” is data of a business plan. “Random number” is a random number for padding characters for encryption. The padding character for encryption is to add the padding character for encryption with a predetermined data length to the message (plaintext) so that the message (plaintext) to be encrypted can be encrypted with an encryption key with a data length of 16 bytes. In order to match the data length of the encryption key.

  “MAC” is a message authentication code. “CRC” is a CRC-ITU-T system and is used for error detection of communication frames.

  The command size, command data, and random number are the MAC target range. Command size, command data, random numbers, and MAC are encryption target ranges. The CRC calculation target range is command code to MAC. Each data length of the data length, command code, and command size is 1 byte. The data length of the MAC is 16 bytes, and the data length of the CRC is 2 bytes. The random number and the MAC are added only at the time of encryption.

  Next, although not shown, an outline of commands and responses performed between the card unit and the pachinko machine will be described.

  Data with a transmission direction of CU to P units is a command, and data with a transmission direction of P units to CU is a response.

  A recovery request command is transmitted from the main control unit 323 to the CU communication control unit 80. This recovery request command is for requesting transmission of recovery information to the P units.

  A response of the recovery response is transmitted from the CU communication control unit 80 to the main control unit 323. The response of this recovery response is to transmit the recovery information held by the P units to the CU.

  A communication start request is transmitted from the CU to the P units. At that time, in communication from the main control unit 323 to the CU communication control unit 80, ciphertext encrypted using the session key in the second security mode (hereinafter referred to as SE2 mode) is transmitted. The SE2 mode is a high security mode in which a count value (key) that is a source of data for performing an exclusive OR (exclusive OR) on plaintext is added and updated. This communication start request is a request for clearing recovery information and backing up the connection ID (communication start time) to the P units.

  A communication start response is transmitted from the P platform to the CU. At that time, for communication from the CU communication control unit 80 to the main control unit 323, ciphertext encrypted using the session key in the SE2 mode is transmitted. This communication start response notifies the CU that the recovery information has been cleared and the connection ID (communication start time) has been backed up.

  An operation instruction is transmitted from the CU to the P units. At that time, in the communication from the main control unit 323 to the CU communication control unit 80, ciphertext encrypted using the session key in the SE2 mode is transmitted. This operation instruction instructs a game operation to the P units and requests transmission of game table information such as game balls.

  An operation response is transmitted from the P platform to the CU. At that time, for communication from the CU communication control unit 80 to the main control unit 323, ciphertext encrypted using the session key in the SE2 mode is transmitted. This operation response notifies the CU of the execution result of the game operation instruction and also notifies game table information such as game balls.

  A communication disconnection request is transmitted from the CU to the P platform. At that time, in the communication from the main control unit 323 to the CU communication control unit 80, ciphertext encrypted using the session key in the SE2 mode is transmitted. This communication disconnection request is a request for disconnecting the communication connection to the P units.

  A communication disconnection response is transmitted from the P platform to the CU. At that time, for communication from the CU communication control unit 80 to the main control unit 323, ciphertext encrypted using the session key in the SE2 mode is transmitted. This communication disconnection response notifies the CU that a communication disconnection request command has been received.

  A card insertion request is transmitted from the CU to the P units. At that time, in the communication from the main control unit 323 to the CU communication control unit 80, ciphertext encrypted using the session key in the SE2 mode is transmitted. This card insertion request is for notifying the ID and type of the card inserted into the P cards. Card types include general cards and membership cards.

  A card insertion response is transmitted from the P platform to the CU. At that time, for communication from the CU communication control unit 80 to the main control unit 323, ciphertext encrypted using the session key in the SE2 mode is transmitted. This card insertion response is to transmit a card insertion request response to the CU. Specifically, OK or NG is transmitted as the processing result of the card insertion request. However, there is no NG response at present.

  A card return request is transmitted from the CU to the P platform. At that time, in the communication from the main control unit 323 to the CU communication control unit 80, ciphertext encrypted using the session key in the SE2 mode is transmitted. This card return request is to transmit a card return request to the P units.

  A card return response is transmitted from the P platform to the CU. At that time, for communication from the CU communication control unit 80 to the main control unit 323, ciphertext encrypted using the session key in the SE2 mode is transmitted. This card return response is to transmit a card return request response to the CU. Specifically, OK or NG is transmitted as the processing result of the card return request. However, there is no NG response at present. The ID and type of the returned card are also transmitted.

  A mode change request is transmitted from the CU to the P units. At that time, in the communication from the main control unit 323 to the CU communication control unit 80, ciphertext encrypted using the session key in the SE2 mode is transmitted. This mode change request is for requesting the P units to shift to the operation mode. Specifically, the type of operation mode and detailed contents at the time of mode transition are transmitted. As the types of operation modes, there are a sales mode, a trial hit mode, a maintenance mode, and a test mode. When the mode transition destination is the maintenance mode or the test mode, the detailed contents are notified by the transition additional information. The test mode may not be requested from the CU.

  A mode change response is transmitted from the P platform to the CU. At that time, for communication from the CU communication control unit 80 to the main control unit 323, ciphertext encrypted using the session key in the SE2 mode is transmitted. This mode change response is to transmit a mode change request response to the CU. Specifically, OK or NG is transmitted as the processing result of the mode change request. In the case where the P units are already in the designated operation mode, OK is returned as a processing result.

  An outline of commands and responses performed between the main control unit 323 and the CU communication control unit 80 will be described. Although not illustrated, the transmission direction is a command from the main control unit 323 to the CU communication control unit 80, and the transmission direction is data from the CU communication control unit 80 to the main control unit 323.

  A BB serial ID authentication request 1 for requesting authentication of the BB serial ID is transmitted from the main control unit 323 to the CU communication control unit 80. This BB serial ID authentication request will be described in detail later. The BB serial ID is the SID of the main control unit 323 described above. This command is not transmitted up to P units, but is exceptional.

  A BB serial ID authentication response 1 for notifying authentication information of the BB serial ID is transmitted from the CU communication control unit 80 to the main control unit 323. Details of the contents of this response will also be described later.

  A second BB serial ID authentication request 2 is transmitted from the main control unit 323 to the CU communication control unit 80.

  The second BB serial ID authentication response 2 is transmitted from the CU communication control unit 80 to the main control unit 323.

  Next, a CU communication control unit serial ID authentication request 1 for requesting authentication of the CU communication control unit serial ID is transmitted from the main control unit 323 to the CU communication control unit 80. This CU communication control unit serial ID authentication request will be described in detail later. The CU communication control unit serial ID is the SID of the CU communication control unit 80 described above.

  A CU communication control unit serial ID authentication response 1 for notifying authentication information of the CU communication control unit serial ID is transmitted from the CU communication control unit 80 to the main control unit 323. Details of the contents of this response will also be described later. This command is not transmitted up to P units, but is an exceptional one.

  A second CU communication control unit serial ID authentication request 2 is transmitted from the main control unit 323 to the CU communication control unit 80.

  The second CU communication control unit serial ID authentication response 2 is transmitted from the CU communication control unit 80 to the main control unit 323. This CU communication control unit serial ID authentication response 2 includes an authentication result of OK or NG. However, NG is not notified. This is because a plurality of authentication results are collectively notified later as NG.

  A writer management information request for requesting writer management information is transmitted from the main control unit 323 to the CU communication control unit 80.

  A writer management information response notifying the writer management information is transmitted from the CU communication control unit 80 to the main control unit 323. At that time, communication from the CU communication control unit 80 to the main control unit 323 is performed by using a ciphertext encrypted by using the authentication key (or temporary authentication key) in the first security mode (hereinafter referred to as SE1 mode). Sent. The SE1 mode is an encryption method in a low security mode in which encryption is always performed using a fixed key without adding and updating keys. The authentication key and the temporary authentication key will be described later.

  The writer management information request and the writer management information response will be described with reference to FIGS. The data included in the writer management information response includes a command code, a command size, a writer ID (ROM writer ID), an authentication key version, a random number (encryption padding character), a MAC, and the like.

  A command for requesting device authentication (device authentication request 1) is transmitted from the main control unit 323 to the CU communication control unit 80. This device authentication is for authenticating whether or not the authentication key (common key) stored in the main control unit 323 and the CU communication control unit 80 is the same key, and will be described in detail later. This command is not transmitted up to P units, but is an exceptional one.

  A response (device authentication response 1) for notifying the device authentication result is transmitted from the CU communication control unit 80 to the main control unit 323 using the authentication key in the SE1 mode. At that time, in communication from the CU communication control unit 80 to the main control unit 323, ciphertext encrypted using the authentication key (or temporary authentication key) in the SE1 mode is transmitted. Details of the contents of this response will be described later. This response is not transmitted from the P units, but is an exceptional one.

  A command (device authentication request 2) for requesting second device authentication is transmitted from the main control unit 323 to the CU communication control unit 80 using the authentication key in the SE1 mode. This command includes an authentication result of OK or NG. However, NG is not notified. This is because a plurality of authentication results are collectively notified later as NG.

  A response (device authentication response 2) for notifying the second device authentication result is transmitted from the CU communication control unit 80 to the main control unit 323. In communication from the CU communication control unit 80 to the main control unit 323, a ciphertext encrypted using the authentication key (or temporary authentication key) in the SE1 mode is transmitted. This response includes an authentication result of OK or NG. However, NG is not notified. This is because a plurality of authentication results are collectively notified later as NG.

  Device authentication requests 1 and 2 and device authentication responses 1 and 2 will be described with reference to FIGS. 8 and 18 described later.

  Counter information notification for notifying counter information is transmitted from the main control unit 323 to the CU communication control unit 80. At that time, in communication from the CU communication control unit 80 to the main control unit 323, ciphertext encrypted using the authentication key (or temporary authentication key) in the SE1 mode is transmitted.

  A counter information notification response for notifying the counter information notification result is transmitted from the CU communication control unit 80 to the main control unit 323. At that time, in communication from the CU communication control unit 80 to the main control unit 323, ciphertext encrypted using the authentication key (or temporary authentication key) in the SE1 mode is transmitted.

  The counter information notification and the counter information notification response will be described with reference to FIGS.

  An authentication key update request for requesting an authentication key update is transmitted from the main control unit 323 to the CU communication control unit 80 using the authentication key in the SE1 mode. At that time, in communication from the main control unit 323 to the CU communication control unit 80, ciphertext encrypted using the authentication key (or temporary authentication key) in the SE1 mode is transmitted.

  Data included in the authentication key update request includes a command code, a command size, a shipping manufacturer code, a writer ID (ROM writer ID), an authentication key version, an authentication key, a MAC key that is an H-MAC key, a MAC, Random numbers (encryption padding characters) are included.

  An authentication key update response notifying the authentication key update result is transmitted from the CU communication control unit 80 to the main control unit 323. At that time, in communication from the CU communication control unit 80 to the main control unit 323, ciphertext encrypted using the authentication key (or temporary authentication key) in the SE1 mode is transmitted. Data included in the authentication key update response includes a command code, a command size, an update result, a random number (encryption padding character), and a MAC. The authentication key update request and the authentication key update response will be described with reference to FIG.

  A command (time notification) for notifying the current time is transmitted from the main control unit 323 to the CU communication control unit 80. At that time, for communication from the CU communication control unit 80 to the main control unit 323, ciphertext encrypted using the session key in the SE2 mode is transmitted.

  A response (time response) that is a notification that a time notification command has been received is transmitted from the CU communication control unit 80 to the main control unit 323. At that time, in the communication from the main control unit 323 to the CU communication control unit 80, ciphertext encrypted using the session key in the SE2 mode is transmitted.

  The main control unit 323 transmits a command (P unit communication control unit authentication request) requesting authentication with the P unit communication control unit 81 to the CU communication control unit 80. Mutual authentication is performed between the CU communication control unit 80 and the P-unit communication control unit 81. The main control unit 323 requests the authentication result of the P-unit communication control unit 81 by the CU communication control unit 80 as a result of the mutual authentication. This command is not transmitted up to P units, but is an exceptional one.

  A response (P unit communication control unit authentication response) for notifying the authentication result with the P unit communication control unit 81 is transmitted from the CU communication control unit 80 to the main control unit 323. At that time, for communication from the CU communication control unit 80 to the main control unit 323, ciphertext encrypted using the session key in the SE2 mode is transmitted. This response is not transmitted from the P units, but is an exceptional one. The CU communication control unit 80 obtains information such as the chip ID of the main control board 16 and the LSI 799 and then returns an authentication result to the main control unit 323. Authentication results include authentication OK, authentication NG, authentication processing, and disconnection detection.

  A device information request for requesting device information is transmitted from the main control unit 323 to the CU communication control unit 80.

  A device information response notifying device information is transmitted from the CU communication control unit 80 to the main control unit 323. At that time, for communication from the CU communication control unit 80 to the main control unit 323, ciphertext encrypted using the session key in the SE2 mode is transmitted. This response includes a command code, a command size, an acquisition result, a chip ID, and a MAC. Acquisition results include OK (with device information), NG (no device information), disconnection detection during the acquisition process.

  A command (communication status request) for requesting a communication (transmission) state to the CU communication control unit 80 is transmitted from the main control unit 323 to the CU communication control unit 80. This communication (transmission) state is a command for requesting whether or not the communication state between the main control unit 323 and the CU communication control unit 80 is normal. This command is not transmitted up to P units, but is an exceptional one.

  A response (communication state response) for notifying the communication (transmission) state is transmitted from the CU communication control unit 80 to the main control unit 323. At that time, for communication from the CU communication control unit 80 to the main control unit 323, ciphertext encrypted using the session key in the SE2 mode is transmitted. This response is a response in which the CU communication control unit 80 determines whether or not the communication state between the main control unit 323 and the CU communication control unit 80 is appropriate, and returns the determination result to the main control unit 323. It is. The determination result includes OK, NG, disconnection detection, and the like. This response is not transmitted from the P units, but is an exceptional one.

  A command requesting re-authentication with the P unit communication control unit 81 (P unit communication control unit re-authentication request) is transmitted from the main control unit 323 to the CU communication control unit 80. Mutual authentication is performed between the CU communication control unit 80 and the P-unit communication control unit 81. The main control unit 323 requests the authentication result of the P-unit communication control unit 81 by the CU communication control unit 80 as a result of the mutual authentication. This command is not transmitted up to P units, but is an exceptional one.

  A response (P unit communication control unit re-authentication response) for notifying the response of the P unit communication control unit re-authentication request message is transmitted from the CU communication control unit 80 to the main control unit 323. At that time, for communication from the CU communication control unit 80 to the main control unit 323, ciphertext encrypted using the session key in the SE2 mode is transmitted. The CU communication control unit 80 executes the authentication between the P-unit communication control units 81 again, and the main control unit 323 receives the P-unit communication control unit 81 re-authentication response to acquire the authentication result. This response is not transmitted from the P units, but is an exceptional one.

  A gaming machine authentication result notification for notifying the gaming machine authentication result is transmitted from the main control unit 323 to the CU communication control unit 80 using the authentication key in the SE2 mode. This notification includes a command code, a command size, an authentication result of OK or NG, and a MAC.

  A response of the gaming machine authentication result notification message is transmitted from the CU communication control unit 80 to the main control unit 323 using the authentication key in the SE2 mode. This response includes a command code, a command size, a notification result (OK), and a MAC.

  A CU communication control unit authentication result notification is transmitted from the main control unit 323 to the CU communication control unit 80 using the authentication key in the SE1 mode to notify the authentication result between the main control unit 323 and the CU communication control unit 80. The This notification includes a command code, a command size, an authentication result of OK or NG, a random number (encryption padding character), and a MAC.

  A CU communication control unit authentication result response for notifying the authentication result between the main control unit 323 and the CU communication control unit 80 is transmitted from the CU communication control unit 80 to the main control unit 323 using the authentication key in the SE1 mode. The This response includes a command code, a command size, an authentication result of OK or NG, a random number (encryption padding character), and a MAC.

  The main control unit 323 notifies the CU communication control unit 80 of the effective key of the CU communication control unit 80 using the authentication key in the SE1 mode. This notification includes a command code, a command size, an effective key, a random number (encryption padding character), and a MAC.

  A response of the valid key notification of the CU communication control unit 80 is transmitted from the CU communication control unit 80 to the main control unit 323 using the authentication key in the SE1 mode. This response includes the command code, command size, OK / NG notification result, random number (encryption padding character), and MAC.

  A BB serial ID authentication request A for requesting BB serial ID authentication is transmitted from the main control unit 323 to the CU communication control unit 80. The BB serial ID authentication request A will be described in detail later. This command is not transmitted up to P units, but is exceptional.

  A BB serial ID authentication response A for notifying authentication information of the BB serial ID is transmitted from the CU communication control unit 80 to the main control unit 323. Details of the contents of this response will also be described later.

  A BB serial ID authentication request B for requesting BB serial ID authentication is transmitted from the main control unit 323 to the CU communication control unit 80. This command is not transmitted up to P units, but is exceptional.

  A BB serial ID authentication response B for notifying authentication information of the BB serial ID is transmitted from the CU communication control unit 80 to the main control unit 323.

  The BB serial ID authentication requests A and B and the BB serial ID authentication responses A and B will be described later with reference to FIG. Device authentication requests A and B and device authentication responses A and B will be described later with reference to FIG.

  A command for requesting device authentication (device authentication request A) is transmitted from the main control unit 323 to the CU communication control unit 80. This device authentication is for authenticating whether or not the authentication key (common key) stored in the main control unit 323 and the CU communication control unit 80 is the same key, and will be described in detail later. This command is not transmitted up to P units, but is an exceptional one.

  A response (device authentication response A) for notifying the device authentication result is transmitted from the CU communication control unit 80 to the main control unit 323. Details of the contents of this response will be described later. This response is not transmitted from the P units, but is an exceptional one.

  A command (device authentication request B) for requesting device authentication is transmitted from the main control unit 323 to the CU communication control unit 80. This device authentication is for authenticating whether or not the authentication key (common key) stored in the main control unit 323 and the CU communication control unit 80 is the same key, and will be described in detail later. This command is not transmitted up to P units, but is an exceptional one.

  A response (device authentication response B) for notifying the device authentication result is transmitted from the CU communication control unit 80 to the main control unit 323. Details of the contents of this response will be described later. This response is not transmitted from the P units, but is an exceptional one.

  An authentication key setting request for requesting an authentication key update is transmitted from the CU communication control unit 80 to the main control unit 323 using the BB serial ID in the SE1 mode. The authentication key setting request is a response for notifying the main control unit 323 of authentication key setting information, and is stored in authentication key information (EEPROM (not shown)) written from a dedicated IC writer (ROM writer). This is a response for transmitting the (authentication key) from the CU communication control unit 80 to the main control unit 323. Information included in the authentication key setting request includes a command code, a command size, a shipping manufacturer code, a writer ID (ROM writer ID), an authentication key version, an authentication key, a MAC key as an H-MAC key, and an encryption key. Padding character (random number), MAC. Except for the command code, these code information are encrypted using the BB serial ID as an encryption key using the block cipher mode of SE1 and transmitted.

  The main control unit 323 transmits an authentication key setting response notifying the authentication key update result to the CU communication control unit 80 using the BB serial ID in the SE1 mode. The authentication key setting response is a command for notifying the CU communication control unit 80 of the authentication key information setting result. Information included in the authentication key setting response includes a command code, a command size, an update result, an encryption padding character (random number), and a MAC. Except for the command code, the block cipher mode of SE1 is used to encrypt and transmit using the BB serial ID as an encryption key.

  Next, among the commands / responses, the contents of the recovery response, the communication start request, the operation instruction, and the operation response will be described in detail.

  Transmission of recovery information is requested from the CU to the P units. At that time, in the communication from the main control unit 323 to the CU communication control unit 80, ciphertext encrypted using the session key in the SE2 mode is transmitted. A response of the response response is transmitted from the P platform to the CU. At that time, for communication from the CU communication control unit 80 to the main control unit 323, ciphertext encrypted using the session key in the SE2 mode is transmitted. The response of this recovery response is to transmit the recovery information (also referred to as recovery data) held by the P units to the CU. This “recovery information” refers to the data stored in the backup for the P unit to send to the CU as a recovery response when the CU sends a recovery request command to the P units as the recovery process is executed. That is. The recovery information transmitted from the P platform to the CU includes connection time, final sequence number, C-ID, previous ball related information, and current ball related information.

  The key used for this encryption uses a session key (also called a telegram key or a communication key), which will be described later.

  The connection time is a connection time (connection time data received from the CU at the start of communication) backed up by the P units. The final sequence number is the sequence number that was backed up by P units. The C-ID is a C-ID that has been backed up by P units. The last ball related information is the ball related information notified last time. Specifically, the previously notified game ball acquisition number information, the previously notified back ball addition information, the previously notified game ball firing number information, the previously notified symbol determination count 1, the previously notified symbol determination count 2, the previous notification The number of times of the starting port, the number of times of the starting port notified twice last time, the number of times of the first prize winning port notified last time, the number of times of the second time winning big winning port, and the number of times of winning ports 1 to 4 notified last time. As described above, the symbol determination number 1 and the symbol determination number 2 are divided by bits, but may be divided and transmitted by bytes.

  “Game ball acquired number information” is information on the number of balls to be added to a game ball by winning. The “back ball addition information” is addition information for adding a foul ball detected by a foul ball detection switch (not shown) to a game ball. The “game ball firing number information” is information on the number of pachinko balls fired by a launching unit (not shown). “Out ball passing information” is information indicating that an out ball has been detected by passing through the out ball detection switch.

  In the flowcharts of FIGS. 2 and 6 to 59, “game ball acquisition number information” and “back ball addition information” are collectively referred to as “addition ball number”. Further, “game ball firing number information” is expressed as “subtraction ball number”.

  The “symbol confirmation number 1” is the symbol determination number 1 notified last time. The “symbol determination number of times 2” is the symbol determination number of times 2 notified last time.

  “Starting port number 1” is the number of pachinko ball winnings to the starting port 1. “Starting port number 2” refers to the number of times a pachinko ball is awarded to the starting port 2.

  “The number of times of the grand prize opening 1” is the number of times the grand prize opening 1 is opened (number of rounds). “The number of times of winning the prize winning opening 2” is the number of times of opening the winning opening 2 (number of rounds).

  “The number of winning holes 1 to 4” is the number of times that a pachinko ball is awarded to each of the winning holes 1 to 4.

  Further, as information on the recovery response transmitted from the P platform to the CU, there is current ball related information as the latest ball related information. Specifically, the current ball related information is information on the total number of game balls currently held by P units (also referred to as the number of game balls), information on the number of acquired game balls currently held by P units, and currently P units. Back ball addition information that is held, information on the number of game balls that are currently held on P units, symbol determination number of times currently held on P units, symbol determination number of times currently held on P units, current 1 start opening held by P stand, 2 start openings currently held by P stand, 1 big winning opening currently held by P stand, 1 prize opening currently held by P stand 2 times, the number of winning openings 1 to 4 currently held on the P platform.

  The information other than the previous ball related information is data to be backed up by P units, and ALL0 is set at the time of factory shipment and when the backup data is indefinite.

  The meaning of the various balls and the contents of the confirmation points will be described in detail later, but will be briefly described below.

  The game ball total number information is the number of game balls held by P units. Note that the CU checks whether the number of game balls of the P units matches the number of game balls after the correction of the CU. If they do not match, the CU sends a communication disconnection request command to the P units. The communication is disconnected and P games are stopped (see FIG. 41 and the like). Then, the CU executes the recovery process, and transmits a communication start request to the P machines (see FIG. 21), so that the game ball correction request is sent to the P machines in accordance with the data correction request included in the communication start request command. The P game balls are corrected to the number of game balls after being corrected on the CU side.

  The symbol determination number 1 and the symbol determination number 2 are symbol determination information for winning a pachinko ball in the starting port 1 and the starting port 2, respectively. Is used.

  The number of start ports 1 and the number of start ports 2 are the number of times that the pachinko balls have won the P start ports 1 and 2 and the CU uses this data for checking the operating state of the game machine.

  The number of times of winning 1 and winning 2 is the number (number) of pachinko balls that have been won in P's 1 and 2 and the CU is operating a game machine (P). Use this data for status checks.

  The number of winning openings 1 to 4 is the number of times that the pachinko ball has been awarded to the P normal winning openings 1 to 4, and the CU uses this data to check the operating status of the game machine. To do.

  The communication start request command transmitted from the CU to the P machine requests the P machine to correct the game balls and the sequence number and to back up the new communication ID (communication start time). This command is encrypted between the main control unit 323 and the CU communication control unit 80 using the session key in the SE2 mode and transmitted.

  Specific data of this communication start request includes connection time, data correction request, sequence number, and game ball data. The connection time is the time when communication between the CU and the P unit is started, and is held by the CU and transmitted from the CU to the P unit. This connection time is used as a communication connection ID.

  The data correction request is a request from the CU to correct data to the P units, and is composed of 8 bits of Bit0 to Bit7. Bit 0 is a bit for designating whether or not there is a clear request. When it is “0”, there is no clear request, and when it is “1”, clear request is designated. When there is a clear request, a request for clearing the backup data held on the P side such as “game ball”, “sequence number”, “number of added balls”, “number of subtracted balls”, etc. to the P units is made.

  Bit 1 is a bit for designating whether or not there is a sequence number correction request. When it is “0”, there is no sequence number correction request, and when it is “1”, the sequence number correction request is specified.

  Bit 2 is a bit for designating whether or not there is a game ball correction request. When it is “0”, it indicates that there is a game ball correction request, and when it is “1”, it indicates that there is no game ball correction request.

  In the flowcharts of FIG. 6 and subsequent figures, when the bit specifying the presence / absence of a request is “0”, the request is not present, and when the bit is “1”, the request is present. For example, when Bit 0 of the data correction request is “1”, it is expressed as “clear request present”, and when “0”, “clear request not present”. In addition, as shown in parentheses in the data correction request column, “clear request” is “recovery clear”, “sequence number correction request” is “SQN correction”, and “game ball correction request” is “game ball correction”. ".

  The sequence number (also referred to as SQN) is a sequence number stored in the CU. The game balls are the number of game balls stored in the CU.

  The CU backs up the connection time and backs up the “main chip ID” and the “payout chip ID” when transmitting the communication start request command.

  The P units perform the following processing when receiving this communication start request. When the clear request is ON, the backup data held on the P side such as “game ball”, “sequence number”, “number of added balls”, “number of subtracted balls” is cleared to zero.

  When the sequence number correction request is ON, the notified sequence number is overwritten with the sequence number held by the P units.

  When the game ball correction request is ON, the notified game balls are overwritten with the game balls held by the P units.

  Back up the connection time. In addition, each process performed with the said P units is performed in an order from the top.

  The operation instruction command transmitted from the CU to the P unit is “game ball addition”, “game ball subtraction”, “game permission / prohibition”, and “game ball and sequence number clear” operations for the P unit. And requesting transmission of various game machine information. The CU uses this command to periodically check the status of P units. This command is encrypted between the main control unit 323 and the CU communication control unit 80 using the session key in the SE2 mode and transmitted.

  As an operation request, 8-bit data of Bit0 to Bit7 is transmitted from the CU to the P units. With respect to Bit 0, a game ball number addition request is instructed when “1”, and a game ball number addition non-request is instructed when “0”. For Bit1, “1” indicates that there is a game ball number subtraction request, and “0” indicates that there is no game ball subtraction request. As for Bit2, “1” indicates that a game permission is requested, and “0” indicates that no game permission is requested.

  For Bit 3, “1” indicates that there is a game prohibition request, and “0” indicates that there is no game prohibition request. With regard to Bit 4, when the number is "1", the presence of a clear request for the number of game balls and sequence number is instructed.

  Bit 5 is used for a glass door opening request, and Bit 6 is used for a cell (front frame) opening request. Bit 7 is provided as a spare.

  The “game ball number addition request” is also simply referred to as “addition”, the “game ball number subtraction request” is also simply referred to as “subtraction”, the “game prohibition request” is also simply referred to as “prohibition request”, and the “game ball number request” "Sequence number clear request" is also simply referred to as "clear request", and "glass door open request" is also simply referred to as "glass open request".

  When a plurality of bits of Bit0 to Bit7 are “1”, the P units execute in order from Bit0.

  The state of the CU corresponding to each bit base of the operation request is that the card is being held when Bit 0 is “1”, the card insertion process is being performed when Bit 1 is “1”, and Bit 2 is “1”. In some cases, addition display is in progress, subtraction display is in progress when Bit 3 is “1”, clear display is in progress when Bit 4 is “1”, and trial hit mode is in progress when Bit 5 is “1”.

  This CU state is composed of 6 bits of Bit0 to Bit5, but it may be composed of 16 bits of Bit0 to Bit15 so that the following information can be transmitted by each bit.

  When Bit 0 is “1”, a display during card insertion processing is instructed. This indicates a state from when the card is inserted into the CU until the balance is determined (inquiry to the host device).

  When Bit1 is “1”, an instruction to display the card return process is instructed. This indicates a state from when the card return button is pressed until the card is returned.

  When Bit 2 is “1”, an instruction to display the deposit process is instructed. This indicates a state from when cash is inserted into the CU until it is confirmed.

  When Bit3 is “1”, addition display (card insertion) is transmitted. This shows a state in which game ball addition (card insertion) is expressed after the card is inserted into the CU.

  When Bit 4 is “1”, an addition display (prepaid lending) is transmitted. This shows a state in which game ball addition (prepaid lending) is expressed by CU.

  When Bit5 is “1”, addition display (replay payout) is transmitted. This indicates a state in which game ball addition (replay payout) is expressed by the CU.

  When Bit 6 is “1”, a subtraction display in progress (mob ball division) is transmitted. This indicates a state in which the game ball addition (mobball division) is expressed by the CU.

  When Bit 7 is “1”, subtraction display (wagon service) is transmitted. This shows a state in which a game ball addition (wagon service) is expressed by a CU.

  When Bit 8 is “1”, a clear display is transmitted. This indicates a state in which clearing is expressed by the CU after a request for clearing the game ball and the sequence number.

  When Bit 9 is “1”, a break display is transmitted. This indicates a state where the CU is expressing a break.

Bits 15 to 10 are unused.
Also, data of the number of balls required for addition that is valid only when the operation request Bit 0 is “1” is transmitted from the CU to the P units. This data on the number of balls requested for addition indicates a value to be added to the number of game balls.

  Data of the number of balls required for subtraction that is valid only when Bit 1 of the operation request is “1” is transmitted from the CU to the P units. This subtraction request ball number data indicates a value to be subtracted from the game ball number.

  Further, card balance data indicating the balance of the card inserted in the CU is transmitted from the CU to the P units. The C-ID transmitted from the CU to the P platform is set with the following data depending on the state. When the card is not inserted, “ALL00h” is set. While the card is held, the C-ID of the card is set. “ALLFFh” is set during the test hit mode.

  It should be noted that during the holding of the card, the data may be such that the card inserted into the CU can be distinguished depending on whether the card is a membership card or a visitor card. For example, “holding card” is composed of 2 bits, and the first bit is set to “1” while the membership card is held, and the second bit is set to “1” while the visitor card is held. Furthermore, in the case of a visitor card, the card is basically kept in the CU at all times, so in the case of a visitor card, the card is held only when there is a balance in the visitor card. It may be controlled so that the C-ID is transmitted as (when Bit is 1). Further, the C-ID may not be stored in the visitor card, but the C-ID may be stored only in the member card.

  Further, the error code being displayed on the CU is transmitted from the CU to the P platform. As CU errors, there are a holding ball abnormality, a base abnormality, a subtraction ball abnormality, an addition ball abnormality, a minus ball abnormality, and a game stop time exceeded. “Moving ball abnormality” means that a difference of one ball or more has occurred between the holding balls of the CU and the P stand. The base abnormality means that the ratio of the safe ball to the fired ball exceeds the threshold value in each of the low base state and the high base state. The subtraction ball abnormality means that five or more balls are continuously detected in the absence of a fired ball. The occurrence of a minus ball means that the holding ball of the CU is minus in the calculation of the number of addition / subtraction balls received from the P units. Exceeding the game stop time means that there is no change in the holding ball of the inserted card for a certain time or more. Note that “ALL00h” is transmitted as the data of the CU error code in which no error has occurred.

  The response of the operation response is transmitted from the P platform to the CU. The response of the operation response is to notify the CU of the execution result of the instruction operation and the game table information such as the number of game balls. This response is encrypted and transmitted using a session key in the SE2 mode between the CU communication control unit 80 and the main control unit 323.

  As an execution result, it is transmitted from P units to the CU as 7-bit data of Bit0 to Bit6. For Bit0, when “1”, an execution result of the rejection of the number of game balls is indicated, and when “0”, an execution result indicating that the addition of the number of game balls is not rejected is indicated. Regarding Bit1, when “1”, the execution result of the rejection of the number of game balls is indicated, and when “0”, the execution result indicating that the subtraction of the number of game balls is not rejected is indicated. As for Bit2, when “1”, the execution result of the game permission rejection is shown, and when “0”, the execution result that the game permission is not rejected is shown.

  For Bit 3, when “1”, the execution result of the game prohibition rejection is indicated, and when “0”, the execution result indicating that the game prohibition is not rejected is indicated.

  For Bit 4, when “1”, the number of game balls and sequence number clear rejection result are shown, and when “0”, the execution result that game ball number and sequence number clear are not rejected is shown.

  For Bit 5, when “1”, an execution result indicating that the opening of the glass door is rejected is indicated, and when “0”, an execution result indicating that the opening of the glass door is not rejected is indicated.

  For Bit 6, when “1”, an execution result indicating that the cell release has been rejected is indicated, and when “6”, an execution result indicating that the cell release is not rejected is indicated.

  Note that “game ball number addition refusal” is simply called “addition refusal”, “game ball number subtraction refusal” is simply called “subtraction refusal”, “game permission refusal” is also simply called “permission refusal”, and “game “Prohibition refusal” is also simply referred to as “prohibition refusal”, “game ball number and sequence number clear refusal” is also simply referred to as “clear refusal”, and “glass door open refusal” is also simply referred to as “glass open refusal”.

  The “game ball total number information” is the current number of game balls (the number of game balls obtained as a result of calculating addition / subtraction). The “game ball acquisition number information” is the number of acquired game balls, and is the total number information when there are a plurality of winnings at the time of transmission. The CU 3 adds the data of the game ball acquisition number information to the number of game balls currently held, but does not add the number of game balls when receiving this data without holding a card.

  “Back ball addition information” is the number of back balls (foul balls) when fired by a launching unit (not shown). is there. The CU 3 adds the data of the back ball addition information to the number of game balls currently held, but does not add the number of game balls when receiving this data without holding the card. The “game ball firing number information” is the number of balls fired by a launching unit (not shown), and is information of the total number when there are a plurality of balls fired at the time of transmission. The CU 3 subtracts the data of the game ball firing number information from the number of game balls currently held, but does not subtract the number of game balls when receiving this data without holding a card. CU3 does not subtract the number of game balls when the number of game balls held by CU3 is zero. The “out ball passing information” is the number of out balls detected by the out ball detection switch, and is the total number when there are a plurality of out balls at the time of transmission. The “symbol determination number of times 1” is symbol determination information for winning of the start port 1, and “1” is added when the symbol variation is stopped. The “symbol determination number of times 2” is symbol determination information for winning at the start port 2, and “1” is added when the symbol variation is stopped.

  The CU performs a game ball correction process using “game ball acquisition number information”, “back ball addition information”, and “game ball firing number information”. Specifically, the number of game balls + game ball acquisition number information + back ball addition information−game ball firing number information is calculated, and the calculation result is corrected to a new number of game balls (total number of game balls). Then, it is checked whether or not the game ball total number information transmitted from the P units matches the corrected game ball number (game ball total number information). If they do not match, recovery processing is performed. A communication start request command is transmitted to the P units, and the data correction request data (Bit2 is “1” data) included in the command and the number of game balls stored in the CU are stored in the P units. Processing for correcting the number of game balls (game ball total number information) to the corrected number of game balls (game ball total number information) on the CU side is performed.

  Bits 0 to 3 are prepared as gaming machine error status 2, but this is provided as a reserve, and is used to deal with manufacturer-specific error information that is not used to specify the actual error status. Is.

The contents of each bit in the gaming machine state 1 will be described later in detail, but will be briefly described below.
The game permission state / game prohibition state in Bit 0 of the game table state 1 indicates whether or not the game is permitted or prohibited by the CU. Transition to the state. Further, when a communication abnormality occurs, the P cars transition to the game prohibition state.

  During standby / game in Bit1, it is data indicating whether or not the fan (player) is playing (launching a ball), and the state where the fan (player) is not firing a ball is waiting The state in which a fan (player) is firing a ball is playing. The completion of the game of Bit 3 indicates whether or not the launch of the ball is stopped in the P platform, and then all the pachinko balls that have been thrown into the game area 27 are collected and the whereabouts of all the launched balls is confirmed It is. The state in which the whereabouts of all the balls are unconfirmed is the game incomplete (Bit3 = 0), and the state in which the whereabouts of all the balls are confirmed is the completion of the game (Bit3 = 1). In addition, if the P platform has not confirmed the ball firing for 15 seconds or more, it times out and the game is completed.

  If the completion of the game has not been confirmed for 15 seconds or more and the game has been completed, and the ball clogging that has occurred in the game area has been resolved and the ball has won, etc. A display prompting reinsertion may be displayed on the display 312 or the display 54, and control may be performed so that other cards are not accepted until the previous card is reinserted. Then, after the previous card is reinserted, the number of game balls is manually corrected (manual correction) by a game clerk or the like.

  The gaming machine reset in Bit 4 indicates an initial reset signal of the gaming machine (P machines), and is set to “1” for 30 seconds after the P machines are activated. The presence of game table history information in Bit 5 is data indicating whether or not the P table has game table history information such as “start count” and “big hit count”, and when it is “0”, there is no game table history information. In the case of “1”, the presence of game table history information is indicated. If the game machine history information is cleared by clearing RAM, the P machine turns this data OFF. Further, after the RAM is cleared, this data is turned ON at a timing when data such as “start count” and “big hit count” is added. In order to match the game machine history data with the P machine, the CU 3 also clears the game machine history data held in the CU 3 when detecting this data OFF.

The contents of each bit of the game table state 2 will be described later in detail, but will be briefly described below.
The big hit 1 of Bit 0 is set to “1” during the big hit and during the small hit. The big hit 2 of Bit 1 is set to “1” during the big hit, during the small hit and during the high base. For the big hit 3 of Bit 2, “1” is set during the big hit (only the big hit that becomes the high base).

  The big hit 4 of Bit 3 is set to “1” during the big hit (only the big hit that becomes the high base) and during the high base. In the Big 4 big hit end display, “1” is set during the big hit end display. As for the high base of Bit 5, “1” is set in the high base. The high probability of Bit 6 is set to “1” during the high probability. As for Bit7 customer waiting, “1” is set during customer waiting (during demonstration).

  Moreover, there are the following errors as P units. As errors of the main control unit 323, there are an illegal winning error, a radio wave sensor error, and a magnet sensor error. As errors of the payout control unit 17, the card unit unconnected error, the main control unit power off 1, the main control unit power off 2, the payout control unit ID authentication error, the card unit authentication error, the CU communication control unit authentication error, the card Unit communication line disconnection, main control unit communication line disconnection 1 main control unit reception command error 1, main control unit communication line disconnection 2, main control unit reception command error 2, frame body / glass door open error, launch Motor operation error, launch motor origin detection error, game ball shortage error 1, game ball transport error 1, game ball shortage error 2, game ball transport error 2, game ball transport error 3, game ball excessive number error, game end detection error 1. Gaming end detection error 2, Gaming ball shortage error, Gaming board ball clogging error, Foul ball detection error 1, Foul ball detection error 2, Out Ball detection error 1, out ball detection error 2, ball ejecting switch error, ball ejecting motor origin sensor errors, there is a ball ejecting error.

  A response (communication state response) transmitted from the CU communication control unit 80 to the main control unit 323 is indicated by a hexadecimal string, and 0x00 indicates that the communication state is OK (proper). In other cases, that is, in the case of 0x01, 0x02, 0x03, 0x04, 0x10, it is indicated that it is abnormal. CRC-NG means that the result of parity check is NG, that is, abnormal. MAC-NG is NG of Message Authentication Code. Decryption NG means that the data transmitted after being encrypted is decrypted and becomes abnormal as a result of not being proper data. The data length NG means that the length of the received data is not normal. The disconnection detection means an abnormality in which occurrence of disconnection between the P platform and the CU is detected.

  The response of the device information response transmitted from the CU communication control unit 80 to the main control unit 323 includes a command code, a command size, an acquisition result, a main control chip ID, a manufacturer code, a format code, a payout control chip ID, a manufacturer code, and a format. Code and MAC.

  A response of a device information response is transmitted from the CU communication control unit 80 to the CU. The response of the device information response is to transmit information on the main control chip ID and the payout control chip ID to the CU. The command code identifies the command code. The data size of the command is specified by the code size. One of OK (with collected information), NG (without collected information), and uncollected is specified by the acquisition result. The main control chip ID is the chip ID recorded on the P main control boards 16, and the payout control chip ID is the P payout chip IDs stored in the payout control unit 17. It is.

  Next, processing executed by the CPU in the main control unit 323 of the CU and processing executed by the CPU mounted on the payout control unit 17 will be described with reference to FIGS.

  Next, with reference to FIG. 6, the process of the connection sequence at the time of power activation will be described. The process of the connection sequence in FIG. 6 is a process that is executed when communication is resumed after the communication between the CU and the P unit is normally completed. Specifically, it is executed when communication is resumed after turning off the power of the CU in a standby state where no card is inserted. A typical example is a case where the power supply is turned off after one day of business at the amusement hall is finished and the power supply is turned on at the start of business the next day.

  First, at the time of power-on, communication is started after stopping a game by stopping a ball striking motor (not shown) on the P platform. In the CU, an authentication sequence process is first executed. The specific control contents of this authentication sequence process are shown in the flowcharts of the subroutine programs shown in FIGS. By this authentication sequence processing, a device information request command is transmitted from the CU to the P units. In response, the P device returns a response of a device information response. The response of this device information response includes a main chip ID and a payout chip ID.

  The CU that has received the device information response stores the information included in the device information response, and requests authentication for the P devices that have responded (P devices identified by the received main chip ID and payout chip ID). Is sent to P units.

The P devices that have received the authentication request return an authentication response to the CU.
Next, specific control contents of the processing of the authentication sequence shown in FIG. 6 will be described with reference to FIGS.

  FIGS. 7A and 7B are flowcharts showing a subroutine program of the authentication sequence shown in FIG. The authentication sequence shown in FIG. 6 has two types, that is, an authentication sequence when the power source of the CU is activated and an authentication sequence when the power source of the P units (game machines) is activated. An authentication sequence when the power supply of the CU is activated is shown in FIG. Referring to FIG. 7A, main control unit 323 completes authentication with host server 801 and acquires CU communication control unit information (for example, chip ID of CU communication control unit information), and then performs communication. Start. The CU communication control unit 80 performs authentication with the P-unit communication control unit 81. Thereafter, communication is started. A serial ID authentication sequence is first executed between the main control unit 323 and the CU communication control unit 80, and then a chip ID authentication sequence is executed. Thereafter, communication with P units is possible. Time notification is made from the main control unit 323 to the CU communication control unit 80. This time notification is encrypted and transmitted in SE2 mode using this authentication key as an encryption key. Next, a time response is made from the CU communication control unit 80 to the main control unit 323. This time response is encrypted and transmitted in SE2 mode using this authentication key as an encryption key. Thereafter, the main control unit 323 and the CU communication control unit 80 perform encrypted communication using a session key (communication key). This session key (communication key) is generated from the random number and the main authentication key. Note that a session key (communication key) may be generated from the time data shared by the time notification and the authentication key.

  FIG. 7B shows an authentication sequence when the power source of the P machines (game machines) is activated. Referring to FIG. 7 (b), after detecting a disconnection with P units in CU communication control unit 80, main control unit 323 instructs CU communication control unit 80 to operate with a communication key in SE2 mode. Encrypt and send. Further, the communication status request is encrypted with the communication key in the SE2 mode and transmitted. Thereafter, the CU communication control unit 80 encrypts and transmits a communication state response (disconnection detection) with the communication key in the SE2 mode to the main control unit 323. Thereafter, the main control unit 323 detects a disconnection with the P platform, and the CU communication control unit 80 authenticates the payout control chip. Thereafter, a chip ID authentication sequence is executed between the main control unit 323 and the CU communication control unit 80.

  FIG. 8 is a flowchart showing a subroutine program of the serial ID authentication sequence shown in FIG. Referring to FIG. 8, main controller 323 starts communication after completing authentication with host server 801. When this authentication key is not acquired, the temporary authentication key is encrypted. The temporary authentication key is a key that can obtain an appropriate authentication result as a result of the device authentication sequence described later with reference to FIG. The temporary authentication key is updated later to be the real authentication key. Then, a BB serial ID authentication sequence is executed between the main control unit 323 and the CU communication control unit 80. By this BB serial ID authentication sequence, the BB serial ID, that is, the SID of the main control unit stored in the EEPROM (not shown) is authenticated. Next, the main control unit 323 executes the CU communication control unit serial ID authentication sequence only when the serial ID of the CU communication control unit is acquired from the upper server 801. The CU communication control unit serial ID is authenticated by the CU communication control unit serial ID authentication sequence.

  Next, a writer management information request command is transmitted from the main control unit 323 to the CU communication control unit 80. This writer management information is information relating to the ROM writer used when writing authentication information to an EEPROM (not shown). For example, data such as ROM writer ID, ROM writer manufacturer code, and key version stored in the ROM writer.

  The main control unit 323 receives the writer management information response encrypted with the authentication key in the SE1 mode from the CU communication control unit 80, and the writer management information and the main control unit 323 included in the writer management information response The stored writer management information is collated to check whether they match. As a result of the collation check by the writer management information, a certain level of security is ensured and the security is improved even if the authentication keys of the main control unit 323 and the CU communication control unit 80 coincide.

  Next, a device authentication sequence (authentication key) using an authentication key is executed between the main control unit 323 and the CU communication control unit 80.

  A command of CU communication control unit authentication result notification for notifying all abnormalities from the BB serial ID authentication sequence to the device authentication sequence is transmitted from the main control unit 323 to the CU communication control unit 80. In other words, even if each authentication result from the BB serial ID authentication to the device authentication is abnormal, no notification is made when the authentication result is notified, and any authentication from the BB serial ID authentication to the device authentication is performed. If an abnormality has occurred, the fact that the abnormality has occurred as a whole is notified without notification of which authentication has occurred. As a result, even if the encrypted communication is intercepted, it is not detected by which type of authentication an abnormality has occurred, and security is improved. Thereafter, the CU communication control unit result response command is also notified of the abnormality from the BB serial ID authentication sequence to the device authentication sequence in the same manner as described above.

  Next, a CU communication control unit valid key notification command is transmitted from the main control unit 323 to the CU communication control unit 80. The main control unit 323 does not transmit a CU communication control unit valid key notification command when the CU communication control unit valid key has been set. Thereafter, a response of the CU communication control unit valid key response is notified from the CU communication control unit 80 to the main control unit 323.

  Next, a counter information notification command is transmitted from the main control unit 323 to the CU communication control unit 80. This command notifies the initial vector R of the counter used in the SE2 mode, which will be described later with reference to FIG. 67A, and is transmitted after being encrypted with this authentication key in the SE1 mode. The CU communication control unit 80 that has received it transmits a counter information notification response encrypted with this authentication key in the SE1 mode to the main control unit 323.

  When the SE1 mode, which is a simple block cipher usage mode, is used, if the same plaintext is encrypted with a certain key, the same ciphertext is obtained. There is an inconvenience that it can be determined by comparing the ciphertext whether or not it is the same as the portion, and in order to solve this, the initial vector of the SE2 mode is notified to the CU communication control unit 80, and the main control unit 323 and the CU The communication control unit 80 shares the counter value. The encryption mode is set by notification of the counter information. This encryption mode setting is reset every time the power is turned on every day at the game hall, so that security is improved.

  FIG. 9 is a flowchart showing a subroutine program at the time of updating the authentication key in the serial ID authentication sequence. Referring to FIG. 9, the authentication key update sequence is executed between main control unit 323 and CU communication control unit 80 only when main control unit 323 obtains update information from higher-level server 801. By this authentication key update sequence, the authentication key can be changed to a new one.

  An authentication key update request command encrypted with the temporary authentication key in the SE1 mode is transmitted from the main control unit 323 to the CU communication control unit 80. This command transmission is executed only when the main control unit 323 has acquired update information from the host server. Upon receiving this, the CU communication control unit 80 updates the authentication key and the key version, and transmits an authentication key update response (OK) response to the main control unit 323. This response is encrypted by the temporary authentication key in the SE1 mode and transmitted. Thereafter, the BB serial ID authentication sequence and the CU communication control unit serial ID authentication sequence are executed.

  Next, a writer management information request command is transmitted from the main control unit 323 to the CU communication control unit 80. This writer management information is information relating to the ROM writer used when writing authentication information to an EEPROM (not shown). For example, data such as ROM writer ID, ROM writer manufacturer code, and key version stored in the ROM writer.

  Upon receiving this command, the CU communication control unit 80 returns a response of the latest writer management information stored and held to the main control unit 323. This response is encrypted by the temporary authentication key in the SE1 mode and transmitted.

  Whether the main control unit 323 collates the writer management information included in the writer management information response transmitted from the CU communication control unit 80 with the writer management information stored in the main control unit 323, so that they match. Check whether or not. As a result of the collation check by the writer management information, a certain level of security is ensured and the security is improved even if the authentication keys of the main control unit 323 and the CU communication control unit 80 coincide.

  Thereafter, a device authentication sequence is executed. Next, a CU communication control unit authentication result notification command is transmitted from the main control unit 323 as a CU communication control unit authentication result conforming (OK). By this command, the abnormality of the authentication result from the BB serial ID authentication to the device authentication is notified from the main control unit 323 to the CU communication control unit 80 as a summary. In other words, even if each authentication result from the BB serial ID authentication to the device authentication is abnormal, no notification is made when the authentication result is notified, and any authentication from the BB serial ID authentication to the device authentication is performed. If an abnormality has occurred, the fact that the abnormality has occurred as a whole is notified without notification of which authentication has occurred. As a result, even if the encrypted communication is intercepted, it is not detected by which type of authentication an abnormality has occurred, and security is improved.

  In addition, the CU communication control unit 80 also transmits a response to notify the CU communication control unit authentication result that the CU communication control unit authentication result is appropriate (OK). In this response, if any of the authentications from the BB serial ID authentication to the device authentication has an abnormality, it is comprehensive that the abnormality has occurred as a whole without notifying which authentication has occurred. To notify. Thereafter, encrypted communication is performed using the authentication key.

  Next, a CU communication control unit valid key notification is transmitted from the main control unit 323 to the CU communication control unit 80. Note that the main control unit 323 does not notify when the CU communication control unit valid key has been set. On the other hand, a CU communication control unit valid key response (OK) is transmitted from the CU communication control unit 80 to the main control unit 323.

  Next, a counter information notification command is transmitted from the main control unit 323 to the CU communication control unit 80. This counter information notification includes the value of the above-described SE2 mode initial vector. Then, the CU communication control unit 80 returns a counter information notification response to the main control unit 323.

  FIG. 10 is a flowchart showing a subroutine program of the chip ID authentication sequence shown in FIGS. Referring to FIG. 10, the main control unit 323 starts communication after completing authentication with the CU communication control unit 80, and encrypts the temporary authentication key when the authentication key is not acquired. Then, a payout control authentication result request command is transmitted from the main control unit 323 to the CU communication control unit 80. This payout control authentication result request command requests the authentication result of the CU communication control unit 80 authenticating the P unit communication control unit 81 provided in the LSI 799 of the P unit 2. During the authentication process between the CU communication control unit 80 and the P-unit communication control unit 81 of the payout control chip (LSI), the payout control authentication result request command is repeatedly transmitted until the authentication between the two is completed. The main control unit 323 waits. When the authentication is completed, the CU communication control unit 80 transmits a response of a payout control authentication result response for notifying an authentication result with the P-unit communication control unit 81 of the payout control chip (LSI) to the main control unit 323. To do. The response of the payout control authentication result response is transmitted after being encrypted with this authentication key in the SE2 mode.

  Next, a device information request command is transmitted from the main control unit 323 to the CU communication control unit 80. This device information request command requests the chip ID of the CU communication control unit. The device information request command is repeatedly transmitted until the CU communication control unit 80 acquires the device information, and the main control unit 323 waits until the acquisition of the device information is completed. The CU communication control unit 80 transmits the payout control chip and chip information (chip ID and the like) of the main control chip to the main control unit 323 as a device information response. Receiving it, the main control unit 323 inquires the host server 801 to verify the device information (chip ID). The main control unit 323 transmits an authentication result (operation availability notification) command (game machine authentication result notification) to the CU communication control unit 80 according to the result of the inquiry to the upper server 801. When it is NG (when operation is not possible), it waits for P units to be reset. If it is not NG, a business message can be transmitted to the P units thereafter, and a recovery request, a recovery response, an operation instruction, and an operation response command response are sent between the main control unit 323 and the CU communication control unit 80. Are sent and received.

  FIG. 11 is a flowchart for explaining a case where there is an abnormality in updating the authentication key in the serial ID authentication sequence.

  An authentication key update request command is transmitted from the main control unit 323 to the CU communication control unit 80. This command is transmitted after being encrypted with the temporary authentication key in the SE1 mode. The authentication key update response is encrypted with the temporary authentication key in the SE1 mode and transmitted to the main control unit 323 from the CU communication control unit 80 that has received it. When the authentication key update response is NG (for example, when the update cannot be performed on the CU communication control unit 80 side), the main control unit 323 retries up to a maximum of two times. If the result of the two retries is NG, the main control unit 323 performs a CU communication control unit authentication error process.

  Next, FIG. 12 is a flowchart for explaining a case where the authentication result of the CU communication control unit is abnormal in the serial ID authentication sequence.

  Referring to FIG. 12, an authentication key update request command is transmitted from main control unit 323 to CU communication control unit 80 after being encrypted with a temporary authentication key in SE1 mode. An authentication key update response (OK) is encrypted with the temporary authentication key and transmitted from the CU communication control unit 80 to the main control unit 323 in the SE1 mode. Thereafter, the BB serial ID authentication sequence and the CU communication control unit serial ID authentication sequence are executed.

  Next, a writer management information request command is transmitted from the main control unit 323 to the CU communication control unit 80. This writer management information is information relating to the ROM writer used when writing authentication information to an EEPROM (not shown). For example, data such as ROM writer ID, ROM writer manufacturer code, and key version stored in the ROM writer. The writer management information response is encrypted with the temporary authentication key and transmitted from the CU communication control unit 80 to the main control unit 323 in the SE1 mode.

  Whether the main control unit 323 collates the writer management information included in the writer management information response transmitted from the CU communication control unit 80 with the writer management information stored in the main control unit 323, so that they match. Check whether or not. As a result of the collation check by the writer management information, a certain level of security is ensured and the security is improved even if the authentication keys of the main control unit 323 and the CU communication control unit 80 coincide.

  Thereafter, a device authentication sequence is executed. Next, a CU communication control unit authentication result notification command is transmitted from the main control unit 323 as a nonconforming (NG) CU communication control unit authentication result. Even if each authentication result from the BB serial ID authentication to the device authentication is abnormal, no abnormality notification is performed when each authentication result is notified, and any authentication from the BB serial ID authentication to the device authentication is abnormal. If an error has occurred, the fact that the abnormality has occurred as a whole is notified without notifying which authentication has caused the abnormality. As a result, even if the encrypted communication is intercepted, it is not detected by which type of authentication an abnormality has occurred, and security is improved. Similarly, the abnormality from the BB serial ID authentication sequence to the device authentication sequence is transmitted from the CU communication control unit 80 to the main control unit 323 as a CU communication control unit authentication result notification (NG) command.

  Note that if both sides determine non-conformity (NG), the process returns to the BB serial ID authentication sequence and tries again from the BB serial ID authentication sequence. However, retry is performed up to two times. If the result of the two retries is NG, the main control unit 323 performs a CU communication control unit authentication error process.

  FIG. 13 is a flowchart for explaining a case where the effective key of the CU communication control unit is abnormal in the serial ID authentication sequence. Since the steps up to the device authentication sequence in FIG. 12 are the same, the description will not be repeated. Therefore, the description starts from the step of notifying the CU communication control unit authentication result.

  Here, the CU communication control unit authentication result notification command is transmitted from the main control unit 323 as the CU communication control unit authentication result conforming (OK). On the other hand, a CU communication control unit authentication result notification response is also transmitted from the CU communication control unit 80 with the CU communication control unit authentication result conforming (OK).

  Next, a CU communication control unit valid key notification is transmitted from the main control unit 323 to the CU communication control unit 80. On the other hand, the CU communication control unit valid key response is transmitted from the CU communication control unit 80 to the main control unit 323 as non-conforming (NG). When the main control unit 323 receives this incompatibility, the main control unit 323 retransmits the CU communication control unit valid key notification to the CU communication control unit 80 up to twice. If the result of the two retries is NG, the main control unit 323 performs a CU communication control unit authentication error process.

  FIG. 14 is a flowchart for explaining a normal serial ID authentication sequence. Here, the following requests and responses are transmitted after being encrypted with this authentication key in the SE1 mode.

  After the BB serial ID authentication sequence and the CU communication control unit serial ID authentication sequence are executed, a command for requesting writer management information is transmitted from the main control unit 323 to the CU communication control unit 80. The latest writer management information held by the CU communication control unit 80 is transmitted as a writer management information response. The main control unit confirms its own writer management information and writer management information response. Thereafter, a device authentication sequence is executed.

  Next, a CU communication control unit authentication result notification command that conforms (OK) from the BB serial ID authentication sequence to the device authentication sequence is transmitted to the CU communication control unit 80. On the other hand, a response of the CU communication control unit authentication result response that is compatible (OK) from the BB serial ID authentication sequence to the device authentication sequence is transmitted to the main control unit 323.

  Next, a CU communication control unit valid key notification command is transmitted from the main control unit 323 to the CU communication control unit 80, while the CU communication control unit valid key is adapted from the CU communication control unit 80 to the main control unit 323 (OK). ) Is a response of the CU communication control unit valid key response.

  Next, a counter information notification command is transmitted from the main control unit 323 to the CU communication control unit 80. This command notifies the initial vector R of the counter used in the SE2 mode, which will be described later with reference to FIG. 67A, and is transmitted after being encrypted with this authentication key in the SE1 mode. The CU communication control unit 80 that has received it transmits a counter information notification response encrypted with this authentication key in the SE1 mode to the main control unit 323.

  FIG. 15 is a flowchart for explaining a chip ID authentication sequence when the payout control authentication result is abnormal. Referring to FIG. 15, the main control unit 323 transmits a payout control authentication result request command to the CU communication control unit 80.

  Next, the CU communication control unit 80 transmits a payout control authentication result response in which the authentication result with the payout control chip (payout control unit 17) is nonconforming (NG). The main control unit 323 that has received it performs an authentication abnormality process between the payout control chip (the payout control unit 17) and the CU communication control unit 80.

  FIG. 16 is a flowchart showing a subroutine program of the BB serial ID authentication sequence shown in FIG. 8, in which challenge-response authentication is performed. Challenge-response authentication is generally an authentication method that prevents eavesdropping of IDs and the like during communication by applying special processing to character strings. For example, the authenticating side performs authentication. A random number sequence (called "challenge code") is sent to the recipient, and the recipient of the challenge code synthesizes the ID etc. and the received challenge code according to a predetermined algorithm, and a response code Generate and reply. On the side that received the response code, generate a response code in the same way from the transmitted challenge code and pre-stored ID, etc., and compare the sent response code with the generated response code to see if they match Authentication is performed to determine whether or not.

  In the present embodiment, first, a command of BB serial ID request 1 is transmitted from the main control unit 323 to the CU communication control unit 80. Upon receiving this, the CU communication control unit 80 transmits a response requesting a challenge code as the BB serial ID authentication response 1. Receiving this, the main control unit 323 generates a challenge code using the BB serial ID, that is, the SID of the main control unit stored in the EEPROM (not shown), and performs the CU communication using the challenge code as a BB serial ID authentication request. Transmit to the control unit 80. Upon receiving this, the CU communication control unit 80 generates a response code using the BB serial ID, that is, the SID of the main control unit stored in the EEPROM (not shown), and uses the response code as the BB serial ID authentication response 2. Transmit to the main control unit 323. In response to this, the main control unit 323 checks the response code to determine whether it is appropriate. When it is inappropriate (NG), control is performed so that subsequent communication is not performed.

  Any algorithm for generating the challenge code and generating the response code may be used. An example of the algorithm is described below. As a challenge code generation, a random number (binary number) of the same data length is generated for the BB serial ID code data (binary number), and an exclusive OR (exclusive OR) of the BB serial ID and the random number is calculated. The calculation result is transmitted to the CU communication control unit 80 as a challenge code. On the other hand, as a response code generation in the CU communication control unit 80, an exclusive OR of a BB serial ID (binary number) is calculated for the received challenge code. If the BB serial ID on the main control unit 323 side matches the BB serial ID on the CU communication control unit 80 side, it means that the exclusive OR of the same BB serial ID has been calculated twice for the random number. The result is the original random number. Then, the original random number is transmitted to the main control unit 323 as a response code. The main control unit 323 determines whether or not the generated random number matches the random number sent as a response code. If they match, the main control unit 323 determines that the random number is appropriate, while if not, the main control unit 323 determines that the generated random number is incorrect (NG). judge.

  FIG. 23 is a flowchart showing a subroutine program of the CU communication control unit serial ID authentication sequence shown in FIG. First, the CU communication control unit serial ID authentication request 1 is transmitted from the main control unit 323 to the CU communication control unit 80. Upon receiving this, the CU communication control unit 80 generates a challenge code A using the CU communication control unit serial ID, that is, the SID of the CU communication control unit stored in the ROM 809 shown in FIG. The CU communication control unit transmits the serial ID authentication response 1 to the main control unit 323. Receiving this, the main control unit 323 generates a response code A using the CU communication control unit serial ID, that is, the SID of the CU communication control unit stored in the EEPROM (not shown), and the response code A is transmitted to the CU communication. The control unit serial ID authentication request 2 is transmitted to the CU communication control unit 80. Receiving it, the communication control unit 80 checks the response code A to determine whether it is appropriate. Then, the CU communication control unit serial ID authentication response 2 including the determination result (check result) and the challenge code B request is transmitted to the main control unit 323. Receiving this, the main control unit 323 performs control so that subsequent communication is not performed when the check result is inappropriate (NG).

  The algorithm of challenge code generation and response code generation shown in FIG. 23 may be any algorithm. For example, the algorithm using the exclusive OR described in FIG. 16 can be used.

The challenge-response authentication algorithm is not limited to the above, and may be as follows. For example, the random number R1 is generated in the CU communication control unit 80, and the challenge code A is generated by encrypting the random number R1 using the SID (referred to as SIDM) of the CU communication control unit stored in the CU communication control unit 80 as a key. In terms of the equation, the challenge code A = E _SIDM (R1). This is transmitted to the main control unit 323. The main control unit 323 generates a response code A by decoding with the stored SIDM. In terms of a formula, response code A = D _SIDM (challenge code A) = D _SIDM (E _SIDM (R1)) = R1. This is returned to the communication control unit 80, and it is checked whether or not the random number R1 previously generated in the communication control unit 80 matches the returned response code A (= R1). It is determined that the authentication is successful.

Further, the main control unit 323 generates a random number R2 and encrypts the random number R2 using the SID (referred to as SIDT) of the main control unit stored in the main control unit 323 as a key to generate a challenge code B. In terms of the equation, challenge code B = E _SIDT (R2). This is transmitted to the communication control unit 80, and decrypted with the SIDT stored in the communication control unit 80 to generate the response code B. _{Expressed by the} equation, response code B = D _SIDT (challenge code B) = D _SIDT (E _SIDT (R2)) = R2. This is returned to the main control unit 323, and the random number R2 previously generated in the main control unit 323 is compared with the returned response code B (= R2) to check whether they match. It is determined that authentication is successful.

  FIG. 18 is a flowchart showing a subroutine program of the device authentication sequence shown in FIG. This device authentication sequence is an encryption / decryption authentication sequence using an encryption key (authentication key), and uses the SE1 mode as a block encryption mode. First, the main control unit 323 transmits a device authentication request 1 to the CU communication control unit 80. Upon receiving this, the CU communication control unit 80 generates a random number A and encrypts the random number A with an authentication key stored in an EEPROM (not shown). Also create a MAC. This MAC is the Message Authentication Code. For example, a value obtained by calculating the generated random number A using a predetermined hash function is defined as MAC. That is, the message digest of the generated random number A becomes the MAC. Then, the CU communication control unit 80 transmits the encrypted random number A and MAC as the device authentication response 1 to the main control unit 323.

  Receiving this, the main control unit 323 generates the original plaintext random number A by decrypting the received encrypted random number A with the authentication key stored in the EEPROM (not shown), and the random number A is generated as the predetermined random number A. The MAC is calculated using a hash function. Then, it is checked whether or not the calculated MAC matches the MAC transmitted from the CU communication control unit 80. If they match, it is determined to be appropriate, and if they do not match, it is determined to be inappropriate (NG).

  Next, the main control unit 323 generates a random number B and encrypts the random number B using an authentication key stored in an EEPROM (not shown). Further, the random number B is calculated using a predetermined hash function to create a MAC. Then, the encrypted random number B and MAC are further transmitted as an apparatus authentication request 2 to the CU communication control unit 80 as an authentication result based on the apparatus authentication response 1. In response to this, the CU communication control unit 80 decrypts the received encrypted random number B using the authentication key stored in the EEPROM (not shown) to obtain the original plaintext random number B. Then, the MAC is calculated by calculating the random number B using a predetermined hash function. It is checked whether or not the calculated MAC matches the received MAC. If they match, it is determined to be appropriate, and if they do not match, it is determined to be inappropriate (NG). Then, the determination result is transmitted as a device authentication response 2 to the main control unit 323. When the determination result is inappropriate (NG), control is performed so that subsequent communication is not performed.

  FIG. 19 is a flowchart showing the storage setting of the authentication key in the EEPROM (not shown). The authentication key is transmitted from the CU communication control unit 80 to the main control unit 323, and the EEPROM (not shown) of the main control unit 323 is shown. ) Stores the authentication key.

  Referring to FIG. 19, this authentication key setting sequence is an authentication key writing sequence at the time of card unit (CU) manufacture. First, the main control unit 323 waits for transmission of authentication key information from the CU communication control unit 80 on condition that an authentication key with the CU communication control unit 80 is not written. The CU communication control unit 80 starts communication in response to a request from a dedicated IC writer (ROM writer). Then, the CU communication control unit 80 transmits the BB serial ID, that is, the SID authentication request A of the main control unit stored in the EEPROM (not shown) to the main control unit 323. Receiving it, the main control unit 323 transmits a BB serial ID authentication response A for requesting a challenge code to the CU communication control unit 80 to the CU communication control unit 80. Upon receiving the request, the communication control unit 80 generates a challenge code using the BB serial ID, that is, the SID of the main control unit stored in the EEPROM (not shown), and uses the challenge code as the BB serial ID authentication request B. Transmit to the control unit 323.

  Receiving this, the main control unit 323 generates a response code using the BB serial ID, that is, the SID of the main control unit stored in the EEPROM (not shown), and uses the response code as the BB serial ID authentication response B. It transmits to the communication control part 80. Receiving it, the CU communication control unit 80 determines whether or not the response code is appropriate, and transmits the authentication key information shown below only when it is appropriate (OK). The challenge response authentication shown in FIG. 19 can also use the same algorithm (for example, exclusive OR) as the challenge response authentication shown in FIG. 16 or FIG.

  When the CU communication control unit 80 determines that the authentication result is appropriate, the authentication key information written from the dedicated IC writer (ROM writer), that is, the authentication key information stored in the EEPROM (not shown). Is transmitted to the main control unit 323 as an authentication key setting request. Receiving this, the main control unit 323 stores the transmitted authentication key in an EEPROM (not shown), and transmits an authentication key setting response indicating the storage to the CU communication control unit 80.

  As a result, a common authentication key (common key) is stored between the main control unit 323 and the CU communication control unit 80. The CU communication control unit 80 then performs device authentication using the common authentication key. This device authentication is the same as the device authentication sequence shown in FIG. If it is determined that the device authentication is appropriate, the subsequent communication is not performed, and a reset wait state is entered.

  Next, returning to FIG. 6, the CU that has received the authentication response next transmits a recovery request to the P units. In response to this, the P machine returns the recovery data backed up inside the P machine (specifically, the payout control unit 17) to the CU as a response. This recovery data includes connection time, last SQN (sequence number), C-ID, previous ball related information, and current ball related information. In the following flowcharts, “recovery data” refers to the various data described above. In the present embodiment, the “final SQN” included in the recovery data is the SQN transmitted last by the P devices as described above.

  The CU that has received this recovery response starts recovery processing from that point. This recovery process is a process for recovering the consistency of each other's data between the CU and the P platform, and is not only executed when the power is turned on, but also recovered as a result of trouble as described later. Sometimes even executed.

  The CU counts up this SQN (sequence number) each time an “operation instruction” is transmitted. However, it is not counted up when the operation instruction is retransmitted. The CU backs up the SQN and its request contents when transmitting an “operation request”. The P platform stores the SQN received by the “operation instruction” and sends it back to the CU as it is by “operation response”. When the P unit receives an operation instruction of the same SQN as the previously received SQN, the P unit determines that the re-transmission text is that the communication failure has occurred and the CU has retransmitted the operation instruction.

  After the recovery process is completed, the CU updates the main chip ID, the payout chip ID, and the connection time to the values received from the P units, updates the SQN to “0”, and sends a communication start request (recovery clear ON). As commands, a command of SQN correction ON, game ball correction ON, SQN = 0, game ball = 0 is transmitted to the P units. In response to this, the “P” matches the “sequence number” and “game ball” backed up on the P table with the information of the CU (SQN = 0, game ball = 0). Also, the notified “connection time” is backed up. And the P platform returns a communication start response to the CU. Thereafter, an operation instruction command and an operation response response are transmitted and received between the CU and the P platform.

  As described above, the CU counts up the sequence number (SQN) by one each time this operation instruction is transmitted. First, in the first operation instruction, an operation instruction command of no game permission request and SQN = 0 is transmitted to P machines. In response to this, the data of SQN = 1, the number of pre-addition balls = 0, the number of pre-subtraction balls = 0, the number of front start ports (1) = 0, and the number of front start ports (2) = 0 are backed up. To do. Further, the P platform clears the values of the counters of the number of added balls, the number of subtracted balls, the number of start ports (1), and the number of start ports (2), which are current ball related information, to zero. Then, as for P platform, SQN = 1, number of game balls = 0, number of additional balls = 0, number of subtraction balls = 0, start port (1) number of times = 0, start port (2) number of times = 0, And a game prohibition (game stop state) response is transmitted to the CU.

  The CU that has received the operation response backs up SQN = 1 on the basis of the operation response, calculates the current number of game balls by calculating the current number of game balls 0 + the received number of added balls 0−the received number of subtraction balls 0. In addition to backing up 0, the cumulative number of added balls = 0, the cumulative number of subtracted balls = 0, the cumulative number of start ports (1) = 0, and the total number of start ports (2) = 0 are backed up.

  Next, at the stage when the start-up process is completed on the CU side, the CU sends a game permission request and an operation instruction of SQN = n to the P machines, and the P machine that receives it sends a game permission refusal OFF as an operation response. , SQN = n + 1, number of game balls = 0, number of additional balls = 0, number of subtraction balls = 0, start port (1) number of times = 0, start port (2) number of times = 0, and response of game permission to CU To do.

  When a proper authentication result is obtained as a result of the authentication sequence using the session key of FIG. 7, the business message sequence shown in FIG. 20 is executed. FIG. 20A shows a case where the business message sequence is normal, and FIG. 20B shows a case where the business message sequence is abnormal.

  First, referring to FIG. 20A, after an operation instruction command is transmitted from the main control unit 323 to the CU communication control unit 80, a request for confirming the communication state of the operation instruction message (communication state request). Is transmitted to the CU communication control unit 80. The CU communication control unit 80 notifies the main control unit 323 of the reception status (MAC abnormality, CRC abnormality, decoding abnormality, data length abnormality, disconnection detection) of the operation instruction message as a communication state response (not shown).

  The main control unit 323 confirms the communication state based on the received communication state response, and determines that it is normal when normal.

  On the other hand, the CU communication control unit 80 transmits the operation instruction command to the P units (specifically, the P unit communication control unit 81) based on the reception of the operation instruction command. In response to this, the P platform returns an operation response to the CU communication control unit 80, and the CU communication control unit 80 receives it and transmits a response to the operation response to the main control unit 323.

  On the other hand, FIG. 20B shows a case where the business message sequence is abnormal. The difference from FIG. 20A is that the main control unit 323 that has received the communication state response transmitted from the CU communication control unit 80 checks the communication state based on the communication state response and determines that it is abnormal. It is a point to do. This is determined to be abnormal when the response of the transmitted communication status response is numerical data other than 0x00. If the main control unit 323 determines that there is an abnormality, the main control unit 323 executes a retry of checking the communication state. Specifically, after an operation instruction command is transmitted to the CU communication control unit 80 again, a communication state request is transmitted to the CU communication control unit 80 again, and based on the communication state response returned from the CU communication control unit 80. To determine whether a communication status error has occurred. If the main control unit 323 determines that the communication state is still abnormal as a result of executing the retry, the communication state abnormality notification control is performed. As the communication state abnormality notification control, for example, an abnormality notification command is transmitted to the display control unit 797 to notify the communication state abnormality by the display 312 or the abnormality notification lamp (not shown) is turned on or blinked. Or a signal indicating that a communication state abnormality has occurred may be transmitted to the hall management computer 1. The number of times this retry is executed is shown as one in FIG. 20B, but may be executed twice or more.

  Next, with reference to FIG. 21, the process of the connection sequence when the CU and the P stand are reconnected will be described. Here, “at the time of reconnection” refers to the time when communication is resumed after the communication between the CU and the P platform has ended abnormally. This “abnormal termination” is described later, when the power is activated while holding the card in FIG. 34, or when the CU itself disconnects communication when the P units in FIG. 41 refuse to add, the CU side in FIGS. This is a case where power is cut off. As will be described later, when the CU resumes the connection sequence, a. The connection sequence is resumed in a state other than waiting, b. The connection sequence after the communication is disconnected by sending a communication disconnection request. (See FIG. 41), or c. The SQN backed up by the CU and the SQN transmitted from the P platform are inconsistent. When it is determined that the normal communication has not ended (abnormal end), the connection sequence at the time of reconnection shown in FIG. 21 instead of FIG. 6 is executed.

  The connection sequence at the time of reconnection is similar to the connection sequence at the time of power activation described with reference to FIG. 6, and here, the difference will be mainly described.

  First, the time when P devices prohibit the game and start communication is immediately after receiving the device information request command from the CU. This is because the P unit can recognize that the P unit has been reconnected only after receiving a device information request from the CU.

  Next, since the connection sequence in FIG. 6 is when the power is turned on, a recovery start request command for recovery clear ON is transmitted from the CU to the P units, and the P unit clears the recovery data in response to the command. At the same time, the sequence number (SQN) is set to 1 according to SQN = 0 sent in the first operation instruction, and all the previous ball related information and current ball related information are cleared to “0”.

  However, in the case of the connection sequence of FIG. 21, since it is at the time of reconnection, there is a case where the recovery information backed up inside the P units does not match the information stored on the CU side. Therefore, in the CU, after starting the recovery process, the game balls and the like are corrected in accordance with the contents of the recovery data (the previous ball related information, the current ball related information, etc.) on the P platform included in the recovery response. Execute the process. Specifically, based on the game ball acquisition number information, back ball addition information, and game ball launch number information included in the recovery data sent from the P unit, the number of game balls + game ball acquisition number information + back Ball addition information—Calculates the number of game balls fired and performs processing to correct the stored number of game balls to the calculated new number of game balls. Recovery data from the corrected number of game balls and P units Is compared with the game ball total number information transmitted as, and it is determined whether or not they match. If they do not match, a command with game ball correction ON, that is, Bit 2 of data correction request set to “1” is transmitted to the P units as a communication start request. Further, the final SQN included in the recovery data sent from the P unit is compared with the final SQN stored in the CU to determine whether or not they match. SQN correction ON, that is, a command for setting Bit 1 of the data correction request to “1” is transmitted to the P units. Also, the correct number of game balls to be corrected = 300 and SQN = 3 are included in the communication start request and transmitted to the P units.

  The P machine receives the communication start request command, and performs a correction process to match the “sequence number” and “game ball” backed up on the P machine with the information of the CU. Specifically, a process of correcting SQN = 3 and game balls = 300 and backing up the notified “connection time” is performed.

  The CU backs up the main chip ID and the payout chip ID transmitted from the P units at the stage where the recovery process is completed, and backs up the connection time that is the time of reconnection. And about the sequence number, when the last SQN transmitted from P units is not abnormal, the sequence number (SQN) is continued.

  On the other hand, in the CU, after the recovery process is started, if it is determined that the communication partner P units do not match, or if the SQN is determined to be abnormal, the recovery response transmitted from the P unit The number of the current game balls included in is converted to a one-handed ball. The “mochidama” refers to the number of game balls recorded on a game recording medium (card or the like) owned by the player. Then, after the possession ball is recorded on the recording medium, the replay button 319 is operated to use the possession ball of the recording medium, and the possession ball is converted into a game ball, and then replay is possible. At that time, similarly to the connection sequence at the time of power activation shown in FIG. 6, recovery clear ON is transmitted as a communication start request transmitted from the CU to the P units, and the P units receive the recovery data in response to the request. clear. In the CU, the sequence number is set to “0”, SQN = 1 is transmitted to the P units in the first operation instruction, and the PQ backs up the SQN = 1. In addition, in the P-unit, the number of pre-added balls = 0, the number of pre-subtracted balls = 0, the number of front start ports (1) = 0, the number of front start ports (2) = 0 is backed up, and the number of additional balls, subtracted balls Each counter value of the number, the number of start ports (1), and the number of start ports (2) is cleared to zero.

With reference to FIG. 22, the processing of the CU and the P unit when a card is inserted will be described.
When a card is inserted, the CU outputs a command signal for taking the card to the card reader / writer, and the card reader / writer reads the information recorded on the taken card and receives the read information. The card insertion process is executed.

  In this insertion process, a card insertion request command for reading the C-ID recorded on the inserted card by the CU and transmitting the C-ID to the P units is transmitted to the P unit. In response to this, the P device returns a response of the card insertion response notifying the CU that the reception of the C-ID is completed to the CU. Further, as this insertion processing, control as shown in FIG. 23 described later is executed.

  The CU is in a card balance inquiry state for a predetermined period after the card is inserted. This is done by inquiring about the suitability of the inserted card, whether it is a membership card registered at the amusement hall, or inquiring the upper-level server such as the hall management computer 1 etc. This means that it is in the middle of executing the process of displaying on the display 312 and displaying on the P-side display 54. As will be described later with reference to FIG. 59 and the like, the CU displays that the card inserted in the display unit 312 is being inquired, and issues an operation instruction including card holding ON, C-ID, and card insertion processing ON. Send to P units. In the P-unit, upon receiving the operation instruction command, the payout control unit 17 transmits a display device control command including ON during card holding and ON during card insertion processing to the display effect control board 53 to display the display effect. Control is performed to display that the control board 53 is inquiring about the card inserted into the display 54 (see FIG. 59).

  After that, as for P units, SQN = n + 3, the number of game balls = 0, the number of additional balls = 0, the number of subtraction balls = 0, the number of start ports 1 times = 0, the number of start ports 2 times = 0, the game prohibition and special prizes A response including OFF of probability change is transmitted to the CU. Specifically, when the special prize and the probability change are OFF, Bits 0 to 4 in the gaming machine state 2 are all 0.

  The CU determines the balance and the ball when the card balance and the ball that has been inserted as a result of the inquiry about the card balance can be confirmed. In the CU, control is performed to display the prepaid balance of the confirmed card on the display 312, and addition display that is in the process of transmitting the confirmed holding ball (5000) as a gaming ball to the gaming machine (P units). The display inside is displayed on the display 312 (see FIG. 59).

  Then, SQN = n + 4, game balls = 0 (number of game balls before update) +5000 (number of balls required for addition) = 5000, and holding balls = 0 are backed up. At this point, the consumption of the ball is finalized.

  Next, a command including addition present, card holding ON, card insertion processing OFF, addition display ON, SQN = n + 4, number of balls required for addition = 5000 and card balance = 7000 is transmitted to the P units as operation instructions. . In addition, operation instructions during card holding and card insertion processing are divided into membership cards and visitor cards, and the operation instructions are transmitted separately for each type of card. May be displayed. In the P unit, when the payout control unit 17 receives an operation instruction command including ON during addition display and the number of balls requested to be added = 5000, display control including ON during addition display and the number of balls requested to be added = 5000 is performed. The command is transmitted from the payout control unit 17 to the display effect control board 53. In response to this, the display effect control board 53 displays on the display 54 that 5000 balls are being added as game balls (addition display is being performed) (see FIG. 59).

  FIG. 23 is a flowchart showing a subroutine program of the insertion time processing shown in FIG. In the present embodiment, the steps indicated by broken lines indicate the control contents of the modification. The solid arrows indicate the flow of control, and the two-pointed arrows indicate the flow of information to be transmitted. In FIG. 23, each step of S1 to S7 is executed by the CU. In addition, P8 executes S8 to S10 and S12 to S15. More specifically, the deletion process of S8 to S10, S12, S13, and S15 is executed by the display effect control board 53 provided on the P platform, and the transmission process of S14 and S15 is performed by the display effect control board. 53 transmits to the payout control unit 17, and the payout control unit 17 transmits to the CU.

  First, in step (hereinafter simply referred to as S) 1, the CU determines whether or not it is interrupted. Whether or not the game is being interrupted is determined based on whether or not the interrupting operation shown in FIG. If it is suspended, it is determined in S2 whether or not the C-ID of the inserted card matches the C-ID of the suspended card. If not, the inserted card is inserted in S5. Eject the card and enter standby.

  On the other hand, if the C-ID of the inserted card matches the C-ID of the card that has been suspended, it is determined that the suspended player has returned to the gaming machine and started the game. Therefore, the control advances to S4, the suspended state is canceled, and the process of restarting the game is executed in S6.

  On the other hand, if it is determined in S1 that it is not interrupted, a process of transmitting the C-ID of the inserted card to the P cards is performed in S3. The P units receive the C-ID and compare the received C-ID with the C-ID stored in the backup area (backup data storage unit shown in FIG. 3) (S8). Then, in S9, it is determined whether or not the comparison results match. If they do not match, it is determined that a player different from the player who has left the seat has started playing, and the subroutine program for this insertion processing ends. .

  In this way, the player identification information storage means (current player game history data storage section) for storing the player identification information (C-ID) and the same determination means (S8, S9) for performing the same determination processing are used. The display control means (display effect control board 53) is not provided with the same determination processing function on the communication means side (payout control unit 17 side), and the gaming machine having the display control means is sufficient. A common communication means can be used with a gaming machine that does not have a display control means, and it becomes possible to mass-produce a small variety of communication means.

  In addition, you may perform the process of S15 and S7 as control content of a modification. Through S15, the game history data and the C-ID stored in the backup area (backup data storage unit) are transmitted to the CU and then deleted. The CU receives it and transmits the received data to the upper server 801. The host server 801 stores the received game history data and C-ID as a backup.

  On the other hand, if it is determined that they match in S9, the process proceeds to S12, in which the game history data in the backup area (backup data storage) is returned to the current area (player game history data storage unit shown in FIG. 3), and the game history data is restored. The game history data is newly added and updated.

  In addition, you may perform the process of S10, S13, and S14 as a control content of a modification. If YES in S9, the control proceeds to S10, where it is determined whether or not a predetermined time (for example, 20 minutes) has elapsed since the previous card was ejected. If it is determined that the game history data and the C-ID of the backup area (backup data storage unit) are deleted, a process is performed in S13. Further, after S12, in S15, a notification that the players are the same is transmitted to the CU. In addition, as a control content of a modification, you may control to perform all the processes of S10, S13, S14 and the processes of S15, S7.

  Next, with reference to FIG. 24, a process when the prepaid balance recorded on the inserted recording medium (card) is consumed will be described. In the process of FIG. 24, the prepaid balance is “1000” and the current game ball is “50”. First, a command with no addition, OFF during addition display, SQN = n, the number of balls required for addition = 0, and the number of balls required for subtraction = 0 is transmitted as operation instructions from the CU. In response to this, in the P units, SQN = n + 1, the number of game balls = 50, the number of additional balls = 0, the number of subtraction balls = 0, the number of start ports (1) = 0, the number of start ports (2) = Responses of 0, game possible, special prize OFF, and probability change OFF are returned.

  On the other hand, the CU lends 500 yen, that is, 125 balls by one lending operation (ball lending operation). When the lending button (lending button) 321 is pressed in the CU, SQN = n + 2, number of game balls = 50 (number of game balls before update) +125 (number of balls to be added) = 175 and balance = 500 are backed up. In this way, the balance consumption is determined by the CU alone at the stage where the lending operation is performed. Next, the CU is in the addition display. During this addition display, the display 312 displays that 125 balls have been withdrawn from the balance and are being added to the game balls.

  Then, the CU transmits, to the P units, commands with addition being present, ON during addition display, SQN = n + 2, addition request ball number = 125, and subtraction request ball number = 0. Upon receiving the command, the payout control unit 17 transmits to the display effect control board 53 a display control command including ON during addition display and the number of balls required for addition 125 included in the operation instruction command. . In response to this, the display effect control board 53 causes the display 54 to display a screen on which the number of game balls 125 is being added.

  Next, the P platform backs up SQN = n + 2, the number of pre-added balls = 0, the number of pre-subtracted balls = 0, the number of front start ports (1) = 0, and the number of front start ports (2) = 0, After creating the response, clear each counter value of the number of added balls, the number of subtracted balls, the number of start ports (1), and the number of start ports (2) to 0, the number of additional balls required for the current number of game balls 50 The number of game balls is updated to a value of 175 including 125.

  Then, as an operation response, addition rejection OFF, SQN = n + 3, number of gaming balls = 175, balance = 500, number of additional balls = 0, number of subtraction balls = 0, start port (1) number of times = 0, start port (2) Responses of the number of times = 0, the game is possible, the special prize is OFF, and the probability variation OFF are returned.

  In response to this, the CU calculates and backs up SQN = n + 3, the number of game balls = 175 (number of game balls before update) +0 (number of balls required for addition) −0 (number of balls required for subtraction) = 175, and the number of additional balls The cumulative total = 0, the total number of subtraction balls = 0, the starting port (1) total = 0, and the starting port (2) total = 0 are backed up.

  Thus, unlike the determination of the balance consumption, the determination of the number of game balls is determined after waiting for the response of the operation response from the P units.

  In addition, in the P machine, when an operation instruction command including the number of balls with and without addition is received, the addition is the same without distinguishing between the consumption of the ball (replay of the stored ball) and the consumption of the prepaid balance. The subsequent processing is executed in the sequence.

  Next, with reference to FIG. 25, the process at the time of replay which consumes a stored ball is demonstrated. In FIG. 25, the storage ball specified by the inserted recording medium (member card or the like) is “1000”, and the original game ball is “0”. The replay process in FIG. 25 is similar to the process at the time of consumption of the balance shown in FIG. On the CU side, when a replay button 319 is pressed in a state where a player's own game recording medium (member card or the like) is inserted and there is a storage ball specified by the card, SQN = n + 2 , The number of game balls = 0 (number of game balls before update) +125 (number of balls required for addition) = 125 and the number of stored balls = 875 are backed up. Storage ball = 875 becomes 875 at 1000-125 since 125 (the number of addition request balls) was withdrawn from the original storage ball = 1000. This is because, while the balance in FIG. 24 is data in monetary units, the holding ball in FIG. 25 is data in units of balls, so it is sufficient to simply subtract 1000-125.

  Then, the CU transmits a command including “Yes”, “ON” during addition display, SQN = n + 2, addition request ball number = 125, storage ball = 875, subtraction request ball number = 0 as operation instructions to P units. Upon receiving the command, the payout control unit 17 transmits to the display effect control board 53 a display control command including ON during addition display and the number of balls required for addition 125 included in the operation instruction command. . In response to this, the display effect control board 53 causes the display 54 to display a screen on which the number of game balls 125 is being added.

  Other processes are the same as those in FIG. As described above, the consumption of the ball is determined by the CU alone when the replay button 319 is pressed without waiting for the response of the operation response from the P platform, and the number of balls stored (the number of game balls is also The same) is determined after waiting for the response of the operation response from the P units.

  Next, with reference to FIG. 26, processing for subtracting the number of game balls (wagon service or the like) according to an instruction from the CU will be described. In the amusement hall, a wagon service is provided in which a game ball owned by the player is consumed and drinks are provided to the player. When the player receives such a wagon service, the player touches the display 312 to place a wagon order, whereby the order contents ordered by the player are transmitted from the IR photosensitive unit 320 of the card unit 3 to the infrared ray unit. As a signal, it is input to a remote control owned by a game shop clerk.

  The amusement hall clerk performs a wagon service according to the contents of the order entered on the remote control. FIG. 26 shows a case where a wagon order that consumes “300” used game balls is generated in a state where there are “1000” game balls owned by the player. When a wagon order is generated, the CU performs a process of backing up “300”, which is the number of game balls used when the wagon order is generated, as SQN = n + 2, the number of balls required for addition = 0, and the number of balls required for subtraction. At this stage, the CU does not actually subtract 300 from the game balls, but simply backs up “300” as the number of balls required for subtraction. Then, a command with subtraction, ON during subtraction display, SQN = n + 2, addition request ball number = 0 and subtraction request ball number = 300 is transmitted as an operation instruction from the CU to the P platform. Then, the CU causes the display 312 to display an indication that the subtraction is being performed (displaying) (not shown).

  The P machines that have received the command determine whether or not the value of the game ball counter stored therein is equal to or greater than the subtraction request number. This determination is performed by the payout control unit 17. In FIG. 26, it is assumed that the value of the game ball counter is equal to or greater than the number of subtraction requests. In the P-unit, when the payout control unit 17 receives an operation instruction command including ON during subtraction display and the number of balls required for subtraction = 300, display control including ON during subtraction display and the number of balls required for subtraction = 300 The command is transmitted from the payout control unit 17 to the display effect control board 53. In response to this, the display effect control board 53 displays on the display 54 that 300 balls are being subtracted as a game ball (during subtraction display).

  Next, the P platform backs up and adds SQN = n + 3, the number of pre-added balls = 0, the number of pre-subtracted balls = 0, the number of front start ports (1) = 0 and the number of front start ports (2) = 0. The counter values of the number of balls, the number of subtraction balls, the number of start ports (1), and the number of start ports (2) are cleared to zero. Then, according to the subtraction request ball number = 300, the game ball number is updated to “700” obtained by subtracting the subtraction ball number 300 from the current game ball number 1000.

  Then, from the P platform to the CU, the subtraction rejection is OFF, SQN = n + 3, the number of current game balls = 700, the number of additional balls = 0, the number of subtraction balls = 0, the number of start ports (1) = 0, the start port (2) A response indicating that the number of times = 0, the game is possible, the special prize is OFF, and the probability variation OFF is returned.

  Then, the CU calculates SQN = n + 3, number of game balls = 1000 (number of game balls before update) −300 (number of balls required for subtraction) +0 (number of balls to be added) −0 (number of subtraction balls) = 700, and game balls The number is corrected to “700” and backed up. Thus, the subtraction of the number of game balls is determined only after waiting for the response of the motion response from the P units.

  Further, the CU backs up the cumulative number of added balls = 0, the total number of subtracted balls = 0, the starting port (1) cumulative = 0, and the starting port (2) cumulative = 0.

  On the other hand, when the P units determine that the value of the game ball counter stored therein is less than the subtraction request number, the P units do not perform subtraction of the game ball number according to the subtraction request number. . In this case, the P platform returns an operation response indicating that the subtraction rejection is ON to the CU as an operation response. As a result, the CU is notified that the game balls have not been subtracted based on the subtraction request because the P cars refused the subtraction request.

  As described above with reference to FIG. 25, the subtraction of the number of game balls based on the instruction from the CU is determined only after waiting for the response of the operation response from the P units. On the other hand, as described with reference to FIG. 24, the stored (consumed) consumption based on the instruction of the CU is determined when the CU accepts the retained consumption.

  In this way, the reason for determining the different timings for the “subtraction of the number of game balls based on the instruction of the CU” and the “consumed ball consumption based on the instruction of the CU” is as follows.

  At the stage when the CU has received a subtraction process for the number of game balls, such as a wagon order, the subtraction instruction is sent because there is a margin in the number of game balls. As a result, there are cases where the number of game balls corresponding to the subtraction instruction does not remain.

  In such a case, if the subtraction is confirmed based on the number of game balls stored in the CU at the stage when the CU accepts the subtraction process, the number of game balls actually does not remain on the gaming machine side. Nevertheless, the subtraction will be finalized, resulting in a contradiction. Therefore, in the present embodiment, “subtraction of the number of game balls based on the instruction of the CU” is determined after waiting for a response of the operation response from the P units.

  On the other hand, for “consumed ball consumption based on the instruction from the CU”, it is an instruction to add the number of game balls, so the P units are stored when the instruction reaches the P units. Even if the number of game balls fluctuates, there is no problem in adding the game balls corresponding to the addition instruction. For this reason, from the viewpoint of speeding up the processing, “save (contained ball) consumption based on CU instruction” is determined when the CU accepts the storage (contained) consumption.

  Next, with reference to FIG. 27, processing when a big hit occurs during the game will be described. In FIG. 27, the initial number of game balls is 1010, and the probability change big hit occurs while the operation instruction and the response of the operation are being transmitted and received between the P units and the CU in the game. After the completion of the control, the probability change in which the jackpot occurrence probability is improved is shown.

  First, in the CU, SQN = n is backed up, and a command with no addition, no subtraction, and SQN = n is transmitted as an operation instruction from the CU to the P units. In response to this, the P-unit backs up SQN = n + 1, the number of pre-added balls = 3, the number of pre-subtracted balls = 13, the number of front start ports (1) = 1, and the number of front start ports (2) = 1. The number of game balls = 1010 + 3 (the number of added balls) −13 (the number of subtracted balls) = 1000 is calculated, and the number of game balls is updated to 1000. Further, after the response is created, the counter values of the number of added balls, the number of subtracted balls, the number of start ports (1), and the number of start ports (2) are cleared to zero.

  Then, the P units have an operation response of SQN = n + 1, the number of gaming balls = 1000, the number of additional balls = 3, the number of subtracting balls = 13, the number of start ports (1) = 1, the number of start ports (2) = 1, A response indicating that the game is possible, the special prize is OFF, and the probability change is OFF is transmitted to the CU. In this way, the P units transmit not only the number of subtraction balls and the number of addition balls, but also the number of game balls to the CU. As a result, the CU can determine whether or not the number of game balls stored in the P unit matches the number of game balls managed by the CU.

  In addition, in the P platform in the present embodiment, as described above, 100 pachinko balls are shot into the game area 27 per minute, and therefore, one pachinko ball is shot into the game area in 0.6 seconds. Will be included. Since the command / response is transmitted at intervals of 200 ms, the number of balls to be subtracted between the previous response transmission and the current response transmission is 0 or 1. Therefore, the number of subtraction balls transmitted from the P platform to the CU is either 0 or 1. However, when the number of subtraction balls is set to such a small value, the number of game balls does not change so much, and the processing flow becomes difficult to understand. Therefore, in the drawing of the processing flow in the present embodiment, for the sake of simplicity, the number of subtraction balls and the change in the number of addition balls as necessary are exaggerated for convenience.

  In the CU that has received the response of the operation response, the number of game balls = 1010 + 3-13 = 1000 is calculated and the 1000 is backed up as the number of game balls, and the cumulative number of added balls = 3, the total number of subtracted balls = 13, the start port (1) Accumulation = 1 and Start port (2) Accumulation = 1 are backed up.

  While repeatedly performing the transmission / reception of such an operation instruction command and an operation response response, a probable big hit occurs in the P units, and the ball related information includes the number of game balls = 1100, the number of additional balls = 120, The number of subtraction balls is changed to 20, the number of start ports (1) = 2, and the number of start ports (2) = 2. Then, the probability change starts after the big hit at the P platform. In the CU, SQN = n + 2 is backed up, and commands of no addition, no subtraction, and SQN = n + 2 are transmitted to the P units as operation instructions.

  In the P platform, SQN = n + 3 is backed up, and the number of pre-added balls = 120, the number of pre-subtracted balls = 20, the number of front start ports (1) = 2, and the number of front start ports (2) = 2 are backed up. At the same time, the number of game balls = 1000 + 120−20 = 1100 is calculated, and the number of game balls is updated to 1100. Further, after creating the response, the counter values of the number of added balls, the number of subtracted balls, the number of start ports (1), and the number of start ports (2) are cleared to zero.

  Then, the P units have an operation response of SQN = n + 3, the number of game balls = 1100, the number of additional balls = 120, the number of subtraction balls = 20, the number of start ports (1) = 2, the number of start ports (2) = 2, A response indicating that the game is possible, the special prize is ON and the special prize is ON is transmitted to the CU.

  In response to this, the CU calculates SQN = n + 3, the number of game balls = 1000 + 120−20 = 1100, corrects the number of game balls in that 1100, and backs up, and the cumulative number of additional balls = 120, the total number of subtracted balls = 20, start-up port (1) accumulation = 2, and start-up port (2) accumulation = 2. Further, the CU detects that the “special prize” has started.

  Next, with reference to FIG. 28, a process when it is detected that there is no game ball while playing with P cars will be described. Initially, the number of game balls is set to 20, and first, the CU backs up SQN = n and transmits commands of no addition, no subtraction, and SQN = n to the P units as operation instructions. In the P-unit, SQN = n + 1, the number of pre-added balls = 3, the number of pre-subtracted balls = 18, the number of front start ports (1) = 1, and the number of front start ports (2) = 1 are backed up. Then, after the response is created, the counter values of the number of added balls, the number of subtracted balls, the number of start ports (1), and the number of start ports (2) are cleared to zero.

  Then, the P units have an operation response of SQN = n + 1, the number of gaming balls = 5, the number of additional balls = 3, the number of subtracting balls = 18, the number of start ports (1) = 1, the number of start ports (2) = 1, A response indicating that the game is possible, the special prize is OFF, and the probability change is OFF is transmitted to the CU. The CU calculates SQN = n + 1, the number of game balls = 20 + 3-18 = 5, and then corrects and backs up the number of game balls, and the cumulative number of additional balls = 3, the total number of subtracted balls = 18, Back up 1) Cumulative = 0 and Start Port (2) Cumulative = 0. After that, since the number of subtracted balls is 5 in P units, the number of game balls = 5-5 = 0 is calculated and the number of game balls = 0, the number of additional balls = 0, the number of start ports (1) = 0 The starting port (2) number of times fluctuates to zero. At the stage where the number of game balls becomes 0, no balls are detected in the P cars, and the payout control unit 17 automatically stops driving the ball striking motor to prohibit the game from being able to hit the game area. Control to the state. It should be noted that if the variable display device is already in variable display at that stage, the variable display is continued only by stopping the hitting of the hit ball. If there is a start memory at the start port (1) count or the start port (2) count at the stage where the firing stop control is performed, the variable display control of the variable display device based on the storage is continued.

  In the CU, SQN = n + 2 is backed up, and commands of no addition, no subtraction, and SQN = n + 2 are transmitted to the P units as operation instructions.

  In the P unit, SQN = n + 3 is backed up, and the number of pre-added balls = 0, the number of pre-subtracted balls = 5, the number of front start ports (1) = 0, and the number of front start ports (2) = 0 are backed up, After creating the response, the counter values of the number of added balls, the number of subtracted balls, the number of start ports (1), and the number of start ports (2) are cleared to zero.

  Then, the P units have an operation response of SQN = n + 3, the number of gaming balls = 0, the number of additional balls = 0, the number of subtracting balls = 5, the number of start ports (1) = 0, the number of start ports (2) = 0, A response indicating that the game is possible, the special prize is OFF, and the probability change is OFF is transmitted to the CU.

  In response to this, the CU calculates the number of game balls = 5 + 0−5 = 0, corrects the number of game balls to 0, and backs up, and also adds the total number of balls = 0, the total number of subtraction balls = 5, the start port (1) Cumulative = 1, and start port (2) Cumulative = 0.

  In this way, the main management of the number of game balls is performed by the CU, but only when the game prohibition control (launching stop control) is performed when the number of game balls reaches 0 in the P platform, It is determined that the number of game balls has become 0, and game prohibition control (launch stop control) is performed. Thereafter, as the operation response, the final ball related information is transmitted to the CU, and the final game ball number “0” is determined on the CU side. The reason for controlling in this way is that it is necessary to perform ball hitting stop control at the moment when the number of game balls becomes zero on the P platform side.

  For example, on the CU side which mainly manages the number of game balls, the response of the motion response including the number of added balls and the number of subtracted balls when the number of game balls sent from the P platform side becomes 0 is received. Wait, when the final number of game balls is calculated on the CU side and becomes 0, a command for operation instruction with a prohibition request for prohibiting the game is transmitted to the P base side, and received When hitting ball stop control is first performed on the P platform side, there is a possibility that a pachinko ball will be shot and fired during the response and command transmission / reception, and a new number of subtraction balls may be generated during that time. On the other hand, although the number of game balls has already become “0”, a new subtraction ball number is generated and eventually the game ball number becomes negative. In order to prevent such an inconvenience, only the ball hitting stop control when the number of game balls becomes 0 is controlled based on the number of game balls on the P platform side.

  As described above, since the game control represented by the hitting ball stop control is performed based on the number of game balls stored in the P player itself, this control is performed based on the number of game balls managed and stored in the CU. Compared with the case where such game control is performed, the game control in accordance with the fluctuation of the number of game balls can be performed in real time.

  Although the example in which the payout control unit 17 performs the hitting ball firing stop control is shown here, the main control board 16 may be configured to perform the hitting ball shot stop control.

  In this case, for example, the payout control unit 17 transmits a signal indicating that the number of game balls is 0 to the main control board 16 when the number of game balls is determined to be 0. In response to this signal, the main control board 16 prohibits driving of a ball striking motor (not shown).

  Next, with reference to FIG. 29, processing when a card return operation is performed will be described. In the state where the number of game balls is initially set to 500, an operation instruction from the CU to the P unit, and in response to an operation response from the P unit to the CU, when the return button 322 is pressed, the CU As a next operation instruction, a command of prohibition request to prohibit the game, no clear request, clear display OFF, and SQN = n + 2 command is transmitted to the P units. In the P platform, in accordance with the instruction with the prohibition request included in the command, the driving of the ball striking motor (not shown) is stopped to control the ball striking stop. Thereafter, a waiting time of 15 seconds is provided in consideration of the time until all balls that have already been shot flow down in the game area 27 and flow to the out balls, that is, the floating ball processing waiting time. During the 15 second wait time, polling is continued between the P units and the CU. As an operation response during the wait time, the P platform is prohibited refusal OFF, SQN = n + N, the number of game balls = 500, the number of added balls = 0, the number of subtracted balls = 0, the number of start ports (1) = 0, the start port ( 2) The response of the number of times = 0, game prohibition, game completion OFF, special prize OFF, and probability change OFF is transmitted to the CU. As an operation instruction during the wait time, the CU transmits no prohibition request, no clear request, clear display OFF, and SQN = n + N + 1 to the P units.

  As a response after 15 seconds have passed, the P platform is SQN = n + N + 2, the number of game balls = 500, the number of added balls = 0, the number of subtracted balls = 0, the number of start ports (1) = 0, the start port (2 ) Number of times 0, game prohibition, game completion ON, special prize OFF, and probability change OFF operation responses are transmitted to the CU. This “game completion ON” has a role as initializeable information indicating that it is possible to accept information for instructing initialization of the number of game balls in the P units. The number of game balls transmitted at this time is the final number of game balls at the end of the game. This sequence example shows a case where the number of added balls and the number of subtracted balls are not changed by the floating ball. If a prize is generated by a floating ball, or if a foul ball is generated, the number of payouts or the number of foul balls corresponding to the winning is transmitted to the CU as an “added ball number”.

  The CU that has received the response of the operation response detects the completion of the game, and backs up SQN = n + N + 3 and data with clear request. Furthermore, according to “the number of added balls, the number of subtracted balls, the number of start ports (1), the number of start ports (2)” included in the motion response, the stored “number of game balls, total number of added balls, total number of balls” Each data of “the number of subtraction balls, start opening (1) total winning prize, starting opening (2) total winning prize” is updated. As a result, the number of game balls at the end of the game is determined on the CU side. As described above, since the final number of game balls is determined on the CU side, it is not necessary to provide a point management function on the P platform side, and the cost of the P platform can be suppressed as much as possible.

  Then, the CU transmits, as an operation instruction, a command including clear request present, clear display ON, and SQN = n + N + 3 to the P units. Thereafter, the CU causes the display 312 to display a message indicating that clearing is being performed (clearing is being displayed) (not shown). This “clear request exists” is data instructing initialization of the number of P game balls.

  In the P platform, the payout control unit 17 transmits a display control command including ON during clear display included in the command transmitted from the CU to the display effect control board 53. In response to this, the display effect production control board 53 causes the display 54 to display a display screen that is being cleared (screen that is being cleared).

  In this example, the CU receives the input of the “signal for requesting the end of game” based on the operation of the return button 322, and determines the number of game balls at the end of the game. However, the “signal for requesting the end of the game” is not limited to a signal based on the operation of the return button 322.

  For example, the CU is provided with a fingerprint authentication unit that authenticates a player's fingerprint. At the start of the gaming machine, authentication by the fingerprint authentication unit is mandatory, and the fingerprint information specified by the game card inserted into the CU by the player at the start of the game matches the fingerprint information detected by the fingerprint authentication unit. The game is allowed as a condition. Furthermore, authentication by the fingerprint authentication unit is essential at the end of the game, and the game is ended on condition that the fingerprint information detected by the fingerprint authentication unit matches the fingerprint information detected at the start of the game. In this case, the “signal for requesting game end” is fingerprint information detected by the fingerprint authentication unit.

  In addition, when a game end request signal is input to the CU from a server or the like that manages the entire gaming machine installation island, the game may be ended regardless of whether or not the return button 322 is operated. In this case, the “game end request signal” is constituted by the game end request signal input from the server.

  Returning to the description of FIG. The P machines that have received the command SQN = n + N + 3 during the clear request and clear display process shift the game history data updated and stored in the storage area to the backup area and store it.

  Next, as for the operation P, the clear response OFF indicating that the clear request is not rejected, SQN = 0, the number of game balls = 0, the number of added balls = 0, the number of subtracted balls = 0, the number of start ports (1) as an operation response = 0, start port (2) number of times = 0, game prohibition, game completion ON, special prize OFF, and probability change OFF response are transmitted to the CU. Then, the CU backs up SQN = 0, game balls = 0, and holding balls = 500. This holding ball = 500 is a value obtained by adding 500, which is the number of game balls received immediately before the clear request, to the holding ball.

  After that, the CU records the holding ball = 500 on the inserted card, discharges it, and returns it to the player. Then, as an operation instruction, a command including no prohibition request, no clear request, clear display OFF, and SQN = m is transmitted to the P units. After that, as for the P platform, as operation response, SQN = m + 1, the number of game balls = 0, the number of additional balls = 0, the number of subtraction balls = 0, the number of start ports (1) = 0, the number of start ports (2) = 0, A response of game prohibition, game completion ON, special prize OFF, and probability change OFF is transmitted to the CU. Instead of directly recording the card score on the card, the higher server may store the score in association with the card number of the card. In that case, the number of game balls stored in the CU and the card number of the inserted card are transmitted to the upper server and stored in association with the card number received by the upper server. And the score is updated to a value corresponding to the number of game balls stored in the CU. The CU then ejects the card. In this way, both the recording of the card score directly on the card and the storing of the score in association with the card number in the host server are collectively referred to as “associating” the score with the card. To do. Further, a configuration may be adopted in which the upper server stores the score in association with the card number of the card and directly records the card score on the card.

  In FIG. 23, there is shown a weight of 15 seconds for the floating ball processing waiting time on the P platform side. In addition, on the P platform side, the number of fired balls−the number of foul balls−the number of out balls−the winning prize The number of balls = 0 may be determined, or the number of fired balls−the number of foul balls−the number of balls detected by the out ball detection switch = 0 may be determined to determine that the processing of the floating balls has ended. It may be determined that the processing of the floating ball has ended when the earlier condition of such a determination and the elapse of 15 seconds is satisfied, and the game completion may be turned ON. Further, when the game completion is turned ON based on the passage of 15 seconds, even if the CU that has received the game completion ON is timed out when, for example, 20 seconds elapses from the card return operation or the like, Good. Also, when the game completion is turned on based on the passage of 15 seconds, or when the card discharge process is executed when 20 seconds have elapsed, the number of fired balls−the number of foul balls−the number of out balls−the number of winning balls ≦ predetermined threshold value Alternatively, it may be executed on condition that the number of shot balls−the number of foul balls−the number of balls detected by the out ball detection switch ≦ a predetermined threshold value.

  FIG. 30 is a diagram illustrating an example of processing of the card unit and the pachinko machine when the game is interrupted.

  The processing is similar to the processing of the card unit and the pachinko machine when returning the card in FIG. This interruption operation is an operation for the player to temporarily suspend the game so that the player can finish the use, and the player calls a store clerk at the game hall and asks the store clerk to perform a remote control operation to interrupt the game. Then, the IR signal output from the remote controller is received by the IR light receiving unit 315, converted into an electronic signal, and input to the main control unit 323. In the case of this game interruption process, even if the CU detects the completion of the game, the clear request is not transmitted to the P machines. As a result, the P machines store and hold data (C-ID, number of game balls, etc.) regarding the interrupted player. Then, when the CU discharges the card, the card with 0 points is discharged and returned to the player. After that, other players' games are prohibited during the interruption (see FIG. 23).

  With reference to FIG. 31, the process when the glass door 6 is unlocked and opened will be described. First, as a first operation instruction, a command including an instruction not to open a glass door and requesting no glass opening is transmitted from the CU to the P platform. Receiving it, the P vehicle returns a normal response including the number of game balls = 500 to the CU as an operation response. At this stage, for example, if a trouble occurs such as a pachinko ball that has been driven into the game area 27 on the P platform, the player calls the attendant at the game hall. An infrared signal for unlocking and opening the glass door 6 by operating the remote controller is transmitted to the IR photosensitive unit 320. In response to this, the IR photosensitive unit 320 inputs a glass door opening instruction signal included in the received infrared signal to the main control unit 323. Upon receiving the instruction to open the glass door, the CU transmits, as operation instructions, commands for prohibiting the game to stop, no glass opening request, and SQN = n + 2 to the P platform. That is, before the glass door 6 is actually opened, first, an operation instruction with a prohibition request and no glass opening request is sent to the P platform in order to perform the hitting stop control at the P platform.

  In response to this, the P platform stops driving the hitting ball firing motor (not shown) and controls the hitting ball firing stop state. Next, the P platform returns, as an operation response, a response including prohibition rejection OFF indicating that the game prohibition is not rejected and game prohibition data indicating that the game prohibition state is set to the CU.

  On the other hand, in the CU, after the operation instruction command including the above-described prohibition request is transmitted to the P units, the time until all balls fired in the game area 27 in the P units flow out and are collected, that is, floating In consideration of the ball processing waiting time, a 10-second wait is provided. During this time, the CU continues to poll by sending a command including an instruction indicating that the game is prohibited, that is, a prohibition request, to the P units.

  Then, when the wait time of 10 seconds has passed, a command including a glass opening request for releasing the lock of the glass door 6 to be opened and an instruction of SQN = n + N is transmitted to the P units as an operation instruction.

  In response to this, in the P platform, the glass door opening solenoid is excited to release the lock of the glass door 6 to open the glass door 6, and the bit in the glass door development life is turned ON. It remains ON until it is closed (until the detection signal from the glass door closing detector 12 is inputted). Then, the P platform returns a response including a response such as glass open refusal OFF, SQN = n + N + 1, game prohibition, and glass development in progress as an operation response to the CU.

  In the CU, if the glass opening request command is not rejected, that is, if a response including a response of glass opening rejection ON is not returned, it is determined that the glass door 6 has been opened. Thereafter, a command including no glass opening request is transmitted to the P units as an operation instruction.

  FIG. 32 shows a modification of the glass door opening process shown in FIG. The difference from the processing in FIG. 31 is that when the glass door opening instruction input is detected in the CU, not only the prohibition request for instructing the prohibition request of the game but also the lock of the glass door 6 is released. A command with a glass opening request instructing an opening request is transmitted to the P units. In response to this command, the P platform stops driving the ball striking motor (not shown) to control the ball striking stop, and until all balls fired in the game area 27 flow into the out balls and are collected. 10 seconds, that is, the waiting time for floating ball processing is taken into consideration, and a weight of 10 seconds is provided. During the wait time of 10 seconds, the CU and the P platform continue to transmit / receive operation instructions / operation responses. When the wait time of 10 seconds elapses, the glass door opening solenoid is excited to unlock the glass door 6 and the glass door 6 is opened. Then, the bit during the development of the glass door is turned ON, and thereafter, it remains ON until the glass door 6 is closed (until the detection signal from the glass door closing detector 12 is inputted).

  And as for P platform, glass opening refusal OFF which does not refuse opening of a glass door as an operation response, a game prohibition which shows that it is in the state where ball hitting is stopped, and that the lock of the glass door is released and it is being opened A response including data such as that during glass development is shown to the CU.

  The CU determines that the glass door 6 has been opened by receiving an operation response of glass opening refusal OFF.

  As described above, the modification shown in FIG. 32 is characterized in that the 10-second wait process considering the floating ball process waiting time is executed not on the CU side but on the P platform side.

  Next, with reference to FIG. 33, a process of releasing the lock of the cell (front frame) 5 and releasing it will be described. The opening process of the cell (front frame) 6 is the same as the opening process of the glass door 6 shown in FIG. Here, the differences will be mainly described.

  When an attendant at the game hall operates the remote control to unlock and release the front frame (cell) 5, infrared light including a cell release command signal is output from the remote control to the IR photosensitive unit 320. Is done. In response to this, the IR photosensitive unit 320 outputs a cell opening command signal to the main control unit 323. As a result, it is determined in the CU that a cell opening instruction input for opening the cell has been detected. Then, the CU transmits, as an operation instruction, a command including data such as prohibition request existence and cell opening request absence data for prohibiting the game to the P units. In response to this, the P platform stops the driving of the hitting ball firing motor and controls the hitting ball firing stop state.

  In the CU, a 10-second wait is provided in consideration of the floating ball processing waiting time, and when the 10-second wait time ends, the cell open request data that is an instruction to unlock and release the cell is received. The command including it is transmitted to P units. In response to this, the P platform releases the front frame 5 by exciting the front frame opening solenoid to unlock the front frame 5. Then, the bit during cell development is turned on, and thereafter, it is kept on until the cell is closed (until the detection signal from the front frame closing detector is inputted).

  And as for the P platform, as an operation response, cell opening rejection OFF that does not reject the cell opening request, game prohibition indicating that it is in a ball hitting stop state, cell development underway indicating that the cell is being opened, etc. A response including data is transmitted to the CU.

  If the CU is not rejected with respect to the cell opening request, that is, if a response including cell opening rejection OFF is returned, the CU determines that the cell has been opened.

  33 also has a function for providing a 10-second weight in consideration of the floating ball processing waiting time in the process of releasing the cell shown in FIG. 33 in the same manner as the modification shown in FIG. When the command input for cell opening is detected, the CU sends a command including instructions for prohibition request and cell opening request to the P units, and the P unit side receives the command and performs the hit ball firing prohibition control. After that, the operation instruction / response is continued with the 10-second wait period CU and the P platform, and when the 10-second wait time has elapsed, the front frame opening solenoid is excited to lock the front frame 5 It may be canceled and released, and thereafter a cell open rejection OFF, a response including data during cell development, may be transmitted to the CU.

  As described above with reference to FIGS. 31 to 33, according to the present embodiment, the closed state of the glass door or cell, which is a specific example of the front member of the P platform, is released without affecting the game progress. It becomes possible.

  Next, with reference to FIG. 34, a description will be given of processing when the power is activated while the CU is holding the card and an abnormality in which the P units are not connected occurs at that time. Since a communication interruption occurred between the CU and the P unit while the card was inserted and the P unit was playing, the recovery request command was issued from the CU when the CU power was restarted. Sent to. However, since an unconnected abnormality of P units has occurred, a response from P units is not returned to the CU. Then, the CU retransmits the recovery request command to the P units. Nevertheless, if no response is returned from the P units, the second recovery request is retransmitted to the P units. If no response is returned from the P units for the second retransmission, at this stage, the CU determines that there is a communication error and displays on the display 312 that an error has occurred due to no connection. And a control to turn on or blink the abnormality notification lamp. A device information request command may be transmitted instead of the recovery request.

  In this state, when the store clerk operates the remote controller for the CU and outputs an infrared signal forcibly ejecting the inserted card to the IR photosensitive unit 320, the forced ejection signal is sent to the main control unit 323. Entered. In response to this, the CU adds the “number of game balls” backed up by the CU to the “held ball” of the inserted card and clears the “number of game balls” and “connection time” of the CU to 0. The command to eject the inserted card is output to the card reader / writer. Upon receiving this, the card reader / writer discharges the taken card. Instead of directly recording the card score on the card, the higher server may store the score in association with the card number of the card. In that case, the number of game balls stored in the CU and the card number of the inserted card are transmitted to the upper server and stored in association with the card number received by the upper server. And the score is updated to a value corresponding to the number of game balls stored in the CU. The CU then ejects the card.

  A manual ejection mechanism that manually ejects the card when the CU fails may be provided.

  After that, the CU transmits a recovery request command to the P units and performs a connection sequence (see FIG. 21) restart process. The CU determines that the connection sequence is resumed in a state where a card is inserted (a state other than standby), and executes the connection sequence at the time of reconnection in FIG. 21 instead of the connection sequence at the time of power activation in FIG. To do. The number of balls to be added (for example, j) or subtraction balls after the connection failure (see FIG. 21) is executed and the first operation response is transmitted by the P units after the P unit unconnected abnormality occurs. The process when the number (for example, r) is generated is performed by the restart process of FIG. Referring to FIG. 21, the CU receives the recovery response from P units, thereby calculating the number of game balls = 0 + j (the number of added balls) + r (the number of subtracted balls), and the number of game balls that is the calculation result = J + r is backed up. Then, as described with reference to FIG. 21, the SQN correction ON, the game ball correction ON, and a communication start request including the value of SQN and the value of the game ball are transmitted to P units, and the SQN of P units and the number of game balls And correct it.

  Next, with reference to FIG. 35, a process when an operation instruction from the CU (no requested operation) has not reached P units will be described.

  As described with reference to FIG. 27 and the like, the P platform receives the operation instruction command from the CU, and obtains the data of the current addition / subtraction balls and the current start port count stored in the current ball related information storage area. The back-up information is stored in the front ball related information storage area as the number of pre-addition subtraction balls and the number of previous start ports, and the current addition subtraction ball number and the current start port number data stored in the current ball related information storage area are cleared to 0 In the case of FIG. 35, the operation instruction from the CU has not reached the P units. Therefore, the above-described backup clear process is not performed on the P units. As a result, each time the number of added balls, the number of subtracted balls, or a start win occurs, these data are accumulated and stored as current ball related information in the current ball related information storage area.

  First, in a state where the current number of game balls is 520, the CU sends a command of no request and SQN = n to the P units as an operation instruction. However, since the command does not reach the P machines, the response from the P machines is not returned to the CU. As a result, the CU transmits the same operation instruction command to the P units again. If this re-transmission does not reach the P units, the response from the P units is not returned to the CU, so the CU performs the second retransmission for the same operation instruction. When this retransmission is repeated, the value of SQN is maintained at n, and the addition update of “1” is not performed.

  When the command reaches P units in the second re-transmission, until the operation instruction arrives, P unit uses the current ball related information as the data of the number of addition subtraction balls and the number of start ports as described above. As a cumulative memory. Then, using the accumulated and stored number of balls = 6 and the number of subtracted balls = 36, the current number of gaming balls = 520 + 6-36 = 490 is calculated, and SQN = n + 1, the number of gaming balls = 490, the number of added balls = 6, the number of subtracted balls = 36, the number of times of starting port (1) = 1, and the number of times of starting port (2) = 1 are transmitted to the CU.

  In response to this, the CU calculates the number of game balls = 520 + 6 (the number of added balls) −36 (the number of subtracted balls) = 490, and corrects and stores the number of game balls in 490.

  Next, with reference to FIG. 36, the processing when the operation response from the P platform (response to the absence of requested operation) has not reached the CU will be described. In the case shown in FIG. 36, since the command from the CU is input to the P units, the above-described backup clear processing is executed, but the SQN value of the command transmitted from the next CU to the P unit is performed. Since (= n) is the same as the previous SQN value (= n), the P units determine that the response of the operation response transmitted to the CU is retransmission due to not reaching the CU, and the previous time The current addition / subtraction ball number and the current start port number as the current ball related information are cumulatively added to the data without clearing the data of the previous addition / subtraction ball number and the previous start port number which are the ball related information.

  Specifically, assuming that the current number of game balls is 520, the CU first sends a command of no request and SQN = n to the P units as an operation instruction. Upon receiving this, the P clearing process described above is performed to calculate the current number of game balls = 520−13 + 3 = 510, back up the number of game balls = 510, back up SQN = n + 1, The current addition / subtraction balls count and the current start port count data are backed up and stored in the pre-addition subtraction balls count and the previous start aperture count, and an action response command is created to present the current addition / subtraction balls count and the current start. Clear the mouth count data to zero. Further, the current number of game balls 510 is included in the response data of the motion response. Then, the P units have SQN = n + 1, the number of game balls = 510, the number of added balls = 3, the number of subtracted balls = 13, the number of start ports (1) = 1, and the number of start ports (2) = 0. Is sent to the CU.

  However, since the response does not reach the CU, the CU transmits the same operation instruction as that of the previous time, that is, no request, SQN = n command to the P units.

  In the P machine that has received it, since the SQN received this time is the value (= n) immediately before the SQN (= n + 1) backed up, the response of the transmitted operation response does not reach the CU. The current addition subtraction ball number as the current ball related information and the data of the previous addition subtraction ball number as the previous ball related information and the data of the number of times of the previous start port without clearing the data Back up data by cumulatively adding the data of the current number of starting ports. As a result, the number of pre-added balls = 3 + 3 = 6, the number of pre-subtracted balls = 13 + 8 = 21, the number of front start ports (1) = 1 + 0 = 1, and the number of front start ports (2) = 0 + 1 = 1. After the response of the operation response composed of these data is created, the data of the current number of added and subtracted balls and the current number of starting ports are cleared to zero. And as an operation response, the P platform is SQN = n + 1, the number of game balls = 505, the number of added balls = 6, the number of subtracted balls = 21, the number of start ports (1) = 1, the number of start ports (2) = 1 Send the response to the CU. However, since this response also does not reach the CU, the CU transmits the same operation instruction (no request, SQN = n) command to the P units again.

  In response to this, the P unit determines that the SQN received this time is the value (= n) one before the SQN (= n + 1) backed up, and the response of the operation response has reached the CU. It is detected that there is no retransmission. As a result, the P platform performs cumulative addition storage on the previous ball related information, as described above, creates a response of the operation response, and returns it to the CU. Specifically, the response of SQN = n + 1, the number of game balls = 485, the number of additional balls = 12, the number of subtraction balls = 47, the number of start ports (1) = 2, the number of times of start port (2) = 2 as operation responses. To the CU.

  Since the response of this operation response has reached the CU, the CU calculates the number of game balls = 520 + 12−47 = 485, and performs processing for correcting and storing the data of the game balls in the 485.

  As described above, when the previously transmitted operation response does not reach the CU, the P units do not transmit the next operation response after retransmitting the unachieved operation response, but information that has not been reached. The information after adding up is transmitted as the next operation response. As a result, the gaming apparatus can reliably and efficiently collect information regarding the number of game balls and the number of winning entries. In the example of FIG. 36, the case where the operation response from the P platform has not reached once has been described. However, if the operation response has not reached twice, the operation response transmitted for the third time is not included. , The total value obtained by adding the motion response information transmitted the second time is included.

  Next, with reference to FIG. 37, a process when an operation instruction (addition request) from the CU has not reached P units will be described. The number of game balls at the current time is set to 520, the number of balls to be added when there is an operation for replaying a stored ball or a withdrawal from a prepaid balance is set to 125, and first, as an operation instruction, the CU has an addition request, SQN = n, and A command including data of the number of balls to be added = 125 is transmitted to the P units. However, since the command does not reach the P units, the response from the P units is not returned to the CU. As a result, as described above, the CU retransmits the command with the same operation instruction. Since the re-send command has not reached the P units, the corresponding response from the P units is not transmitted to the CU. Therefore, as described above, the CU performs the second retransmission for the command with the same operation instruction. This second retransmission command reaches P units. In the period when the operation instruction command from the CU has not yet reached, the P units do not perform the above-described backup clear process, and the addition / subtraction data and the start port are added to the current addition / subtraction ball number and the current start port number as the current ball related information. Accumulated addition of count data is stored.

  Then, P units calculate the current game ball number = 520 + 125 (addition request ball number) +6 (current addition ball number) −36 (current subtraction ball number) = 615, and the current game ball number data is set to 615. Create an action response. Specifically, the P platform has an addition refusal OFF, SQN = n + 1, the number of game balls = 615, the number of additional balls = 6, the number of subtraction balls = 36, the number of start ports (1) = 1, and the start as an operation response Mouth (2) Response of number of times = 1 is transmitted to the CU.

  In response to this, the CU calculates the number of game balls = 520 + 125 + 6-36 = 615, and corrects and stores the game ball number data in that 615.

  Next, with reference to FIG. 38, a process when the operation response from the P platform (response to the addition request) has not been reached will be described. An explanation will be given of a case where the initial number of game balls is 520 and an operation for using the game as a replay of stored balls or a withdrawal from a prepaid balance is performed and a request for adding 125 balls is generated. First, the CU transmits, as an operation instruction, a command with an addition request, SQN = n, and the number of addition request balls = 125 to P units. In response to this, the P units, as the current ball related information, add ball number = 3, subtract ball number = 13, start port (1) number of times = 1, and start port (2) number of times = 0, and SQN = n + 1. Is stored in the previous ball related information storage area, and the number of game balls = 520 + 125 + 3-13 = 635 is calculated and the number of game balls = 635 is stored.

  Then, after creating the response of the motion response, the P platform clears the stored data in the current ball related information storage area to 0, and as the motion response, addition rejection OFF, SQN = n + 1, number of game balls = 635, number of added balls = 3, number of subtraction balls = 13, start port (1) number of times = 1, and start port (2) number of times = 0 responses are transmitted to the CU.

  However, since the response did not reach the CU, the CU retransmits the same operation instruction command to the P units. At the time of the retransmission, the SQN having the same value n as the previous time is transmitted to the P units without updating the SQN by adding “1”.

  In the P unit, it is determined that the SQN received this time is a value (= n) immediately before the backed up SQN (= n + 1), and the response of the operation response does not reach the CU. Although the transmission is detected, the received command includes the number of balls requested for addition = 125, but the game balls are not added and updated based on the command. That is, the addition update according to the addition request is not executed twice.

  In addition, since the command P is detected again in the P platform, the previous ball related information already stored in the previous ball related information storage area is stored in the current ball related information storage area as in the process of FIG. The accumulated data, that is, the number of added balls = 3, the number of subtracted balls = 8, the number of start ports (1) = 0, and the number of start ports (2) = 1 are accumulated and stored. Then, the number of game balls = 635 + 3-8 = 630 is calculated, and the number of game balls is corrected to 630 and stored.

  Thereafter, the P units create a response of the operation response. Specifically, as an operation response, addition rejection OFF, SQN = n + 1, number of game balls = 630, number of addition balls = 6, number of subtraction balls = 21, start port (1) number of times = 1, and start port (2) Number of times = 1 is transmitted as a response to the CU.

  Since this response also did not reach the CU, the CU performs a second retransmission of the command with the same operation instruction.

  In the P units, the retransmission detection is performed in the same manner as described above, and the addition request ball number = 125 is received, but the addition update is not performed, and the addition update according to the addition request is not performed twice. In the same manner as described above, after accumulating in the previous ball related information storage area, calculating the number of game balls, generating a response, and clearing the current ball related information storage area to 0, as an operation response, addition rejection OFF, SQN = N + 1, number of game balls = 610, number of added balls = 12, number of subtraction balls = 47, start port (1) number of times = 2, and response of start port (2) number of times = 2 are transmitted to the CU. Since this response reaches the CU, the CU calculates the number of game balls = 520 + 125 + 12−47 = 610, corrects the number of game balls to 610, and stores it.

  In this way, in the P units, even if the command including the addition request ball number data transmitted from the CU is received, the SQN received this time is the value immediately before the SQN (= n + 1) backed up (= = N), it is determined that it is a re-transmission, it is not determined that it is an additional addition request, the addition update of the game balls is not performed, and the addition update in response to the addition request is executed twice Absent.

  Next, with reference to FIG. 39, a process when the operation instruction (subtraction request) from the CU does not reach the P units will be described. A case will be described where an initial number of game balls = 520 and a subtraction request for 300 balls is generated due to the occurrence of a wagon order or the like. First, the CU transmits, as operation instructions, commands with a subtraction request, SQN = n, and the number of subtraction request balls = 300 to P units. However, since the command did not reach the P machines, the response from the P machines is not returned to the CU. Therefore, the CU transmits the same operation instruction command to the P units again. Since this re-transmission command also did not reach the P units, the response from the P units is not returned to the CU. Therefore, the CU performs a second retransmission of the same operation instruction command. This second retransmission command reaches the P units.

  In the P unit, during the period in which the operation instruction command from the CU has not yet reached, as in the process of FIG. 35, each time an addition / subtraction ball number and a start winning are generated, these data are accumulated and stored in the current ball related information storage area. To do. Then, at the stage when the command command for the second operation is input to the P machines, the game ball = 520−300 + 6-36 = 190 is calculated, and the game ball = 190 is stored. Then, as an operation response, the subtraction rejection OFF, SQN = n + 1, the number of game balls = 190, the number of additional balls = 6, the number of subtraction balls = 36, the number of start ports (1) = 1, and the number of start ports (2) = 1 Is sent to the CU.

  In response to this, the CU calculates a game ball = 520−300 + 6-36 = 190, and corrects and stores the game ball in 190.

  In this way, when subtracting from the game balls, the CU first sends an operation instruction command including data on the number of subtraction requests and the number of subtraction request balls to the P units, and a response as an operation response to the command is received. After waiting for the response to the CU, the subtraction request is subtracted from the game ball. Although the main management function for adding and subtracting game balls and managing the current game balls is on the CU side, the number of balls added and subtracted from the P units on the CU side is different from the game balls that change momentarily as the game progresses on the P units. It is possible to calculate the current game ball by adding / subtracting the game balls only after the response including the motion response is returned, and the game in the CU compared to the P device for the period of waiting for the motion response from the P device. The calculation time of the ball is delayed. Therefore, the current game ball data on the CU side is data with a time delay with respect to the P units, and even if the current game ball on the CU side is the number of subtraction request balls, In reality, however, there may be no game balls left for the number of balls required for subtraction. Therefore, in this embodiment, when subtracting the game balls, the CU waits for a response of the operation response from the P platform, and subtracts the game balls for the subtraction request.

  Next, with reference to FIG. 40, a process when the operation response from the P platform (response to the subtraction request) has not reached the CU will be described. Assuming that the initial number of game balls = 520 and the number of balls required for subtraction = 300, first, the CU transmits, to the P units, commands indicating that there is a subtraction request, SQN = n, and the number of balls required for subtraction = 300. In response to this, the P units, as the current ball related information, add ball number = 3, subtract ball number = 13, start port (1) number of times = 1, and start port (2) number of times = 0, and SQN = n + 1. Is stored in the previous ball related information storage area, and the number of game balls = 520-300 + 3-13 = 210 is calculated and the number of game balls = 210 is stored.

  Then, after creating the response of the motion response, the P units clear the stored data in the current ball related information storage area to 0, and as the motion response, addition rejection OFF, SQN = n + 1, the number of game balls = 210, the number of added balls = 3, number of subtraction balls = 13, start port (1) number of times = 1, and start port (2) number of times = 0 responses are transmitted to the CU.

  However, since the response did not reach the CU, the CU retransmits the same operation instruction command to the P units. At the time of the retransmission, the SQN having the same value n as the previous time is transmitted to the P units without updating the SQN by adding “1”.

  In the P unit, it is determined that the SQN received this time is a value (= n) immediately before the backed up SQN (= n + 1), and the response of the operation response does not reach the CU. Although it is detected that the transmission is a transmission, the received command includes the number of subtraction request balls = 300, but the game balls are not subtracted and updated based on the command. That is, the subtraction update corresponding to the subtraction request is not executed twice.

  In addition, since the command P is detected again in the P platform, the previous ball related information already stored in the previous ball related information storage area is stored in the current ball related information storage area as in the process of FIG. The accumulated data, that is, the number of added balls = 3, the number of subtracted balls = 8, the number of start ports (1) = 0, and the number of start ports (2) = 1 are accumulated and stored. Then, the number of game balls = 210 + 3-8 = 205 is calculated, and the number of game balls is corrected to 205 and stored.

  Thereafter, the P units create a response of the operation response. Specifically, as an operation response, addition rejection OFF, SQN = n + 1, number of gaming balls = 205, number of additional balls = 6, number of subtracting balls = 21, number of start ports (1) = 1, and start port (2) Number of times = 1 is transmitted as a response to the CU.

  Since this response also did not reach the CU, the CU performs a second retransmission of the command with the same operation instruction.

  In the P units, retransmission detection is performed in the same manner as described above, and the subtraction update is not performed while receiving the subtraction request ball count = 300, and the subtraction update is not performed twice in response to the subtraction request. In the same manner as described above, after accumulating in the previous ball related information storage area, calculating the number of game balls, generating a response, and clearing the current ball related information storage area to 0, as an operation response, addition rejection OFF, SQN = N + 1, number of game balls = 205 + 6-26 = 185, number of added balls = 12, number of subtracted balls = 47, start port (1) number of times = 2, and response of start port (2) number of times = 2 are sent to the CU . Since this response reaches the CU, the CU calculates the number of game balls = 520−300 + 12−47 = 185, corrects the number of game balls to 185, and stores it.

  In this way, in the P units, even if the command including the addition request ball number data transmitted from the CU is received, the SQN received this time is the value immediately before the SQN (= n + 1) backed up (= = N), it is determined that it is a re-transmission, it is not determined that it is an additional subtraction request, subtraction update of the game ball is not performed, and subtraction update in response to the subtraction request is executed twice. Don't do it.

  Next, with reference to FIG. 41, a process when the P units return an addition rejection response to the CU addition request will be described. The initial number of game balls = 520, the balance of the game recording medium (card) inserted in the CU = 1000 yen, and first, a command of no request and SQN = n is transmitted from the CU to the P units as an operation instruction. . The P platform calculates game balls = 520 + 3-23 = 500 and includes the number of game balls, the number of added balls, the number of subtracted balls, the number of start ports (1), the number of start ports (2), and the data of SQN = n + 1 An operation response is returned to the CU. The CU calculates a game ball based on the motion response and corrects it to game ball = 500.

  Next, the lending button 321 is pressed, and the CU transmits, as an operation instruction, a command including addition request present, SQN = n + 2, C-ID, balance = 500, and addition request ball count = 125 to P units. In the P platform, for some reason, a response of an operation response including addition rejection ON that rejects addition is returned to the CU.

  Since the CU has received an operation response including addition refusal OFF, it is determined that a game ball cannot be added on the P units, and there is a difference between the P units and the CU, and the communication connection is disconnected. In order to do so, a communication disconnection request command is transmitted to the P units. Upon receiving the request, the P platform returns a response to the communication disconnection response to the CU, disconnects the communication connection, and transmits a launch control signal for stopping the launch from the payout control unit 17 to the launch control board 31. The launch control board 31 that has received this stops the drive of the launch motor 18 and stops the game.

  In addition, as for P data, SQN = n + 3, the previous number of balls as the previous number of balls = 6, the number of previously subtracted balls = 36, the number of the previous start port (1) = 2, the previous start port (2) Number of times = 2, Current number of balls as current number of balls = 460, Current number of added balls = 3, Current number of subtracted balls = 13, Current starting port (1) times = 1, Current starting port (2) times = 1 Store the data.

  Next, after performing chip ID authentication between the CU and the P platform, a recovery request command and a recovery response are transmitted and received. In the response of this recovery response, the above-described recovery data stored on the P platform side is transmitted to the CU side.

  The CU calculates and backs up the number of game balls = 595 + 3-13 = 583 according to the recovery data (current number of added balls = 3, current number of subtracted balls = 13). Thereafter, the process proceeds to the reconnection process (connection sequence) shown in FIG. 21, and the CU transmits a command including game ball correction ON and game ball = 583 to the P units in the communication start request. In response to this, the P platform corrects the game ball to 583. The CU determines that the connection sequence is resumed after sending a communication disconnection request and disconnecting the communication, and executes the connection sequence at the time of reconnection in FIG. 21 instead of the connection sequence at the time of power activation of FIG. To do.

  Also in the processing of FIG. 41, since the consumption of the balance is determined on the CU side without waiting for the response of the operation response from the P units, a response including addition rejection ON is received as the operation response from the P unit. Even if a reply is received, the balance consumption has already been confirmed on the CU side at an earlier stage.

  Next, with reference to FIG. 42, a description will be given of a process in the case where P units return a subtraction rejection response to a CU subtraction request. Since the initial number of game balls is 520, the number of balls to be added is 3 and the number of balls to be subtracted is 13 at the stage when the command of the operation instruction and the response of the operation response are transmitted and received once between the CU and the P platform. Then, the game ball = 520 + 3-13 = 510.

  At this stage, when a wagon service order or the like occurs and a subtraction request for 500 balls is generated, the CU uses a command of subtraction request, SQN = n + 2, and the number of subtraction request balls = 500 as an operation instruction. Send to the stand. At the stage of receiving this command, the number of balls to be added is 6 and the number of balls to be subtracted is 36 in P units, and the number of game balls at the present time is 510 + 6-36 = 480. As a result, since the current number of game balls (480) is smaller than the number of balls required for subtraction (500), the subtraction request of 500 cannot be satisfied. Therefore, as for the operation P, the subtraction rejection ON indicating that the subtraction request is rejected as an operation response, SQN = n + 3, the number of game balls = 480, the number of additional balls = 6, the number of subtracted balls = 36, the number of start ports (1) = 2 and the response of start port (2) number of times = 2 is transmitted to the CU.

  In response, the CU calculates a game ball = 510 + 6-36 = 480 and corrects the game ball to 480. Then, subtraction rejection is detected, and subtraction cancellation processing is performed. In the subtraction cancellation process, for example, the display 312 displays a message such as “Unable to subtract due to insufficient game balls”.

Thereafter, normal operation instruction and operation response polling are performed.
Next, with reference to FIG. 43, a process when the P units return a clear rejection response to the CU clear instruction request will be described. When the return button 322 is pressed down with the initial number of game balls = 520, the CU, as with the process in FIG. A command including unrequested data is transmitted to the P units. In response to the request, the P platform returns a response including prohibition rejection OFF and game prohibition data to the CU as an operation response. Then, similarly to the process of FIG. 23, the P platform is provided with a 10-second wait, and polling is continued between the P platform and the CU during the 10-second wait.

  Thereafter, the CU transmits a command for clear request and an operation instruction command of SQN = n + N + 3 to the P units. Receiving it, the P stand indicates that it cannot be cleared for some reason, SQN = n + N + 4, number of game balls = 480, number of added balls = 6, number of subtracted balls = 36, start port (1) times = 1, start port (2) number of times = 2 response of operation response is transmitted to CU. At this stage, the game ball is 480. Then, the CU detects clear rejection, transmits a command of no request and SQN = n + N + 4 as operation instructions to the P units, and performs clear cancel processing. This clear canceling process is, for example, a process of displaying a message such as “Return operation is performed but canceling is not possible” on the display 312. Thereafter, normal polling of operation instructions and response is performed between the CU and the P platform.

  Referring to FIG. 44, a process when the P units return a permission rejection response to the CU game permission request will be described. Initially, the number of game balls is set to 520, and in the trouble state where some kind of game prohibition factor has occurred, the operation instruction command and the response of the operation response are transmitted and received between the CU and the P device in a state in which P games are prohibited. Then, it is assumed that the game prohibition factor is eliminated at the stage of “game elimination factor elimination” in FIG.

  At that time, the CU transmits a game permission request presence and a command of SQN = n + 2 to the P machines as operation instructions. However, the P platform returns to the CU an operation response command including, for some reason, a state where the ball cannot be shot, that is, a game rejection ON that rejects the game permission request.

  In response to this, the CU repeatedly transmits a command including a game permission request to the P machines as an operation instruction until the game is permitted.

Next, with reference to FIG. 45, a process when the P units return a prohibition rejection response to the CU game prohibition request will be described. The initial number of game balls is set to 520, and a normal operation instruction command and a normal operation response response are transmitted / received between the CU and the P platform. At the stage of “game prohibition factor generation” in FIG. Assume that a game prohibition factor such as an operation of the return button 322 occurs. At this stage, the CU transmits a game prohibition request presence and a command of SQN = n + 2 to the P machines as operation instructions. In the P machine, the response of the operation response including the prohibition rejection ON for rejecting the game prohibition request for some reason is returned to the CU. In response to this, the CU detects a game prohibition refusal, and transmits a command including a game prohibition request to the P units as an operation instruction until the game is prohibited.

  Next, with reference to FIG. 46, a process when the P platform returns a glass opening rejection response to the glass opening request of the CU will be described. When an input of opening instruction of the glass door 6 is detected with the initial number of game balls = 520, although not shown in FIG. 46, the CU first has a prohibition request as an operation instruction as in the process of FIG. And a command of no glass opening request is transmitted to P units. In response to this, the P platform performs control to stop driving of the hitting ball motor (not shown), and transmits a response including prohibition rejection OFF and game prohibition to the CU as an operation response. The CU provides a 10-second wait in consideration of the floating ball processing waiting time, and for 10 seconds, the CU continues polling with the operation instruction (game prohibition) to the P units. Then, at the stage when the 10-second wait is completed, the CU transmits a command for glass opening request and an operation instruction command of SQN = n + 2 to the P units. In response to this, the P platform transmits a response of an operation response including a glass opening refusal ON that refuses to unlock and open the glass door 6 for some reason to the CU.

  In response to this, the CU detects glass open refusal, sends a command including no request to the P units as an operation instruction, and executes normal polling after performing glass open cancel processing. The glass opening canceling process is, for example, a process of displaying a message such as “Cannot open the glass door” on the display 312.

  Next, with reference to FIG. 47, a description will be given of a process in the case where P units return a cell open rejection response to the CU cell open request. When an input of a cell opening instruction is detected with the initial number of game balls = 520, although not shown in FIG. 47, as in the process in FIG. A command with no open request is sent to the P units. In response to this, the P platform performs control to stop driving of the hitting ball motor (not shown), and transmits a response including prohibition rejection OFF and game prohibition to the CU as an operation response. The CU provides a 10-second wait in consideration of the floating ball processing waiting time, and for 10 seconds, the CU continues polling with the operation instruction (game prohibition) to the P units. Then, at the stage when the 10-second wait is completed, the CU transmits a command for cell opening request and an operation instruction command of SQN = n + 2 to the P units. In response to this, the P platform transmits a response to the operation response including the cell open rejection ON which refuses to release the cell lock for some reason and releases it.

  In response to this, the CU detects cell open refusal, sends a command including no request to the P units as an operation instruction, and executes normal polling after performing cell open cancel processing. The cell opening canceling process is, for example, a process of displaying a message such as “Cannot open cell” on the display 312.

  FIG. 48 is a flowchart for explaining the deposit process. With reference to FIG. 48, the deposit process on the CU side will be described.

  As an operation instruction, the CU transmits data including no addition request, OFF during deposit processing, SQN = n, number of balls required for addition = 0, number of balls required for subtraction = 0 to the P platform. As for the P response, SQN = n + 1, the number of gaming balls = 0, the number of additional balls = 0, the number of subtracting balls = 0, the number of starting ports = 0, the number of starting ports 2 times = 0, the game is possible, the special prize is OFF, A response including the probability variation OFF is transmitted to the CU.

  Here, when a banknote is inserted into the CU side and deposited, the P platform side transmits data including SQN = n + 2, ON during deposit processing. The operation response of the P units is the addition rejection OFF, and the others are the same responses as the first operation response, and each instruction is given from the CU side. However, since the responses from the P units are the same, the description will not be repeated. Thereafter, when the deposit processing display is completed, an operation instruction to turn off the deposit processing display is issued from the CU side, and the corresponding operation response is transmitted from the P units. As a result of the deposit process, no addition request has been made.

  FIG. 49 is a flowchart for explaining mode change (trial hit mode). The test hit mode is a mode used when adjusting the gaming table 2. Referring to FIG. 49, the CU transmits “No addition”, “SQN = n”, “Addition request ball number = 0”, and “Subtraction request ball number = 0” to the P units as operation instructions. It is confirmed that no card is inserted, and P stands for SQN = n + 1, the number of gaming balls = 0, the number of additional balls = 0, the number of subtracting balls = 0, the number of times of starting port = 0, the number of times of starting port 2 = 0 , Game possible, special prize OFF, probability variation OFF data is transmitted to the CU side as an operation response.

  Next, a mode change request is transmitted to the P units in order to set the trial hit mode by remote control operation on the CU side. The P units transmit a mode change response to the CU side based on the mode change request. Thereafter, the P units are operated in the trial hit mode until the next mode change request is made.

  During the test hit mode, the CU does not add / subtract game balls. In view of this, the P cars transmit the number of game balls = 0, the number of added balls = 0, and the number of subtracted balls = 0 as motion responses to the CU.

  Next, when the adjustment of the gaming table 2 is completed, the CU side cancels the trial hit mode by remote control operation in order to change to the sales mode. At the same time, a mode change request to the sales mode is transmitted to the P units, and the P units return a mode change response changed to the sales mode.

  Next, with reference to FIG. 50, a description will be given of a recovery process when a power interruption occurs on the CU side after reaching an operation response related to addition / subtraction data. The command of operation instruction is transmitted to the P machines in the state of SQN = n at the initial number of game balls = 520, and the P machines have SQN = n + 1, the number of game balls = 500, the number of additional balls = 3, and the subtraction as the operation response. A response including addition / subtraction data of the number of balls = 23 is transmitted to the CU. When the response reaches the CU, when the power is cut off at the CU after the SQN = n + 1 and the number of game balls = 500, the command from the CU is not transmitted to the P units. In the case of the P unit, when the command cannot be received after 4 seconds, it is determined that the communication is cut off, the state is changed to the unconnected state, and the driving of the hitting ball motor (not shown) is stopped to enter the play stop state. . Cumulative storage of the addition / subtraction data and the number of start ports after the response of the motion response including the previous addition / subtraction data is transmitted in the current ball related information storage area, and accordingly, game balls = 500 + 6-36 = 470 are calculated. Then, the game ball = 470 is stored.

  Next, in the case where the power failure is restored in the CU and started, the execution of the serial ID authentication sequence and the chip ID authentication sequence and the transmission / reception of the recovery request and the recovery response are performed between the CU and the P unit, as in the processing of FIG. Will do.

  In the P-unit, as the recovery data, SQN = n + 1, C-ID, the previous number of balls as the previous number of balls = 3, the number of the previous subtraction balls = 23, the number of the previous start port (1) = 1, the previous start port ( 2) Number of times = 1, Current number of balls as current number of balls = 470, Current number of added balls = 6, Current subtractive ball = 36, Current start port (1) number = 2, Current start port (2) number = 2 is stored and transmitted to the CU as a recovery response.

  The CU determines that the communication partners are the same and that both SQNs match, and performs a process of correcting the backup value based on the recovery data transmitted in the recovery response. Specifically, the number of game balls = 500 (number of CU game balls) +6 (current number of added balls) −36 (current number of subtracted balls) = 470, cumulative number of added balls = 6, cumulative number of subtracted balls = 36, start The mouth (1) total = 2, and the starting port (2) total = 2 are corrected.

  Next, with reference to FIG. 51, the recovery process at the time of the power failure generation | occurrence | production on the CU side before operation instruction | command arrival is demonstrated. The initial number of game balls = 520, and the P units that have received the operation instruction command have SQN = n + 1, the number of game balls = 500, the number of additional balls = 3, the number of subtracted balls = 23, the start port (1 ) The number of times = 1 and the response of the start port (2) number of times = 1 are sent to the CU, and after the CU corrects to SQN = n + 2 and the game ball = 500, the CU receives no request as an operation instruction, A command of SQN = n + 2 is transmitted to the P units. If the command does not reach the P unit and the power is cut off at the CU immediately after that, the P unit determines that the communication has been interrupted if the command has not been received for more than 4 seconds after sending the last response. Then, the transition to the unconnected state is made, and at the same time, the driving of the ball striking motor (not shown) is stopped and the play is stopped.

  Next, in the case where the power failure is restored in the CU and started, the execution of the serial ID authentication sequence and the chip ID authentication sequence and the transmission / reception of the recovery request and the recovery response are performed between the CU and the P unit, as in the processing of FIG. Will do.

  In the P-unit, as the recovery data, SQN = n + 1, C-ID, the previous number of balls as the previous number of balls = 3, the number of the previous subtraction balls = 23, the number of the previous start port (1) = 1, the previous start port ( 2) Number of times = 1, Current number of balls as current number of balls = 500 + 6-36 = 470, Current number of added balls = 6, Current subtractive ball = 36, Current starting port (1) Number of times = 2, Current starting port ( 2) Store the number of times = 2 and send it as a recovery response to the CU.

  In the CU, the communication partner is the same, the operation instruction is not being transmitted, and the SQN on the CU side is advanced by one than the SQN on the P base side. Therefore, based on the recovery data transmitted in the recovery response Performs processing to correct the backup value. Specifically, the number of game balls = 500 (number of CU game balls) +6 (current number of added balls) −36 (current number of subtracted balls) = 470, cumulative number of added balls = 6, cumulative number of subtracted balls = 36, start The mouth (1) total = 2, and the starting port (2) total = 2 are corrected.

  Next, with reference to FIG. 52, a description will be given of recovery processing when a power failure occurs on the CU side before reaching an operation response related to addition / subtraction data. Assuming that the initial number of game balls is 520, a normal operation instruction and a normal operation response are sent and received back and forth between the CU and the P unit, and then no operation request command of SQN = n + 2 is sent to the P unit. After that, the P units responded as SQN = n + 3, C-ID, number of game balls = 470, number of added balls = 6, number of subtracted balls = 36, start port (1) number of times = 2, start port (2) The response of the number of times = 2 is transmitted to the CU. However, when the response does not reach the CU and the power failure occurs in the CU before the CU executes the operation response process according to the response, If the command is not transmitted, the cutting is detected, the driving of the hitting motor (not shown) is stopped, and the play is stopped.

  Next, in the case where the power failure is restored in the CU and started, the execution of the serial ID authentication sequence and the chip ID authentication sequence and the transmission / reception of the recovery request and the recovery response are performed between the CU and the P unit, as in the processing of FIG. Will do.

  In the P-unit, as recovery data, SQN = n + 3, C-ID, the number of pre-addition balls = 6, the number of pre-subtraction balls = 36, the number of front start ports (1) = 2, the number of front start ports ( 2) Number of times = 2, Current number of balls as current number of balls = 470-3 = 467, Current number of added balls = 0, Current subtractive number of balls = 3, Current starting port (1) Number of times = 0, Current starting port ( 2) Store the number of times = 0 and send it to the CU as a recovery response.

  In the CU, since the communication partners are the same and the P SQNs are advanced by 1, the backup value is corrected based on the recovery data transmitted in the recovery response. Specifically, the number of game balls = 500 (the number of game balls of the CU) +6 (current number of added balls) +0 (current number of added balls) −36 (current number of subtracted balls) −3 (current number of subtracted balls) = 467, Total number of balls added = 6 (current number of added balls) + 0 (current number of added balls), total number of subtracted balls = 36 (current number of subtracted balls) + 3 (current number of subtracted balls), starting port (1) cumulative number = 2 (previous Start port (1) number) +0 (current start port (1) number), start port (2) total = 2 (previous start port (2) number) +0 (current start port (2) number).

  Next, with reference to FIG. 53, a description will be given of recovery processing when a power failure occurs on the CU side before the addition request is reached. Initial number of game balls = 520 and prepaid balance is 1000 yen, normal operation instruction and normal operation response are sent and received between CU and P units, based on the number of added balls and subtracted balls generated between them When the game ball reaches 500, the lending button 321 is pressed. Then, the CU sets SQN = n + 2 and the number of balls requested for addition = 125, calculates balance = 1000 yen−500 yen = 500 yen, updates the balance to 500 yen, and determines the consumption of the balance at this stage. Then, the CU transmits a command including an addition request, SQN = n + 2, a balance = 500, and an addition request ball count = 125 as operation instructions to P units. When this command does not reach the P platform, the P platform detects a disconnection when the command has not been received for 4 seconds since the last response was transmitted, and a ball hitting motor (not shown). Is stopped and the play is stopped.

  On the other hand, in the CU, when there is no response from the P units due to the command not reaching, the communication is abnormal when the same command is repeatedly transmitted and no response is returned even after the second retransmission. (Communication loss) is detected, and a reconnection sequence is started after 5 seconds.

  After the reconnection sequence is started, the CU and the P unit perform the execution of the serial ID authentication sequence and the chip ID authentication sequence and the transmission / reception of the recovery request and the recovery response as in the process of FIG.

  In the P-unit, as the recovery data, SQN = n + 1, C-ID, the previous number of balls as the previous number of balls = 3, the number of the previous subtraction balls = 23, the number of the previous start port (1) = 1, the previous start port ( 2) Number of times = 1, Current number of balls as current number of balls = 470, Current number of added balls = 6, Current subtractive ball = 36, Current start port (1) number = 2, Current start port (2) number = 2 is stored and transmitted to the CU as a recovery response.

  In the CU, the communication partner is the same, and the SQN on the CU side is advanced by one from the SQN on the CU side, so that the backup value is corrected based on the recovery data transmitted in the recovery response. . Specifically, the number of game balls = 625 (the number of game balls of the CU) +6 (current number of added balls) −36 (current number of subtracted balls) = 595, the total number of added balls = 6, the total number of subtracted balls = 36, start The mouth (1) total = 2, and the starting port (2) total = 2 are corrected.

  Next, with reference to FIG. 54, a description will be given of recovery processing when a power failure occurs on the CU side before reaching the operation response to the addition request. Initial number of game balls = 520, prepaid balance = 1000 yen, normal operation instruction and normal operation response are transmitted / received between CU and P units, and game balls = After reaching 500, the lending button 321 was pressed. Then, the CU calculates SQN = n + 2 and the number of balls requested for addition = 125, calculates balance = 1000 yen−500 yen = 500 yen, sets the balance to 500 yen, and determines the balance consumption at this stage. Then, the CU transmits, as an operation instruction, a command with an addition request, SQN = n + 2, C-ID, balance = 500, and addition request ball count = 125 to the P units. In response to this, the P units have SQN = n + 3, the number of game balls = 595, the number of added balls = 6, the number of subtracted balls = 36, the number of start ports (1) = 2, and the number of start ports (2). A response of = 2 is transmitted to the CU. If this response does not reach the CU and the power is cut off before the operation response process corresponding to this response is performed in the CU, the command from the CU is not transmitted to the P units thereafter. In the case of the P unit, when the command cannot be received after 4 seconds, it is determined that the communication is cut off, the state is changed to the unconnected state, and the driving of the hitting ball motor (not shown) is stopped to enter the play stop state. . Cumulative storage of the addition / subtraction data and the number of start ports after the P response transmission of the operation response including the previous addition / subtraction data is made in the current ball related information storage area, and accordingly, game balls = 595-3 = 592 are calculated. Then, the game ball = 592 is stored.

  Next, in the case where the power failure is restored in the CU and started, the execution of the serial ID authentication sequence and the chip ID authentication sequence and the transmission / reception of the recovery request and the recovery response are performed between the CU and the P unit, as in the processing of FIG. Will do.

  In the P-unit, as recovery data, SQN = n + 3, C-ID, the number of pre-addition balls = 6, the number of pre-subtraction balls = 36, the number of front start ports (1) = 2, the number of front start ports ( 2) Number of times = 2, Current number of balls as current number of balls = 592, Current number of added balls = 0, Current number of subtractive balls = 3, Current start port (1) number of times = 0, Current start port (2) number of times = 0 is stored and transmitted to the CU as a recovery response.

  In the CU, it is determined that the communication partner is the same, the operation instruction is being transmitted, and the P SQNs are advanced by 1, and the backup value is corrected based on the recovery data transmitted in the recovery response. Specifically, the number of game balls = 625 (the number of game balls of the CU) +6 (the number of previous addition balls) +0 (the number of current addition balls) −36 (the number of previous subtraction balls) −3 (the number of current subtraction balls) = 592. Cumulative number of added balls = 6 (pre-added number of balls) + 0 (current number of added balls), cumulative number of subtracted balls = 36 (number of pre-subtracted balls) + 3 (current subtracted number of balls), starting port (1) cumulative number = 2 (front Start port (1) number) +0 (current start port (1) number), start port (2) total = 2 (previous start port (2) number) +0 (current start port (2) number).

  Next, with reference to FIG. 55, a description will be given of recovery processing when a power failure occurs on the CU side before the subtraction request is reached. Assuming that the initial number of game balls = 520, normal operation instructions and normal operation responses are transmitted and received between the CU and the P platform, and the number of game balls = 500 according to the number of addition / subtraction balls in between. When a subtraction request for 300 balls is generated due to a wagon service request or the like, the CU assumes that SQN = n + 2 and the number of subtraction request balls = 300, the subtraction request is present, SQN = n + 2, and the subtraction request ball. Number = 300 commands are transmitted to P units.

  When this command does not reach the P units, the P unit detects a disconnection at the stage where the command is not received after the last response is transmitted for 4 seconds, and a ball hitting motor (not shown). Is stopped and the play is stopped.

  On the other hand, in the CU, when there is no response from the P units due to the command not reaching, the communication is abnormal when the same command is repeatedly transmitted and no response is returned even after the second retransmission. (Communication loss) is detected, and a reconnection sequence is started after 5 seconds.

  After the reconnection sequence is started, the CU and the P unit perform the chip ID authentication sequence and transmit / receive the recovery request and the recovery response.

  In the P-unit, as the recovery data, SQN = n + 1, C-ID, the previous number of balls as the previous number of balls = 3, the number of the previous subtraction balls = 23, the number of the previous start port (1) = 1, the previous start port ( 2) Number of times = 1, Current number of balls as current number of balls = 470, Current number of added balls = 6, Current subtractive ball = 36, Current start port (1) number = 2, Current start port (2) number = 2 is stored and transmitted to the CU as a recovery response.

  In the CU, the communication partner is the same and the SQN on the CU side is advanced by 1. Therefore, it is determined that the subtraction request is not executed in the P units, and the backup value is based on the recovery data transmitted in the recovery response. The process which corrects is performed. Specifically, the number of game balls = 500 (number of CU game balls) +6 (current number of added balls) −36 (current number of subtracted balls) = 470, cumulative number of added balls = 6, cumulative number of subtracted balls = 36, start The mouth (1) total = 2, and the starting port (2) total = 2 are corrected.

  As described above, the CU determines that the subtraction request is not executed in the P units based on the value of the SQN, so that the subtraction request for 300 balls is generated in the correction of the backup value accompanying the recovery process. While subtracting, the subtraction request ball number 300 is not subtracted from the game ball number.

  Next, with reference to FIG. 56, a description will be given of a recovery process when a power interruption occurs on the CU side before reaching the operation response to the subtraction request. The initial number of game balls is set to 520, and normal operation instructions and normal operation responses are transmitted and received between the CU and the P platform, and the number of game balls is set to 500 according to the number of addition / subtraction balls generated during that time. In the stage, when a wagon service request for 300 balls is generated, the CU sets SQN = n + 2, the number of subtraction request balls = 300, the operation instruction includes a subtraction request, SQN = n + 2, and the number of subtraction request balls = 300 command is transmitted to P units.

  In response to this, PQ receives SQN = n + 3, the number of game balls = 170, the number of additional balls = 6, the number of subtraction balls = 36, the number of start ports (1) = 2, and the number of start ports (2) = 2. Send the response to the CU. If the response does not reach the CU and the power is cut off before the operation response process corresponding to the response is executed in the CU, the command from the CU is not transmitted to the P units thereafter. In the case of the P unit, when the command cannot be received after 4 seconds, it is determined that the communication is cut off, the state is changed to the unconnected state, and the driving of the hitting ball motor (not shown) is stopped to enter the play stop state. . Cumulative storage of the addition / subtraction data and the number of start ports after the P responses are transmitted in response to the motion response including the previous addition / subtraction data is made in the current ball related information storage area, and accordingly, game balls = 170-3 = 167 are calculated. Then, the game ball = 167 and SQN = n + 3 are stored.

  Next, when the CU is powered off and started up, the CU and the P unit perform the execution of the serial ID authentication sequence and the chip ID authentication sequence and the transmission / reception of the recovery request and the recovery response as in FIG.

  In the P-unit, as recovery data, SQN = n + 3, C-ID, the number of pre-addition balls = 6, the number of pre-subtraction balls = 36, the number of front start ports (1) = 2, the number of front start ports ( 2) Number of times = 2, Current number of balls as current number of balls = 167, Current number of added balls = 0, Current subtraction ball = 3, Current starting port (1) number of times = 0, Current starting port (2) number of times = 0 is stored and transmitted to the CU as a recovery response.

  In the CU, the communication partner is the same, the operation instruction is being transmitted, and the SQN of the P units is advanced by 1. Therefore, it is determined that the P units have received the subtraction instruction, and the recovery sent in the recovery response The backup value is corrected based on the data. Specifically, the number of gaming balls = 500 (the number of gaming balls of the CU) +6 (the number of balls added previously) +0 (the number of balls added previously) −36 (the number of balls previously subtracted) −3 (the number of balls currently subtracted) = 467, Cumulative number of added balls = 6 (pre-added number of balls) + 0 (current number of added balls), cumulative number of subtracted balls = 36 (number of pre-subtracted balls) + 3 (current subtracted number of balls), starting port (1) cumulative number = 2 (front Start port (1) number) +0 (current start port (1) number), start port (2) total = 2 (previous start port (2) number) +0 (current start port (2) number).

  The CU restarts the connection sequence by transmitting a device information request when the power is turned on, but determines that the SQN backed up by the CU and the SQN transmitted from the P unit do not match, as shown in FIG. The connection sequence at the time of reconnection in FIG. 21 is executed instead of the connection sequence at the time of power activation. As a result, in response to the operation instruction after recovery, the CU forces the game balls for subtraction cancellation to be added to the P platform side and corrects the SQN so that the game ball correction ON, the game ball = 467, the SQN correction ON, and the SQN = A communication start request including n + 2 is transmitted to the P units (see FIG. 21). In response to this, the P platform corrects and stores the game ball = 467 and SQN = n + 3.

  As described above, even when it is determined that the P units have received the subtraction instruction, the reason for performing the subtraction cancellation process is that the P unit side that has received the subtraction instruction always performs the subtraction process according to the subtraction instruction. There is a possibility that the subtraction is rejected on the P platform side. When such a rejection of subtraction on the P platform side is performed, if the subtraction is confirmed on the CU side, there is a disadvantage that the remaining number of game balls becomes a negative value. For this reason, subtraction cancellation is performed. As a result, when such a CU-side power interruption occurs, subtraction has been performed despite the fact that the P platform side should have rejected the subtraction instruction because the remaining points are insufficient. It is possible to prevent a disadvantage that the remaining number of game balls on the machine side becomes a negative value.

  Next, with reference to FIG. 57, a description will be given of recovery processing when a power failure occurs on the CU side before the clear request is reached. When the return button 322 for returning the inserted recording medium (card) is pressed, the number of game balls is 500. In FIG. 57, as in the process of FIG. 23, the CU transmits, to the P units, a command including data indicating that there is a prohibition request for prohibiting a game and no clear request as an operation instruction. In response to the request, the P platform returns a response including prohibition rejection OFF and game prohibition data to the CU as an operation response. Then, similarly to the processing of FIG. 23, the P platform is provided with a 15-second wait, and polling is continued between the P platform and the CU during this 15-second wait.

  Then, the CU sets SQN = n + N + 3, and transmits a command including SQN = n + N + 3 as an operation instruction to the P units when the clear request is present and the clear display is in progress, but if the command does not reach the P units, At the stage where the command is not received for 4 seconds after the last response is transmitted, the platform detects the disconnection and stops driving the ball striking motor (not shown) to enter the play stop state.

  On the other hand, in the CU, when there is no response from the P units due to the command not reaching, the communication is abnormal when the same command is repeatedly transmitted and no response is returned even after the second retransmission. (Communication loss) is detected, and a reconnection sequence is started after 5 seconds.

  After the reconnection sequence is started, the CU and the P unit perform the serial ID authentication sequence and the chip ID authentication sequence and transmit / receive the recovery request and the recovery response as in FIG.

  In the P-unit, as recovery data, SQN = n + N + 2, as the previous number of balls, the number of previously added balls = 0, the number of previously subtracted balls = 0, the number of previous start ports (1) = 0, the number of previous start ports (2) = 0, Current game ball number as current ball number = 500, Current addition ball number = 0, Current subtraction ball = 0, Current start port (1) number of times = 0, Current start port (2) number of times = 0 And sent to the CU as a recovery response.

  In the CU, since the communication partner is the same and the SQN on the CU side is advanced by 1, it is determined that the clear request has not arrived, and the backup value is corrected based on the recovery data transmitted in the recovery response. Perform processing. Specifically, the number of game balls = 500 (current game balls) +0 (current number of added balls) −0 (current number of subtracted balls) = 500, cumulative number of added balls = 0, cumulative number of subtracted balls = 0, start opening (1) Accumulation = 0, start port (2) Accumulation = 0

  Next, with reference to FIG. 58, a description will be given of a recovery process in the case where a power interruption occurs on the CU side before reaching the operation response to the clear request. When the return button 322 for returning the inserted recording medium (card) is pressed, the number of game balls is 500. In FIG. 58, as in the process of FIG. 23, the CU transmits, to the P units, a command including data indicating that there is a prohibition request for prohibiting a game and no clear request as an operation instruction. In response to the request, the P platform returns a response including prohibition rejection OFF and game prohibition data to the CU as an operation response. Then, similarly to the processing of FIG. 23, the P platform is provided with a 15-second wait, and polling is continued between the P platform and the CU during this 15-second wait.

  Then, the CU sets SQN = n + N + 3, and transmits a command including clear request, clear display ON, and SQN = n + N + 3 to the P units as operation instructions.

  Then, in response to this operation instruction, the P platform clears the game ball to 0 according to the clear request and sets the game ball to 0, and also clears SQN to 0 and sets SQN to 0. = 0, the number of game balls = 0, the number of added balls = 0, the number of subtracted balls = 0, the number of times of starting port (1) = 0, and the number of times of starting port (2) = 0 are transmitted to the CU. If this response does not reach the CU and the power is cut off before the operation response process corresponding to the response is performed in the CU, the command from the CU is not transmitted to the P units thereafter. In the case of the P device, if the command cannot be received after 4 seconds, it is determined that the communication is disconnected, and the state is changed to the unconnected state.

  Next, when the power failure is restored and started in the CU, the connection sequence is resumed in the same manner as the processing of FIG. 21, and the device information request, device information response, authentication request, authentication response, recovery request, and recovery response are transmitted and received. CU and P stand.

  In the P-unit, as recovery data, SQN = 0, C-ID, the previous number of balls as the previous number of balls = 0, the number of previous subtraction balls = 0, the number of previous start ports (1) = 0, the previous start port ( 2) Number of times = 0, Current number of balls as current number of balls = 0, Current number of added balls = 0, Current subtraction ball = 0, Current starting port (1) times = 0, Current starting port (2) times = 0 is stored and transmitted to the CU as a recovery response.

  In the CU, since the SQN on the P platform side is 0, it is determined that the P platform is cleared, and the backup value is corrected based on the recovery data transmitted in the recovery response. Specifically, the number of gaming balls = 500 (CU backup value) +0 (current number of added balls) −0 (current number of subtracted balls) = 500, cumulative number of added balls = 0 (current number of added balls), number of subtracted balls Cumulative = 0 (current number of subtracted balls), starting port (1) cumulative = 0 (current starting port (1) number of times), starting port (2) cumulative number = 0 (current starting port (2) number of times).

  In the CU, since the SQN on the P platform side is 0, it is determined that the P platform is cleared, and the backup value is corrected based on the recovery data transmitted in the recovery response. Specifically, the number of gaming balls = 500 (CU backup value) +0 (current number of added balls) −0 (current number of subtracted balls) = 500, cumulative number of added balls = 0 (current number of added balls), number of subtracted balls Cumulative = 0 (current number of subtracted balls), starting port (1) cumulative = 0 (current starting port (1) number of times), starting port (2) cumulative number = 0 (current starting port (2) number of times).

  FIG. 59 is a diagram showing transition of display screens on the CU side and the P base side in correspondence with the control operation when the card shown in FIG. 16 is inserted. Referring to FIG. 59, in a state where no card is inserted, an operation instruction command without an operation request is transmitted from the CU to the P unit during standby, and a response of game ball = 0 is received as an operation response while waiting. It is returned from the P platform to the CU. During transmission / reception of such commands and responses, as shown in [Normal screen (no card inserted)] at the upper left of FIG. 59, “None” in the column of “Card Type” is displayed on the CU display 312. “0 shot” is displayed in the title column of “game ball”. Further, as shown in [Normal screen (no card inserted)] in the upper right of FIG. 59, the P display units 54 have “0 ball” in the title column of “game ball” and the title column of “card balance”. “0 yen” is displayed. In addition, the display 312 and the display 43 display various data indicating the gaming state of P units at the current time. For example, in FIG. 59, the number of start times, the number of jackpots, the number of chances of change, and the number of times of the highest consecutive number are displayed. Count) is displayed as a bar graph. Further, the display unit 312 on the CU side includes a monetary amount setting amount display unit, a card balance amount display unit, a replay ball number display unit, a storage ball number display unit, and a ball lending rate display unit. Is provided.

  Further, the display unit 312 on the CU side is configured with a touch panel as described above, and display items of “device information”, “setting change”, and “order menu” are displayed on the upper left of each display screen. By selecting and touching, the display screen is switched to the touch-operated display screen. In FIG. 59, a screen in a state in which “device information” is selected is displayed.

  In addition, the display unit 312 on the CU side is provided with a selection operation display section of “return”, “rental”, “replay”, and “call” in the lower part of each display screen. A command can be input to the CU by selecting and touching. For example, if "Return" is touched, the inserted card is returned, and if "Lending" is touched, a game ball is lent out from the prepaid balance recorded on the inserted card. In addition, if “Replay” is touched, replay can be performed using the possessed ball or the accumulated ball of the inserted card (member card). If “call” is touched, a notification for calling a game attendant is made.

  At the time when the card is inserted, the CU transmits a command indicating no operation request to the P units during the card insertion process as an operation instruction. In response to this, the P unit detects that the card insertion processing has been started on the CU side. After the transmission / reception of the operation instruction command, the host server (for example, the hall management computer 1) is in an inquiry state. In this inquiring state, the CU side display 312 displays “inquiry” as shown in the second “card balance inquiry screen” from the top, and the display on the P platform side. The device 54 inquires the server of the inserted card with an arrow displayed from the server to the IC in the lower left corner of the screen as shown in the second [normal screen (inquiring card balance)] from the top. Picture is displayed. “IC” in the display screen indicates a card (IC card).

  The P machines that have received the operation instruction described above return a response of game ball = 0 to the CU while waiting as an operation response.

  In the CU, if the inserted card is verified by making an inquiry to the server and the possessed ball (= 5000) and balance (= 7000) of the inserted card are determined, the card is being held as an operation instruction. Then, a command with the number of balls requested for addition = 5000 and a card balance = 7000 is transmitted to the P units. After the transmission of this command, the CU is being displayed for addition. In the P machines that have received this command, it is detected on the CU side that the card balance and the holding ball have been determined, and thereafter, the addition display is in progress.

  During the addition display, on the display unit 312 of the CU, “5000 balls” is displayed in the holding ball display column as shown in the third “ball lending screen” from the top, toward the gaming machine. An arrow is displayed and the player is informed that 5000 balls are being transmitted to the gaming machine. On the other hand, on the P platform, as shown in the third [normal screen (ball lending)] from the top by the display 54, an arrow is displayed from the IC toward the game ball display section and the card balance display section. As a result, a display indicating that the ball lending is being added (addition display is being performed) is performed. Then, “5000 balls” is displayed on the game ball display section, and “7000 yen” is displayed on the card balance display section.

  Next, a response including game balls = 5000 is transmitted as an operation response from the P platform to the CU. In the CU, when 2-3 seconds have elapsed since the start of the movement display of the ball indicating that the addition is being displayed, the addition display is ended, and the “member” indicating the card type inserted in the display 312, the game It switches to the state which displays "5000 shots" as a ball. On the other hand, on the P platform, the addition display is ended after a lapse of 2-3 seconds from the start of the movement display of the ball as the addition display is in progress, and the movement display of the ball by the display unit 54 is ended.

  As described above, the display of the start of the operation process such as inquiring or addition display is started at the same time between the CU and the P unit, while the end of the display of the operation process is completed from the CU to the P unit. It can be terminated at its own timing on the P platform side without transmitting a command or the like, and is not restricted by the termination timing on the CU side. As a result, unique display unique to the P platform can be performed.

  Next, a detailed example of communication commands between the payout control unit 17 and the display effect control board 53 will be described. (A) Start instruction (payout control unit → display effect control board), (B) gaming machine information notification (payout control board → display effect control board), and (C) card insertion request (payout control) There is a command related to board → display control board for display.

  In the above (A) to (C), information such as a provider of information about a command to be transmitted, a transmission source, and a reception destination is associated in a table format with respect to various commands. The commands communicated between the payout control unit 17 and the display effect control board 53 are basically data of transmission data (business message) and sum (SUM) value (communication frame error detection data). Is frame data having a frame configuration arranged in this order. In this command, the sum value is calculated from the addition result of all data other than the sum value.

  The command for starting command (A) is a command transmitted from the payout control unit 17 to the display effect control board 53 and notifies the display effect control board 53 that power is turned on. The start instruction command includes a command code as transmission data.

  The gaming machine information notification of the command (B) is a command transmitted from the payout control unit 17 to the display effect control board 53 and notifies the display effect control board 53 of the gaming machine information. In the game machine information notification, as transmission data, command code, game ball total number information, game ball acquisition number information, back ball addition information (addition), game ball firing number information (subtraction), out ball passing information, symbol confirmation Number of times 1, Symbol determination number 2, Start port 1 time, Start port 2 times, Start port 3 times, Grand prize port 1 time, Grand prize port 2 times, Winner port 1 time, Winner port 2 times, Winner port 3 times, Winning mouth 4 times, gaming machine state 1, gaming machine state 2, gaming machine error state 1, gaming machine error state 2, CU state, card balance, operation mode switching preparation designation, operation mode switching designation, game ball total number information, In addition, maintenance contents or test contents are included.

  Game ball total number information, game ball earned number information, back ball addition information (addition), game ball firing number information (subtraction), out ball passing information, symbol determination number 1, symbol determination number 2, start port 1 time, start 2 times of mouth, 3 times of start mouth, 1 time of big prize opening, 2 times of big prize opening, 1 time of prize opening, 2 times of prize opening, 3 times of prize opening, and 4 times of prize opening. The payout control unit 17 can obtain these data based on the data provided from the main control board 16 and the like, and transmits these data as game machine information notification data.

  For gaming machine state 2, 1 byte of Bit0 to Bit7 is used to indicate “big hit 1”, “big hit 2”, “big hit 3”, “big hit 4”, “big hit end display”, “high base” ”,“ High probability ”, and“ Waiting for customer ”. The payout control unit 17 can obtain the game table state 2 data provided from the main control board 16.

  For the gaming machine error state 1, 1 byte of Bit0 to Bit7 is used to indicate that “a magnet sensor error is occurring”, “a radio wave sensor error is occurring”, and “an illegal winning error is occurring” (Bit1 to 0, 7 to 5). Is “reserved”). The payout control unit 17 can obtain the data of the gaming machine error state 1 based on the gaming machine error state 1 provided from the main control board 16.

  For the gaming machine error state 2, the “common error number between devices” (Bit 0 to 6) is indicated by 1 byte of Bit 0 to Bit 7, and an error (Bit 7: 1) at the main control board or an error at the payout control unit (Bit 7: 0) is instructed. The payout control unit 17 can obtain the game table error state 2 data provided from the main control board 16.

  Regarding the CU state, in this example, 2 bytes of Bit0 to Bit15 are used to indicate that “card insertion processing”, “cash insertion processing”, “general card holding”, “member card holding”, “prepaid lending display” ”,“ Replay lending display ”,“ Mochitama split display ”,“ Wagon service display ”,“ Clear display ”, and“ Break ”(Bit7-5, Bit15-14 are“ reserved ”) Is instructed. The payout control unit 17 can obtain the data from the CU state data provided from the card unit 3.

  As for the card balance indicating the balance of the card inserted in the card unit 3, the balance is designated by 2 bytes.

  As for the operation mode switching preparation designation, the operation mode switching preparation designation of the gaming machine is instructed by 1 byte of Bit0 to Bit7.

  The operation mode includes a “business mode” in which the player is playing, a “maintenance mode” in which daily cleaning, replacement of consumables, and malfunction / repair of the equipment, and confirmation of the results of nail adjustment and base adjustment. There are a plurality of modes, a “test hit mode” for checking the operation at the time of installation and a “test mode” used for analyzing the operation at the time of production of the gaming machine and when returning to the market. The operation mode is switched when a predetermined switching condition as described later is satisfied.

  As the operation mode switching preparation designation, when Bit 0 is “1”, it is business mode preparation designation, when Bit 2 is “1”, it is maintenance mode preparation designation, and when Bit 3 is “1”, it is trial strike mode preparation designation. When Bit 4 is “1”, test mode preparation is designated (Bits 7 to 5 are reserved). Bit1 is unused. It can be obtained from the operation mode switching preparation designation data provided from the card unit 3.

  Regarding the operation mode switching designation, the switching designation of the operation mode of the gaming machine is instructed by 1 byte of Bit0 to Bit7.

  As the operation mode switching designation, when Bit 0 is “1”, it is business mode switching designation, when Bit 2 is “1”, it is maintenance mode switching designation, and when Bit 3 is “1”, it is trial hit mode switching designation, and Bit 4 Is “1”, test mode switching is designated (Bits 7 to 5 are reserved). Bit1 is unused. It can be obtained from the operation mode switching designation data provided from the card unit 3.

  As for the maintenance content or test content, when the operation mode switching designation is Bit2 “1” and the maintenance mode switching designation is made, the maintenance contents 1 to 4 are instructed by 1 byte of Bit0 to 7 (Bit7 to 4). Is spare). On the other hand, when Bit 4 is “1” in the operation mode switching designation and the test mode switching designation is made, the test contents 1 to 4 are instructed by 1 byte of Bits 0 to 7 (Bits 7 to 4 are reserved). It can be obtained from maintenance content or test content data provided by the command from the card unit 3.

  The card insertion request of command (C) is data transmitted from the card unit 3 to the payout control unit 17 table, and transmits a card ID (C-ID). The command for requesting card insertion includes a command code and a card ID as transmission data.

  The card ID is the same data as the above-described operation mode switching designation, and can be obtained from the card ID data provided from the card unit 3 as described above.

  Next, a communication sequence between the card unit 3 and an LSI (including a payout control unit) 799, a communication sequence between the LSI (including a payout control unit) 799 and the main control board 16, and an LSI (including a payout control unit) ) A typical example of a communication sequence between 799 and the display effect control board 53 will be described.

  60 and 61 are diagrams showing a typical example of a communication sequence between the card unit 3 and the payout control unit 17. 62 to 65 are diagrams showing representative examples of communication sequences between the payout control unit 17 and the display effect control board 53. FIG. FIG. 66 is a diagram showing a display example on the display unit 54. In the present embodiment, the steps indicated by broken lines indicate the control contents of the modification.

  60 and 62 show communication sequences executed between the card unit 3 and the payout control unit 17 and between the payout control unit 17 and the main control board 16 based on card insertion. ing.

  Referring to FIG. 60, in card unit 3, when a card is inserted, information such as a card balance and a card ID recorded on the inserted card is read by a card reader / writer. Then, although not shown in the figure, from the card unit 3 to the payout control unit 17, as operation instructions, a sequence number, card holding ON (holding a general card, holding a membership card), and card insertion processing ON are performed. In addition, data including OFF during pre-paid lending display and replay lending display is transmitted.

  In the payout control unit 17 that has received such an operation instruction, data including the sequence number that has been added and updated is transmitted to the card unit 3 as an operation response that is a response to the operation instruction.

  Referring to FIG. 62, the payout control unit 17 that has received such an operation instruction is in a state of inquiring card information, and the payout control unit 17 notifies the display effect control board 53 as a gaming machine information notification. The data including the card ON display ON is transmitted. Referring to FIG. 62, on display effect control board 53, when a card is not inserted, a waiting-for-customer animation is displayed on display 54, and when such a gaming machine information notification is received, Control is performed to switch the display of 54 to the communication animation display during communication (animation display indicating that communication with the card unit 3 is being performed).

  Referring to FIG. 60, when the reading of the card information is completed, in card unit 3, data including the read card ID is transmitted to payout control unit 17 as a card insertion request. In the card unit 3, a process for inquiring the normality of the read card ID to the upper server 801 is performed.

  The payout control unit 17 that has received such a card insertion request from the card unit 3 stores (holds) the received card ID in the card ID storage unit of the payout control unit 17 and, as shown in FIG. As an insertion request, data including the received card ID is transmitted to the display effect control board 53. In this way, the card ID of the inserted card is notified.

  Referring to FIG. 62, display effect control board 53 that has received the card insertion request acquires the membership card and the general card inserted into card unit 3 based on the received card ID, and provides display effect control. Store (save) in the card ID storage section of the substrate 53.

  Then, the display effect control board 53 determines whether or not the received card ID matches the card ID stored last time. If the card ID matches, the future game result is stored in the personal game history stored in the previous time. Performs processing that is used in combination with data. On the other hand, if they do not match, the personal game history data stored last time is cleared, and the future game results are used as new personal game history data.

  As described above, the game history data is accumulated and stored in association with the card ID in the display effect control board 53, but the payout control unit 17 also has a game in the LSI 799 separately from the display effect control board 53. A history data storage unit may be provided, and the game history data may be accumulated and stored in association with the card ID in the game history data storage unit. Specifically, when the payout control unit 17 stores the card ID received from the card unit 3, the game history data aggregated by the game history data management unit 291 provided in the payout control unit 17 is used as the card ID. The game history data storage unit may be stored in association with the game history data. When such a configuration is adopted, as shown by a broken line in FIG. 62, the payout control unit 17 also acquires and stores the card ID and receives the received card, similarly to the display effect control control board 53. It is determined whether or not the ID matches the card ID stored last time. If the ID matches, a process of using the future game result in combination with the personal game history data stored last time is performed. On the other hand, if they do not match, the personal game history data stored last time is cleared, and the future game results are used as new personal game history data.

  The payout control unit 17 that has received such a card insertion request transmits a card insertion response as a response to the card insertion request to the card unit 3.

  When the card unit 3 receives the card insertion response and the inquiry result that the card ID is normal is obtained, the operation number is the sequence number, card holding ON, card insertion processing OFF, addition display ON, data including addition request balls, and card balance are transmitted to the payout control unit 17, and sequence number data and game ball (addition request balls) data in the transmission data are stored in the backup recording area. To do. In such a state, the card unit 3 performs a control for displaying on the display 312 that a game ball is being added indicating that a game ball is being added.

  When the payout control unit 17 receives such an operation instruction from the card unit 3, according to the received data, the gaming machine includes game ball number related information, card balance, card insertion processing display OFF, and addition display ON. The information notification is transmitted to the display effect control board 53. In the display effect control board 53, when such a gaming machine information notification is received, the display 54 is controlled to switch the display to the animation display during addition (animation display indicating that addition is in progress).

  Further, the payout control unit 17 that has received such an operation instruction transmits data including a sequence number and the number of game balls to the card unit 3 as an operation response that is a response to the operation instruction.

  Thereafter, the addition display ends in the card unit 3, and as the operation instruction, data including a sequence number, ON during card holding, OFF during card insertion processing, OFF during addition display, the number of balls required for addition, and a card balance are paid out. Transmit to the control unit 17.

  Upon receiving such an operation instruction from the card unit 3, the payout control unit 17 transmits a gaming machine information notification including OFF during addition display to the display effect control board 53 according to the received data. In the display effect control board 53, when such a gaming machine information notification is received, the display 54 performs control to end the adding animation display.

  Further, the payout control unit 17 that has received such an operation instruction transmits data including a sequence number and the number of game balls to the card unit 3 as an operation response that is a response to the operation instruction.

  Next, a communication sequence when the operation mode shifts from the sales mode to various operation modes will be described with reference to FIG.

  Referring to FIG. 61, in card unit 3, a command for requesting mode change to each operation mode is transmitted to payout control unit 17 by a remote control operation. Specifically, data including the transfer destination mode and additional information is transmitted from the card unit 3 to the payout control unit 17 as an operation instruction. The mode change request is transmitted only when the card unit 3 side has a balance of 0 yen and 0 game balls.

  The payout control unit 17 that has received this operation instruction, as an operation response that is a response to the operation instruction, (1) 0 balance, 0 game balls, (2) 0 game balls (floating ball number) (3) When the mode change response result from the main control board 16 satisfies all the OK conditions, a permission (OK) command is transmitted. Whether the condition (3) is satisfied is determined as follows. An operation instruction for a mode change instruction is transmitted from the payout control unit 17 to the main control board 16, and it is determined whether the main control board 16 that has received the condition satisfies the condition, and the mode change response as a result of the determination is a payout control. Returned to part 17. The main control board 16 that has received the operation instruction of the mode change instruction has all conditions of (3.1) not changing the symbol, (3.2) not hitting the big hit, and (3.3) not hitting the little hit. When the condition is satisfied, an operation response indicating that the mode change response result is OK is returned to the payout control unit 17. In addition, since conditions (1), (2), (3.1)-(3.3) are illustrations, it is also possible to set it as other conditions. As other conditions, for example, there may be no floating balls in the game area 27.

  When the card unit 3 receives a permission (OK) mode change response from the payout control unit 17, the card unit 3 operates in the operation mode designated by the remote controller.

  Thereafter, when changing to the sales mode again, the mode change request command is transmitted to the payout control unit 17 in order to set the sales mode by remote control operation. Specifically, data including a business mode and additional information is transmitted from the card unit 3 to the payout controller 17 as an operation instruction.

  The payout control unit 17 that has received this operation instruction, as an operation response that is a response to the operation instruction, (1) 0 balance, 0 game balls, (2) 0 game balls (floating ball number) (3) When the mode change response result from the main control board 16 satisfies all the OK conditions, a permission (OK) command is transmitted. Whether the condition (3) is satisfied is determined as follows. An operation instruction for a mode change instruction is transmitted from the payout control unit 17 to the main control board 16, and it is determined whether the main control board 16 that has received the condition satisfies the condition, and the mode change response as a result of the determination is a payout control. Returned to part 17. The main control board 16 that has received the operation instruction of the mode change instruction has all conditions of (3.1) not changing the symbol, (3.2) not hitting the big hit, and (3.3) not hitting the little hit. When the condition is satisfied, an operation response indicating that the mode change response result is OK is returned to the payout control unit 17. In addition, since conditions (1), (2), (3.1)-(3.3) are illustrations, it is also possible to set it as other conditions. As other conditions, for example, there may be no floating balls in the game area 27.

  When the card unit 3 receives a permission (OK) mode change response from the payout control unit 17, the card unit 3 operates in the business mode.

  Next, a communication sequence between the payout control unit 17 and the display effect control board 53 at the time of an addition request will be described with reference to FIG.

  In the card unit 3, when a prepaid lending operation by the operation of the lending button 321 or a replay lending operation by the operation of the replay button 319 is performed, a game ball addition factor occurs, and a game ball owned by the player is added. Is done. In those cases, although not shown, the game ball number-related information including the number of balls requested for addition indicated in the operation instruction, the CU state (data displayed during prepaid lending display or replay lending display (in addition display) Is ON), and data such as a card balance is transmitted from the card unit 3 to the payout controller 17 as an operation instruction. In this way, the card unit 3 transmits to the payout control unit 17 an operation instruction including data specifying the addition factor (during prepaid lending display and replay lending display).

  When the addition based on the prepaid lending operation or the replay lending operation is performed, an image during addition display as shown in FIG. 58 is displayed on the display 312 of the card unit 3.

  When a game ball addition factor occurs, the payout control unit 17 determines, based on the data received from the card unit 3, information related to the number of game balls including the total number of game balls indicated in the gaming machine information notification, CU state, etc. (Prepaid lending display data or replay lending display data (additional display) is ON) and data such as card balance are transmitted from the payout control unit 17 to the display effect control board 53 as a gaming machine information notification. Thus, the game machine information notification including the data (prepaid lending display, replay lending display) specifying the addition factor is transmitted from the payout control unit 17 to the display effect control board 53.

  In the display control board 53, when the gaming machine information notification is received, whether the game ball addition factor corresponds to prepaid lending or replay lending based on the data specifying the addition factor. judge.

  Then, in the display effect control board 53, based on the determination result of the game ball addition factor, when the game ball addition factor is prepaid lending, the display unit 54 displays (A1) to (A3) in FIG. Display control for displaying prepaid rental animation as shown. The prepaid lending animation display changes from the display before prepaid lending as shown in (A1) of FIG. 66 to the prepaid lending display as shown in (A2) of FIG. 66, and then the prepaid as shown in (A3) of FIG. It becomes the display after lending. In the prepaid lending display, the card balance ("Balance" in the figure) is gradually converted to the value of the holding ball ("Holding" in the figure). Made. Then, when such animation display is completed, the display after prepaid lending as shown in (A3) of FIG. 66 is obtained. As described above, in the prepaid lending animation display, the value of the card balance is changed to display that the number of possessed balls is increased, thereby specifying that the addition factor is prepaid lending.

  Also, in the display effect control board 53, when the game ball addition factor is replay lending based on the determination result of the game ball addition factor, the display unit 54 displays (B1) to (B3) in FIG. The display control to display the replay rental animation as shown in FIG. The replay lending animation display changes from the display before replay lending as shown in (B1) of FIG. 66 to the display during replay lending as shown in (B2) of FIG. 66, and thereafter, as shown in (B3) of FIG. It will be displayed after replay lending. In the replay lending display, the value of the card balance (“balance” in the figure) is not changed, and an animation display is performed in which the number of possessed balls (“held ball” in the figure) gradually increases. Then, when such animation display ends, the display after replay lending as shown in (B3) of FIG. 66 is obtained. In this way, in the replay lending animation display, it is specified that the addition factor is replay lending by displaying that the number of possessed balls increases without changing the value of the card balance.

  When the image display during addition display on the card unit 3 ends, the data (in addition display) during prepaid lending display or replay lending display included in the CU state in the operation instruction transmitted to the payout control unit 17 is turned OFF. Accordingly, the prepaid lending display or replay lending display data (additional display) included in the CU state in the gaming machine information notification transmitted from the payout control unit 17 to the display effect control board 53 is turned OFF. The display effect control board 53 performs control to end the addition animation display when the data of the prepaid lending display or the replay lending display is turned OFF in the gaming machine information notification.

  Next, with reference to FIG. 64, a communication sequence between the payout control unit 17 and the display effect control board 53 at the time of the subtraction request will be described.

  In the card unit 3, if a ball split operation by a specified operation of holding ball sharing (mob ball split) or a wagon order operation by a wagon order specifying operation is performed, a game ball subtraction factor occurs, and the player owns The game balls of are subtracted. In those cases, the game ball number related information including the number of balls to be subtracted indicated in the operation instruction, the CU state (the data for displaying the split ball or displaying the wagon service (the subtraction display is ON)), and the card Data such as a balance is transmitted from the card unit 3 to the payout controller 17 as an operation instruction. In this manner, the card unit 3 transmits an operation instruction including data specifying the subtraction factor (during the splitting of the ball or displaying the wagon service) to the payout control unit 17.

  For example, when a wagon order operation is performed, an image during subtraction display such as an image indicating subtraction of the wagon service display is displayed on the display 312 of the card unit 3 (not shown). In addition, when the holding ball splitting operation is performed, the display unit 312 of the card unit 3 displays an image during subtraction display such as an image indicating subtraction due to the splitting of the holding ball.

  When a game ball subtraction factor occurs, the payout control unit 17 based on the data received from the card unit 3, the game ball number related information including the total number of game balls indicated in the gaming machine information notification, the CU state (The data of the holding ball division display or the wagon service display (subtraction display) is ON) and the data such as the card balance are transmitted from the payout control unit 17 to the display effect control board 53 as a gaming machine information notification. In this manner, the game machine information notification including the data specifying the subtraction factor (the holding ball split display or the wagon service display) is transmitted from the payout control unit 17 to the display effect control board 53.

  In the display effect control board 53, when the gaming machine information notification is received, based on the data specifying the subtraction factor, the game ball subtraction factor corresponds to the holding ball division or the wagon order. judge.

  On the display effect control board 53, when the game ball subtraction factor is the split ball based on the determination result of the game ball subtraction factor, the display 54 gradually increases the value of the ball to the split ball. It will be converted into a numerical value of, and an animation will be displayed in which the number of holding balls decreases. On the other hand, on the display effect control board 53, when the game ball subtraction factor is the wagon order based on the determination result of the game ball subtraction factor, the number of holding balls is gradually increased to the minute wagon order on the display 54. It will be converted into a numerical value of, and an animation will be displayed in which the number of holding balls decreases. Such a display in which the number of holding balls decreases based on the subtraction factor is called a subtraction animation display. Thus, the subtraction factor is specified in the subtraction animation display.

  When the image display during the subtraction display on the card unit 3 is completed, the data (in the subtraction display) during the ball split display or the wagon service display included in the CU state in the operation instruction transmitted to the payout control unit 17 is turned OFF. Accordingly, in the gaming machine information notification transmitted from the payout control unit 17 to the display effect control board 53, the data of the ball split display or wagon service display included in the CU state (additional display) is turned OFF. The display effect control board 53 performs control to end the subtraction animation display when the data of the holding ball division display or the wagon service display (subtraction display) is turned OFF in the gaming machine information notification.

  Next, a communication sequence between the payout control unit 17 and the display effect control board 53 during the game will be described with reference to FIG.

  In the gaming state until the big hit is generated in the card unit 3, the display control control board 53 performs display control for displaying an in-game animation on the display 54, which is an animation displayed during the game. It is. When a big hit occurs, data including a big hit / medium ON similar to the big hit 1-4 ON included in the game information notification is transmitted from the game control board 16 to the payout control unit 17 as a table status inquiry response.

  When receiving the table state inquiry response including ON during such big hit, the payout control unit 17 receives the game ball number related information including the total number of game balls indicated in the gaming machine information notification, 4) including ON, and data including the jackpot end display OFF are transmitted from the payout control unit 17 to the display effect control board 53 as a gaming machine information notification. In this way, a gaming machine information notification including data specifying the gaming state is transmitted from the payout control unit 17 to the display effect control board 53.

  In the display effect control board 53, when the game machine information notification including ON during the big hit is received, the display control for displaying the big hit during the big hit game is displayed on the display 54 during the big hit game. Is done.

  Then, before the big hit game state is ended, the game control board 16 sends a payout control unit 17 to the payout control unit 17 as a base state inquiry response by turning ON the big hit end display ON which is the same as the big hit end display ON included in the game information notification. Contains data is sent.

  When receiving the table status inquiry response including ON during big jackpot end display, the payout control unit 17 turns ON the jackpot end display data included in the gaming machine information notification (the data during the big hit end is ON). Continue).

  In the display effect control board 53, when the game machine information notification including the big hit end ON and the big hit end display ON is received, the display unit 54 ends the big hit middle animation display and displays an animation displayed at the end of the big hit. Display control for displaying a big jackpot end animation is performed.

  When the big hit gaming state is finished, the game control board 16 transmits data including the big hit during OFF and the big hit end display OFF included in the game information notification to the payout control unit 17 as a table status inquiry response. .

  When receiving the table status inquiry response including such a big hit OFF and a big hit end display OFF, the payout control unit 17 turns off the big hit data and the big hit end display data included in the gaming machine information notification. To do.

  When the display effect display control board 53 receives the gaming machine information notification including the big hit end OFF and the big hit end display OFF, the display 54 displays the display for terminating the big hit end animation display and displaying the in-game animation display. Control is performed.

  Next, the details of the SE2 mode encryption communication used in the present embodiment will be described with reference to FIGS. This encrypted communication in SE2 mode is performed between the main control unit 323 of the CU3 and the CU communication control unit 80. In addition, the communication between the CU communication control unit 80 and the P unit communication control unit 81 of the pachinko machine 2 is performed. , Between the payout control unit 17 of the pachinko machine 2 and the main control board 16, between the main control board 16 and the key management server 803, between the main control unit 323 of the card unit 3 and the upper server 801, and the upper server 801. May also be performed between the key management server 800 and the like. Furthermore, it may be performed among various devices installed in the game hall, for example, the hall management computer 1, Z counter, card issuing device, payment device, prize exchange device (POS terminal) and the like.

  First, the SE2 mode encryption mechanism will be described with reference to FIG. FIG. 67A shows a counter used for SE2 mode encryption and decryption. This counter is composed of 16 bytes, and is composed of an initial vector part R consisting of 8 bytes, a telegram counter part N consisting of 7 bytes, and a cipher block counter part I consisting of 1 byte.

  The initial vector unit R is transmitted from the main control unit 323 to the CU communication control unit 80 as described based on FIG. 8, FIG. 9, and FIG. As a result, the value of the initial vector unit R is shared between the main control unit 323 and the CU communication control unit 80. The cipher block counter unit I and the message counter unit N are added and updated as will be described later, but the initial vector unit R is not added and updated.

  The initial values of the message counter unit N and the cipher block counter unit I are 0. As described above, such a counter is shared between devices (for example, the main control unit 323 and the CU communication control unit 80) that perform cryptographic communication with each other. Each time plaintext divided into blocks (16 bytes) is encrypted one block at a time, the encryption block counter I is counted up. When all the blocks of the message transmitted by one operation instruction or response are encrypted, the encrypted message is transmitted and the message counter unit N is incremented by “1”, and the encrypted block counter unit I Becomes “0”. Such a count-up operation is repeated.

  With reference to (b) of FIG. 67, the structure of the block cipher by SE2 mode is demonstrated. FIG. 67 (b) shows an example in which a message transmitted by one operation instruction or response is composed of three blocks of plain texts 1-3. First, plaintext data to be transmitted (see FIG. 5) is divided into 16-byte blocks of plaintext (plaintext 1, plaintext 2,...). Then, the current counter values R, N, 0 are encrypted using the key K. The key K is the authentication key or the communication key (session key) as described with reference to FIGS. Then, an exclusive OR (exclusive OR) operation is performed on the encrypted value (16 bytes) and the plaintext 1 block (16 bytes). The calculation result is ciphertext 1 (16 bytes).

  When the next plaintext 2 is encrypted, the counter is updated by adding “1”. As a result, the counter values are R, N, and 1. This value is encrypted with the key K in the same manner as described above, and an exclusive OR (exclusive OR) operation is performed on the encrypted result data and the plaintext 2 to generate a ciphertext 2.

  When the next plaintext 3 is encrypted, the counter value is further updated by adding “1”, and the values become R, N, and 2. This value is encrypted with the key K, and an exclusive OR (exclusive OR) operation is performed on the value of the encryption result and the plaintext 3 to generate the ciphertext 3. The three blocks of the plaintexts 1 to 3 make up all the frames of the message that are transmitted with one operation instruction or response. By encrypting the plaintexts 1 to 3, the ciphertext is transmitted. At the same time, the message counter unit N is incremented by “1”, and the cipher block counter unit I becomes “0”.

  Therefore, when the plaintext 1 of the operation instruction or response to be transmitted next is encrypted, the counter value becomes {R, N + 1, I = 0]. An exclusive OR (exclusive OR) operation is performed on the value obtained by encrypting the value with the key K and the plaintext 1 to generate a ciphertext 4.

Thereafter, encryption is performed while adding and updating the values of the plaintext 2, plaintext 3,.
Next, the decoding process will be described with reference to FIG. When the received ciphertext 1 (16 bytes) is decrypted, the ciphertext receiving side first encrypts the counter value (R, N, 0) with the key K, and the encrypted value. And ciphertext 1 are used to calculate and decrypt exclusive OR (exclusive OR) to obtain plaintext 1.

  As a characteristic of exclusive-or (exclusive OR) operation, an exclusive-or operation is performed on binary data (binary data) with a certain binary value (referred to as A), and the result data is calculated. If the exclusive OR operation is further performed with the same binary value (A), the original binary data before the first exclusive OR operation is restored. The SE2 mode encryption / decryption processing is performed using such exclusive OR characteristics.

  When decrypting the ciphertext 2 (16 bytes) of the second block, the counter value is updated by adding “1”. As a result, the value of the counter becomes R, N, 1 and the R, N, 1 is encrypted with the key K, the exclusive value is calculated with the result value and the ciphertext 2 and decrypted, and the plaintext 2 Is generated.

  Similarly, when the ciphertext 3 is decrypted, the counter value is updated by “1”. Also in the counter addition update method at the time of decryption, the encryption block counter I is “1” every time each block of a message transmitted by one operation instruction or response is decrypted, as in the case of encryption. The message counter unit N is incremented by “1” and the value of I is cleared to zero when the decoding of all the blocks of the message transmitted in response to one operation instruction or response is completed.

  As described above, in the SE1 mode, the plaintext M is encrypted by performing an exclusive OR operation with the same data length key, and the ciphertext is subjected to the exclusive OR operation with the same data length key. Since the data (key) for performing the exclusive OR operation on the plaintext M is constant and does not change because it is only decrypted in line, high security cannot be expected. However, in the SE2 mode, data for performing an exclusive OR operation on the plaintext M (a key as a counter value) is updated and changed, so that high security can be expected.

  Next, based on FIG. 69 to FIG. 73, the actual encryption communication operation of the operation instruction (command) and the operation response (response) between the main control unit 323 and the CU communication control unit 80 will be described. FIG. 69 shows the cipher communication in the steady state when the receiving side that has received the cipher communication text is properly decrypted. FIG. 70 shows processing at the time of abnormality when an operation response from the CU communication control unit 80 to the main control unit 323 has not arrived. FIG. 71 shows processing at the time of abnormality when an operation instruction from the main control unit 323 to the CU communication control unit 80 has not arrived. FIG. 72 shows processing of a modified example at the time of an abnormality that has not reached the operation response shown in FIG. FIG. 73 shows a modification of the abnormal time process in which the operation instruction has not reached shown in FIG.

  First, normal processing will be described with reference to FIG. An operation instruction and an operation response between the main control unit 323 and the CU communication control unit 80 will be described by taking a 96-byte data length as an example of a multiple of 48 bytes.

  As described with reference to FIG. 67, the main control unit 323 divides the 96-byte plaintext into six blocks of 16 bytes, and encrypts the plaintexts 1 to 6 of each block one by one. The plaintext 1, which is the first block, has counter values R, N, 0. The counter value is encrypted as described above, and the exclusive OR operation is performed on the encrypted value and plaintext 1. To generate ciphertext 1. Similarly, when the ciphertext 2 is generated, the counter values R, N, and 1 are used, when the ciphertext 2 is generated, the counter values R, N, and 2 are used, and when the ciphertext 4 is generated, the R, The counter values N, 3 are used, the R, N, 4 counter values are used when the ciphertext 5 is generated, and the R, N, 5 counter values are used when the ciphertext 6 is generated.

  The CU communication control unit 80 that has received the ciphertexts 1 to 6 composed of these six blocks generates plaintext by decrypting the ciphertext at any time while updating the counter value as described in FIG. The counter value at the start of decryption, that is, the counter value used for decrypting the first ciphertext 1 is R, N, 0. The encrypted value is encrypted and the ciphertext 1 is encrypted. The exclusive OR is calculated and decrypted to generate plaintext 1. Similarly, the ciphertext 2, the ciphertext 3, the ciphertext 4, the ciphertext 5, and the ciphertext 6 are also updated by incrementing the value of the cipher block counter unit by “1” at any time. Specifically, R, N, 1 counter values are used for ciphertext 2, R, N, 2 counter values are used for ciphertext 3, and R, N, 2 counter values are used for ciphertext 4. N, 3 counter values are used, ciphertext 5 is decrypted using R, N, 4 counter values, and ciphertext 6 is decrypted using R, N, 5 counter values.

  Next, the CU communication control unit 80 encrypts the operation response (response) and transmits it to the main control unit 323. At this time, since the value of the last message counter unit used by the CU communication control unit 80 for the previous decryption process is N, the value of the last message counter unit is used when generating the current ciphertext. N is updated by adding “1” to N + 1. Therefore, the counter value “R, N + 1, 0” is used first. The counter value is encrypted, and an exclusive OR operation is performed on the encrypted value and the first plaintext 1 of the operation response to generate a ciphertext 1. Next, the CU communication control unit 80 adds and updates the encryption block counter unit by “1”, and generates the ciphertext 2 using the values of R, N + 1, and 1. Similarly, while the cipher block counter unit is incremented and incremented by “1”, ciphertext 3, ciphertext 4, ciphertext 5, and ciphertext 6 are generated, and an operation response including these ciphertexts is transmitted to the main control unit 323. To do.

  The main control unit 323 adds “1” to the value “N + 1” of the message counter unit used to generate the ciphertext transmitted last time, and uses the counter values of R, N + 2, 0 to start the operation response. Is decrypted. As described above, the ciphertext 2, the ciphertext 3, the ciphertext 4, the ciphertext 5, and the ciphertext 6 are decrypted at any time while the cipher block counter is added and updated as needed, and the plaintext 2, plaintext 3, plaintext 4, Plaintext 5 and plaintext 6 are generated.

  By such a method, transmission data encryption and reception data decryption processing are performed between the main control unit 323 and the CU communication control unit 80.

  Next, with reference to FIG. 70, a description will be given of processing in the event of an abnormality in which an operation response from the CU communication control unit 80 to the main control unit 323 has not arrived. First, an operation instruction including 6 blocks of ciphertexts 1 to 6 is transmitted from the main control unit 323 to the CU communication control unit 80. The first counter value used for each block is R, N, 0. The encryption block counter is incremented by “1”, and the final value is R, N, 5. The CU communication control unit 80 that has received this ciphertext first decrypts the ciphertext 1 using the counter values R, N, 0 at the start of ciphering to generate plaintext 1. Next, the ciphertext 2, the ciphertext 3, the ciphertext 4, the ciphertext 5, and the ciphertext 6 are decrypted by adding and updating the cipher block counter unit as needed to obtain plaintext 2, plaintext 3, plaintext 4, plaintext 5, and plaintext 6. Generate.

  Then, the CU communication control unit 80 adds and updates the value N of the message counter unit used for the decryption of the previous ciphertext, and uses the value of “R, N + 1, 0” to update the initial value of the operation response. The ciphertext 1 is generated by encrypting the plaintext 1 of the block. Next, the cipher block counter unit value is incremented and updated by “1” to generate ciphertext 2, ciphertext 3, ciphertext 4, ciphertext 5, and ciphertext 6 and transmit them to the main control unit 323. When the operation response composed of the ciphertexts 1 to 6 does not reach the main control unit 323, the main control unit 323 retransmits the same operation instruction data as the previously transmitted operation instruction to the CU communication control unit 80. To do. When the CU communication control unit 80 decrypts the retransmitted ciphertext, the value of the message counter unit used when the CU communication control unit 80 generated the previous ciphertext is N + 1. In this case, “R, N + 2, 0” is used as the value of the counter used first.

  The CU communication control unit 80 attempts to decrypt the first ciphertext 1 among the ciphertexts retransmitted using the counter value “R, N + 2, 0”. However, the ciphertext 1 is data encrypted using the counter value “R, N + 1, 0”, and the ciphertext 1 is decrypted using “R, N + 2, 0” which is a different counter value. Even if this is attempted, decryption fails because it cannot be decrypted into the correct plaintext. The determination as to whether or not decryption into correct plaintext has been made is based on a general check by the MAC. Briefly, the CU communication control unit 80 encrypts R, N + 2, 0, which is the first counter value, with a key, and calculates the exclusive OR between that value and the first ciphertext 1. Such decryption processing is sequentially executed for ciphertext 2, ciphertext 3, ciphertext 4, ciphertext 5 and ciphertext 6 while updating the counter value by “1”, and is included in the data of the processing result. MAC check is performed using the existing MAC data (see FIG. 5). Specifically, a MAC is generated from the data of the decoding processing result according to the MAC algorithm, and the generated MAC is compared with the MAC data included in the transmission data from the main control unit 323 to determine whether or not they match. To check. If they are decoded correctly, they match, but in this case, the value of the counter used for decoding is out of order. It is determined that the MAC is abnormal, that is, decoding has failed.

  When it is determined that such a MAC abnormality, that is, decoding failure, the CU communication control unit 80 executes a repair process for repairing the incorrect counter value to a correct counter value. The CU communication control unit 80 sets the value of the message counter unit N to “R, N + 2, 0”, which is the counter value at the start of decryption, which was first used for decryption of the ciphertext determined to be decryption failure. While subtracting and updating by "1", the decrypted ciphertext is sequentially performed using the subtracted counter value to perform the above-described MAC check to determine whether or not the decryption has been correctly performed. If it is determined that the MAC is abnormal as a result of the MAC check even if the counter value is subtracted a predetermined number of times, the CU communication control unit 80 next displays “R, N + 2, 0” which is the counter value at the start of decoding. Then, the message counter unit N is incremented and updated by “1”, and the decryption process is sequentially performed using the added counter value to perform the MAC check. If the MAC check determines that the decryption is successful and the decryption is successful, the plaintext successfully decrypted is fetched as a proper operation instruction. Then, the counter value obtained by adding and updating “1” to the value of the message counter unit used when it is determined that the decryption is successful is used to encrypt the first plaintext 1 of the next operation response data.

  In the case of FIG. 70, decryption is performed by using the counter value “R, N + 1, 0” obtained by subtracting and updating the message counter unit N once from “R, N + 2, 0” which is the counter value at the start of decryption. Therefore, it is determined that the MAC is normal and that decoding is successful.

  The first plaintext 1 of the operation response to be transmitted next is encrypted using the counter value of R, N + 2, 0, which is updated by adding “1” to the value N + 1 of the message counter unit used when it is determined that the decryption is successful. To generate ciphertext 1. Next, ciphertext 2, ciphertext 3, ciphertext 4, ciphertext 5, and ciphertext 6 are sequentially generated by adding and updating the cipher block counter unit by “1” and transmitted to the main control unit 323.

  In response to this, the main control unit 323 starts “R, N + 2, 0”, which is a counter value obtained by adding “1” to the value N + 1 of the message counter unit used when generating the ciphertext at the time of retransmission. The first ciphertext 1 of the received ciphertext is decrypted as the first counter value. Since the first ciphertext 1 is encrypted using the counter value “R, N + 2, 0”, it can be properly decrypted using the same counter value. Then, the main control unit 323 sequentially decrypts the ciphertext 2, the ciphertext 3, the ciphertext 4, the ciphertext 5, and the ciphertext 6 while adding and updating the cipher block counter unit by “1”.

  The number of subtractions to the counter value in the counter repair process described above matches the number of retries that the main control unit 323 retransmits (retrys) the operation command when the operation response has not been reached. In the case of the present embodiment, the number of retries is limited to two, and it is not necessary to perform subtraction update of the telegram counter unit N beyond the counter value error caused by the two retries. Therefore, the counter value is subtracted and updated up to twice.

  Next, based on FIG. 71, the process at the time of the abnormality where the operation instruction from the main control unit 323 to the CU communication control unit 80 has not reached will be described. First, the main control unit 323 uses the counter values R, N, 0 to R, N + 1, and 2 to generate 6 blocks of ciphertexts 1 to 6 and transmit them to the CU communication control unit 80. However, if the ciphertext does not reach the CU communication control unit 80, the main control unit 323 attempts to retry by encrypting the operation instruction having the same content and retransmitting it to the CU communication control unit 80. As the message counter unit used for encryption at the time of retransmission, N + 1 obtained by adding “1” to the value N of the message counter unit used for encryption at the time of transmission of the previous operation instruction is used. Therefore, the main control unit 323 generates the ciphertext 1 by encrypting the first plaintext 1 block of the operation instruction to be retransmitted using the counter value “R, N + 1, 0”. Next, the main control unit 323 sequentially generates the ciphertext 2, ciphertext 3, ciphertext 4, ciphertext 5, and ciphertext 6 while adding and updating the cipher block counter unit by “1” to control the CU communication. Re-send to unit 80.

  However, if the retransmitted ciphertext does not reach the CU communication control unit 80, the main control unit 323 again encrypts the operation instruction having the same content and retransmits it to the CU communication control unit 80. Attempt the second retry. The operation instruction transmitted in the second retry reaches the CU communication control unit 80, and the CU communication control unit 80 attempts to decrypt the ciphertext. The CU communication control unit 80 encrypts using “R, N, 0” which is a value obtained by adding “1” to the last counter value used for encrypting the operation response transmitted to the main control unit 323 last time. A process of decrypting the first block of the text is performed, and the ciphertext 2, ciphertext 3, and ciphertext 4 are sequentially updated while adding and updating the cipher block counter portion by “1” to the counter value “R, N, 0” Attempts to decrypt ciphertext 5 and ciphertext 6.

  However, as a result of retrying twice by the main control unit 323, the counter value on the main control unit 323 side and the counter value on the CU communication control unit 80 side are out of order. As a result of the MAC check described above, it becomes a MAC error and it is determined that decoding has failed.

  Then, the CU communication control unit 80 performs the repair process of the mad counter as described above. A cipher that has been retransmitted sequentially while subtracting and updating the telegram counter unit N by “1” with respect to “R, N, 0”, which is the count value used first for the ciphertext determined to have failed to decrypt. Attempt to decrypt the sentence and perform MAC check. As described above, the number of subtraction updates is limited to two, which is the number of retries. If the decryption is not successful even if the counter value is updated by subtraction update of the counter value twice, the CU communication control unit 80 sets the counter value “R, N, 0” to the message counter unit. On the other hand, an attempt is made to sequentially decrypt the ciphertext while adding and updating by "1". The number of attempts for this addition update coincides with the number of retries for performing retransmission by the main control unit 323 when the operation instruction has not been reached. In the present embodiment, the retry is performed twice. As a result, the counter value is added and updated up to two times that is the number of retries.

  As a result of the second addition update, the counter value is “R, N + 2, 0”. The ciphertext 1 is decrypted using this counter value, and the ciphertext 2 By decrypting the sentence 3, the ciphertext 4, the ciphertext 5, and the ciphertext 6, it can be decrypted into an appropriate plain text. The CU communication control unit 80 captures a plaintext operation instruction that is determined to be successful. Then, the operation response data corresponding thereto is encrypted and transmitted to the main control unit 323. In the encryption, the value “N + 3” obtained by adding and updating “1” to the value “N + 2” of the message counter unit used for the decryption process determined to be successful is used. Therefore, ciphertext 1 is generated by encrypting the first block using “R, N + 3, 0”. Next, the ciphertext 2, ciphertext 3, ciphertext 4, ciphertext 5, and ciphertext 6 are sequentially generated while the count value of the cipher block counter section is incremented by “1” and transmitted to the main control section 323. . The main control unit 323 decrypts the ciphertext using the value “N + 3” obtained by adding “1” to the value “N + 2” of the message counter unit used for the ciphertext transmitted in the second retry. That is, the ciphertext 1 of the first block is decrypted using “R, N + 3, 0”. The ciphertext 2, ciphertext 3, ciphertext 4, ciphertext 5, and ciphertext 6 are sequentially decrypted while incrementing and updating the cipher block counter by “1”.

  Next, based on FIG. 72, the modification of the process at the time of abnormality at the time of an operation response not reaching is demonstrated. FIG. 72 is a modification of FIG. 70 described above, and here, mainly the differences will be described. When the operation response from the CU communication control unit 80 to the main control unit 323 has not yet reached, the main control unit 323 executes a retry to retransmit the same operation instruction as the previous time. When the operation instruction (encrypted text) retransmitted by the retry reaches the CU communication control unit 80, the counter value between the main control unit 323 and the CU communication control unit 80 is the same as in FIG. They are in conflict. As a result, when the CU communication control unit 80 attempts to decrypt the ciphertext, the MAC check results in a MAC error and it is determined that the decryption has failed. In this modification, when the decoding fails, it is determined that decoding is impossible, and an operation response of decoding error is transmitted to the main control unit 323. At that time, the CU communication control unit 80 encrypts the operation response of the decryption error using the key K in the SE1 mode, and transmits the ciphertext to the main control unit 323. The main control unit 323 receives this and decrypts the ciphertext using the key K, which is a common key, and determines that a decryption error has occurred. Then, a new random number R is generated to initialize the counter value, and the random number value is transmitted to the CU communication control unit 80 as the initial vector unit R. At that time, the key K is used to encrypt the value of the initial vector portion R in the SE1 mode, and the ciphertext is transmitted to the CU communication control portion 80. In the CU communication control unit 80, the received ciphertext is decrypted in the SE1 mode using the key K, and the initial vector unit R is acquired. As a result, the counter value “R, 0, 0” that is initialized is shared between the main control unit 323 and the CU communication control unit 80.

  Next, the CU communication control unit 80 encrypts an operation response indicating that the update of the initial vector unit R has been completed using the key K in the SE1 mode, and transmits the encrypted response to the main control unit 323.

  In response to this, the main control unit 323 encrypts the same data as the operation instruction retransmitted last time in the SE2 mode and transmits it to the CU communication control unit 80. At this time, the initial block is encrypted using the counter value initialized, that is, “R, 0, 0”. Then, ciphertext 2, ciphertext 3, ciphertext 4, ciphertext 5, and ciphertext 6 are sequentially generated and added to the cipher block counter unit by “1” and transmitted to the CU communication control unit 80. .

  The CU communication control unit 80 decrypts the first block of the ciphertext using the initialized counter value, that is, “R, 0, 0”. Next, the ciphertext 2, ciphertext 3, ciphertext 4, ciphertext 5 and ciphertext 6 are decrypted in order while adding and updating the cipher block counter unit by “1” to generate plain text.

  Next, based on FIG. 73, a modified example of processing at the time of an abnormality in which the operation instruction has not reached will be described. FIG. 73 is a modified example of the processing when the operation instruction is not reached in FIG. 71 described above, and here, mainly the differences will be described. When the operation instruction reaches the CU communication control unit 80 by the second retry by the main control unit 323, the counter values between the main control unit 323 and the CU communication control unit 80 are different. As a result, when the CU communication control unit 80 attempts to decrypt the ciphertext, the MAC check results in a MAC error and it is determined that the decryption has failed. In this modification, when the decoding fails, it is determined that decoding is impossible, and an operation response of decoding error is transmitted to the main control unit 323.

  At that time, the CU communication control unit 80 encrypts the operation response of the decryption error using the key K in the SE1 mode, and transmits the ciphertext to the main control unit 323. The main control unit 323 receives this and decrypts the ciphertext using the key K, which is a common key, and determines that a decryption error has occurred. Then, a new random number R is generated to initialize the counter value, and the random number value is transmitted to the CU communication control unit 80 as the initial vector unit R. At that time, the key K is used to encrypt the value of the initial vector portion R in the SE1 mode, and the ciphertext is transmitted to the CU communication control portion 80. In the CU communication control unit 80, the received ciphertext is decrypted in the SE1 mode using the key K, and the initial vector unit R is acquired. As a result, the counter value “R, 0, 0” that is initialized is shared between the main control unit 323 and the CU communication control unit 80.

  Next, the CU communication control unit 80 encrypts an operation response indicating that the update of the initial vector unit R has been completed using the key K in the SE1 mode, and transmits the encrypted response to the main control unit 323.

  In response to this, the main control unit 323 encrypts the same data as the operation instruction retransmitted last time in the SE2 mode and transmits it to the CU communication control unit 80. At this time, the initial block is encrypted using the counter value initialized, that is, “R, 0, 0”. Then, ciphertext 2, ciphertext 3, ciphertext 4, ciphertext 5, and ciphertext 6 are sequentially generated and added to the cipher block counter unit by “1” and transmitted to the CU communication control unit 80. .

  The CU communication control unit 80 decrypts the first block of the ciphertext using the initialized counter value, that is, “R, 0, 0”. Next, the ciphertext 2, ciphertext 3, ciphertext 4, ciphertext 5 and ciphertext 6 are decrypted in order while adding and updating the cipher block counter unit by “1” to generate plain text.

  Next, the encryption process and the decryption process in the SE2 mode will be described with reference to FIGS. First, an encryption key is issued in S100 of FIG. This encryption key is the authentication key or communication key (session key), and is simply referred to as “key” hereinafter. The key is shared between the main control unit 323 and the CU communication control unit 80.

  Next, a random number R is issued in S101. The random number R is generated by the main control unit 323. In step S102, the message counter unit N and the cipher block counter unit I of the counter are reset to “0”. Next, in S103, the random number R is encrypted in the SE1 mode with the key issued in S100, and transmitted from the main control unit 323 to the CU communication control unit 80.

  As shown in S130 of FIG. 74 (b), the CU communication control unit 80 generates a plaintext R by decrypting the transmitted encrypted R in the SE1 mode using a key, and then using S131. R is stored as an initial vector part, and the message counter part N and the cipher block counter part I are reset to a value of “0”.

  On the ciphertext transmission side, a message (plaintext) to be transmitted is generated in S104 of FIG. The generated plaintext is divided into 16-bit blocks, and encrypted using the current value of the counter for each block to generate a ciphertext (S105). Then, when the encryption of one block is completed, the control proceeds to S106, and it is determined whether or not the encryption of all the frames of the plaintext message generated in S104, that is, all the blocks has been completed. If it has not been completed yet, the control proceeds to S107, and the encryption block counter I is updated by adding “1”, and then the process proceeds to S105. The ciphertext is generated by encrypting the next block in S105.

  When the encryption of all frames of the message is completed by cycling through the loop of S105 → S106 → S107 → S105, the control proceeds to S108, and the message counter unit N is updated by adding “1”. In step S109, the encryption block counter I is cleared to “0”.

  Next, the control advances to S110, and processing for transmitting the ciphertext to the other party is performed. Next, in S111, it is determined whether or not a decoding error has been received. This decryption error is transmitted in S162 or S170, which will be described later, when decryption fails on the ciphertext receiving side, and if it is received, error processing is performed in S112. This error process is, for example, a process of displaying an error on the display device or notifying the host server that an error has occurred and stopping the subsequent operation control.

  After the ciphertext transmitted in S110 is received in S132 in FIG. 74B, decryption processing is performed in S133. As described above, this decoding process is a process of decoding for each block using the current counter value of the counter. After all the frames are decoded, the MAC check is performed as described above to determine whether the decoding is successful. If the decryption fails, the counter repair process in S135 is executed.

  FIG. 75 is a flowchart showing specific control contents of the counter repair process shown in S135 described above. 75A shows the counter repair process shown in FIGS. 70 and 71, and FIG. 75B shows the repair process of the modified example shown in FIGS.

  First, the counter repair process 1 will be described with reference to FIG. First, in S150, the message counter unit N is updated by subtracting “1” from the counter value used for the decryption process of the first block of the ciphertext that failed to be decrypted. Next, in S151, a decoding process is executed for each block using the counter value updated by subtraction, and a MAC check is performed to determine whether the decoding is successful. If the decoding is not successful, the value of the repair counter SK is updated by adding “1” in S154. The repair counter SK is a counter for counting how many times repair is attempted. Next, in S155, it is determined whether or not the repair counter SK has reached a predetermined value. As described above, the predetermined value is the value of the number of retries 2 on the ciphertext transmission side.

  If the predetermined value has not yet been reached, control returns to S150, and the control of S150 to S155 is repeatedly executed. If the decoding is successful during the repeated execution, a determination of YES is made in S152, the control advances to S153, and a process of resetting the repair counter SK to “0” is performed.

  On the other hand, when the process of S150 to S155 is repeatedly executed and the value of the repair counter SK reaches a predetermined value, a determination of YES is made in S155 and the control proceeds to S156, and the current message counter N is repaired. The value of the counter SK is added. As a result, the value of the message counter unit N becomes the value of the message counter unit N of the last counter value used when decryption failed. Then, in S157, “1” is added and updated for the message counter unit N, and decryption processing using the counter value is performed in S158. Next, in S159, a MAC check is performed to determine whether or not the decoding is successful. If the decoding is not successful, the repair counter SK is updated by subtracting “1” in S160, and the value of the repair counter SK is updated in S161. It is determined whether or not “0” has been reached. If not, the control returns to S157, and the control of S157 to S161 is repeatedly executed.

  If it is determined in S159 that decoding has succeeded while this repeated execution is being performed, the control advances to S153, and a process of resetting the repair counter SK is performed. The plaintext determined as successful decryption is the correct plaintext.

  On the other hand, when the value of the repair counter SK becomes “0” by repeatedly executing the processes of S157 to S161, the counter is repaired a predetermined number of times. In this case, the control proceeds to S162. Then, a process of encrypting information indicating a decryption error using the key K in the SE1 mode and transmitting the ciphertext is performed.

  This decoding error information is received in S112 of FIG. 74A described above, and a determination of YES is made.

  Next, a modified counter repair process 2 will be described with reference to FIG. In S170, information indicating a decryption error is encrypted in the SE1 mode using the key K, and the encrypted information is transmitted to the other party. If this decryption error is received, a determination of YES is made in S112 of FIG. 74A, and in the case of this modification, if a determination of YES is made in S112, control proceeds to S101. Then, after a new random number R is generated in S101 and the message counter unit N and the cipher block counter unit I are reset in S102, the random number R is encrypted in S103 and sent to the other party as the value of the initial vector unit. Processing to transmit is performed. The transmitted value of the encrypted initial vector portion is received in S171 of FIG. 75 (b). Next, in S172, information indicating that the update of the initial vector portion R has been completed is encrypted in the SE1 mode using the key K, and the ciphertext is transmitted to the other party. The process proceeds to S130 of b).

  In S130, a process of decrypting the ciphertext of the initial vector portion R received in S171 described above in the SE1 mode using the key K is performed. Then, the value of the plaintext initial vector portion R generated as a result of the decryption is stored, and the telegram counter portion N and the cipher block counter portion I are reset to “0” (S131).

  Then, using these R, 0, and 0 values, a process of decrypting the ciphertext received in S132 is performed in S133.

  If the data length of the received data is abnormal or if a CRC error occurs as a result of the CRC check, the receiving side performs processing to discard the received message without updating the counter value. . Then, processing for returning a request for retransmission is performed. On the receiving side, a process is performed in which the value of the telegram counter unit N in the current count value of the counter is decremented by “1”, and the same telegram is decrypted and retransmitted.

  Next, an outline of communication data such as a command and a response communicated between the upper server 801 and the CU 3 will be described with reference to FIG. FIG. 76 is an explanatory diagram for explaining communication data such as commands and responses communicated between the upper server 801 and the CU 3.

  The operation request data transmitted from the upper server 801 to the CU3 between the upper server 801 and the CU3 is a command (CMD), and the data transmitted from the CU3 to the upper server 801 as an operation response to the command is a response (RES). ).

  FIG. 76 shows the transmission direction, the name of transmission information, and its outline. Authentication control information CMD is transmitted from the upper server 801 to the main control unit 323 of the CU3. The authentication control information CMD notifies the CU 3 of security related control information. Authentication control information RES is transmitted from the main control unit 323 of the CU 3 to the upper server 801. This authentication control information RES notifies the higher level server 801 that the authentication control information CMD has been successfully processed.

  The authentication operation designation information CMD is transmitted from the upper server 801 to the main control unit 323 of the CU3. This authentication operation designation information CMD notifies the CU 3 of a security-related operation designation value. An authentication operation designation RES is transmitted from the main control unit 323 of the CU 3 to the upper server 801. This authentication control information RES notifies the higher level server 801 that the authentication operation designation CMD has been successfully processed. In the following description, the security related information is referred to as security related information.

  An authentication inquiry ATT is transmitted from the main control unit 323 of the CU 3 to the upper server 801. This authentication inquiry ATT makes an inquiry about the authentication operation to the upper server 801. An authentication result notification CMD is transmitted from the upper server 801 to the main control unit 323 of the CU3. This authentication result notification CMD transmits an inquiry result of the authentication operation to CU3.

  Such security related information is stored in association with version number information indicating the version number of the information in the security related information storage unit provided in each of the upper server 801 and the CU 3. Such a security-related information storage unit can store storage information in the host server 801 and CU3 until the next power-on even when the flash memory device, the hard disk device, the backup RAM, and the like are powered off. Provided in a simple storage medium.

  An error notification ATT is transmitted from the main control unit 323 of the CU 3 to the upper server 801. This error notification ATT notifies the host server 801 of security-related error information.

  The trace recovery CMD is transmitted from the upper server 801 to the main control unit 323 of the CU3. The trace recovery CMD requests the CU 3 to transmit security related trace data. A trace recovery RES is transmitted from the main control unit 323 of the CU 3 to the upper server 801. This trace recovery RES notifies the higher level server 801 that the authentication operation designation CMD has been successfully processed.

  A version number request 2CMD is transmitted from the upper server 801 to the main control unit 323 of the CU3. The version number request 2CMD requests version information indicating the version number of the authentication control information and the authentication operation designation information from the CU3. Version number transmission 2 RES is transmitted from the main control unit 323 of the CU 3 to the upper server 801. This version number information transmission 2 RES notifies the higher level server 801 of version information of security related information stored and held in the CU 3.

  For each of such security-related information, standard setting information is preset as default data (data of “initial values” of various information described later), and includes a keyboard or the like provided in the upper server 801. In the input operation unit, it is possible to change (update) the data when the manager of the game hall inputs the data. Therefore, when no change operation is performed on the security-related information in the upper server 801, the security-related information is set to “initial value” data. When the security-related information is input in the upper server 801, for example, it is possible to input each gaming machine in the game hall for each gaming machine or to input and set a unified threshold value for each model. is there.

  The host server 801 may acquire and use security related information as follows. If the model information of the gaming machine and the setting information of the security related information are associated in advance, that is, if the model information and the setting information of the security related information are in one-to-one correspondence, the setting information is input The model information is downloaded to the upper server 801 from an upper server than the upper server 801 to be set, and the downloaded model information is stored in the upper server 801 so that the model information is one-to-one corresponding to the security. The upper server 801 may select and store the related information, and the security related information may be used. Further, such security related information can be automatically changed (updated) to predetermined data at a preset timing (for example, a regular timing) regardless of input. It may be.

  Next, the contents of the main communication data shown in FIG. 76 will be described in detail with reference to FIGS.

  Referring to FIG. 77, the authentication inquiry ATT includes an authentication inquiry ATT of communication control IC information that is SID information of the CU communication control unit 80, and a game that is information on the main chip ID and the payout chip ID in the P unit 2. There is an authentication query ATT for machine chip information. The authentication query ATT includes a common part and trace data (authentication query). Data such as a serial number of the main control unit 323 is indicated by the data of the common unit. The trace data includes the inquiry type, the communication control IC information held by the main control unit 323, and the gaming machine chip information such as the main chip ID and the payout chip ID acquired from the P units.

  Referring to FIG. 78, as an authentication result CMD, a communication control IC information inquiry result CMD transmitted in response to an authentication inquiry ATT of communication control IC information, and a gaming machine transmitted in response to an authentication inquiry ATT of gaming machine chip information There is a chip information inquiry result CMD. The authentication result CMD includes a response type, a communication control IC information query result, a query result, a gaming machine chip information query result, a query result 1, and a query result 2.

  The response type data indicates which type is the communication control IC information inquiry result or the gaming machine chip information inquiry result. In the case of a communication control IC information inquiry result, the presence / absence of the inquired communication control IC information (SID of the CU communication control unit 80) in the upper server 801 is indicated as the communication control IC information inquiry result. In the case of the gaming machine chip information inquiry result, the data of the inquiry result 1 of the gaming machine chip information communication control IC information inquiry result indicates whether or not the inquired main chip ID (main control chip information) is in the upper server 801. It is. If it is a gaming machine chip information inquiry result, the presence / absence of the inquired payout chip ID (payout control chip information) in the upper server 801 based on the data of the inquiry result 2 of the gaming machine chip information communication control IC information inquiry result Is shown.

  Referring to FIG. 79, authentication control information CMD is not transmitted when CU3 already stores and holds information of the same version number. The authentication control information CMD includes authentication control information version number, operation permission days at CU authentication NG, operation permission days at gaming machine authentication NG, and communication control IC activation key data.

  The authentication control information version number is the version number of the authentication control information stored in the upper server 801. The operation permission days at the time of CU authentication NG indicate the operation permission days when the communication control IC information inquired to the upper server 801 by the authentication inquiry ATT from the CU 3 is not registered in the upper server 801 (at the time of authentication NG). It is set within the range of 0 to 14 days. Here, when the operation permission days are 0 days, the operation is not permitted. In addition, the operation permission days at the time of gaming machine authentication NG are the operation permission days when the gaming machine chip information inquired to the upper server 801 by the authentication inquiry ATT from the CU 3 is not registered in the upper server 801 (at the time of authentication NG). And is set within a range of 0 to 14 days. Here, when the operation permission days are 0 days, the operation is not permitted. The communication control IC activation key indicates a key used to activate (activate) the CU communication control unit 80.

  Referring to FIG. 80, authentication operation designation CMD is not transmitted when CU3 already holds the same version number information. The authentication operation designation CMD includes data of the authentication operation designation version number, the base abnormality detection threshold value in the low base state, the base abnormality detection threshold value in the high base state, the presence / absence of the gaming machine trial hit mode, and the subtraction ball abnormality detection setting value It is.

  The authentication operation designation version number is the version number of the authentication operation designation information stored in the upper server 801.

  Here, the base is the ratio of the acquired number of game balls acquired by the player by being added to the game balls in accordance with a prize with respect to the number of fired balls. ”(%). The base abnormality detection threshold is data for setting the presence / absence of base abnormality detection and its constant (threshold) when the CU 3 detects a base abnormality state. The base abnormality detection threshold includes a low base threshold used as a base abnormality detection set value in a low base state and a high base threshold used as a base abnormality detection set value in a high base state.

  The low base time threshold value is in the range of 0 to 100%, and the initial value is 30%. Such a low base time threshold indicates “not detected” when set to 0%, and indicates “detected” when set to a value other than 0%. Thus, when the low base time threshold is other than 0%, the base abnormality detection using the set low base time threshold is performed, and when the low base time threshold is 0%, the base abnormality using the low base time threshold is performed. No detection is performed.

  As for the high base time threshold, the set value is in the range of 0 to 150%, and the initial value is 120%. Such a high base time threshold indicates “not detected” when set to 0%, and “detected” when set to a value other than 0%. Thus, when the high base time threshold is other than 0%, the base abnormality detection using the set high base time threshold is performed, and when the high base time threshold is 0%, the base abnormality using the high base time threshold is performed. No detection is performed.

  The gaming machine trial hit mode setting value is data for setting the presence or absence of a trial hit mode such as adjustment of a gaming machine nail. In the gaming machine test hit mode setting value, “test hit mode present” or “no test hit mode” is indicated, and the initial value is “no test hit mode”.

  The subtraction ball abnormality detection setting value is data for setting the presence / absence of an abnormal state detection and the constant (threshold value) of the subtraction ball number (the number of balls subtracted from the game ball number based on the firing detection signal) in CU3. It is. The abnormal state of the subtraction balls set here is detected based on the fact that there is a game ball winning in succession for the set number of balls, even though no game balls are fired. The threshold value of the subtraction ball abnormality detection setting value is data for setting the number of winning balls that have been continuously awarded and determined to be an abnormal state of the number of subtraction balls. The subtraction ball abnormality detection setting value has a setting value in the range of 0 to 99 balls and an initial value of 5 balls. Such a subtractive ball abnormality detection setting value indicates “not detected” when set to 0 balls, and indicates “detected” when set to other than 0 balls. Thereby, when the subtraction ball abnormality detection setting value is other than 0 balls, the subtraction ball abnormality detection is performed using the set subtraction ball threshold value, and when the subtraction ball abnormality detection setting value is 0, the subtraction ball abnormality is detected. No detection is performed.

  Next, typical processing related to security-related control information performed by the upper server 801, the main control unit 323 of the CU3, and the CU communication control unit 80 of the CU3 will be described with reference to FIGS.

  FIG. 81 is a diagram showing processing of a startup sequence as a sequence from when the power of the CU 3 is turned on to when it enters an on-run state. FIG. 81 shows processing executed by the upper server 801 and the main control unit 323 after the power of the CU 3 is turned on while the upper server 801 is operating.

  The following command and response are communicated between the upper server 801 and the main control unit 323 after the communication state has been established between the upper server 801 and the main control unit 323. Authentication CMD transmission and authentication RES reply thereto, version information request CMD transmission and version information transmission RES reply thereto, version information request 2CMD transmission and version information transmission 2RES reply thereto, time setting The transmission of the CMD and the return of the authentication RES to this, the transmission of the control information CMD and the return of the control information RES to this, the transmission of the BB operation designation CMD and the reply of the BB operation designation RES to this are executed.

  Among such data, the version number information request 2CMD indicates whether the version number information of the authentication control information and the authentication operation designation data stored in both the upper server 801 and the main control unit 323 match. In order to confirm this, the upper server 801 is a command for requesting the main control unit 323 to return the version information of the authentication control information and the authentication operation designation. The version number information transmission 2RES is a response in which the main control unit 323 returns the stored version information of authentication control information and authentication operation designation in response to the version number information request 2CMD.

  In the upper server 801, for the authentication control information and the authentication operation designation, the version number information stored in the upper server 801 and the version information stored in the main control unit 323 based on the received version information transmission 2RES It is judged whether or not. For information that does not match between the authentication control information and the authentication operation designation, the information stored in the upper server 801 is transmitted to the main control unit 323 like the authentication control information CMD and the authentication operation designation CMD described above.

  As described above, when the security-related information version numbers do not match, when the security-related information is changed in the host server 801 when the power of the CU3 is off, the CU-side device replacement such as the CU3 replacement is not performed. Security information stored in the CU3 due to noise or the like when the CU3 is powered on due to a communication failure or when the CU3 is powered on. When relevant information is changed to inappropriate information.

  When the main control unit 323 receives the authentication control information CMD, the main control unit 323 changes the stored authentication control information to the authentication control information data indicated by the received command, and stores the authentication control designation CMD. The authentication operation designation being performed is changed to the authentication operation designation data indicated by the received command. Thereby, when the authentication control information and authentication operation designation data stored in the upper server 801 and the main control unit 323 are different when the power of the CU 3 is turned on, the data on the main control unit 323 side is changed. As a result, the security-related information stored in the both can be matched.

When the main control unit 323 completes the change of the authentication control information according to the authentication control information CMD, the authentication control information RES is transmitted to the upper server 801.
When the main control unit 323 completes the change of the authentication operation designation according to the authentication operation designation CMD, the authentication operation designation RES is transmitted to the upper server 801.

  Thereafter, between the upper server 801 and the main control unit 323, transmission of the trace recovery CMD and reply of the trace recovery RES to this, transmission of the trace recovery (security) CMD and reply of the trace recovery (security) RES to this, and The start CMD and the start RES reply to the start CMD are executed, and the online state is set.

  FIG. 82 is a diagram showing processing of a set value change sequence as a sequence when information such as a change of a set value of security related information is changed after the CU 3 and the main control unit 323 are in an online state. .

  As described above, in the upper server 801, it is possible to change information such as a change in setting values of security related information such as authentication control information and authentication operation designation. FIG. 82 shows processing executed by the upper server 801 and the main control unit 323 when such information can be changed in the online state.

  In the online state, when the security related information such as the authentication control information and the authentication operation designation can be changed, the control information CMD is transmitted and the control information RES is returned to the authentication control information. Of the CMD and the authentication operation designation CMD, a command indicating the changed setting value is transmitted from the upper server 801 to the main control unit 323. Then, the main control unit 323 changes the information indicated by the received command among the stored authentication control information and authentication operation designation as in the case of the startup sequence described above.

  Thereby, in the online state, when security related information such as authentication control information and authentication operation designation is changed in the upper server 801, based on commands such as authentication control information CMD and authentication operation designation CMD, The security related information stored in the main control unit 323 of the CU 3 is changed.

  Next, an example of an authentication sequence when the authentication between the main control unit 323 and the CU communication control unit 80 is not performed when the upper server 801 and the main control unit 323 are in the online state will be described. .

  FIG. 83 is a diagram illustrating an example in which operation is permitted in the authentication sequence when authentication between the main control unit 323 and the CU communication control unit 80 is not performed in the online state.

  In the upper server 801, an authentication information storage unit including a predetermined storage medium such as a RAM, a flash memory device, a hard disk device, and a backup memory is used in a game hall where the upper server 801 is provided (currently used) Communication control IC information about the CU communication control unit 80 of each CU 3 is stored. In the host server 801, whether or not the communication control IC information is registered in the authentication information storage unit in response to an inquiry regarding the communication control IC information from the main control unit 323 based on the data of the communication control IC information. Searchable. The CU manufacturer is provided with a CU information registration server for registering information regarding such a CU at the shipment stage of the CU 3. Such a CU information registration server is communicably connected to the upper server 801. When the CU 3 is shipped, the CU information registration server distributes information about the CU to the upper server 801 online, thereby allowing the game hall to Communication control IC information (SID of CU communication control unit 80) corresponding to the introduced main control unit 323 of each CU 3 is additionally stored in the authentication information storage unit. Such a CU information registration server may be provided in a third party organization other than the game arcade and the manufacturer, and may distribute information regarding the CU online.

  In the upper server 801, data such as a chip ID (main chip ID, payout chip ID), a manufacturer code, and a format code is associated with the gaming machine manufactured by all gaming machine manufacturers in the authentication information storage unit. The game machine chip information data is stored. In the host server 801, when there is an inquiry from the gaming machine chip information from the main control unit 323, whether or not the gaming machine chip information is registered in the stored data of the authentication information storage unit is based on the data such as the chip ID. Searchable. A manufacturer of P machines is provided with a P machine information registration server for registering information related to such P machines at the shipping stage of the P machine 2. Such a P-unit information registration server is communicably connected to the higher-level server 801, and when shipping the P-unit 2, information regarding the P-unit is distributed online to the upper-level server 801 from the P-unit information registration server. Thus, the gaming machine chip information relating to each of the P machines is additionally stored in the authentication information storage unit. Such a P machine information registration server may be provided in a third party organization other than the game arcade and the manufacturer, and may distribute information relating to the P machine online. The CU information registration server and the P device information registration server described above may be configured by separate servers or may be configured by one server.

  Note that in the authentication information storage unit, the gaming machine chip information of each P unit 2 used (including the currently used one and the one stored as a spare) used in the game hall where the upper server 801 is provided. May be stored.

  Further, the communication control IC information and the gaming machine chip information may be stored not in the same storage unit but in different storage units.

  Referring to FIG. 83, when the host server 801 and the main control unit 323 are online, and the authentication between the main control unit 323 and the CU communication control unit 80 is not performed, the main control unit 323 An inquiry ATT for inquiring whether or not the communication control IC information (SID of the CU communication control unit 80) of the CU communication control unit 80 connected to the main control unit 323 is registered is transmitted to the upper server 801. The The main control unit 323 writes the communication control IC information (SID) of the connected CU communication control unit 80 to each EEPROM 808 at a predetermined timing, for example, when the CU 3 is manufactured, for example, when it is introduced to the game arcade. . Thus, the SID written in the EEPROM 808 is transmitted by the inquiry ATT.

  When the upper server 801 receives the authentication inquiry ATT, the communication control IC information specified by the inquiry ATT is searched from the data of the communication control IC information stored in the authentication information storage unit provided in the upper server 801. Is done.

  In the upper server 801, the CU communication control unit 80 of the CU3 used in the game hall in which the upper server 801 is provided (including the currently used one and the one stored as a spare) in the authentication information storage unit. Is stored in association with the SID of the main control unit 323, and is stored in the stored data of the authentication information storage unit based on the SID of the main control unit 323 specified by the received authentication inquiry ATT. Whether or not the communication control IC information to be registered is registered is searched.

  When the corresponding communication control IC information is registered as a result of the search, the upper server 801 transmits the authentication result CMD specifying the presence of the communication control IC information to the main control unit 323. On the other hand, when the corresponding communication control IC information is not registered as a result of the search, the upper server 801 transmits an authentication result CMD specifying no communication control IC information to the main control unit 323.

  When the main control unit 323 receives the authentication result CMD, the main control unit 323 confirms whether or not the communication control IC information of the connected CU communication control unit 80 is registered based on the received authentication result CMD.

  When the main control unit 323 determines that the communication control IC information is registered, a communication control IC authentication sequence as shown in FIG. 9 is executed between the main control unit 323 and the CU communication control unit 80. Thus, mutual authentication between the main control unit 323 and the CU communication control unit 80 is performed. On the other hand, when the main control unit 323 determines that the communication control IC information is not registered in the main control unit 323, the communication control IC authentication sequence is not executed.

  If the result of mutual authentication is normal, a device information request by the main control unit 323 as shown in FIG. 10 and a device information response by the CU communication control unit 80 in response to the device information request are performed. A gaming machine chip information acquisition sequence for acquiring information such as a main chip ID and a payout chip ID is executed.

  When the gaming machine chip information is acquired, an inquiry ATT for inquiring whether or not the acquired gaming machine chip information is registered is transmitted from the main control unit 323 to the upper server 801.

  When the upper server 801 receives the authentication inquiry ATT, the main chip ID and the payout chip ID which are the gaming machine chip information specified by the inquiry ATT are stored in the gaming machine chip information stored in the authentication information storage unit. Searched from data.

  When the gaming machine chip information that has been queried is registered as a result of the search, the host server 801 transmits an authentication result CMD specifying the presence of gaming machine chip information to the main control unit 323. On the other hand, if the communication control IC information that has been inquired is not registered as a result of the search, the higher-level server 801 transmits an authentication result CMD specifying no gaming machine chip information to the main control unit 323.

  When the main control unit 323 receives the authentication result CMD, the main control unit 323 confirms whether or not the gaming machine chip information of the gaming machine to which the CU 3 is connected is registered based on the received authentication result CMD.

  When the main control unit 323 determines that the gaming machine chip state is registered, a gaming machine authentication result notification indicating that the gaming machine authentication result is normal is transmitted from the main control unit 323 to the CU communication control unit 80. Is done. The CU communication control unit 80 transmits a gaming machine authentication result response in response to receiving the gaming machine authentication result notification. After such communication of information is executed between the main control unit 323 and the CU communication control unit 80, the CU 3 and the P stand 2 can communicate with each other, and insertion and payment of a card into the CU 3 are performed. It becomes possible.

  As described above, since it is allowed to play a game on condition that the communication control IC information is registered in the upper server 801, the IC chip constituting the CU communication control unit 80 is replaced with an unauthorized one. In addition, games are not allowed. Thereby, it is possible to confirm whether or not there is a possibility that the IC chip constituting the CU communication control unit 80 is replaced with an unauthorized one. In addition, since gaming is permitted on the condition that the gaming machine chip information is registered in the upper server 801, gaming machine chips such as the main chip ID and the payout chip ID have been replaced with illegal ones. In some cases, the game is not allowed. Thereby, it can be confirmed whether there is a possibility that the gaming machine chip is replaced with an unauthorized one.

  Furthermore, since it is allowed to play a game on condition that the communication control IC information is registered in the upper server 801 and the gaming machine chip information is registered in the upper server 801, the CU3 and the P unit The security related to the IC chip in 2 can be further improved.

  Next, an example will be described in which the main control unit 323 receives an authentication result CMD specifying no communication control IC information from the upper server 801 when the upper server 801 and the main control unit 323 are online. To do.

  FIG. 84 is a diagram illustrating an example in which a time-limited operation is permitted in the authentication sequence when the authentication between the main control unit 323 and the CU communication control unit 80 is not performed in the online state.

  When the main control unit 323 receives an authentication result CMD specifying no communication control IC information from the upper server 801 when the upper server 801 and the main control unit 323 are in an online state, the main control unit 323 It is determined that the communication control IC information is not registered.

  As described above, when the communication control IC information is not registered in the online state, the main control unit 323 determines the CU communication control unit within the range of the permitted operation days at the time of CU authentication NG in the security related information. 80, the execution of the communication control IC authentication sequence as described above is permitted. In that case, a CU authentication NG operation permission days counting unit is provided in the same storage medium as the authentication information storage unit, and when the registration-unregistered information is registered for the first time, the operation at the time of CU authentication NG By storing the value of the permitted days and down-counting the operation permitted days as the number of days elapses, it is determined whether or not the operation permitted days are within the range. The data of the operation permission days counting unit at the time of CU authentication NG may be stored in the authentication information storage unit in association with the non-registration information.

  When the main control unit 323 receives an authentication result CMD specifying no gaming machine chip information from the upper server 801 when the upper server 801 and the main control unit 323 are online, the main control unit H.323 determines that the gaming machine chip information is not registered.

  As described above, when the gaming machine chip information is not registered when in the online state, the main control unit 323 determines the gaming machine as described above within the range of the operation permitted days during the gaming machine authentication NG. Permitting the gaming machine authentication result notification indicating that the authentication result is normal to the CU communication control unit 80 is permitted. In such a case, a gaming machine authentication NG operation permission days counting unit is provided in the same storage medium as the authentication information storage unit, and when the registration-unregistered information is registered for the first time, the gaming machine authentication NG The value of the operation permission days is stored, and the operation permission days are down-counted as the number of days elapses, whereby it is determined whether or not the operation permission days are within the range. Note that the data of the gaming machine authentication NG operation permission days counting unit may be stored in the authentication information storage unit in association with unregistered information.

  By performing such control, even when at least one of the communication control IC information and the gaming machine chip information is not registered in the online state, the main control unit 323 performs the above-described gaming machine authentication NG. Within the permitted operation days, the CU 3 and the P stand 2 can communicate with each other, and card insertion and payment are possible.

  As described above, even when at least one of the communication control IC information and the gaming machine chip information is not registered in the upper server 801, based on the communication control IC information and the gaming machine chip information for a limited period. It is allowed to play games. Thereby, for example, when there is communication control IC information and gaming machine chip information that cannot be confirmed to be registered in the upper server 801 due to a delay in information registration in the upper server 801 and an abnormal communication state. However, since the game can be performed for a limited time, the state in which the gaming machine cannot be operated can be reduced as much as possible. In addition, when at least one of the communication control IC information and the gaming machine chip information is not registered in the upper server 801, it is unlikely that the deposit will be performed illegally. You may make it do.

  FIG. 85 is a diagram illustrating an example in which operation is disabled in the authentication sequence when authentication between the main control unit 323 and the CU communication control unit 80 is not performed in the online state.

  When the host server 801 and the main control unit 323 are in an online state, the main control unit 323 receives the authentication result CMD specifying that there is no communication control IC information from the host server 801, and the main control unit 323 performs communication. When it is determined that the control IC information is not registered and the execution of the communication control IC authentication sequence is permitted in the operation permission days at the time of CU authentication NG, the communication control IC is determined to be out of the operation permission days range. Execution of authentication sequence is prohibited. In such a case, an error notification ATT indicating a communication control IC authentication abnormality is transmitted from the main control unit 323 to the upper server 801. In such a case, communication between the CU 3 and the P stand 2 becomes impossible, and card insertion and payment become impossible. Then, in CU3, an error notification is performed, such as displaying an error message specifying the error content on the display 372.

  The error notification ATT includes date and time of occurrence, error code, error information, SID of the main control unit, main chip ID, and payout chip ID.

  When the host server 801 and the main control unit 323 are in an online state, the main control unit 323 receives the authentication result CMD specifying the absence of communication control IC information from the host server 801, and the main control unit 323 It is determined that the machine chip information is not registered, and a gaming machine authentication result notification indicating that the gaming machine authentication result is normal within the operation permission days during gaming machine authentication NG is transmitted to the CU communication control unit 80. In the case where the operation is permitted, the transmission of such a gaming machine authentication result notification is prohibited. In such a case, an error notification ATT indicating a gaming machine authentication abnormality is transmitted from the main control unit 323 to the upper server 801.

  As described above, even when it is possible to play a game for a limited time because at least one of the communication control IC information and the gaming machine chip information is not registered in the upper server 801, the game is out of the period. In such a case, an error occurs and the game is not allowed. Thus, if it is not possible to determine that at least one of the communication control IC information and the gaming machine chip information is registered even after a predetermined period of time, the game is considered to be illegal. Since it is not permitted, it is possible to prevent a game using unauthorized communication control IC information and gaming machine chip information from being continued.

  Next, an example of performing authentication of communication control IC information and authentication of gaming machine chip information when the host server 801 and the main control unit 323 are not in the online state as described above but in the offline state will be described. The offline state in this case includes those that occur based on various offline factors such as power failure and disconnection.

  In this example, when receiving the authentication result CMD specifying that the communication control IC information is present, the main control unit 323 displays the communication control IC information in the authentication information storage unit provided in the main control unit 323. The information is stored in association with information for specifying that it is registered in the server 801 (hereinafter referred to as registered information). The authentication information storage unit is configured by a storage medium that can store and hold stored information until the next power-on, such as a flash memory device, a hard disk device, and a backup RAM. On the other hand, when receiving the authentication result CMD specifying no communication control IC information, the main control unit 323 specifies that the communication control IC information is not registered in the upper server 801 in the authentication information storage unit. The information is stored in association with information (hereinafter referred to as no registration information).

  In this example, when the authentication result CMD specifying the presence of gaming machine chip information is received, the main control unit 323 stores the gaming machine chip information in association with the registration presence information in the authentication information storage unit. To do. On the other hand, when receiving the authentication result CMD that specifies no gaming machine chip information, the main control unit 323 stores the gaming machine chip information in association with no registration information in the authentication information storage unit. Such gaming machine chip information may be stored not in the same storage unit as the communication control IC information but in a different storage unit.

  When the communication between the host server 801 and the main control unit 323 is in an offline state, the communication control IC information stored in the EEPROM 808 is stored in the EEPROM 808 as described above. This is performed by collating with the communication control IC information stored in the authentication information storage unit.

  If the communication control IC information to be verified is stored in the authentication information storage unit and is registered information, it is determined that the communication control IC information is present, and the execution of the communication control IC authentication sequence is permitted. Is done. Further, when the communication control IC information to be verified is stored in the authentication information storage unit and the information is not registered, it is determined that the communication control IC information is not present, and the operation permission days at the time of CU authentication NG Execution of the communication control IC authentication sequence is permitted within the range. In this case, the operation permission days are counted in the same manner as the above-described online operation. On the other hand, when the communication control IC information to be verified is not stored in the authentication information storage unit, the execution of the communication control IC authentication sequence is prohibited. In this way, the communication control IC information can be authenticated even in the offline state.

  In addition, when the upper server 801 and the main control unit 323 are in an offline state, the registration check of the gaming machine chip information described above is performed by using the gaming machine chip information acquired by the main control unit 323 as described above. This is done by collating with gaming machine chip information stored in the authentication information storage unit.

  If the gaming machine chip information to be verified is stored in the authentication information storage unit and is registered information, it is determined that the gaming machine chip information is present, and the above-described gaming machine authentication result is normal. The transmission of the gaming machine authentication result notification indicating that this is permitted. In addition, when the gaming machine chip information to be verified is stored in the authentication information storage unit and the information is not registered, it is determined that there is no gaming machine chip information, and the operation permission days at the time of gaming machine authentication NG Within this range, transmission of a gaming machine authentication result notification indicating that the above-mentioned gaming machine authentication result is normal is permitted. In this case, the operation permission days are counted in the same manner as the above-described online operation. On the other hand, if the gaming machine chip information to be verified is not stored in the authentication information storage unit, it is determined that there is no gaming machine chip information, and execution of the communication control IC authentication sequence is prohibited. In this way, the gaming machine chip information can be authenticated even in an offline state.

  In addition, when the communication control IC information to be verified is stored in the authentication information storage unit and is registered information, the communication control IC authentication sequence within the range of the permitted operation days at the time of CU authentication NG. Execution may be permitted. In addition, when the gaming machine chip information to be verified is stored in the authentication information storage unit and is registered information, the gaming machine chip information of the above-mentioned gaming machine is within the range of the permitted operation days at the time of gaming machine authentication NG. Transmission of a gaming machine authentication result notification indicating that the authentication result is normal may be permitted.

  In addition, regarding the operation permission days at the time of CU authentication NG and the operation permission days at the time of gaming machine authentication NG, the setting value of the number of days differs depending on whether it is permitted in the online state or in the offline state. (For example, online state setting value> offline state setting value). Similarly, with regard to the number of days permitted for operation at the time of gaming machine authentication NG, the setting value of the number of days may be different depending on whether it is permitted in the online state or in the offline state (for example, online state setting) Value> Offline state setting value).

  As described above, even when the upper server 801 and the main control unit 323 are in an offline state, the predetermined condition is satisfied, for example, the communication control IC information and the gaming machine chip information are stored in the main control unit 323. Based on this, it is allowed to play a game within a limited period. Thereby, even in such an offline state, a game can be performed for a limited time, so that a state where the gaming machine cannot be operated can be reduced as much as possible.

  Next, an example of an error notification sequence when a base abnormality is detected based on the above-described base abnormality detection setting value will be described. FIG. 86 is a diagram showing an error notification sequence when a base abnormality is detected based on the base abnormality detection setting value.

  When the host server 801 and the main control unit 323 are online and the P-unit 2 is playing, the calculated base value in the main control unit 323 is equal to or greater than the base abnormality detection set value. Sometimes, it is determined that the base is abnormal, and an error notification ATT indicating the base abnormality is transmitted from the main control unit 323 to the upper server 801. In such a case, control is performed such that communication with the P platform 2 is impossible.

  Next, an example of characteristic control that is performed when the host server 801 employs a configuration in which the score is stored in association with the card number of each card and the score of the card is directly recorded on the card will be described. .

  Here, a description will be given of the control for recording the score at the time of CU3 failure on the player-owned card via the upper server 801 using a predetermined card receiving means. As an example, an example will be described in which points are recorded on a card using a POS (Point Of Sales) terminal device as a giveaway processing device.

  A characteristic control performed when the host server stores a score in association with the card number of the card and records the card score directly on the card will be described. In addition, a single-function type score server that manages the score of a card may be provided separately from the host server, and the score may be stored in association with the card number of each card by the score server. . When such a score server is provided, the management of the score server may be left to management by a third party organization other than the game arcade and the manufacturer. FIG. 87 is a block diagram showing a main configuration in the case of performing control to record the score at the time of CU3 failure on the card owned by the player using the POS terminal device via the upper server 801.

  As described above, the upper server 801 has a score management function for managing the score of each player. The score management function is activated by executing the processing steps of the score management program executed to manage the score.

  In a normal state in which the CU3 is not broken, when the card is inserted into the CU3 and communication between the CU3 and the upper server 801 based on the insertion of the card starts, information on the number of game balls read from the card is score information. As well as information on the card number (C-ID). In the normal state in which CU3 is not broken, the game is started, and information regarding points such as the number of game balls, the number of added balls, the number of subtracted balls, etc. is transmitted from P stand 2 to CU3 together with the information of C-ID. The number of game balls is updated and stored. From CU3 to upper server 801, the score information as the latest information regarding the number of game balls is transmitted from CU3 to upper server 801 together with the C-ID in a predetermined cycle. The transmission period of the score information from the CU 3 to the upper server 801 is set to a predetermined period such as 5 seconds. If the predetermined period in this case is set to a too short period, the burden of data transmission / reception processing increases in the CU 3 and the upper server 801, and the burden of the update processing of the point data managed in the upper server 801 increases. To do. On the other hand, if the predetermined cycle in this case is set to a too long cycle, there is an inconvenience that the difference in the number of points stored and held between the host server 801 and the CU 3 becomes large. Therefore, the transmission period of the score information from the CU 3 to the upper server 801 is set to, for example, about 5 seconds where it is expected that, on average, there will be a prize of about one ball. When the transmission period of the score information is set in this way, the processing load on the upper server 801 and the CU 3 can be reduced, and the difference in the number of points stored and held between the upper server 801 and the CU 3 is reduced. be able to.

  Note that the transmission period of the point information from the CU 3 to the upper server 801 may be set to a short period closer to real time, such as 5 msec. Further, the transmission of the score information from the CU 3 to the upper server 801 is performed every time the score data stored in the CU 3 is updated based on the score data transmitted from the P-unit 2. May be.

  The host server 801 stores and manages the score data corresponding to each C-ID of the card. Each time the score information from the CU 3 is received, the score data (score storage information) corresponding to the received C-ID is updated and stored. As a result, the latest server 801 manages the latest score for each C-ID. By using such a score management function in the upper server 801, it is possible to perform control to record the score at the time of CU3 failure on the player's own card using the predetermined card receiving means via the upper server 801. It becomes possible.

  In the amusement hall, a POS 810 which is a POS terminal device used as a prize processing device is provided in a prize exchange. The POS 810 is provided with a display unit including a microcomputer, a card reader / writer, an LCD, and an operation unit including a touch panel. The microcomputer includes a CPU 45 as a control center, a ROM 48 storing a control operation program for the CPU 45, a RAM as a work area of the CPU, an input / output interface for inputting / outputting signals to / from an external device, and dedicated to image control. VDP 46, character ROM for image display, and VRAM 49 for image display.

  When a player-owned card is inserted into the card reader / writer unit and received, it is possible to perform processing for reading recorded information on the card and processing for writing various information on the card.

  When the card is received by the card reader / writer unit at the POS 810, an operator designates exchange of prizes at the operation unit in response to a player's request, so that the points recorded on the card are exchanged for prizes. Processing is performed.

  In addition, when a player brings a card forcibly ejected at the time of failure of CU3, when the card is received by the card reader / writer unit at POS 810, a score is given according to the player's request. If the clerk performs an operation for designating writing in the operation unit, processing for writing the latest score information based on the recovery data for the forced card at the time of the failure of the CU 3 is performed as described below. .

  The latest information about various information such as points for the player-owned card inserted in the CU3 when a failure occurs such as the power-off state and the communication-cut state. Can no longer write. In particular, since the player may be damaged if the information on the points cannot be updated due to a failure of CU3, it is necessary to perform control to prevent the player from being damaged. Therefore, when CU3 breaks down, control at the time of CU failure is performed in which the latest score information is written to the player-owned card by the other card processing means via the host server 801.

  When the CU failure control is performed, when the failed CU3 is replaced with a new CU3, the recovery information (recovery data) held by the P table 2 as described above is transmitted from the P table 2 to the CU3. The recovery data is transmitted from the CU 3 to the upper server 801. The recovery data transmitted in this way includes the latest score information at the time of failure occurrence in the CU 3 at the time of failure.

  FIG. 88 is a flowchart showing processing executed by each of CU3, upper server 801, and POS 801 when CU failure control is performed.

  88, (A) shows processing at the time of failure in CU3, (B) shows score management processing in upper server 801, and (C) shows score writing processing in POS 810.

  88, (A) shows processing at the time of failure in CU3, (B) shows score management processing in upper server 801, and (C) shows score writing processing in POS 810. When CU3 breaks down, the failure time handling score management process and the score writing process are executed, so that the latest score information is written to the player-owned card by the POS 810 via the host server 801. Is included.

  88A is executed by the main control unit 323 of the CU3. First, it is determined whether or not a failure is detected by the main control unit 323 (S701). The main control unit 323 is configured to execute processing for detecting the occurrence of a failure, such as processing for detecting a power-off state and processing for detecting a communication-off state. When a failure is detected by such a failure detection process, a failure detection flag is set in order to perform a process of forcibly ejecting the card in the failure process, indicating that a failure is detected. In S701, it is determined whether or not a failure has been detected by checking the state of such a failure detection flag. Specific examples of the failure detected in S701 include, for example, a card reader / writer failure (operation stop, abnormal operation, etc.), a display control unit abnormality (operation stop, abnormal operation, etc.), a lending button, and a replay button. There are various failures such as abnormalities (disconnection, sticking, etc.) of operation means such as a return button.

  In addition, in the main control unit 323, when a failure occurs, in addition to executing the process at the time of failure, a predetermined error notification for notifying that a failure has occurred by executing an error notification process is performed. A process for notifying that a failure has occurred is performed. Thereby, the attendant of the game hall can recognize that a failure has occurred in CU3, and can perform work to replace the failed CU3 with a new CU3.

  If it is determined in S701 that a failure has been detected, a process for forcibly ejecting the card inserted into the card insertion / ejection slot 309 is performed (S702), and the process ends. As a result, the card is forcibly returned to the player.

  Further, when it is not the time of failure detection in S701 (for example, when no failure has occurred and after the replacement of the CU3), it is determined whether or not the replaced CU3 is being activated. When the CU3 is exchanged, at startup, security related information such as the authentication operation designation information CMD is received from the upper server 801 based on the version mismatch of the security related information resulting from the exchange of the CU3 in the above-described startup sequence processing. Since recovery data (including C-ID) that is transmitted to CU3 and determined that CU3 itself does not store the backup is transmitted from P unit 2 to CU3, In step S703, it is determined that the replaced CU3 is being activated. Note that, when CU3 is exchanged, in the processing of the CU3 startup sequence, the upper server 801 determines the authentication information of the CU3 confirmed at the time of the previous authentication and the CU3 confirmed at the time of the current startup. It is determined whether or not the authentication information is different. When the authentication information is different, it is recognized that the CU3 has been exchanged, and a command indicating that the exchanged CU3 is activated is transmitted to the CU3. When it is received, the CU 3 side may be able to determine that the CU is immediately after the replacement. In this way, whether or not the replaced CU 3 is activated may be determined based on the determination process of the upper server 801.

  In S703, when it is determined that the replaced CU3 is not activated, that is, when the CU3 is activated, the security related information is transmitted from the upper server 801 to the CU3, and the CU3 itself is activated when the CU3 is activated. When recovery data determined not to be stored in backup has not been transmitted, the process ends. On the other hand, when it is determined in S703 that the exchanged CU3 is activated, that is, when the CU3 is activated, the security-related information is transmitted from the upper server 801 to the CU3, and the CU3 is activated when the CU3 is activated. When recovery data that has been determined not to be stored by itself is being transmitted, the C- that identifies the card that was inserted at the time of failure is determined based on the recovery data that has been transmitted from the P unit 2 to the CU 3 Recovery data including the ID is transmitted to the upper server 801 (S704), and the process ends.

  The score management process in FIG. 88 (B) is executed by the host server 801 to manage the score for each C-ID. In FIG. 88 (B), a part of the contents of the point management process that is regularly executed is shown as the process related to the failure of the CU3.

  In the point management process, it is determined whether or not the point information other than the recovery data and the C-ID data are received from the CU 3 (S801). That is, in S801, it is determined whether or not the score information is received together with the C-ID when the CU 3 is operating normally. When the score information other than the recovery data and the data of the C-ID are received from the CU 3, the score storage information stored in the upper server 801 corresponding to the received C-ID is retrieved, and the corresponding score memory is stored. The information is updated and stored based on the received score information (S803), and the process ends.

  On the other hand, if it is not when the point information other than the recovery data and the data of the C-ID are received from the CU 3 in S801, it is determined whether or not the recovery data including the C-ID is received from the CU 3 ( S804). That is, in S804, it is determined whether or not recovery data transmitted when the CU 3 is replaced due to the occurrence of a failure is received.

  If it is determined in S804 that the recovery data has been received from CU3, the score difference between the received score information and the score storage information stored in the upper server 801 is calculated and the score difference is calculated. Is determined to be within a predetermined number (S805). The predetermined number determined in S805 is set, for example, to an upper limit value that is recognized as a score increased by the score information received from the P base 2 when the CU 3 is normal.

  If it is determined in S805 that the score difference is within a predetermined number, the score storage information stored by the received score information is updated (S806). Thereby, the latest score information of the C-ID when a failure occurs in the CU 3 is stored as the score storage information of the upper server 801 based on the recovery data. Then, a process for setting the updated stored point storage information to a read permission state from the POS 810 is performed (S807), and the process ends. As a result, the score storage information based on the latest score information of the C-ID when a failure occurs in the CU 3 can be read from the host server 801. In S805, if the upper limit value of the number of points increased by the score information received from the P-unit 2 when the CU3 is normal and a value that does not have a large error, the score storage information is updated. Alternatively, the process may proceed to S806.

  On the other hand, if it is determined in S805 that the difference in points is not within the predetermined number, the process is terminated. As a result, the stored point information is prevented from being updated with apparently incorrect data based on the recovery data.

  If it is determined in S804 that the recovery data has not been received from the CU 3, it is determined whether or not a point reading request command specifying the C-ID has been received from the POS 810. (S808). In POS 810, when a card that the player has forcibly ejected at the time of failure of CU3 is accepted and a predetermined operation is performed, the card corresponds to the C-ID of the card, and in S801 the read permission state A point reading request command requesting to read the stored point storing information is transmitted to the upper server 801. In S808, it is determined whether or not such a point reading request command is received.

  If it is determined in S808 that the command for requesting reading of points has not been received, the process ends. On the other hand, when it is determined in S808 that the point reading request command has been received, the point storing information corresponding to the C-ID specified by the point reading request command is transmitted to the POS 810. (S810). Then, the reading permission state of the stored point storage information corresponding to the C-ID is canceled, and the process ends (S811).

  The score writing process of FIG. 88 (C) is executed in POS 810 to write the latest recovered score data to the card that was forcibly ejected when the CU3 failed and brought by the player. The

  In the point writing process, for a card that is inserted into the card reader / writer unit and is to be processed, a card for requesting that the latest score be written to the card that is forcibly ejected when the CU 3 fails. It is determined whether a point writing request operation has been performed on the operation unit of POS 810 (S901). If it is determined in S901 that a point writing request operation has been performed, a point reading request command specifying the C-ID is transmitted to the upper server 801 (S902), and the process ends. As described above, when the score reading request command is transmitted, the host server 801 performs the processing of S809 to S811 described above, and the score storage information corresponding to the C-ID is set in the read permission state. The stored point storage information is transmitted to the POS 810.

  If it is determined in S901 that no point writing request operation has been performed, is it time to receive the point storage information transmitted from the host server 801 in response to the point reading request command? It is determined whether or not (S903). If it is determined in S903 that the received point storage information is not received, the process ends. On the other hand, if it is determined in S903 that the received point storage information is being received, the received point storage information is written in the card received as described above (S904), and the process ends. . As described above, the card that is forcibly ejected by the processing at the time of the failure of the CU 3 is brought to the POS 810 by the player, and is received by the card reader / writer unit at the POS 810. The latest stored point information updated by the above is read from the host server 801 and written by the POS 810. Thereby, when CU3 breaks down, since the latest score storage information is written by POS810 via the high-order server 801, it can prevent a player from being disadvantaged. Further, it is possible to prevent the points due to the recovery data from being written to another card after the exchange of the CU3.

  In addition to the POS 810, the latest stored point information stored in the higher-level server 801 when the CU 3 has failed, for example, in other devices having a card reader / writer unit (card accepting means) such as other CU 3 It may be written on a card. Further, the latest score storage information stored in the upper server 801 may be written in the CU 3 after replacement of the failed CU 3. In these cases, in the device that writes the latest score storage information stored in the host server 801, the same processing as the score writing processing in the POS 810 is performed.

  Further, the host server 801 used for the control at the time of CU failure may be a server having a point management function, may be an independent single function server as the point management server, and other functions such as a security management function. It may be a multi-function server having both the management function and the point management function.

  In addition, as control for recording the score at the time of CU3 failure to the player-owned card via the upper server 801 using a predetermined card receiving means, the recovery data transmitted from the failed CU3 to the upper server 801 The stored point information stored in the server 801 may be transmitted to the POS 810 and stored in the POS 810 without being updated. In that case, when an operation for designating writing of a score is performed on the operation unit at the POS 810, the C-ID of the recovery data stored in the POS 810 matches the C-ID of the card received by the POS 810. The point storage information specified by the recovery data is written to the card as the point data, and the point storage information data is transmitted to the upper server 801 together with the C-ID data. The server 801 may update the stored point information of the C-ID to the received data. In this way, it is possible to improve the security of the stored point information managed by the upper server 801 by incorrect data such as illegal data. In addition, control is performed to display the score at the time of CU3 failure on the display unit (predetermined display unit such as the display 54, variable display device, etc.) of the P table 2, and up to the P table 2 on which the score at the time of the failure is displayed The clerk goes to see the display of the score, confirms the score at the time of failure, and the clerk manually inputs the confirmed score at the POS 801, so that the card accepted by the POS 801 (the CU 3 is accepted when a failure occurs) The card may be written on the card. In that case, after the score is written on the card, the manually input score is transmitted from the POS 801 to the host server 801. The host server 801 stores the manually input score that has been transmitted in this way, separately from the score storage information, and based on the manually input score that has been transmitted. Update stored information. In this way, it is possible to manage the history in which the point storage information has been changed due to a failure based on the data stored in the separate management. In the case where the POS terminal is portable, control is performed to display the points at the time of CU3 failure on the display unit (predetermined display unit such as the display unit 54 and the variable display device) of the P unit 2. The clerk takes the POS terminal to the P stand 2 where the score at the time of the failure is displayed, and in that case, by manually inputting the score at the POS terminal while the clerk looks at the displayed score, You may make it write the said score on the card | curd received in the POS terminal (The card | curd received in CU3 at the time of failure occurrence). The recovery data is temporarily stored in the host server 801 without updating the score storage information stored in the host server 801, and the score read request information is transmitted from the POS 810. , It may be transmitted to the POS 810.

  In addition, at the time of CU3 failure, the data of the points that have not been transmitted from the P unit 2 to the CU3 (data when the points were updated by the P unit 2 during the game but the update data has not yet been transmitted to the CU3) Is present, the display unit (predetermined display unit such as the display 54 and the variable display device) of the P table 2 is controlled to display the data of the unsent points, and the unsent at the time of failure The clerk goes to P display 2 where the data is displayed to see the display of the score, confirms the unsent score at the time of failure, and manually inputs the confirmed score at the POS 801, and is accepted by the POS 801. Alternatively, the number of points recorded on the card (card received by the CU 3 at the time of failure) may be added and updated with the manually input points to correct the number of points. In that case, after the score is written on the card, the manually input score is transmitted from the POS 801 to the host server 801. The host server 801 stores the manually input score that has been transmitted in this way, separately from the score storage information, and based on the manually input score that has been transmitted. The stored information is added and updated.

  Next, a slot machine will be described as another example of the gaming machine. Referring to FIG. 89, in slot machine 2S, front door 2b is provided so as to be openable and closable with respect to main body frame 2a with its left edge as the center of swing.

  A pair of upper and lower engaging protrusions 6aS and 6bS are provided in the vicinity of the edge of the front door 2bS opposite to the swing center. The engaging protrusions 6aS and 6bS are pressed downward by a spring (not shown). On the other hand, engagement receiving pieces 7aS and 7bS are provided at positions of the main body frame 2aS facing the engagement protrusions 6aS and 6bS. When the opened front door 2bS is pressed against the main body frame 2aS, the engaging protrusions 6aS and 6bS get over the engaging receiving pieces 7aS and 7bS, and the engaging protrusions 6aS and 6bS are moved downward by the biasing force of the spring in the state of getting over. Move and become locked.

  A front door opening solenoid 110 (not shown) is provided on the back surface side of the front door 2bS. When the front door opening solenoid 110 is excited, a pair of upper and lower engagements against the spring biasing force. The protrusions 6aS and 6bS are pushed upward, and as a result, the engagement protrusions 6aS and 6bS are disengaged from the engagement receiving pieces 7aS and 7bS to be unlocked, and the front door 2b is opened.

  A front door closing detector 112 (not shown) is provided at a position in contact with the front door 2bS in the upper part of the main body frame 2aS, and it is detected that the front door 2bS is pressed against the main body frame 2aS and is locked. Is done.

  Next, with reference to FIG. 90, main data among various data stored on each of the CU side and the S platform side and its transmission / reception mode will be described.

  In the present embodiment, on the CU side, the fluctuation of the number of points on the S platform is calculated and the current number of points is managed. On the S side, the current number of points is calculated and stored. However, on the S side, the number of points is only to prevent a new game from being started as early as possible when the number of points is less than the minimum number required for setting the number of bets (for example, 0). It is a secondary thing used for. In the present embodiment, since the main management of the number of points is performed on the CU side, it is not necessary to provide a function for strictly managing the number of points on the S platform side, and the cost of the S platform is reduced as much as possible. Can be suppressed.

  In particular, compared to the CU, the S units have a shorter replacement cycle at the game hall and are replaced early. Therefore, there is an advantage that the running cost of the game hall where the S machines are introduced can be reduced by providing the CU side with the main management function related to the number of points on the S machines side to suppress the costs on the S machines side. is there.

  FIG. 90 shows RAM storage data provided in the CU-side main control unit 323 and RAM storage data mounted in the S-side payout control unit 117. First, when the power is turned on with the S units (slot machine 2S) and the CU (card unit 3) being electrically connected for the first time after being installed in the amusement hall, the payout control unit 117 on the S unit side The main chip ID is transmitted from the main control board 116, the main chip ID is transmitted to the CU side, and the payout chip ID stored in the payout control unit 117 is transmitted to the CU side.

  On the CU side, the transmitted main chip ID and payout chip ID are stored. Next, connection time, that is, data of the time when the CU side and the S side are connected and communication is started is transmitted from the CU side to the S side, and the transmitted connection time is stored on the S side. .

  In this state, three pieces of information of the main chip ID, the payout chip ID, and the connection time identified on the CU side are stored on the CU side and the S platform side. When the power is turned on thereafter, the three pieces of information, that is, the main chip ID, the payout chip ID, and the previous connection time data are transmitted from the S side to the CU side.

  On the CU side, the transmitted data and the already stored data are collated, and it is determined whether or not the same S units as in the previous time are connected. Note that the connection time data is transmitted from the CU side to the S side when new power is turned on and communication between the CU side and the S side is started. Is stored on the S side.

  Each time an operation instruction and an operation response are transmitted between the CU side and the S platform side, the sequence number (SQN) is incremented by “1” on the CU side and the S platform side, and the sequence number is updated on the CU side. And S side. The SQN is a communication number for checking whether or not the communication is properly performed by updating the number every time data is transmitted / received between the CU and the S platform. SQN is a number updated at the end of the communication number to be updated.

  A specific aspect of SQN backup in the CU and S units in the present embodiment will be described. The CU backs up and stores the SQN transmitted to the S units in response to the operation instruction, and then receives the SQN from the S units and rewrites and stores the SQN stored in the backup with the received SQN. When the next operation instruction is transmitted, the SQN stored in the backup is updated by 1 and transmitted to the S units, and the transmitted SQN is stored in the backup. The CU repeats such processing.

  Similarly, in the S unit, the SQN received from the CU by the operation instruction is backed up and stored, and when the operation response is transmitted from the S unit to the CU next time, the SQN stored in the backup is updated by 1 and transmitted. The transmitted SQN is stored as a backup. When the next operation response is received, the SQN stored in the backup is rewritten and stored in the received SQN. Such processing is repeated for the S units.

  And when communication interruption occurs during communication, SQN is backed up and stored until communication reconnection. On the S side, the operation response is always sent regardless of the occurrence time of communication interruption. Therefore, the SQN stored as a backup until communication reconnection is always the SQN transmitted last. On the other hand, since the CU side is in a state in which an operation instruction has been transmitted or an operation instruction has been received in accordance with the timing of communication disconnection, the SQN stored in the backup until communication reconnection is transmitted last. Either the last received or last received.

  For example, an operation instruction is transmitted from the CU side to the S platform side, and the sequence number n at that time is transmitted, and the transmitted sequence number n is stored on the S platform side. When an operation response is returned from the S platform to the CU side, the stored sequence number n added by 1 (n + 1) is also transmitted. On the CU side, since the returned sequence number n + 1 is incremented by 1 from the already stored sequence number n, it is determined that data communication has been performed normally. The n + 2 sequence number is sent to the S side.

  Next, the current point-related information (point-related information being counted) is transmitted from the S platform to the CU side. This current point related information is stored by each counter in the current point related information storage area of the RAM.

  As shown in FIG. 90, the current score-related information storage area of the RAM is provided with a total of four types of counters: an addition counter, a subtraction counter, an external output information counter, and a score counter. Yes.

  The addition number counter is a counter for counting the number of points to be added in accordance with the occurrence of a prize. When a winning occurs in the S units, an addition number signal that can specify the number of points added is transmitted from the main control board 116 to the payout control unit 117. The payout control unit 117 adds and updates the addition number counter based on the addition number signal.

  The subtraction number counter is a counter for counting the number of points to be subtracted according to the betting number setting. When a bet number setting operation is detected, a bet number setting signal is transmitted from the main control board 116 to the payout control unit 117. The payout control unit 117 adds and updates the subtraction number counter based on the betting number setting signal.

  The external output information counter is a counter for counting the number of times the game state has changed. The external output information counter includes a counter that counts the number of bets set by operating the single BET switch 500 or the MAXBET switch 600, a counter that counts up when the reels 2L, 2C, and 2R start rotating, and a start operation. A counter that counts the internal winning combination for each winning combination when the internal lottery is executed, a counter that counts the operation according to the first to third stop operations when the reel stop operation is performed, and the display result is fixed A counter that counts up at the time, a counter that counts up according to the gaming state when the gaming state changes, and a counter that counts up according to the error type when an error occurs are included.

  Note that counters that count up for each gaming state when the gaming state changes include a counter corresponding to BB, a counter corresponding to RB, a counter corresponding to RT, and the like. The payout control unit 117 adds and updates the corresponding external output information counter based on various external output information transmitted from the main control board 116.

  The score counter is a counter for storing the score (total score) of the player at the current time. The payout control unit 117 adds and updates the point counter by the addition amount of the addition number counter when adding and updating the addition number counter, and updates the point counter by the addition amount of the subtraction number counter when adding and updating the subtraction number counter. Subtract update.

  A command requesting data transmission is transmitted from the CU to the S units at regular time intervals. The S units transmit the values of the above four types of counters (addition number counter, subtraction number counter, external output information counter, and score point counter) to the CU at the timing of receiving the command. Furthermore, the S units back up the counter values of the three types of the four types of counters excluding the point number counter in the storage area of “previous point related information” every time data is transmitted.

  That is, the value of the addition counter is “addition number”, the value of the subtraction counter is “subtraction number”, the value of the external output information counter is “external output information”, Stored in the area. In addition, when storing in the storage area, the data stored before that is erased. That is, new data is overwritten and saved (rewritten) in the storage area of “previous holding point related information”.

  The addition number counter, subtraction number counter, and external output information counter whose counter values are backed up in the storage area of “previous holding point related information” are then initialized (cleared to 0) to prepare for the next data count. It is done.

  As a result, the addition number counter, the subtraction number counter, and the external output information counter change the amount of data (points, external output information) since the last data transmission to the CU (untransmitted to the CU). Data) is stored. When the data transmission request is received from the CU next time, the amount of change in data from when the data transmission request was last received until this time when the data transmission request is received is sent to the CU. Become. On the other hand, as described above, the total number of points at the current stage is stored in the point counter that is not initialized every time data is transmitted. Each time a data transmission request is received from the CU, the total number of points at the current stage is transmitted to the CU. That is, each time the S unit receives a command instructing transmission of the data change amount, the S unit transmits the data change amount from the previous reception of the command to the reception of the current change.

  In other words, the data of addition number, subtraction number, and external output information, which is the current score related information transmitted to the CU immediately before in the storage area of the previous score related information (current score related information transmitted immediately before). Is stored as backup data. This backup data includes not only the value of each current counter but also the value of each previous counter that was not transmitted in the next transmission when the current holding point related information is not transmitted from the S side to the CU side. It is intended to enable transmission.

  On the CU side, a total addition number (addition total), a total subtraction number (subtraction total), an external output information total, and a score are stored in a total data storage area in the RAM.

  The CU updates the total addition number and the number of points based on the value of the addition number counter transmitted from the S platform. Further, the total subtraction number and the number of points are updated based on the value of the subtraction number counter transmitted from the S platform. Furthermore, the cumulative number of external output information is updated based on the value of the external output information counter transmitted from the S units. The external output information cumulative number is updated for each type of external output information counter. As a result, on the CU side, according to “number of bets”, “reel start”, “internal winning by winning combination”, “first to third stop operation”, “display result”, “game state change”, The number (number of times) is accumulated.

  In this way, the CU can manage the latest score by updating the score based on the current score-related information transmitted from the S units one by one. Similarly, the CU can manage the latest information by updating the total number of additions, the total number of subtractions, and the total number of external output information with the current point-related information transmitted from the S units one by one. Become.

  Note that the CU receives the count value of the score counter in addition to the values of the addition counter and the subtraction counter from the S side, but the score stored by itself is stored in the addition counter and the subtraction counter. Updating based on the value, the count value of the point counter sent from the S platform side is not used. For this reason, even if the number of points sent from the S platform does not match the number of scores managed on the CU side, the score on the CU side is updated with the number of scores sent from the S platform. It will never be done.

  Further, the CU collates the value of the score counter transmitted from the S platform with the current score updated on the CU side, and determines whether or not they match.

  The CU sends a normal (normal) operation request (command) and a normal (normal) operation response (with normal operation) (provided that a match (confirmation confirmation) has been made) Continue to receive (response). On the other hand, when it is determined that they do not match, the CU performs control to shift to an error state.

  As control for shifting to the error state, for example, error notification is performed by the display 312 or an error notification signal indicating that an error has occurred is transmitted to the hall management computer 1 (in this case, the hall management computer). Error notification by 1) may be performed), or a predetermined notification for encouraging an artificial response by an attendant may be considered.

  Alternatively, when it is determined that they do not match, the CU may generate a command for instructing the number of points to be corrected to the number of points managed by the CU side, and transmit the command to the S units. Conceivable. In this case, the S units are provided with a function of correcting the number of points stored therein according to the correction instruction command. The correction instruction command may be a command specifying the number of points managed on the CU side, or the difference between the number of points managed on the CU side and the number of points stored on the S platform side. It is good also as a command which shows.

  In this way, the CU receives the values of various counters transmitted from the S platform, and calculates and manages the current number of points based on the value of the addition / subtraction number counter in particular, and manages it. have. For this reason, it is not necessary to provide a main management function for the S units. Accordingly, the manufacturing cost of the gaming machine can be reduced. In the present embodiment, for the purpose of allowing the game to be immediately prohibited when the score becomes 0, the score is also stored on the S platform side. However, a score counter for storing the score on the S side may not be provided.

  The CU does not match the function of performing the score number coincidence determination process for determining whether or not they match by comparing the calculated current score number with the value of the score counter transmitted from the S platform. It sometimes has a function of performing control to shift to an error state (error control at mismatch).

  As described above, in the present embodiment, the score is stored on the S side, but it can be determined whether or not the score matches the score stored and stored on the CU side. (CU side function). Therefore, even if a situation occurs in which the number of points stored on the gaming machine side does not coincide with the number of points stored on the CU side due to fraud or other circumstances, it can be checked. Here, the determination function is provided on the CU side. For example, the number of points stored on the CU side and the number of points stored on the S platform side by the hall management computer 1 connected to the CU. May be received to determine whether or not both are consistent.

  As shown in FIG. 90, the CU further includes a storage area for storing a medal and a storage area for storing a card balance of the accepted (inserted) prepaid card (game card). The main control unit 323 of the CU subtracts a predetermined number of stored medals from a storage area for storing stored medals in response to an input requesting the use of stored medals (for example, pressing input of a replay button 319 provided on the CU). To do. In addition, the main control unit 323 of the CU subtracts a predetermined value from a storage area for storing the card balance in response to an input requesting use of the card balance (for example, pressing input of the lending button 321).

  In addition, when the player performs an operation for deducting the value from the player's own gaming value (for example, prepaid balance, points recorded on the card, or the number of stored medals) and using it for the game, An addition request number for adding the number of points to be deducted to the point number counter is transmitted from the CU side to the S platform side. In response to this, the S platform side adds and updates the score counter.

  On the other hand, when an operation for ordering a so-called wagon service, in which a player-owned game value is withdrawn and exchanged for a drink or the like, is executed, the number of subtraction requests for the player-owned game value is received from the CU side. S is sent to the S side. In response to this, the S platform side subtracts and updates the score counter.

  FIG. 91 is an explanatory diagram corresponding to the storage control of game history data in the P units and the CU shown in FIG. 3, and is a diagram showing the storage control of game history data in the S units and the CU. The same control as in FIG. 3 is performed, and instead of the P units, the S units are used. Since others are the same, here, only the drawings are disclosed and the repeated description is omitted.

Next, modifications, feature points, and the like in the embodiment described above will be described below.
(1) FIG. 92 shows a modification of the card unit 3 shown in FIG. 1 and shows the card unit 3 incorporated in the pachinko machine 2.

  The card unit 3 is incorporated at a position below the game area 27 as indicated by a broken line. A player can insert a card from a card insertion / discharge port 309 provided in the card unit 3, and a player can insert a bill from a bill insertion port 302 provided in the card unit 3. ing. Further, the indicator 312 of the card unit 3 is provided next to the indicator 54 of the gaming machine so that the player can visually recognize it. In the figure, 320 is an IR photosensitive unit, 319 is a replay button, 321 is a lending button, 322 is a return button, and 798 is a call button.

  The modified example of the card unit shown in FIG. 92 shows that incorporated in the pachinko machine 2 as an example of the gaming machine, but the gaming machine to be incorporated is not limited to the pachinko machine 2, and FIG. 89 to FIG. The slot machine 2S shown in 91 may be used.

  (2) Next, a modification of the embodiment described with reference to FIGS. 3, 23, and 91 will be described. FIG. 93 is an explanatory diagram for describing a modification of the control mode for storing the game history data on the CU side and the P platform side shown in FIG. 3. Here, differences from FIGS. 3, 23, and 91 will be mainly described.

  In the case of FIG. 3, the game history data is cleared by operating the RAM clear switch 293 provided on the P base 2. However, in the modification shown in FIG. 93, the hall management computer 1 The game history data is cleared on the basis of a clear command transmitted from CU3 to CU3. Clearing of the game history data needs to be performed for each gaming machine installed in the game hall before the game hall starts business. Therefore, it is more convenient to clear the game history data by simultaneous delivery of the clear command signal from the hall management computer 1 to each CU 3 instead of the operation of the RAM clear switch installed for each gaming machine.

  When a hall attendant operates the hall management computer 1 or the clock function built in the hall management computer 1 reaches a predetermined time before the game hall opening time, the hall management computer 1 A clear command signal is simultaneously distributed to each CU3. The CU 3 that has received the clear command signal erases the memory in the P game history data storage unit of the data storage unit 392 by the action of the clear processing unit provided in the game history data management unit 391. As a result, the display of the current P game history data on the display 312 is erased (cleared). Further, a clear command signal is transmitted to the game history data management unit 291 of the P table 2 by the operation of the clear processing unit.

  The game history data management unit 291 that has received the clear command signal deletes the data stored in the backup data storage unit of the display effect control unit 292 by the action of the clear processing unit, and the P machine game history data. Of the storage data for 10 days in the storage unit, the oldest storage data is erased, and the remaining 9 days of storage data is shifted and stored one by one in the storage area of the old day. As a result, the newest storage area (current day storage area) becomes an empty area. Today's game history data is stored in this empty area (current day storage area).

  Further, in the modification shown in FIG. 93, after the player leaves the seat, the identity of the player who has left the seat and the player who will play the next game is determined on the CU3 side. The C-ID, which is the player identification information of the player who has left the seat, is stored in the current player game history data storage unit of the data storage unit 392. Thereafter, when the player inserts a card into the CU 3 to play again in the P table 2 that has left the seat, the information of the inserted card is read and the C-ID included in the inserted card information and the current player The C-ID of the player who has left the seat stored in the game history data storage unit is compared to determine whether or not they match. When it is determined that the two match, the same command is transmitted from the game history data management unit 391 of the CU3 to the game history data management unit 291 of the P unit 2, while when it is determined that they do not match The difference command is sent.

  The game history data management unit 291 that has received the same / difference command receives the C-ID and the game history data stored in the backup data storage unit in the current player game history data storage unit if they are the same command. Control to restore and store. On the other hand, when a difference command is received, control is performed to erase backup data stored in the backup data storage unit.

  FIG. 94 is an explanatory diagram of a modification corresponding to the storage control of game history data in the P units and the CU shown in FIG. 93, and is a diagram showing storage control of game history data in the S units and the CU. The same control as in FIG. 92 is performed, and the difference is that the S units are used instead of the P units. Since others are the same, here, only the drawings are disclosed and the repeated description is omitted. 93 and 94, as in FIGS. 3 and 91 described above, the identity of the player is confirmed only when the C-ID of the membership card is read instead of the visitor card, and the current player's game history Store it in the data and take over the game history and aggregate it.

  FIG. 95 is a flowchart showing control of processing at the time of insertion in the modification shown in FIGS. 93 and 94. The control shown in FIG. 95 is obtained by changing a part of the control shown in FIG. 23. The same control steps are given the same step numbers, and differences will be mainly described here. Also in FIG. 95, solid arrows indicate the flow of control, and double-pointed arrows indicate the flow of information to be transmitted. In FIG. 95, each step of S1, S2, S4 to S7, S20, and S21 is executed by the CU, and P22 is executed by S22, S10, S12, S13, and S15.

  If it is determined in S1 that it is not interrupted, the control advances to S20, and the C-IDs of the card inserted this time and the card inserted last time are compared to determine whether or not they match. Next, in S21, control based on the determination result is transmitted to the P units. Specifically, in the case of a determination result that matches, the same command is transmitted to the P units in the case of a determination result that does not match.

  In the P machines, whether or not the transmitted command is a coincidence command is determined in S22, and the game history data in the backup area (backup data storage unit) is stored in the current area (on the condition that they coincide with each other). Control is returned to the current player game history data storage unit) and the update of game history data is resumed (S12).

  In the modification shown in FIG. 95, the control in S14 shown in FIG. 23 is not executed.

  In this modified example, instead of transmitting the same command as described above, the game history data a stored in the current area (current player game history data storage unit) of the data storage unit 392 is used as a gaming machine (P machine 2 or S May be transmitted to the stand 2S). The gaming machine (P 2 or S 2S) that has received the game history data a stores the received game history data a in the current area (current player game history data storage unit) and takes over the game history data a. To add and update new game history data. In this case, a backup area (backup data storage unit) is unnecessary in the gaming machine (P 2 or S 2S).

(3) The above-described embodiment discloses an invention having the following configuration.
A gaming system comprising a gaming machine (pachinko machine 2, slot machine 2S) in which a game is played by a player, and a gaming device (card unit 3) that is communicably connected to the gaming machine,
The gaming machine is
First control means (main control boards 16, 116) for controlling the gaming machine;
Second control means (LSI 799, 999) communicatively connected to the first control means,
The first control means includes
Error determination means (CPU of the main control boards 16 and 116) for determining an error that occurs during the control of the gaming machine;
Abnormality notification control means (CPU of main control boards 16 and 116, I / O port) for performing control to notify abnormality when occurrence of an error is determined by the error determination means,
The second control means includes
Communicatively connected to the gaming device (connected by connectors 380, 20 or connectors 330, 220);
Including an abnormality determination means (authentication sequence of FIG. 8) for determining an abnormality of the first control means;
When the abnormality determining means determines that an abnormality has occurred in the first control means, output means (notifying the abnormality of the main control boards 16, 116) that outputs abnormality notification information notifying that an abnormality has occurred to the gaming device. The detected payout control units 17 and 117 notify the CU communication control unit 80 from the P unit communication control unit 81 and the S unit communication control unit 82),
The gaming device performs control for notifying an abnormality when the abnormality notification information is received.

  According to such a configuration, when the error occurs during the control of the gaming machine, the abnormality of the first control means itself having a control function for notifying the abnormality is determined by the second control means, and the first control means The first control having an abnormality notification control function when an abnormality occurs in order to perform control for notifying the abnormality in the gaming apparatus that the abnormality of the control means itself has occurred is output from the first control means to the gaming apparatus. Even when there is an abnormality in the means itself, the abnormality notification control can be performed satisfactorily.

  (4) In the above embodiment, the CU communication control unit 80 and the P unit communication control unit 81 receive the information sent from the main control unit 323 and the payout control unit 17 and use the information as it is in the P unit or Although it transmits to CU, the received information may be processed (protocol conversion, serial / parallel conversion, etc.), and the processed information may be transmitted.

  (5) The authentication sequence and the business message sequence in FIGS. 7 to 20 are controls of the main control unit 323 and the communication control unit 80, but the control of the authentication sequence and the business message sequence in FIGS. This may be performed by the payout control unit 17 and the P-unit communication control unit 81 of the pachinko machine 2, or may be performed by the payout control unit 117 and the S-unit communication control unit 82 of the slot machine 2S. It may be performed in other gaming machines (card issuing device, clearing device, hall management device, prize exchange device, etc.) installed in.

  Further, the business message sequence shown in FIG. 20 may be performed, for example, between an island computer connected to the hall management computer 1 and a gaming machine computer, and further includes a main control unit and a communication control unit. In the Z counter, the communication control unit is connected to the prize management device, and may be performed between the main control unit and the communication control unit. Furthermore, for example, a communication control unit connected to the storage management device may be provided in the card unit, and the business message sequence shown in FIG. 20 may be executed between the communication control unit and the main control unit of the card unit.

  (6) The BB serial ID authentication sequence shown in FIG. 16 is authentication using two types of SIDs, that is, the SID of the main control unit and the SID of the CU communication control unit, but one type of SID (for example, CU SID). ) May be used to authenticate the main control unit and the CU communication control unit. In this case, authentication that the same SID is stored is performed.

  (7) In the above embodiment, the number of game balls is displayed on the display 312 provided on the CU side, and the number of game balls is displayed on the display 54 on the P platform side. Yes. When the number of game balls is displayed by a display on the CU side, there is an advantage that the number of game balls can be displayed by applying the CU in the present embodiment to P units without a display unit. On the other hand, when the game ball number display unit is provided on the P platform side, the display control may be performed on the CU side. Alternatively, the display control may be performed on the P platform side. When display control is performed on the P platform side, the number of game balls managed by the CU is displayed on the game ball number display section by receiving information on the number of game balls to be displayed from the CU side. It becomes possible to do. In addition, when display control is performed on the P platform side in this way, there is an advantage that it is possible to display the number of game balls having a high decorative (rendering) value. When display control is performed on the P platform side, information on the number of game balls to be displayed is not received from the CU side, but based on the value of the game ball counter stored in the P platform itself, It is good also as what controls display of a number.

  (8) In FIG. 32, the P side is provided with a 10-second wait time for the floating ball processing waiting time. Instead, on the P side, the number of fired balls−the number of foul balls−the out ball It is also possible to determine that the number of winning balls = 0 or the number of fired balls−the number of foul balls−the number of balls detected by the out ball detection switch = 0 to determine that the processing of the floating balls has ended. Good.

  (9) In the above-described embodiment, in the P units that have received the prohibition request command, the driving of the hitting ball motor (not shown) is stopped to stop hitting the ball, and the variable display device that is changing is stopped or In the above example, the variable display device is not stopped until the change based on the start winning memory, but the change of the variable display device may be stopped instead.

  (10) In the above-described embodiment, when a game ball is subtracted by a wagon service or the like, as described based on FIG. However, the present invention is not limited to this, and when the number of game balls stored on the CU side is sufficiently larger than the number of balls requested for subtraction (for example, more than 30 balls), the CU does not wait for a response from the P unit. The game ball may be subtracted by the side alone, and then an operation instruction for a subtraction request may be transmitted to the P units.

  (11) In the above-described embodiment, a command is sent from the CU to the P machine and the P machine responds to the response to the CU. Conversely, a command is sent from the P machine to the CU. Then, the communication form in which the CU returns a response to the P units in response thereto may be used.

  Specifically, the command (operation instruction) generated by the payout control units 17 and 117 is transmitted to the P unit communication control unit 81 and the S unit communication control unit 82, and the command (operation instruction) is transmitted to the P unit communication control unit. 81, transmitted from the S-unit communication control unit 82 to the CU. A response (operation response) corresponding to the command (operation instruction) is returned from the CU to the P unit communication control unit 81 and the S unit communication control unit 82, and the response (operation response) is returned to the P unit communication control unit 81 and S unit. The communication control unit 82 transmits to the payout control units 17 and 117.

  In this case, the payout controllers 17 and 117 execute command retransmission (not shown). That is, when the payout control units 17 and 117 cannot receive a response from the P-unit communication control unit 81 and the S-unit communication control unit 82 for 1 second after transmitting the command, the command is transmitted to the P-unit communication control unit 81 and the S-unit communication. Retransmits to the control unit 82. Furthermore, the payout control units 17 and 117 also execute the transmission of the communication status request and the communication status check shown in FIGS. 20 (a) and 20 (b). That is, the payout control units 17 and 117 transmit an operation instruction to the P unit communication control unit 81 and the S unit communication control unit 82 and then transmit a communication state request, and the P unit communication control unit 81 and the S unit communication control unit 82. The communication state is confirmed based on the communication state response returned from. When it is determined that the confirmation result is abnormal, an operation instruction is transmitted again, a communication state request is transmitted, and a communication state confirmation retry is executed.

  (12) Furthermore, in the above-described embodiment, communication is performed between the CU and the P platform at regular intervals (for example, 200 ms). Instead, when the necessity of communication occurs, the CU Alternatively, communication may be performed by transmitting data from one of the P units to the other.

  (13) In the above-described embodiment, an operation response including a rejection signal that does not comply with a request such as addition rejection ON, subtraction rejection ON, clear rejection ON, etc. is returned from the P platform to the CU. Thus, it is determined that the request is rejected based on the rejection ON. However, the present invention is not limited to this, and instead of the P units returning a rejection ON operation response, an operation response including addition / subtraction ball numbers and game ball data not complying with the request from the CU is returned to the CU. On the side, it is possible to determine whether the returned data (the number of added / subtracted balls, game balls, etc.) is in accordance with the request, and thereby determine whether the request has been rejected. Good.

  (14) In the above-described embodiment, when a power interruption at the CU or a communication interruption between the CU and the P base is detected, the ball hitting is stopped on the P base side and the play is stopped. However, the present invention is not limited to this, and control may be performed so that the game can be continued without stopping hitting on the P platform side. In that case, the P subtraction data and cumulative number of starting and subtracting balls generated along with the game that was continued from the time when the communication interruption occurred until the abnormality was recovered and started up are stored on the P platform side. In addition, at the time of activation, the data and game ball data may be transmitted to the CU to correct the backup value of the data on the CU side.

  (15) In the above-described embodiment, when the command from the CU is not transmitted for a predetermined time (for example, 4 seconds), the P platform determines that the communication is disconnected by a predetermined process. However, the communication interruption may be determined by the following method.

  A connection detector for detecting whether or not the pachinko machine 2 and the card unit 3 are electrically connected is provided in the pachinko machine 2. As described above, the CU communication control unit 80 and the payout control unit 17 are connected by a signal line. In addition to the signal line, a predetermined voltage (for example, 5 V) from the card unit 3 is input to the pachinko machine 2 side. A connection detection signal line is provided. The connection detection signal line and the signal line between the CU communication control unit 80 and the payout control unit 17 are formed of the same cable, and the cable unit is disconnected or the connectors 330 and 20 are detached, and the card unit 3 is also disconnected. Since the voltage of the connection detection signal line becomes 0 V when the power is cut off, the connection detector detects this, and the detection signal is input to the payout control unit 17. The payout control unit 17 determines that the disconnection of the cable, the disconnection of the connectors 330 and 20, and the power supply of the card unit 3 have been disconnected due to the input of the detection signal.

  (16) In the process of FIG. 21, when the P platform receives a communication start request (correction request) including correction ON, the P platform is programmed so that the correction request cannot be rejected by the P platform. However, there is a case where a serious error that cannot be corrected such as a game ball has occurred in the P units even though a communication start request (correction request) including correction ON is received. In consideration of such a severe error state, after transmitting a communication start request (correction request) including correction ON on the CU side, the content of the operation response transmitted from the P unit is checked, and the P unit side It may be determined whether or not the game ball or the like has been corrected correctly, and if it has not been corrected, control for shifting to an error state may be performed.

  That is, when the CU determines that a game machine (for example, P machines) cannot add game balls or the like after receiving a communication start request (correction request) including correction ON in FIG. Error control means for performing control to shift to a specified error state.

  As control for shifting to the error state, for example, a severe error notification is performed by the display 312 and a notification that a serious error has occurred is given to the hall management computer 1 to notify the error by the hall management computer 1. It may be possible to promote artificial responses by staff.

(17) On the P platform side, the number of additional balls may be counted as follows.
Counters A and B are provided on the P platform side as counters for counting the number of balls to be added. First, the number of balls to be added is counted by the counter A. When it is the transmission timing of the number of added balls, the count value of the counter A is transmitted to the CU. Thereafter, the value of the counter A is maintained, and thereafter, the number of additional balls is counted by the counter B. If it is the transmission timing of the number of added balls, the count value of the counter B is transmitted to the CU. Thereafter, the value of the counter B is maintained, while the count value of the counter A is cleared to 0. Thereafter, the counter A counts the number of added balls. Thereafter, the above counting by the counters A and B is repeated.

  The above counting method may be used for counting the number of subtraction balls on the P platform side. Alternatively, it may be used for counting the number of winnings at the starting port 1 and the number of winnings at the starting port 2.

  (18) The P platform does not transmit two pieces of information of the number of added balls and the number of subtracted balls to the CU, but sends one information after adding / subtracting the number of added balls and the number of subtracted balls to the CU. Also good. That is, such information also constitutes “update information that can specify the change amount”.

  (19) The communication method is not limited to the command-response method described above. The P units may transmit ball-related information such as game balls to the CU at predetermined time intervals without waiting for a command from the CU. Alternatively, the P platform may transmit the ball related information to the CU every time a predetermined amount of information is obtained, instead of transmitting the ball related information at predetermined time intervals. For example, in the case of an additional ball, it may be configured to transmit the additional ball number to the CU every time one or two or more predetermined number of additional balls are generated.

  (20) In the present embodiment, two counters, an addition ball counter and a subtraction ball count, are provided on the P platform side. However, instead of these two counters, a single addition / subtraction counter may be used that increments according to an increase in game balls (such as winnings) and subtracts due to a decrease in game balls (such as bullet firing). In this case, the value of this one addition / subtraction counter is transmitted from the P units to the CU.

(21) This embodiment includes the following configuration.
After the gaming device transmits a command for instructing subtraction of points to the gaming machine, and before receiving a response to the command, a process for reestablishing a communication connection with the gaming machine In the process of re-establishing the communication connection, it is determined whether or not the command for instructing the subtraction of the point has reached the gaming machine based on the data transmitted from the gaming machine side. The command transmission means for canceling the instruction for subtracting the point by the command when the arrival determination means determines that the command for instructing the subtraction of the point has arrived. In order to cancel the point subtraction instruction by the command for instructing the subtraction of the points. When the command is received, whether the score has already been subtracted based on the command for instructing the subtraction of the score, or if the score is not subtracted due to lack of the score, The score corresponding to the cancellation amount of the subtraction instruction is added to the score stored in the score storage means.

  (22) In the present embodiment, a signal requesting the end of the game is input to the CU by operating the return button 322. However, the CU may be configured to be able to input a signal requesting the end of the game from a management computer or the like.

(23) The CU and the P stand may be connected so as to be communicable wirelessly instead of wired connection.
(24) By providing the function of the payout control unit 17 in the main control board 16, the payout control unit 17 may not be provided in the pachinko machine 2.

  (25) The payout control unit 17 performs control to stop driving of the ball hitting motor (not shown) when the game ball counter stored on the pachinko machine 2 side becomes zero. However, the payout control unit 17 may execute the control when the game ball counter reaches a predetermined value other than zero. For example, the player can specify and input the predetermined value in advance using a predetermined operation switch of the gaming machine. The payout control unit 17 stops the driving of the hitting ball motor (not shown) when the game ball counter reaches a predetermined value designated by the player. Thereby, the player can automatically stop the game when the remaining number of game balls reaches the number of balls designated in advance.

  (26) In the above-described embodiment, an effect unit is provided on the pachinko machine 2 side and various displays are made by the display 54. However, the pachinko machine 20 does not include this effect unit. Also good. In that case, even if a command including an operation instruction such as ON during card insertion processing, ON during addition display, ON during calculation display, ON during clear display is transmitted to the P base 2, Display control according to the command is not performed, and only the display on the CU side is displayed.

  (27) Instead of manually clearing RAM by the RAM clear switch 293 shown in FIG. 3, a clock function may be provided so that a RAM clear signal is automatically output when the game hall business start time comes. As described above, the game history data is cleared by the automatically output RAM clear signal.

  (28) In the embodiment described above, in the recovery process of the number of game history balls such as the number of symbol determinations 1, 2, the start ports 1-3, the big winning ports 1, 2, the winning ports 1-4, etc., Although control to match the data is performed, since these game history data are information managed by the P machines, the game history data is basically based on the game history data held by the P machine regardless of the match or mismatch. The CU side game history data may be controlled to be updated. However, the data of the total number of game balls, the total of added balls, and the total of subtracted balls can be matched with the stored data on the CU side.

  (29) In the embodiment described above, the transition to the trial hit mode is performed by a remote control operation by a game shop clerk, but instead of or in addition, the test hit mode is entered by inserting a test card into the CU. It may be controlled to perform the transition. Such a transition to the trial hit mode by the remote control operation can be shifted to the trial hit mode by the remote control while waiting for a customer (even during the probability change). And as a test hit mode, you may provide two types, the 1st test hit mode used as a non-business event in a game hall, and the 2nd test hit mode for confirmation after nail adjustment.

  Furthermore, in the above-described embodiment, when there are no more game balls (or points) in the test hit mode, a game ball addition command (or points addition command) is sent from the CU side to the P units (or S units). The game balls can be added by adding the game balls (or adding the number of points), but without sending the game ball addition command (or the number of points added command) from the CU side, You may control so that a game can be continued even if a game ball (or number of points) runs out.

(30) The above-mentioned C-ID is composed of fixed code data that does not change. Instead, the C-ID read from the card changes dynamically according to the reading time. An ID code may be used. When the card is inserted into the CU and the CU reads the C-ID, the CU stores the C-ID together with the reading time, and the player is based on both the reading time and the C-ID data. You may comprise so that can be specified. For example, when the CU reads the C-ID, enter the current time T to the card, in the card, C-ID encrypted _E T (C-ID) in the T, its _E T (C-ID) And T are output as a pair. The CU decodes the E _T (C-ID) with T and extracts the C-ID by performing D _T (E _T (C-ID)).

  (31) In the above-described embodiment, a player is specified based on the C-ID and it is determined whether or not the same player is playing a game. The biometric information reading means for reading the biometric information such as the fingerprint or vein of the player is provided on the CU or P base, and the identity of the player is determined based on the biometric information reading means read by the biometric information reading means. Biometric authentication may be employed.

  (32) In the above-described embodiment, as shown in FIG. 3, the data stored in the current player game history data storage unit is shifted to the backup data storage unit and stored with the return of the card. Instead, the current player game history data storage unit is switched to the backup data storage unit and the backup data storage unit is switched to the current player game history data storage unit when the card is returned. You may control as follows. In this case, the storage data of the switched current player game history data storage unit is displayed on the display 54.

  (41) In the above-described embodiment, as described with reference to FIG. 3 and the like, the C-ID matching determination is performed on the P platform side, but the matching determination may be performed on the CU side. In that case, the C-ID stored in the backup data storage unit of the P stand 2 is transmitted to the CU side, and the C-ID recorded on the inserted card is received on the CU side that received the C-ID. , And the coincidence between the read C-ID and the C-ID transmitted from the P platform is determined. When the CU 3 determines that the C-IDs do not match, it transmits a clear command to the P unit 2. In the P base 2 that has received the clear command, the data stored in the backup data storage unit is deleted.

  On the other hand, if it is determined in CU3 that the C-IDs match, the game history data stored in the backup data storage unit is returned to the current player game history data storage unit for the P unit 2 Command information for taking over the game history data and adding and updating new game history data is transmitted from the CU 3 to the P unit 2. The command information may be code data such as takeover command information or the like, but the backup game history data for taking over, that is, the game history data stored in the backup data storage unit of the P unit 2 is stored on the CU side. In addition, the backed up game history data may be transmitted to the P unit 2 as takeover command information. In that case, the backup data storage unit in the P units is not necessary.

  (33) In the above-described embodiment, as shown in FIGS. 45 to 47, FIG. 50, FIG. 51, FIG. 54, FIG. 55, FIG. Although what is performed on the P side is shown, this identity determination may be performed on the P platform side. In other words, a gaming machine having the following configuration may be used.

It is possible to play with points and has a communication unit that communicates with a gaming device that launches game media into the game area and adds points using the game value owned by the player. A game machine in which points are added according to the occurrence of
A specific means for identifying the amount of change in points according to the use in games and the occurrence of winnings,
A score storage means for storing the score;
A score update means for updating the score stored in the score storage means according to the amount of change;
Information transmission control means for performing control to transmit the update information capable of specifying the amount of change and the score stored in the score storage means from the communication unit to the gaming device;
Player specifying information storage means for storing player specifying information for specifying a player performing a game;
When communication is started by connecting to the gaming device, the player identification information read by the player identification information reading means is the same as the player identification information stored in the player identification information storage means The same determination means for determining whether or not a player is identified,
A gaming machine comprising: an identical determination result transmission control unit that performs control to transmit a determination result by the identical determination unit from the communication unit to the gaming device.

  (34) In the above-described embodiment, the C-ID is included in the operation instruction and the operation response for transmission / reception. When a different C-ID is transmitted from the P platform to the CU during the transmission / reception, it may be determined that there is an error, and control is performed so that the addition ball count and the subtraction ball count are not updated on the CU side. . When controlled in this way, there is a risk that the C-ID may be temporarily distorted due to noise during transmission and reception of commands and responses. In this case, for example, if the C-ID included in the operation response received on the CU side is different from the C-ID transmitted as a command, the CU side determines that there is an error and transmits the error. The addition / subtraction update control is not executed based on the number of added balls or the number of subtracted balls included in the motion response. As a result, when a C-ID that is not distorted by noise is transmitted from the P base side in the next command and response transmission / reception, the operation response is determined even though it is determined that the C-ID matches and is normal. The number of game balls (total number of game balls) included in the CU and the total number of game balls stored in the CU are inconsistent. In the above embodiment, in such a case, the CU stores A command for correcting the number of game balls to be transmitted is transmitted to the P units, and the number of game balls stored in the P units is rewritten to the number of stored balls on the CU side. As a result, the number of game balls of P units is rewritten to the previous number of old game balls updated based on the previous response in which the C-ID goes wrong due to noise, and the correct number of game balls is incorrect. There are cases where the number of balls is rewritten.

  In order to eliminate such an inconvenience, even if the C-ID included in the response is different from the C-ID on the CU side, it is not determined by only one response, but several times (for example, twice) It is desirable to control so as to determine that there is an abnormality only when the C-ID in the response subsequently goes wrong with the C-ID on the CU side. The following two methods are conceivable as specific methods for realizing this.

  First, as a first method, when the C-ID included in the first response is different from the C-ID on the CU side, the next command is sent directly to the P units without adding and updating SQN. Send. Then, in the P platform, as described based on FIG. 36, it is determined that the response has not reached the CU, and the previous transmission data is added to the added balls and the added balls are added. Control to transmit to the CU as the next response is performed. In the CU, if the C-ID included in the next response matches the C-ID on the CU side, the CU determines that the C-ID is appropriate, and adds the previous transmission data to the added number of balls. Based on the update control of the number of balls. As a result, it is possible to update to the correct number of game balls. On the other hand, if the C-ID included in the next response is also different from the C-ID on the CU side, the C-ID is determined to be abnormal because the C-ID is different twice in succession. Instead of updating the number of game balls based on the number of added balls or the number of subtracted balls included in the response, a predetermined error processing control may be performed thereafter.

  As a second method, the CU side adds and updates separately during C-ID mismatch, and when the correct C-ID is received, the separately added and updated data is used as the total number of game balls. Batch addition update.

The configuration of the modified example described above is summarized as follows.
The gaming device
A score storage means for storing the score;
Game device side identification information storage means for recording predetermined identification information;
Game device side identification information transmission control means for performing control to periodically transmit the identification information stored in the game device side identification information storage means to the gaming machine,
The gaming machine is
A specific means for identifying the amount of change in points according to the use in games and the occurrence of winnings,
Information transmitting means for transmitting update information capable of specifying the amount of change to the gaming device;
Gaming machine side identification information storage means for storing identification information transmitted under the control of the gaming apparatus side identification information transmission control means;
A gaming machine side identification information transmission control means for performing control to periodically transmit the identification information stored in the gaming machine side identification information storage means to the gaming device,
The gaming device is:
Information receiving means for receiving the update information;
A score update means for updating the score stored in the main score storage means based on the update information;
Consistency to determine whether or not the identification information transmitted under the control of the gaming machine side identification information transmission control means and the identification information stored in the gaming apparatus side identification information storage means are matched. A determination means;
An abnormality determination unit that performs an abnormality determination when a determination is made that the alignment determination unit is not continuously matched a predetermined number of times.
The point update means includes:
When abnormality determination is performed by the abnormality determination means, the score is updated corresponding to the total amount of change of the score in the gaming machine during the period determined to be inconsistent by the alignment determination means. Don't do it,
When it is determined that the consistency determination unit is normal based on the identification information transmitted before the abnormality determination by the abnormality determination unit is performed, the alignment determination unit determines that there is a mismatch. The points are updated based on the total amount of change of the points in the gaming machine during the period.

  According to such a configuration, even if identification information that is temporarily distorted due to noise or the like is received despite proper identification information being transmitted, it is erroneously determined as abnormal in the gaming device, and updated information is obtained. It is possible to prevent inconvenience caused by not updating the score based.

  (35) In the above-described embodiment, the game history data is re-totaled in the trial hit mode when the operation button icon such as the re-total button displayed on the display 312 is touched. Instead of or in addition, it may be controlled to re-total the game history data in the trial hit mode by detecting the opening of the glass door 6.

  (36) The contents of the above-described embodiment can be applied not only to pachinko gaming machines but also to gaming machines such as slot machines.

  Here, the pachinko gaming machine type game machine is a player-owned valuable value (prepaid balance, number of balls, or the like specified by the recording information recorded on the recording medium (card). A gaming machine that has a communication unit (P-unit communication control unit 81) that communicates with a gaming device (card unit 3) that enables the number of stored balls) to be used for gaming, and that launches gaming media into the gaming area ( Pachinko machine 2).

  In other words, with a pachinko machine type game machine, it is possible to play with points, the game medium is launched into the game area, and the game value owned by the player is increased. It is a gaming machine (pachinko machine 2) that includes a communication unit that communicates with a gaming device that uses and adds points, and that points are added according to the occurrence of a prize.

  On the other hand, a slot machine type gaming machine is a player-owned valuable value prepaid balance, number of balls, or number of balls specified by recording information received on a recording medium (card). Including a communication unit (P-unit communication control unit 81) that communicates with a gaming device (card unit 3) that can be used for gaming, and a variable display device that can change the display state. The game can be started by setting, and the display result of the variable display device is derived and displayed, so that one game is completed, and the derived display result is a predetermined specific display result. This is a gaming machine (slot machine 2S) that can sometimes win a prize.

  In other words, a slot machine type gaming machine is capable of playing with points and a communication unit that communicates with a gaming device that adds points using the player's own gaming value. (S-unit communication control unit 82) and a variable display device whose display state can be changed, the game can be started by setting the number of bets for one game, and the display result of the variable display device is When one game is completed by the derivation display, a winning can be generated when the derivation-displayed display result becomes a specific display result determined in advance, and points are added according to the occurrence of the winning. This is a gaming machine (slot machine 2S).

  (37) In the above-described embodiment, as described in FIGS. 2 and 90, the number of game balls and points stored by the CU and the number of game balls and points sent from the gaming machine The CU determines whether or not they match, and if they do not match, a correction command is sent to match the number of game balls and points on the gaming machine side with the number of game balls and points on the CU side. C-ID matching / mismatching may be further added as a determination criterion. For example, even if the number of game balls or points stored by the CU does not match the number of game balls or points sent from the gaming machine, it will not send a correction command by itself, and from the gaming machine When the CU determines that the transmitted C-ID does not match the C-ID stored in the CU, a correction command is transmitted. As a result, when an abnormality such as noise that causes C-ID data to be distorted occurs, a correction command is transmitted to correct the number of game balls and points on the gaming machine side to correct values. Can do.

  Further, when the CU determines that the C-ID transmitted from the gaming machine matches the C-ID stored in the CU, a correction command may be transmitted. In this way, if there is an abnormality that the number of game balls or points on the gaming machine side is out of order when the player is not changing, a correction command is sent to the number of game balls or points on the game machine side. It can be corrected to the correct value.

  (38) In the embodiment described above, the switch operation of the RAM clear switch 293 deletes the oldest stored data among the stored data for 10 days in the P game history data storage unit, and the remaining 9 days. One minute of stored data is shifted and stored in the storage area of the old day one by one. As a condition for executing the shift control of this P game history data, it is a time zone before the opening of the game hall. It may be added. That is, the shift control of the P game history data is executed on the condition that the switch operation of the RAM clear switch 293 is performed in a predetermined time zone before the game hall is opened.

  (39) In the above-described embodiment, the serial ID authentication sequence is executed between the main control unit 323 and the CU communication control unit 80. In addition, the LSIs 799 and 999 of the gaming machine and the main control board 16, 116 may be executed between the payout control units 17, 117 and the P communication control units 81, 82.

  (40) In the modification described with reference to FIGS. 93 and 94, the clear command transmitted from the hall management computer 1 is input to the CU 3, but instead or in addition to the CU 3, A process of clearing the game history data described above may be performed by providing a clear switch and operating the clear switch. Further, the game history data may be cleared by a remote control operation. Specifically, when the attendant of the game hall performs a clear operation by pointing the remote control at the IR photosensitive unit 320 of the CU3, the IR photosensitive unit 320 receives the operation signal (infrared ray) and clears the game history data. Do.

  (41) In the above embodiment, the slot machine that has no need to use a physical game medium such as a medal in the game has been described as an example of the slot machine of the point system. When such a slot machine is employed, a game medium is not required, and therefore it is not necessary to provide a game medium transport path or a game medium reservoir in the slot machine. As a result, the structure of the slot machine can be simplified, and the slot machine can be reduced in size or cost.

  However, in place of such a slot machine, a slot machine that adopts a scoring system and updates the scoring in conjunction with moving a game medium such as a medal or game ball in a predetermined direction is adopted. It is also possible to do.

  For example, a circulation path is provided for enclosing a large number of game media in the slot machine and circulating the enclosed game media in a predetermined direction. In addition, you may provide the discharge | emission / input part which can discharge | emit / input game media as needed in the predetermined location of the circulation path.

  When the point addition condition is satisfied, the slot machine adds the number of game media corresponding to the number of points to be added from the plurality of game media in the circulation path to the second from the predetermined first location in the circulation path. While moving to a location, the stored score is added and updated, and a response command for adding the score is transmitted to the CU. The CU adds and updates the stored number of points.

  Further, when the score subtraction condition is satisfied, the slot machine, from among the plurality of game media in the circulation path, the number of game media corresponding to the number of score points to be subtracted from the second location in the circulation path. While moving to one location, the stored score is subtracted and updated, and a response command for subtracting the score is transmitted to the CU. The CU subtracts and updates the stored number of points.

  Even when the subtraction condition is satisfied, the game medium may be moved from the first location to the second location as in the case where the addition condition is satisfied. Alternatively, the game medium may be moved only when the addition condition is satisfied, or the game medium may be moved only when the subtraction condition is satisfied.

  Also, the game medium moving between the first location and the second location can be seen through in order for the player to recognize that the points have been updated in response to the movement of the game media. It is desirable to provide the see-through part at a predetermined position on the front side of the slot machine.

  Further, if a plurality of movement paths for moving the game medium are provided between the first place and the second place, the possession to be updated when the addition condition or the subtraction condition is satisfied once. Game media corresponding to the number of points updated when the number of points updated is large (for example, when the number of payouts based on winnings is large, when the number of additions based on a lending command is large, or when the number of bets is a MAX value) Can be moved quickly. As a result, it is possible to prevent an uncomfortable operation such that the movement of the game medium continues in spite of the end of the update display of the points.

  Further, if the first place and the second place are arranged so that the upper part and the lower part in the vertical direction are in a relationship, the game medium is naturally moved from the first place to the second place by its own weight. It can be dropped, and the moving mechanism of the game medium can be simplified. In this case, it is assumed that the game medium is allowed to flow from the first location to the first location in both addition and subtraction update of the points. Alternatively, the game medium may be allowed to flow from the first location to the first location only in one of the addition and subtraction update of the score. Alternatively, it is also possible to provide a flow-down path for addition update of the holding point and a flow-down path for update of the subtraction of the holding point separately, and provide a perspective window for addition update visual recognition and a perspective window for subtraction update visual recognition, respectively. Good.

  In particular, when a game ball is used as the game medium, the game medium can be circulated more smoothly than when a medal is used because the game medium is spherical. As the game ball, it is conceivable to adopt a pachinko ball that is normally used in a game store. In this case, for example, if the pachinko ball 5 balls corresponds to the value of one medal of the slot machine (value of the score = 1), when the score is updated, the updated score 5 Double pachinko balls will be moved between the first location and the second location. A pachinko ball visually recognized through a see-through window provided between the first location and the second location is a “show ball” exclusively used to indicate to the player that the points have been updated. Will function as.

  (42) In the above-described embodiment, when the payout control unit 17 detects that the fired ball detection switch 903 is in the ON state for a specified time or longer (for example, 2 seconds or longer), the number of game balls being replenished However, it is determined that an error has occurred that is greater than or equal to a predetermined number (for example, 50). However, there are too many game balls and the on-state is not maintained. It is also possible that the detection signal is continuously output. Therefore, the light projecting / receiving portion of the light projecting / receiving method launching ball detection switch 903 may be configured to be slightly shifted to the side from the center line through which the balls of the collection ball passing path 901 pass. When configured in this way, light will be projected at a position slightly shifted from the center line of the game ball that has become a rosary connected shape due to too many encapsulated balls, and the light will be received, As the game ball is fired and moves downward, a detection signal that pulsates from the firing ball detection switch 903 is input to the payout control unit 17, and based on the input of the pulsation signal, the payout control unit 17 Control may be performed so that it is determined that an abnormality in which the number of encapsulated balls is too large has occurred rather than a failure of the fired ball detection switch 903.

  (43) In the embodiment described above, the launching unit (not shown) uses the motor (launching motor 18) as a drive source, but instead, a solenoid may be used as the drive source. In this case, the origin position sensor may detect the plunger position when the solenoid is in a non-excited state, and the dispensing control unit 17 may determine the various errors described above based on the detection output of the origin sensor. Good.

  In the above-described embodiment, both of the step “Sending time of 60 seconds abnormally in customer waiting state” in S101 and the step “Card is being inserted?” In S102 (or “Step of holding point = 0?” In S102A) are included. Instead, only the step "Serial waiting state for 60 seconds has passed?" Of S101, or "Insert card?" In S102 (or "Point 0?" In S102A) is shown instead. Only steps may be used.

  (44) In the above-described embodiment, by operating the ball switch 922 provided on the relay substrate 921, the pachinko ball is loaded by driving the conveyance motor 40 when the pachinko machine 2 is installed, or the ball removal motor 195a is driven to remove the encapsulated ball, but instead of or in addition to this, the IR light emitted from the card unit 3 is generated by operating a remote control owned by a game attendant. When the unit 320 receives light, a predetermined command is transmitted from the card unit 3 to the pachinko machine 2, and the payout control unit 17 of the pachinko machine 2 receiving the command drives the transport motor 40 when the pachinko machine 2 is installed. Alternatively, the pachinko balls may be loaded, or the encapsulated balls may be removed by driving the removal motor 195a.

  (45) At the time of shipment of the gaming machine, a chip ID (main chip ID, payout chip ID) as an example of identification information for confirming the authenticity of the gaming machine is transmitted from the gaming machine manufacturer to the upper server 801 and sent to the upper server 801. When registering, a chip ID with an electronic certificate by a gaming machine manufacturer may be transmitted to prevent unauthorized registration by a person other than the manufacturer of the gaming machine to be registered.

  (46) The SE2 mode encryption method described with reference to FIGS. 67 to 75 employs a common key encryption method, but is not limited thereto, and for example, a public key encryption method may be employed. Specifically, the electronic message (plain text) is encrypted and transmitted with the public key, and decrypted with the secret key on the receiving side. Then, every time a ciphertext is transmitted / received, the public key / private key pair is updated to improve security.

  (47) In the above-described embodiment, the change to the non-operating mode such as the trial hit mode is performed by remote control operation. Instead of or in addition to this, a card for changing to the non-operating mode (test card) May be inserted into the CU to change the mode.

  (48) In the above-described embodiment, the session key is generated from the fluctuating data such as the random number and the time information and the authentication key. As another example of the fluctuating data, It may be the number of session establishments.

  (49) In the above-described embodiment, the authentication using the authentication key and the session key is performed in the SE2 mode, but the encrypted one is further converted into the value of the initial vector part R, the message counter part N Or the value of the encryption block counter I may be used as a key for encryption (duplicate encryption). When the above-described exclusive OR is used as the duplicate encryption algorithm, decryption can be performed by performing an exclusive OR operation using the same key as the plurality of keys used for encryption.

  (50) In the above-described embodiment, in the SE2 mode, when the result of MAC check is abnormal, counter repair processing or initialization processing is performed. However, MAC check is not necessarily required, and the ciphertext receiving side Due to the failure to decrypt, counter repair processing or initialization processing may be performed.

  In the following, effects obtained from various means included in the present embodiment and combinations of various means are listed.

(1-1) A gaming machine that can be played with points, and a gaming machine (pachinko machine 2) to which points are added according to the occurrence of winnings, and a player's gaming value (prepaid balance, number of balls, Or a gaming system comprising a gaming device (card unit 3) that is connected to the gaming machine (connector wiring with connectors 330 and 20) and adds points by using the number of stored balls)
The gaming machine is
Specific means (microcomputer for gaming machine control, addition ball counter, subtraction ball counter) for identifying the amount of change in the number of points (addition balls, subtraction balls) depending on the use of the game and the occurrence of winnings,
Update information (operation response including the number of added balls and the number of subtracted balls) that can identify the amount of change, and information transmitting means (payout control unit 17) for transmitting to the gaming device,
The gaming device is:
Main possession point storage means for storing points (RAM that stores “the number of game balls”);
Information receiving means (CU communication control unit 80) for receiving the update information;
A score update unit (main control unit 323) that updates the score stored in the main score storage unit based on the update information.

  According to such a configuration, since the point management is performed on the gaming device side, it is not necessary to provide the point management function on the gaming machine side, and accordingly, the cost of the gaming machine can be suppressed as much as possible. .

  In particular, gaming machines tend to have a shorter replacement cycle in a game arcade than gaming devices in order to be able to provide more highly-oriented games quickly. For that reason, there is an advantage that the running cost of the game hall where the gaming machine is introduced can be reduced by holding the point management function not on the gaming machine side but on the gaming device side to reduce the cost of the gaming machine. is there.

(1-2) The gaming machine
Sub-point storage means (game ball counter) for storing points,
Sub-points update means (payout control unit 17) for updating the points stored in the sub-point storage means according to the amount of change,
While the gaming machine performs game control based on the points stored in the auxiliary holding point storage means (when the game ball counter reaches 0, the driving of the ball striking motor (not shown) is stopped)
When the game device inputs a signal for requesting the end of the game (an operation signal for the return button 322), the gaming device determines the holding points stored in the main holding point storage means as the holding points at the end of the game. Point determination means (main control unit 323; FIG. 29) is included.

  According to such a configuration, since the points at the end of the game are determined on the gaming device side, there is no need to provide a point determination function on the gaming machine side, and the cost of the gaming machine is reduced as much as possible. Can be suppressed.

(1-3) The gaming device
A point display unit (display 312) for displaying the points stored by the main point storage means;
Including instruction information transmission means (CU communication control unit 80) for transmitting information (operation instruction) for instructing transmission of the update information to the gaming machine,
The gaming machine is
Including instruction information receiving means (payout control unit 17) for receiving information for instructing transmission of the update information;
Each time the information transmission means receives information for instructing transmission of the update information, the information transmission means updates the amount of change (current ball related information) from the previous reception to the current reception Information is transmitted (values of the added ball number counter and the subtracted ball number counter in FIG. 2, FIG. 27).

  According to such a configuration, in response to an instruction from the gaming device, update information indicating the amount of change with respect to the time when the previous update information was transmitted is transmitted from the gaming machine to the gaming device one by one. . Therefore, the gaming device can manage the latest score by updating the score with the update information transmitted one by one.

(1-4) The information transmitting means transmits the score (the value of the game ball counter) stored in the auxiliary score storage means to the gaming device (the value of the game ball counter in FIG. 2). , FIG. 27),
The gaming device is:
Including determination means for determining the consistency between the points stored in the main holding point storage means and the points stored in the sub-point storage means (FIG. 2; determining the match of the number of game balls) ,
When the determination means determines that there is a mismatch, predetermined mismatch processing (error notification and recovery processing is performed by the display 312 and data correction request Bit2 is “1” (game ball correction ON) A communication start request including data on the number of game balls stored in the CU is transmitted to the P units, and the storage of the number of game balls in the P units is corrected to match the number of game balls of the CU.

  According to such a configuration, it is possible to detect an abnormality in which the points stored on the gaming machine side do not match the points stored on the gaming device side. Furthermore, when such an abnormality occurs, it is possible to deal with the processing when an inconsistency occurs.

(1-5) The instruction information transmitting means stores the holding points stored in the main holding point storage means when the determination means determines that the inconsistency is inconsistent. Sending correction information (communication start request including game ball correction ON and the number of game balls) to the point to the gaming machine,
The instruction information transmission means transmits the correction information to the gaming machine (transmission of communication start request including game ball correction ON and number of game balls to P units),
The gaming machine corrects the holding points stored in the auxiliary holding point storage means based on the correction information (payout control unit 17; game ball number ON and game ball number ON) Compensation according to

  According to such a configuration, the points stored on the gaming device side and the gaming machine side due to anomalies in the size of the stored points on the gaming machine side due to cheating or other causes Even if the stored score does not match, the score stored on the gaming machine side can be corrected to the score stored on the gaming device side.

(1-6) The gaming machine is a ball game machine (pachinko machine 2),
The information transmitting means sequentially transmits the update information at intervals shorter than the game ball launch time interval (one shot at 0.6 s).

  According to such a configuration, since the update information is transmitted at an interval shorter than the game ball firing time interval, the amount of change in the point notified by the update information is made as small as possible. As a result, it is possible to notify the game device of the amount of change in the points in detail.

  (1-7) The gaming machine determines the remaining number of points necessary for continuing the game based on the remaining points stored in the sub-point storage unit (payout control). Part 17, FIG. 28).

  According to such a configuration, when the update information is not transmitted in time for determination, the points stored on the gaming device side and the actual points (the number of game balls stored on the gaming machine side) Even if there is a deviation between the two, a determination based on the actual score can be made.

(1-8) The instruction information transmitting means transmits information for instructing game prohibition to the gaming machine (operation instruction in FIGS. 31 to 33 (with prohibition request)),
When the game machine receives the information for instructing the game prohibition, the game prohibiting means (the payout control unit 17 drives a hitting ball launching motor (not shown)) so as not to play the game with the holding points. , Including “game prohibition” in FIGS. 31 to 32.

  According to such a configuration, the prohibition of gaming by the gaming machine can be controlled on the gaming device side.

(1-9) The instruction information transmission means transmits information for instructing to set the value of the score stored in the auxiliary score storage means to an initial value to the gaming machine (FIG. 29). Operation instruction (clear request available)),
In the gaming machine, the sub-point storage means stores the information based on the fact that the instruction to set the value of the points stored in the sub-point storage means to the initial value is received. It includes score initializing means (FIG. 29 (the payout control unit 17 initializes the value of the game ball counter to 0) that sets the value of the score to an initial value.

  According to such a configuration, the points stored in the gaming machine can be instructed to be initialized on the gaming device side.

(1-10) Provided with a connection portion (connector 330) for communication with a gaming machine (pachinko machine 2) that can be played with points, and that is awarded in accordance with the occurrence of a prize, A gaming device (card unit 3) that adds points by using a player's own gaming value (prepaid balance, number of balls, or number of balls),
A score storage means for storing the score (RAM for storing “the number of game balls”);
Information receiving means (CU communication control unit 80) for receiving, from the gaming machine, update information capable of specifying the amount of change in points according to the use of the game and the occurrence of winnings;
A score update unit (main control unit 323) for updating the score stored in the score storage unit based on the update information.

  According to such a configuration, since the point management is performed on the gaming device side, it is not necessary to provide the point management function on the gaming machine side, and accordingly, the cost of the gaming machine can be suppressed as much as possible. .

  In particular, gaming machines tend to have a shorter replacement cycle in a game arcade than gaming devices in order to be able to provide more highly-oriented games quickly. For that reason, there is an advantage that the running cost of the game hall where the gaming machine is introduced can be reduced by holding the point management function not on the gaming machine side but on the gaming device side to reduce the cost of the gaming machine. is there.

  (1-11) When a signal requesting the end of a game (an operation signal for the return button 322) is input, the score that is determined by the score stored in the score storage means as the score at the end of the game The confirmation means (main control unit 323; FIG. 29) is included.

  According to such a configuration, since the points at the end of the game are determined on the gaming device side, there is no need to provide a point determination function on the gaming machine side, and the cost of the gaming machine is reduced as much as possible. Can be suppressed.

(1-12) When a score updated on the gaming machine side is received from the gaming machine in response to use in the game and the occurrence of a prize, the received score and the score storage means Including determination means for determining the consistency with the stored points (FIG. 2; determining the match of the number of game balls);
When the determination means determines that there is a mismatch, predetermined mismatch processing (error notification and recovery processing is performed by the display 312 and data correction request Bit2 is “1” (game ball correction ON) A communication start request including data on the number of game balls stored in the CU is transmitted to the P units, and the storage of the number of game balls in the P units is corrected to match the number of game balls of the CU.

  According to such a configuration, it is possible to detect an abnormality in which the points stored on the gaming machine side do not match the points stored on the gaming device side. Furthermore, when such an abnormality occurs, it is possible to deal with the processing when an inconsistency occurs.

  (1-13) The correction information for correcting the score stored in the gaming machine to the score stored in the score storage means when it is determined as inconsistent by the determination means It includes correction information transmission means (transmission of game ball correction ON and the number of game balls) for transmission to the gaming machine.

  According to such a configuration, the points stored on the gaming device side and the gaming machine side due to anomalies in the size of the stored points on the gaming machine side due to cheating or other causes Even if the stored score does not match, the score stored on the gaming machine side can be corrected to the score stored on the gaming device side.

(1-14) The gaming machine sequentially transmits information for instructing transmission of the update information at an interval shorter than a game ball firing time interval (one shot at 0.6 s) in the gaming machine. Send to
The score update unit sequentially updates the score stored in the score storage unit based on the update information sequentially received (main control unit 323, FIG. 27).

  According to such a configuration, the update information is transmitted at an interval shorter than the game ball firing time interval, so that the gaming measure has a detailed reflection of the change in the points on the gaming machine side. Point management is possible.

(2-1) The present invention is communicatively connected to a management server (upper server 801), a gaming machine (pachinko machine 2, slot machine 2S) in which a game is played by a player, and the management server and the gaming machine. A gaming system comprising a gaming device (card unit 3) that enables gaming by the gaming machine using the valuable value owned by the player,
The management server includes identification information registration means (authentication information storage unit) for registering identification information (main chip ID, payout chip ID) for confirming the authenticity of the gaming machine,
The gaming device is:
Registration confirmation means for performing confirmation processing for confirming whether or not the identification information of the gaming machine is registered in the management server (game machine chip information inquiry in FIGS. 83 and 84);
A game permission means (card insertion / payment possible processing in FIG. 83) for allowing a game by the gaming machine when it is registered as a result of the confirmation processing by the registration confirmation means;
The game permitting means is a limit permitting means for permitting a game by the gaming machine within a predetermined limited period when the registration confirmation cannot be confirmed as a result of the confirmation processing by the registration confirming means (see FIG. 84). Card insertion and deposit processing).

  According to such a configuration, when the identification information of the gaming machine is registered as a result of the confirmation process for confirming whether or not the identification information of the gaming machine is registered in the management server, the game by the gaming machine is allowed, while the confirmation process As a result of this, even if the registered confirmation could not be confirmed, the gaming machine based on the identification information is authentic by the management server because gaming by the gaming machine is allowed within a predetermined limited period. Inconvenience that the gaming machine cannot be operated when it is not possible to obtain the authentication can be prevented as much as possible.

(2-2) In the gaming system according to (2-1), the gaming device includes:
Allowable period determination means for determining whether or not a game in a gaming machine that is allowed to be played by the limitation permission means is within the limited period (within the range of permitted operation days of no communication control IC information in FIG. 84). If there is a process for performing authentication with the CU communication control unit),
A game prohibition means for prohibiting a game by the gaming machine when the allowable period determination means determines that the time limit is exceeded (if it is outside the permitted operation days range of communication control IC information in FIG. 85) And processing for transmitting an error notification ATT to a higher-level server without performing authentication with the CU communication control unit).

  According to such a configuration, when it is determined that the game to the gaming machine that is allowed to play within the limited period exceeds the limited period, the game by the gaming machine is prohibited. In addition, it is possible to prevent a decrease in security as much as possible by allowing a game beyond the limited period.

(2-3) In the gaming system according to (2-1) or (2-2), the gaming device includes:
Allowable period determination means for determining whether or not a game in a gaming machine that is allowed to be played by the limitation permission means is within the limited period (within the range of permitted operation days of no communication control IC information in FIG. 84). If there is a process for performing authentication with the CU communication control unit),
Abnormality notification means for notifying the management server that an abnormality has occurred when it is determined by the allowable period determination means that the limited period has been exceeded (range of permitted operation days without communication control IC information in FIG. 85) If it is outside, a process of transmitting an error notification ATT to the upper server without performing authentication with the CU communication control unit) is included.

  According to such a configuration, when it is determined that the game on the gaming machine in which the game is allowed within the limited period exceeds the limited period, the management server is notified that an abnormality has occurred. Therefore, the occurrence of an abnormality exceeding the limited period can be grasped in the management server, and security can be improved.

(2-4) In the gaming system according to any one of (2-1) to (2-3), the gaming device includes:
Identification information storage means (storage processing of gaming machine chip information in FIGS. 83 and 84) for storing identification information that is the object of confirmation when the confirmation processing by the registration confirmation means is executed;
After the identification information is stored in the identification information storage means, when the confirmation processing by the registration confirmation means is in an offline state with the management server, the identification information stored in the identification information storage means Off-line confirmation means for performing confirmation processing by collating with the identification information of the gaming machine (the gaming machine chip information stored in the authentication information storage unit is the gaming machine chip information stored in the EEPROM of the main control unit 323 when offline) To match).

  According to such a configuration, the identification information that is the object of the confirmation when the confirmation process by the registration confirmation unit is executed is stored in the gaming device, and thereafter, when the registration confirmation process is performed, the management server When offline, the identification information stored in the gaming device and the identification information of the gaming machine are collated to enable confirmation processing when offline, and as much as possible to prevent a decrease in security when offline. be able to.

(2-5) In the gaming system according to (2-4), when the identification information storage unit stores the identification information to be confirmed, the identification information is registered or unregistered by the management server. (The communication control IC information is stored in association with the registered information in the authentication information storage unit of the main control unit 323).
The limitation permitting unit permits a game within the limited period when it is determined that the gaming machine corresponds to unregistered identification information as a result of the confirmation processing by the offline confirmation unit ( If the communication control IC information to be verified is stored in the authentication information storage unit and the information is not registered, it is determined that there is no communication control IC information, and is within the range of permitted operation days during CU authentication NG. The execution of the communication control IC authentication sequence is permitted.

  According to such a configuration, when the gaming device stores the identification information to be confirmed, it also stores whether it is identification information registered by the management server or unregistered identification information. As a result of the confirmation processing in the gaming device in the game, when it is determined that it corresponds to unregistered identification information, in order to allow the game within the limited period, it is limited within the limited period even when offline. Games can be realized, and a decrease in security when offline can be prevented as much as possible.

(2-6) In another aspect of the present invention, a management server (upper server 801) for registering identification information (main chip ID, payout chip ID) for confirming the authenticity of the gaming machine and the gaming machine (pachinko machine) 2, a gaming device (card unit 3) that includes a communication unit that can communicate with the slot machine 2S), and that enables a game by the gaming machine using a valuable value owned by the player,
Registration confirmation means for performing confirmation processing for confirming whether or not the identification information of the gaming machine is registered in the management server (game machine chip information inquiry in FIGS. 83 and 84);
A game permission means (a card insertion / payment possible process in FIG. 83) that permits a game by the gaming machine when it has been registered as a result of the confirmation processing by the registration confirmation means;
The game permitting means is a limit permitting means for permitting a game by the gaming machine within a predetermined limited period when the registration confirmation cannot be confirmed as a result of the confirmation processing by the registration confirming means (see FIG. 84). Card insertion and deposit processing).

  According to such a configuration, when the identification information of the gaming machine is registered as a result of the confirmation process for confirming whether or not the identification information of the gaming machine is registered in the management server, the game by the gaming machine is allowed, while the confirmation process As a result of this, even if the registered confirmation could not be confirmed, the gaming machine based on the identification information is authentic by the management server because gaming by the gaming machine is allowed within a predetermined limited period. Inconvenience that the gaming machine cannot be operated when it is not possible to obtain the authentication can be prevented as much as possible.

(2-7) In the gaming apparatus according to (2-6), an allowable period determination unit that determines whether or not a game in a gaming machine in which a game is permitted by the limitation permission unit is within the limited period. (Processing for performing authentication with the CU communication control unit if it is within the operation permitted days range without communication control IC information of FIG. 84),
A game prohibition means for prohibiting a game by the gaming machine when the allowable period determination means determines that the time limit is exceeded (if it is outside the permitted operation days range of communication control IC information in FIG. 85) And processing for transmitting an error notification ATT to a higher-level server without performing authentication with the CU communication control unit).

  According to such a configuration, when it is determined that the game to the gaming machine that is allowed to play within the limited period exceeds the limited period, the game by the gaming machine is prohibited. In addition, it is possible to prevent a decrease in security as much as possible by allowing a game beyond the limited period.

(2-8) In the gaming apparatus according to (2-7), an allowable period determination unit that determines whether or not a game in a gaming machine in which a game is permitted by the limitation permission unit is within the limited period. (If the communication control IC information of FIG. 84 is within the permitted operation days range, the process of performing authentication with the CU communication control unit),
Abnormality notification means for notifying the management server that an abnormality has occurred when it is determined by the allowable period determination means that the limited period has been exceeded (range of permitted operation days without communication control IC information in FIG. 85) If it is outside, a process of transmitting an error notification ATT to the upper server without performing authentication with the CU communication control unit) is included.

  According to such a configuration, when it is determined that the game on the gaming machine in which the game is allowed within the limited period exceeds the limited period, the management server is notified that an abnormality has occurred. Therefore, the occurrence of an abnormality exceeding the limited period can be grasped in the management server, and security can be improved.

(2-9) In the gaming device of (2-7) or (2-8) above, identification information storage for storing identification information that is a target of confirmation when the confirmation processing by the registration confirmation means is executed Means (storage processing of gaming machine chip information of FIGS. 83 and 84);
After the identification information is stored in the identification information storage means, when the confirmation processing by the registration confirmation means is in an offline state with the management server, the identification information stored in the identification information storage means Off-line confirmation means for performing confirmation processing by collating with the identification information of the gaming machine (communication control IC information stored in the authentication information storage unit in communication control IC information stored in the EEPROM 808 of the main control unit 323 when offline) To match).

  According to such a configuration, the identification information that is the object of the confirmation when the confirmation process by the registration confirmation unit is executed is stored in the gaming device, and thereafter, when the registration confirmation process is performed, the management server When offline, the identification information stored in the gaming device and the identification information of the gaming machine are collated to enable confirmation processing when offline, and as much as possible to prevent a decrease in security when offline. be able to.

(2-10) In the gaming machine according to (2-9), when the identification information storage unit stores the identification information to be confirmed, the identification information is registered identification information by the management server or unregistered. (The communication control IC information is stored in association with the registered information in the authentication information storage unit of the main control unit 323).
The limitation permitting unit permits a game within the limited period when it is determined that the gaming machine corresponds to unregistered identification information as a result of the confirmation processing by the offline confirmation unit ( If the communication control IC information to be verified is stored in the authentication information storage unit and the information is not registered, it is determined that there is no communication control IC information, and is within the range of permitted operation days during CU authentication NG. The execution of the communication control IC authentication sequence is permitted.

  According to such a configuration, when the gaming device stores the identification information to be confirmed, it also stores whether it is identification information registered by the management server or unregistered identification information. As a result of the confirmation processing in the gaming device in the game, when it is determined that it corresponds to unregistered identification information, in order to allow the game within the limited period, it is limited within the limited period even when offline. Games can be realized, and a decrease in security when offline can be prevented as much as possible.

(3-1) The present invention uses the management server (upper server 801), the gaming machine (pachinko machine 2, slot machine 2S) in which a game is played by the player, and the valuable value owned by the player. A gaming system comprising a gaming device (card unit 3) that enables gaming by a machine,
The gaming device is:
First control means (main control unit 323) capable of communicating with the management server;
Second control means (CU communication control unit 80) capable of communicating with the gaming machine,
The management server includes gaming machine identification information (main chip ID, payout chip ID) for confirming the authenticity of the gaming machine, and control means identification information (CU communication) for confirming the authenticity of the second control means. Including identification information registration means (authentication information storage unit) for registering the communication control IC information (SID of the control unit 80),
The gaming device further includes:
Registration confirmation means for performing confirmation processing for confirming whether or not the gaming machine identification information and the control means identification information have been registered in the management server (communication control IC information inquiry and gaming machine in FIGS. 78 and 79) Chip information inquiry),
Mutual authentication processing means for performing authentication processing between the first control means and the second control means (CU communication control unit authentication sequence in FIGS. 78 and 79);
Game permission means for allowing a game by the gaming machine based on the results of the confirmation process and the authentication process (card insertion / payment possible process in FIGS. 78 and 79).

  According to such a configuration, the management server registers not only the gaming machine identification information but also the control means identification information for confirming the authenticity of the second control means provided in the gaming device. In addition to the process of confirming whether the control means identification information as well as the gaming machine identification information has been registered in the management server, the first control means and the second control means provided in the gaming device To confirm the registration of the gaming machine identification information based on fraudulent acts on the gaming machine itself, in order to perform control processing that allows gaming by the gaming machine based on the results of the verification processing and the authentication processing. It is possible to prevent the inconvenience that the credibility of the processing result is lowered as much as possible.

(3-2) In the gaming system according to (3-1), the mutual authentication processing unit includes:
The second control means generates a challenge code (challenge code A in FIG. 17), transmits it to the first control means (CU communication control unit serial ID authentication response 1), and stores it in the first control means A response code (response code A in FIG. 17) is generated from the challenge code received using the identification information (SID of the CU communication control unit) and sent back to the second control means, and the second control Means for determining whether the received response code is appropriate using the stored identification information (SID of the CU communication control unit) (in the CU communication control unit 80, whether the received response code is appropriate) Is determined using the SID of the CU communication control unit),
The first control means generates a challenge code and transmits it to the second control means (challenge code in FIG. 16), and the identification information (SID of the main control unit) stored in the second control means A response code (response code shown in FIG. 16) is generated from the challenge code received using, and is sent back to the first control means (BB serial ID authentication response 2). The first control means stores the response code The second challenge response authentication process (in the main control unit 323, determines the suitability of the received response code using the SID of the main control unit) that determines the suitability of the received response code using the identification information that is received. .

  According to such a configuration, the first control means and the second control means transmit the challenge code from one control means to the other control means and use the identification information stored in the other control means. Because the challenge-response authentication is performed, in which a response code is generated from the received challenge code and sent back to one control means, the challenge code and response code sent and received between both control means are leaked. Even so, it is difficult to specify the stored identification information, and it is possible to prevent fraudulent acts on the control means due to leakage of the identification information as much as possible.

(3-3) In the gaming system according to (3-1) or (3-2) above, the first control unit and the second control unit include a pair of authentication information ( Memorize the authentication key consisting of a common key)
The mutual authentication processing means further includes:
The first control means executes arithmetic processing using the authentication information and transmits the result data of the arithmetic processing to the second control means (the main control unit uses the authentication key stored in the EEPROM) An encrypted random number B generated by encrypting the random number B is generated and transmitted to the CU communication control unit as a device authentication request 2 together with the MAC), and the second control unit calculates the result data using the authentication information First authentication for performing processing and returning the result data of the arithmetic processing to the first control means and checking the consistency between the result data returned by the first control means and the transmitted result data Processing (in the CU communication control unit, the consistency with the MAC is determined as a plaintext random number B combined with the received random number B);
The second control means executes arithmetic processing using the authentication information and transmits the result data of the arithmetic processing to the first control means (the CU communication control unit uses the authentication key stored in the EEPROM) An encrypted random number A obtained by encrypting the random number A is transmitted to the main control unit as a device authentication response 1 together with the MAC), and the first control means calculates the result data using the authentication information. A second authentication process is performed to check the consistency with the result data (in the main communication control unit, the consistency with the MAC is determined as a plaintext random number A combined with the received random number A). .

  According to such a configuration, authentication processing using the pair authentication information used for mutual authentication stored in the first control means and the second control means is also executed. Mutual authentication becomes possible and security is improved. Moreover, since this authentication process also transmits / receives the result data obtained by executing the calculation process using the stored authentication information, even if the transmitted / received result data leaks out, the authentication information It is difficult to specify and it is possible to prevent fraudulent acts against the control means due to information leakage as much as possible.

(3-4) In the game system according to any one of (3-1) to (3-3), the game device includes:
Identification information storage means for storing identification information that is the object of confirmation when the confirmation processing by the registration confirmation means is executed (communication control IC information storage processing and gaming machine chip information storage processing in FIGS. 78 and 79) )When,
After the identification information is stored in the identification information storage means, when the confirmation processing by the registration confirmation means is in an offline state with the management server, the identification information stored in the identification information storage means Off-line confirmation means for performing confirmation processing by collating with the identification information of the gaming machine (communication control IC information and gaming machine chip information stored in the EEPROM of the main control unit 323 are stored in the authentication information storage unit when offline. Communication control IC information and gaming machine chip information).

  According to such a configuration, the identification information that is the object of the confirmation when the confirmation process by the registration confirmation unit is executed is stored in the gaming device, and thereafter, when the registration confirmation process is performed, the management server When offline, the identification information stored in the gaming device and the identification information of the gaming machine are collated to enable confirmation processing when offline, and as much as possible to prevent a decrease in security when offline. be able to.

(3-5) Another aspect of the present invention includes a first control unit (main control unit 323) and a second control unit (CU communication control unit 80), and uses the valuable value owned by the player. A gaming device (card unit 3) that enables gaming by a gaming machine,
The first control means is a management server (upper server) that registers gaming machine identification information for confirming the authenticity of the gaming machine and control means identification information for confirming the authenticity of the second control means. 801),
The second control means can communicate with the gaming machine (FIG. 4; the CU communication control unit 80 can communicate with the P-unit communication control unit 81),
The gaming device further includes:
Registration confirmation means for performing confirmation processing for confirming whether or not the gaming machine identification information and the control means identification information have been registered in the management server (communication control IC information inquiry and gaming machine in FIGS. 78 and 79) Chip information inquiry),
Mutual authentication processing means for performing authentication processing between the first control means and the second control means (CU communication control unit authentication sequence in FIGS. 78 and 79);
Game permitting means for permitting a game by the gaming machine based on the results of the confirmation process and the authentication process (card insertion / payment possible process in FIGS. 78 and 79) is provided.

  According to such a configuration, the management server registers not only the gaming machine identification information but also the control means identification information for confirming the authenticity of the second control means provided in the gaming device. In addition to the process of confirming whether the control means identification information as well as the gaming machine identification information has been registered in the management server, the first control means and the second control means provided in the gaming device To confirm the registration of the gaming machine identification information based on fraudulent acts on the gaming machine itself, in order to perform control processing that allows gaming by the gaming machine based on the results of the verification processing and the authentication processing. It is possible to prevent the inconvenience that the credibility of the processing result is lowered as much as possible.

(3-6) In the gaming machine according to (3-5), the mutual authentication processing unit includes:
The second control means generates a challenge code (challenge code A in FIG. 17), transmits it to the first control means (CU communication control unit serial ID authentication response 1), and stores it in the first control means A response code (response code A in FIG. 17) is generated from the challenge code received using the identification information (SID of the CU communication control unit) and sent back to the second control means, and the second control Means for determining whether the received response code is appropriate using the stored identification information (SID of the CU communication control unit) (in the CU communication control unit 80, whether the received response code is appropriate) Is determined using the SID of the CU communication control unit),
The first control means generates a challenge code and transmits it to the second control means (challenge code in FIG. 16), and the identification information (SID of the main control unit) stored in the second control means A response code (response code shown in FIG. 16) is generated from the challenge code received using, and is sent back to the first control means (BB serial ID authentication response 2). The first control means stores the response code The second challenge response authentication process (in the main control unit 323, determines the suitability of the received response code using the SID of the main control unit) that determines the suitability of the received response code using the identification information that is received. .

  According to such a configuration, the first control means and the second control means transmit the challenge code from one control means to the other control means and use the identification information stored in the other control means. Because the challenge-response authentication is performed, in which a response code is generated from the received challenge code and sent back to one control means, the challenge code and response code sent and received between both control means are leaked. Even so, it is difficult to specify the stored identification information, and it is possible to prevent fraudulent acts on the control means due to leakage of the identification information as much as possible.

(3-7) In the gaming machine of the above (3-6), the first control means and the second control means are a pair of authentication information (authentication key comprising a common key) used for mutual authentication. )
The mutual authentication processing means further includes:
The first control means executes arithmetic processing using the authentication information and transmits the result data of the arithmetic processing to the second control means (the main control unit uses the authentication key stored in the EEPROM 808). An encrypted random number B generated by encrypting the random number B is generated and transmitted to the CU communication control unit as a device authentication request 2 together with the MAC), and the second control unit calculates the result data using the authentication information First authentication for performing processing and returning the result data of the arithmetic processing to the first control means and checking the consistency between the result data returned by the first control means and the transmitted result data Processing (in the CU communication control unit, the consistency with the MAC is determined as a plaintext random number B combined with the received random number B);
The second control means executes arithmetic processing using the authentication information and transmits the result data of the arithmetic processing to the first control means (the CU communication control unit uses the authentication key stored in the EEPROM 813). An encrypted random number A obtained by encrypting the random number A is transmitted to the main control unit as a device authentication response 1 together with the MAC), and the first control means calculates the result data using the authentication information. A second authentication process is performed to check the consistency with the result data (in the main communication control unit, the consistency with the MAC is determined as a plaintext random number A combined with the received random number A). .

  According to such a configuration, authentication processing using the pair authentication information used for mutual authentication stored in the first control means and the second control means is also executed. Mutual authentication becomes possible and security is improved. Moreover, since this authentication process also transmits / receives the result data obtained by executing the calculation process using the stored authentication information, even if the transmitted / received result data leaks out, the authentication information It is difficult to specify and it is possible to prevent fraudulent acts against the control means due to information leakage as much as possible.

(3-8) In the gaming apparatus of (3-7) above, the identification information storage means (FIG. 85, FIG. 86 communication control IC information storage processing and gaming machine chip information storage processing),
After the identification information is stored in the identification information storage means, when the confirmation processing by the registration confirmation means is in an offline state with the management server, the identification information stored in the identification information storage means Off-line confirmation means for performing confirmation processing by collating with the identification information of the gaming machine (communication control IC information and gaming machine chip information stored in the EEPROM of the main control unit 323 are stored in the authentication information storage unit when offline. The communication control IC information and the gaming machine chip information).

  According to such a configuration, the identification information that is the object of the confirmation when the confirmation process by the registration confirmation unit is executed is stored in the gaming device, and thereafter, when the registration confirmation process is performed, the management server When offline, the identification information stored in the gaming device and the identification information of the gaming machine are collated to enable confirmation processing when offline, and as much as possible to prevent a decrease in security when offline. be able to.

(4-1) The present invention relates to first control means (main control unit 323 or CU3, P stand 2, Z counter, POS terminal, etc.) and second control means (CU communication control unit 80) that can communicate with each other. Or CU3, P stand 2, Z counter, POS terminal, etc.)
Mutual authentication means (CU communication control unit authentication sequence in FIGS. 83 and 84) for performing mutual authentication between the first control means and the second control means;
A communication key generating means (FIG. 7, FIG. 7) that generates a communication key used for encrypted communication between the first control means and the second control means on condition that the authentication result by the mutual authentication means is appropriate. The session key of FIG. 20 is generated from the authentication key and a random number)
The first control unit and the second control unit perform cryptographic communication using the communication key generated by the communication key generation unit (communication is performed using the session key of FIGS. 7 and 20). .

  According to such a configuration, the first control means and the second control means are provided on the condition that the first control means and the second control means perform authentication by the mutual authentication means and the authentication result is appropriate. After a mutual authentication result indicating that the communication key used for encryption communication is appropriate is obtained because a communication key used for encryption communication is generated and encrypted communication is performed. Even if the communication key is leaked at any time, it is possible to prevent fraudulent acts of misusing the key and bypassing the mutual authentication monitoring, and to overcome security vulnerabilities as much as possible.

  (4-2) In the gaming system according to (4-1), the communication key generating means generates a repeated generation of the communication key when a predetermined condition is satisfied (the sequence at the time of power activation in FIG. 6 is Each time it is executed, the session key of FIG. 7 and FIG. 20 is generated from the authentication key and the random number), and the repetitive generation process is performed when the previous communication key is generated and the current communication key is generated. A communication key is generated using change data that can be changed by (using random numbers or the like).

  According to such a configuration, an iterative generation process for newly generating a communication key is executed when a predetermined condition is satisfied, and the iterative generation process is performed at the time of the previous communication key generation and the current communication key generation. Since a communication key is generated using variable data that can be changed, even if the communication key is once leaked, new data can be created using variable data that is different from that used to generate the leaked communication key. Since a new communication key is generated and encrypted communication is performed using the new communication key, even if an attempt is made to decrypt the communication using the new communication key with the leaked key, the decryption cannot be performed and security can be improved. it can.

(4-3) Another aspect of the present invention is a gaming device (card unit 3) installed in a game hall,
A first control unit (main control unit 323) and a second control unit (CU communication control unit 80), which are communicably connected to each other;
Mutual authentication means (CU communication control unit authentication sequence in FIGS. 83 and 84) for performing mutual authentication between the first control means and the second control means;
A communication key generating means (FIG. 7, FIG. 7) that generates a communication key used for encrypted communication between the first control means and the second control means on condition that the authentication result by the mutual authentication means is appropriate. The session key of FIG. 20 is generated from the authentication key and a random number)
The first control unit and the second control unit perform cryptographic communication using the communication key generated by the communication key generation unit (communication is performed using the session key of FIGS. 7 and 20). .

  According to such a configuration, the first control means and the second control means are provided on the condition that the first control means and the second control means perform authentication by the mutual authentication means and the authentication result is appropriate. After a mutual authentication result indicating that the communication key used for encryption communication is appropriate is obtained because a communication key used for encryption communication is generated and encrypted communication is performed. Even if the communication key is leaked at any time, it is possible to prevent fraudulent acts of misusing the key and bypassing the mutual authentication monitoring, and to overcome security vulnerabilities as much as possible.

  (4-4) In the gaming machine according to (4-3), the communication key generation means executes a repeated generation process for newly generating the communication key every predetermined period (when the power supply is activated in FIG. 6). Each time the sequence is executed, the session key of FIG. 7 and FIG. 20 is generated from the authentication key and the random number), and the repetitive generation process is performed at the time of generating the previous communication key and the current communication key. A communication key is generated using change data that can be changed (generated using a random number or the like).

  According to such a configuration, the iterative generation process for newly generating a communication key is executed every predetermined period, and the iterative generation process changes between when the previous communication key was generated and when the current communication key was generated. Since a communication key is generated using possible change data, even if the communication key is once leaked, new data can be created using changeable change data that is different from when the leaked communication key was generated. Since a communication key is generated and encrypted communication is performed using the new communication key, even if an attempt is made to decrypt the communication using the new communication key with the leaked key, it cannot be decrypted, and security can be improved. .

  (4-5) In the gaming device according to (4-3) or (4-4), the gaming device is a device (card that allows a gaming machine to use a valuable value possessed by the player. Unit 3).

  According to such a configuration, it is possible to overcome the security vulnerability in the device that enables the game by the gaming machine using the valuable value owned by the player.

(5-1) The present invention is a game machine (pachinko machine 2, slot machine 2S) in which a game can be made with points and points are added in accordance with the occurrence of winnings, and a player's valuable value (prepaid) A gaming device (card unit 3) connected to the gaming machine and communicably connected to the gaming machine, and a score management server (upper level) for managing the score A gaming system comprising a server 801),
The gaming machine includes score storage means (game ball counter, score counter) for storing score updated as the game progresses,
The gaming device is:
A recording medium receiving means (card reader / writer) for receiving a recording medium on which information capable of specifying a gaming value owned by the player is recorded;
Forcibly discharging means (manual discharging mechanism, S702) for forcibly discharging the recording medium received by the recording medium receiving means at the time of failure of the gaming device;
The holding point information (P recovery data including C-ID and holding point storage information) transmitted from the gaming machine at the start of communication with the gaming machine is transmitted to the holding point management server. Point transmission means (S704 in FIG. 88A),
The score management server performs a process for performing a identifiable process for making the score transmitted from the score transmission means identifiable by the recording information of the forcibly ejected recording medium (S804 in FIG. 88). To S811).

  According to such a configuration, the recording medium received by the gaming device is forcibly ejected by the forced ejecting means when the gaming device fails, and is replaced with a new gaming device to communicate with the gaming machine. When starting the game, the information on the score transmitted from the gaming machine is transmitted to the score management server via the gaming device, and the score management server Recording of a recording medium in which the points of the player who played the game before the failure of the gaming device are forcibly discharged in order to perform a process that can be specified by the recording information of the recording medium forcibly discharged The information can be specified, and the player can continue the game without any disadvantage.

(5-2) Another aspect of the present invention is a game machine (pachinko machine 2, slot machine 2S) in which a game with a score is possible and a score is added in accordance with the occurrence of a prize, A gaming device (card unit 3) that is communicably connected to the gaming machine, adds a score using the valuable value, a score management server (upper server 801) that manages the score, and the score A gaming system comprising a recording medium reception processing device (POS 810) that is connected to a management server in a communicable manner and receives and processes a recording medium on which information capable of specifying a player's gaming value is recorded,
The gaming machine includes score storage means (game ball counter, score counter) for storing score updated as the game progresses,
The gaming device is:
A recording medium receiving means (card reader / writer) for receiving a recording medium on which information capable of specifying a player's gaming value can be specified;
Forcibly discharging means (manual discharging mechanism, S702) for forcibly discharging the recording medium received by the recording medium receiving means at the time of failure of the gaming device;
A score for transmitting to the score management server the P-point recovery data including the score information C-ID and score storage information transmitted from the gaming machine at the start of communication with the gaming machine Transmission means (S704 in FIG. 88A),
The recording medium reception processing device accepts the recording medium ejected by the compulsory ejecting means, and records the score transmitted from the score transmitting means to the score management server based on the recording information of the accepted recording medium. It includes recording medium processing means (S901 to S904 in FIG. 88C) for processing in an identifiable state.

  According to such a configuration, the recording medium received by the gaming device is forcibly ejected by the forced ejecting means when the gaming device fails, and is replaced with a new gaming device to communicate with the gaming machine. When starting the game, the information on the points transmitted from the gaming machine is transmitted to the score management server via the gaming device, and the recording medium reception processing device is transmitted to the score management server. In order to perform the process of making the points identifiable by the recording information of the recording medium forcibly discharged, the points of the player who played the game before the failure of the gaming device were forcibly discharged It becomes a state that can be specified by the record information of the recording medium, and it becomes possible for the player to continue the game without suffering a disadvantage.

(5-3) In the gaming system according to (5-1), the score management server holds the score based on the score information transmitted from the gaming machine in operation via the gaming device. Including point update storage means (S806 in FIG. 88B) for updating and storing points;
The processing means performs the identifiable processing on condition that the difference between the score transmitted by the score transmission means and the score stored in the score update storage means is within a predetermined number. (S806 to S811 are performed when YES in S805 of FIG. 88B).

  According to such a configuration, the score management server includes score update storage means for updating and storing score based on score information transmitted from an operating gaming machine via a gaming device. The difference between the score transmitted from the gaming machine at the start of communication with the gaming machine and the score stored in the score update storage means should be within a predetermined number if normal. Yes, if this difference is greater than or equal to a predetermined number, some abnormality has occurred. Then, the identifiable processing is performed on the condition that the above difference is within a predetermined number in a normal state, and the abnormal score is recorded on the recording medium in spite of the occurrence of the abnormal state. It is possible to prevent the inconvenience of making the state identifiable.

  (5-4) In the gaming system according to (5-2), the recording medium reception processing device is a premium exchange device (POS810) that performs a premium exchange process based on the points specified by the recording information of the received recording medium. ).

  According to such a configuration, the prize exchange device can process the score transmitted from the score transmission means to the score management server in a state that can be specified by the recording information of the recording medium.

(6-1) The present invention provides first control means (main control unit 323 or CU3, P stand 2, Z counter, POS terminal, etc.) and second control means (CU communication control unit) that perform cryptographic communication with each other. 80, or CU3, P stand 2, Z counter, POS terminal, etc.)
Both the first control means and the second control means are:
Key update means (FIG. 67 (a)) used for encryption communication performs key update processing for independently updating the first control means and the second control means by the same update method. 67 (b) to FIG. 73 counter update processing),
Encryption means for generating ciphertext using the key updated by the key update means (FIG. 67 (b), S105 in FIG. 74 (a));
Decryption means (FIG. 68) for receiving the ciphertext generated by the encryption means and decrypting it using the key updated by the key update means, S133 in FIG. 74 (b),
The key update means performs the key update process in response to transmission / reception of ciphertext (FIGS. 67 (b) to 73; one transmission or reception (ciphertext data length 96 bytes) / (key length 16 bytes). ) = 6 is added and updated),
The decryption means is unable to decrypt the received ciphertext due to a flaw in the key update process between the key update means of the first control means and the key update means of the second control means In addition, a key update decryption process in which decryption is attempted within a predetermined number of times by updating a key included in the control means that could not be decrypted (S150 in FIGS. 70, 71, and 75A). To S162).

  According to such a configuration, when the received ciphertext cannot be decrypted due to a key update process trap between the key update means of the first control means and the key update means of the second control means In addition, in order to try within the range of the predetermined number of times of decryption by updating the key included in the control means that could not be decrypted, after the keys mutually conflict, decryption is performed while updating the keys. Attempts are made to repair the key mismatch, which allows the key mismatch to be repaired and restored.

  (6-2) In the gaming system according to (6-1), both the first control unit and the second control unit may perform the decryption unit even if the key update decryption process is performed a predetermined number of times. Further, error processing means (S162 in FIG. 75 (a)) for executing error processing when decryption into an appropriate plaintext cannot be performed.

  According to such a configuration, even if the key update / decryption process is performed a predetermined number of times, an error process is performed when decryption to an appropriate plaintext is not performed. Nevertheless, it is possible to cope with an abnormal situation where proper plaintext cannot be decrypted.

(6-3) In the gaming system according to (6-1) or (6-2), the encrypted communication is received between the first control means and the second control means. When it is not possible, re-send the encrypted communication message within a predetermined number of times (2 times),
The decryption means executes the key update decryption process (S155 and S161 in FIG. 75A) within the range of the number of executions corresponding to the specified number of times.

  According to such a configuration, since the key update process by the key update unit is performed in response to the transmission / reception of the ciphertext, the key update process can be re-encrypted when the ciphertext cannot be received. It is caused by transmission. Therefore, if the key update decryption process is performed within the range of the number of executions corresponding to the specified number of times that the re-transmission of the ciphertext is performed, the wrinkles should be eliminated. Therefore, the key update decryption process is executed within the range of the number of executions corresponding to the specified number of times, and it is possible to prevent security from being lowered as much as possible by performing the key update decryption process many times.

(6-4) Another aspect of the present invention is a gaming apparatus (first control means (main control section 323) and second control means (CU communication control section 80) that perform cryptographic communication with each other ( A card processing device 3),
Both the first control means and the second control means are:
Key update means (FIG. 67 (a)) used for encryption communication performs key update processing for independently updating the first control means and the second control means by the same update method. 67 (b) to FIG. 73 counter update processing),
Encryption means for generating ciphertext using the key updated by the key update means (FIG. 67 (b), S105 in FIG. 74 (a));
Decryption means (FIG. 68) for receiving the ciphertext generated by the encryption means and decrypting it using the key updated by the key update means, S133 in FIG. 74 (b),
The key update means performs the key update process in response to transmission / reception of ciphertext (FIGS. 67 (b) to 73; one transmission or reception (ciphertext data length 96 bytes) / (key length 16 bytes). ) = 6 is added and updated),
The decryption means is unable to decrypt the received ciphertext due to a flaw in the key update process between the key update means of the first control means and the key update means of the second control means In addition, a key update decryption process in which decryption is attempted within a predetermined number of times by updating a key included in the control means that could not be decrypted (S150 in FIGS. 70, 71, and 75A). To S162).

  According to such a configuration, when the received ciphertext cannot be decrypted due to a key update process trap between the key update means of the first control means and the key update means of the second control means In addition, in order to try within the range of the predetermined number of times of decryption by updating the key included in the control means that could not be decrypted, after the keys mutually conflict, decryption is performed while updating the keys. Attempts are made to repair the key mismatch, which allows the key mismatch to be repaired and restored.

  (6-5) In the gaming machine of the above (6-4), both the first control means and the second control means have the decryption means even if the key update decryption process is performed a predetermined number of times. Further, error processing means (S162 in FIG. 75 (a)) for executing error processing when decryption into an appropriate plaintext cannot be performed.

  According to such a configuration, even if the key update / decryption process is performed a predetermined number of times, an error process is performed when decryption to an appropriate plaintext is not performed. Nevertheless, it is possible to cope with an abnormal situation where proper plaintext cannot be decrypted.

(6-6) In the gaming machine according to (6-4) or (6-5) above, the encrypted communication between the first control means and the second control means is received as an encrypted communication text. When it is not possible, re-send the encrypted communication message within a predetermined number of times (2 times),
The decryption means executes the key update decryption process (S155 and S161 in FIG. 75A) within the range of the number of executions corresponding to the specified number of times.

  According to such a configuration, since the key update process by the key update unit is performed in response to the transmission / reception of the ciphertext, the key update process can be re-encrypted when the ciphertext cannot be received. It is caused by transmission. Therefore, if the key update decryption process is performed within the range of the number of executions corresponding to the specified number of times that the re-transmission of the ciphertext is performed, the wrinkles should be eliminated. Therefore, the key update decryption process is executed within the range of the number of executions corresponding to the specified number of times, and it is possible to prevent security from being lowered as much as possible by performing the key update decryption process many times.

(7-1) The present invention provides first control means (main control unit 323 or CU3, P stand 2, Z counter, POS terminal, etc.) and second control means (CU communication control unit) that perform cryptographic communication with each other. 80, or CU3, P stand 2, Z counter, POS terminal, etc.)
Both the first control means and the second control means are:
Key update means (FIG. 67 (a)) used for encryption communication performs key update processing for independently updating the first control means and the second control means by the same update method. 67 (b) to FIG. 73 counter update processing),
Encryption means for generating ciphertext using the key updated by the key update means (FIG. 67 (b), S105 in FIG. 74 (a));
Decryption means (FIG. 68) for receiving the ciphertext generated by the encryption means and decrypting it using the key updated by the key update means, S133 in FIG. 74 (b),
The key update means includes
The key update processing is performed in accordance with transmission / reception of ciphertext (FIGS. 67 (b) to 73; one transmission or reception (ciphertext data length 96 bytes) / (key length 16 bytes) = 6 is added. Update), and
When the key update processing trap occurs between the key update unit of the first control unit and the key update unit of the second control unit, and the decryption unit cannot decrypt the ciphertext, Initialization processing means (FIG. 72, FIG. 73, FIG. 74 (a), FIG. 75 (b)) for performing the initialization processing of the key.

  According to such a configuration, when the received ciphertext cannot be decrypted due to a key update process trap between the key update means of the first control means and the key update means of the second control means In addition, mutual key initialization processing is performed, which makes it possible to repair and restore the key conflict.

  (7-2) In the gaming system of (7-1), the initialization processing means generates a random number and generates an initial key using the random number (S101 in FIG. 74A), A process of sharing the key between the first control means and the second control means is performed (S103 in FIG. 74A, S130 and S131 in FIG. 74B).

  According to such a configuration, a random number is generated by the initialization process, an initial key is generated using the random number, and the key is shared between the first control unit and the second control unit. Therefore, a random key is generated by generating a random number of the initial key itself, and security during the initialization process can be maintained as much as possible.

  (7-3) In the gaming system according to (7-2), the shared processing by the initialization processing unit is a predetermined key different from an encryption method using a key updated by the key updating unit. (This authentication key) is a process for encrypting the initial key and transmitting the encrypted initial key to the partner control means to share the key (SE1 by S103 in FIG. 74A). R is encrypted using the authentication key in the mode, and R is decrypted using the authentication key in the SE1 mode in S130 of FIG. 74B, and the plaintext R is stored in S131).

  According to such a configuration, the process of sharing the key by the initialization processing unit encrypts the initialization key using a predetermined key different from the encryption method using the key updated by the key update unit. Therefore, it is possible to maintain security against the leakage of the key when transmitting the initialization key.

(7-4) Another aspect of the present invention is a gaming apparatus (card) comprising first control means (main control part 323) and second control means (CU communication control part 80) that perform cryptographic communication with each other. A processing device 3) comprising:
Both the first control means and the second control means are:
Key update means (FIG. 67 (a)) used for encryption communication performs key update processing for independently updating the first control means and the second control means by the same update method. 67 (b) to FIG. 73 counter update processing),
Encryption means for generating ciphertext using the key updated by the key update means (FIG. 67 (b), S105 in FIG. 74 (a));
Decryption means (FIG. 68) for receiving the ciphertext generated by the encryption means and decrypting it using the key updated by the key update means, S133 in FIG. 74 (b),
The key update means includes
The key update processing is performed in accordance with transmission / reception of ciphertext (FIGS. 67 (b) to 73; one transmission or reception (ciphertext data length 96 bytes) / (key length 16 bytes) = 6 is added. Update), and
When the key update processing trap occurs between the key update unit of the first control unit and the key update unit of the second control unit, and the decryption unit cannot decrypt the ciphertext, Initialization processing means (FIG. 72, FIG. 73, FIG. 74 (a), FIG. 75 (b)) for performing the initialization processing of the key.

  According to such a configuration, when the received ciphertext cannot be decrypted due to a key update process trap between the key update means of the first control means and the key update means of the second control means In addition, mutual key initialization processing is performed, which makes it possible to repair and restore the key conflict.

  (7-5) In the gaming apparatus of (7-4), the initialization processing means generates a random number and generates an initial key using the random number (S101 in FIG. 74A), Processing for sharing the key between the first control means and the second control means is performed (S103 in FIG. 74A, S130 and S131 in FIG. 74B).

  According to such a configuration, a random number is generated by the initialization process, an initial key is generated using the random number, and the key is shared between the first control unit and the second control unit. Therefore, a random key is generated by generating a random number of the initial key itself, and security during the initialization process can be maintained as much as possible.

  (7-6) In the gaming machine according to (7-5), the shared processing by the initialization processing unit is a predetermined key different from an encryption method using a key updated by the key updating unit. (This authentication key) is a process for encrypting the initial key and transmitting the encrypted initial key to the partner control means to share the key (SE1 by S103 in FIG. 74A). R is encrypted using the authentication key in the mode, and R is decrypted using the authentication key in the SE1 mode in S130 of FIG. 74B, and the plaintext R is stored in S131).

  According to such a configuration, the process of sharing the key by the initialization processing unit encrypts the initialization key using a predetermined key different from the encryption method using the key updated by the key update unit. Therefore, it is possible to maintain security against the leakage of the key when transmitting the initialization key.

(8-1) The present invention provides first control means (main control unit 323 or CU3, P stand 2, Z counter, POS terminal, etc.) and second control means (CU communication control unit) that perform cryptographic communication with each other. 80, or CU3, P stand 2, Z counter, POS terminal, etc.)
Both the first control means and the second control means are:
Mutual authentication processing means (CU communication control unit authentication sequence in FIG. 7A) for performing a plurality of types of mutual authentication processing with different authentication methods between the first control means and the second control means;
The result of executing all of the plural types of mutual authentication without notifying the control means of the authentication partner of the independent authentication result when the independent authentication result of each mutual authentication by the mutual authentication processing unit is inappropriate. And general notifying means for summarizing the abnormalities and notifying the control means of the authentication partner (processing for notifying the abnormalities in FIG. 9, FIG. 12, and FIG. 14 collectively).

  According to such a configuration, since a plurality of types of mutual authentication processes with different authentication methods are performed between the first control unit and the second control unit, the security of mutual authentication by a certain authentication method is performed. Even if it is broken, mutual authentication security can be maintained by mutual authentication using other different authentication methods.

  In addition, for example, when the authentication result of each type of mutual authentication of each of the multiple types of mutual authentication is inappropriate, the type of mutual authentication is notified when the authentication result is notified to the control means of the authentication partner. However, it is not desirable for security because it is known that the authentication result is incorrect. In order to sum up the abnormalities of the results of executing all of the multiple types of mutual authentication and not to notify the control method of the other party of authentication, it is not possible to see which type of mutual authentication has occurred , Can improve security.

(8-2) In the gaming system according to (8-1), the mutual authentication processing means includes:
The second control means generates a challenge code (challenge code A in FIG. 17), transmits it to the first control means (CU communication control unit serial ID authentication response 1), and stores it in the first control means A response code (response code A in FIG. 17) is generated from the challenge code received using the identification information (SID of the CU communication control unit) and sent back to the second control means, and the second control Means for determining whether the received response code is appropriate using the stored identification information (SID of the CU communication control unit) (in the CU communication control unit 80, whether the received response code is appropriate) Is determined using the SID of the CU communication control unit),
The first control means generates a challenge code and transmits it to the second control means (challenge code in FIG. 16), and the identification information (SID of the main control unit) stored in the second control means A response code (response code shown in FIG. 16) is generated from the challenge code received using, and is sent back to the first control means (BB serial ID authentication response 2). The first control means stores the response code The second challenge response authentication process (in the main control unit 323, determines the suitability of the received response code using the SID of the main control unit) that determines the suitability of the received response code using the identification information that is received. .

  According to such a configuration, the first control means and the second control means transmit the challenge code from one control means to the other control means and use the identification information stored in the other control means. The challenge code and response code sent and received between the two gaming means are leaked because the challenge response method of authenticating the response code from the challenge code received and sending it back to one control means is performed. Even so, it is difficult to specify the stored identification information, and it is possible to prevent fraudulent acts on the gaming means due to leakage of the identification information as much as possible.

(8-3) In the gaming system according to (8-1) or (8-2), the first control means and the second control means are a pair of authentication information (common to each other) used for mutual authentication. Memorize the authentication key)
The mutual authentication processing means further includes:
The first control means executes arithmetic processing using the authentication information and transmits the result data of the arithmetic processing to the second control means (the main control unit uses the authentication key stored in the EEPROM) An encrypted random number B generated by encrypting the random number B is generated and transmitted to the CU communication control unit as a device authentication request 2 together with the MAC), and the second control unit calculates the result data using the authentication information First authentication for performing processing and returning the result data of the arithmetic processing to the first control means and checking the consistency between the result data returned by the first control means and the transmitted result data Processing (in the CU communication control unit, the consistency with the MAC is determined as a plaintext random number B combined with the received random number B);
The second control means executes arithmetic processing using the authentication information and transmits the result data of the arithmetic processing to the first control means (the CU communication control unit uses the authentication key stored in the EEPROM) An encrypted random number A obtained by encrypting the random number A is transmitted to the main control unit as a device authentication response 1 together with the MAC), and the first control means calculates the result data using the authentication information. A second authentication process is performed to check the consistency with the result data (in the main communication control unit, the consistency with the MAC is determined as a plaintext random number A combined with the received random number A). .

  According to such a configuration, the authentication process using the pair authentication information stored in the first control unit and the second control unit, which is used for mutual authentication, is also executed. Secure mutual authentication is possible and security is improved. Moreover, since this authentication process also transmits / receives the result data obtained by executing the calculation process using the stored authentication information, even if the transmitted / received result data leaks out, the authentication information It is difficult to identify and it is possible to prevent fraudulent acts on the gaming means due to information leakage as much as possible.

(8-4) Another aspect of the present invention is a gaming apparatus (first control means (main control section 323) and second control means (CU communication control section 80) that perform cryptographic communication with each other ( Card unit 3),
Both the first control means and the second control means are:
Mutual authentication processing means (CU communication control unit authentication sequence in FIG. 7A) for performing a plurality of types of mutual authentication processing with different authentication methods between the first control means and the second control means;
The result of executing all of the plural types of mutual authentication without notifying the control means of the authentication partner of the independent authentication result when the independent authentication result of each mutual authentication by the mutual authentication processing unit is inappropriate. And general notifying means for summarizing the abnormalities and notifying the control means of the authentication partner (processing for notifying the abnormalities in FIG. 9, FIG. 12, and FIG. 14 collectively).

  According to such a configuration, since a plurality of types of mutual authentication processes with different authentication methods are performed between the first control unit and the second control unit, the security of mutual authentication by a certain authentication method is performed. Even if it is broken, mutual authentication security can be maintained by mutual authentication using other different authentication methods.

  In addition, for example, when the authentication result of each type of mutual authentication of each of the multiple types of mutual authentication is inappropriate, the type of mutual authentication is notified when the authentication result is notified to the control means of the authentication partner. It is not desirable in terms of security because it is understood that the authentication result is inappropriate. However, when the independent authentication result of each mutual authentication is inappropriate due to the function of the general notification means, the authentication result of the independent authentication means In order to sum up the abnormalities of the results of executing all of the multiple types of mutual authentication and not to notify the control method of the other party of authentication, it is not possible to see which type of mutual authentication has occurred , Can improve security.

(8-5) In the gaming machine according to (8-4), the mutual authentication processing means includes:
The second control means generates a challenge code (challenge code A in FIG. 17), transmits it to the first control means (CU communication control unit serial ID authentication response 1), and stores it in the first control means A response code (response code A in FIG. 17) is generated from the challenge code received using the identification information (SID of the CU communication control unit) and sent back to the second control means, and the second control Means for determining whether the received response code is appropriate using the stored identification information (SID of the CU communication control unit) (in the CU communication control unit 80, whether the received response code is appropriate) Is determined using the SID of the CU communication control unit),
The first control means generates a challenge code and transmits it to the second control means (the challenge code in FIG. 16), and the identification information stored in the second control means (SID of the main control unit) A response code (response code shown in FIG. 16) is generated from the challenge code received using, and is sent back to the first control means (BB serial ID authentication response 2). The first control means stores the response code The second challenge response authentication process (in the main control unit 323, determines the suitability of the received response code using the SID of the main control unit) that determines the suitability of the received response code using the identification information that is received. .

  According to such a configuration, the first control means and the second control means transmit the challenge code from one control means to the other control means and use the identification information stored in the other control means. Because the challenge-response authentication is performed, in which a response code is generated from the received challenge code and sent back to one control means, the challenge code and response code sent and received between both control means are leaked. Even so, it is difficult to specify the stored identification information, and it is possible to prevent fraudulent acts on the control means due to leakage of the identification information as much as possible.

(8-6) In the gaming device according to (8-4) or (8-5), the first control unit and the second control unit are configured to use pair authentication information ( Memorize the authentication key consisting of a common key)
The mutual authentication processing means further includes:
The first control means executes arithmetic processing using the authentication information and transmits the result data of the arithmetic processing to the second control means (the main control unit uses the authentication key stored in the EEPROM) An encrypted random number B generated by encrypting the random number B is generated and transmitted to the CU communication control unit as a device authentication request 2 together with the MAC), and the second control unit calculates the result data using the authentication information First authentication for performing processing and returning the result data of the arithmetic processing to the first control means and checking the consistency between the result data returned by the first control means and the transmitted result data Processing (in the CU communication control unit, the consistency with the MAC is determined as a plaintext random number B combined with the received random number B);
The second control means executes arithmetic processing using the authentication information and transmits the result data of the arithmetic processing to the first control means (the CU communication control unit uses the authentication key stored in the EEPROM) An encrypted random number A obtained by encrypting the random number A is transmitted to the main control unit as a device authentication response 1 together with the MAC), and the first control means calculates the result data using the authentication information. A second authentication process is performed to check the consistency with the result data (in the main communication control unit, the consistency with the MAC is determined as a plaintext random number A combined with the received random number A). .

  According to such a configuration, the authentication process using the pair authentication information stored in the first control unit and the second control unit, which is used for mutual authentication, is also executed. Secure mutual authentication is possible and security is improved. Moreover, since this authentication process also transmits / receives the result data obtained by executing the calculation process using the stored authentication information, even if the transmitted / received result data leaks out, the authentication information It is difficult to specify and it is possible to prevent fraudulent acts against the control means due to information leakage as much as possible.

(9-1) The present invention is communicably connected to a management server (upper server 801), a gaming machine (pachinko machine 2, slot machine 2S) in which a player plays a game, and the management server and the gaming machine. A gaming system comprising a gaming device (card unit 3) that enables gaming by the gaming machine using the valuable value owned by the player,
The management server includes identification information registration means (authentication information storage unit) for registering identification information (main chip ID, payout chip ID) for confirming the authenticity of the gaming machine,
The gaming device is:
Registration confirmation means for performing confirmation processing for confirming whether or not the identification information of the gaming machine is registered in the management server (game machine chip information inquiry in FIGS. 83 and 84);
A game permitting means (card insertion / payment possible process in FIG. 83) for permitting a game by the gaming machine when registered as a result of the confirmation processing by the registration confirming means;
Identification information storage means (storage processing of gaming machine chip information in FIGS. 83 and 84) for storing identification information that is the object of confirmation when the confirmation processing by the registration confirmation means is executed;
After the identification information to be confirmed is stored in the identification information storage means, when the confirmation process by the registration confirmation means is in an offline state with the management server, the identification information is stored in the identification information storage means. Offline confirmation means for performing confirmation processing by comparing the identification information to be confirmed with the identification information of the gaming machine (the gaming machine chip information stored in the EEPROM of the main control unit 323 at the time of offline authentication information) To match the gaming machine chip information stored in the storage unit).

  According to such a configuration, when the identification information of the gaming machine is registered as a result of the confirmation process for confirming whether or not the identification information of the gaming machine is registered in the management server, the gaming by the gaming machine is permitted, while the management server Therefore, it is possible to prevent as much as possible the inconvenience that the gaming machine cannot be operated when authentication that the gaming machine based on the identification information is authentic cannot be obtained.

  Furthermore, the identification information that is the object of the confirmation when the confirmation process by the registration confirmation unit is executed is stored in the gaming device, and thereafter, when the registration confirmation process is performed, the management server is offline with the management server. Sometimes, the identification information stored in the gaming device and the identification information of the gaming machine are collated to enable offline confirmation processing, and it is possible to prevent a decrease in security when offline.

(9-2) In the gaming system according to (9-1), when the identification information storage unit stores the identification information to be confirmed, the identification information is registered or unregistered by the management server. (The communication control IC information is stored in association with the registered information in the authentication information storage unit of the main control unit 323).
When the gaming machine determines that the gaming machine corresponds to unregistered identification information as a result of the confirmation processing by the off-line confirmation means, the gaming device is within the range of a predetermined limited period. Limiting permission means for allowing a game by a machine (if the communication control IC information to be verified is stored in the authentication information storage unit and there is no registration information, it is determined that there is no communication control IC information, and the CU The execution of the communication control IC authentication sequence is permitted within the range of the permitted operation days at the time of authentication NG).

  According to such a configuration, when the gaming device stores the identification information to be confirmed, it also stores whether it is identification information registered by the management server or unregistered identification information. As a result of the confirmation processing in the gaming device in the game, when it is determined that it corresponds to unregistered identification information, in order to allow the game within the limited period, it is limited within the limited period even when offline. Games can be realized, and a decrease in security when offline can be prevented as much as possible.

(9-3) In another aspect of the present invention, a management server (upper server 801) for registering identification information (main chip ID, payout chip ID) for confirming the authenticity of the gaming machine and the gaming machine (pachinko machine) 2, a gaming device (card unit 3) that includes a communication unit that can communicate with the slot machine 2S), and that enables a game by the gaming machine using a valuable value owned by the player,
Registration confirmation means for performing confirmation processing for confirming whether or not the identification information of the gaming machine is registered in the management server (game machine chip information inquiry in FIGS. 83 and 84);
A game permitting means (card insertion / payment possible process in FIG. 83) for permitting a game by the gaming machine when registered as a result of the confirmation processing by the registration confirming means;
Identification information storage means (storage processing of gaming machine chip information in FIGS. 83 and 84) for storing identification information that is the object of confirmation when the confirmation processing by the registration confirmation means is executed;
After the identification information to be confirmed is stored in the identification information storage means, when the confirmation process by the registration confirmation means is in an offline state with the management server, the identification information is stored in the identification information storage means. Offline confirmation means for performing confirmation processing by comparing the identification information to be confirmed with the identification information of the gaming machine (the gaming machine chip information stored in the EEPROM of the main control unit 323 at the time of offline authentication information) To match the gaming machine chip information stored in the storage unit).

  According to such a configuration, when the identification information of the gaming machine is registered as a result of the confirmation process for confirming whether or not the identification information of the gaming machine is registered in the management server, the game by the gaming machine is allowed, while the confirmation process As a result of this, even if the registered confirmation could not be confirmed, the gaming machine based on the identification information is authentic by the management server because gaming by the gaming machine is allowed within a predetermined limited period. Inconvenience that the gaming machine cannot be operated when it is not possible to obtain the authentication can be prevented as much as possible.

  Furthermore, the identification information that is the object of the confirmation when the confirmation process by the registration confirmation unit is executed is stored in the gaming device, and thereafter, when the registration confirmation process is performed, the management server is offline with the management server. Sometimes, the identification information stored in the gaming device and the identification information of the gaming machine are collated to enable offline confirmation processing, and it is possible to prevent a decrease in security when offline.

(9-4) In the gaming machine according to (9-3), the identification information storage means stores the identification information registered by the management server or unregistered when storing the identification information to be confirmed. (The communication control IC information is stored in association with the registered information in the authentication information storage unit of the main control unit 323).
The limitation permitting means, when it is determined that the gaming machine corresponds to unregistered identification information as a result of the confirmation processing by the offline confirmation means, the game within a predetermined limited period. Including a limit permitting means for allowing a game by a machine (if the communication control IC information to be verified is stored in the authentication information storage unit and there is no registration information, it is determined that there is no communication control IC information. The execution of the communication control IC authentication sequence is permitted within the range of the operation permission days at the time of CU authentication NG).

  According to such a configuration, when the gaming device stores the identification information to be confirmed, it also stores whether it is identification information registered by the management server or unregistered identification information. As a result of the confirmation processing in the gaming device in the game, when it is determined that it corresponds to unregistered identification information, in order to allow the game within the limited period, it is limited within the limited period even when offline. Games can be realized, and a decrease in security when offline can be prevented as much as possible.

(10-1) The present invention provides first control means (main control unit 323 or CU3, P stand 2, Z counter, POS terminal, etc.) and second control means (CU communication control unit) that perform cryptographic communication with each other. 80, or CU3, P stand 2, Z counter, POS terminal, etc.)
Both the first control means and the second control means are:
First cryptographic communication processing means for performing cryptographic communication with each other (cryptographic communication in the SE1 mode of FIGS. 8, 9, 11, 12, 13, 14, and 19);
Second cryptographic communication processing means for performing cryptographic communication with a higher security level than the cryptographic communication performed by the first cryptographic communication processing means after the cryptographic communication performed by the first cryptographic communication processing means (encryption using the SE2 mode in FIGS. 7 and 15). Communication).

  According to such a configuration, the encrypted communication is performed by the first encrypted communication processing means, and after the encrypted communication, the encrypted communication having a higher security level than the encrypted communication by the first encrypted communication processing means is performed. Since the encryption communication by the encryption communication processing means is performed, even if the security of the encryption communication by the first encryption communication processing means is broken, the second encryption communication process that is an encryption communication with a higher security level that is performed thereafter. The encryption communication by the means is possible, and the security can be maintained by the high security level encryption communication by the second encryption communication processing means.

(10-2) In the gaming system of (10-1), the second encrypted communication processing means is
Key update means (FIG. 69 (a)) used for encryption communication performs key update processing for independently updating the first control means and the second control means by the same update method. 67 (b) to FIG. 73 counter update processing),
Encryption means for generating ciphertext using the key updated by the key update means (FIG. 67 (b), S105 in FIG. 74 (a));
Decryption means (FIG. 68) for receiving the ciphertext generated by the encryption means and decrypting it using the key updated by the key update means, S133 in FIG. 74 (b),
The key update means performs the key update process in response to transmission / reception of ciphertext (FIGS. 67 (b) to 73; one transmission or reception (ciphertext data length 96 bytes) / (key length 16 bytes). ) = 6 is added and updated),
Both the first control means and the second control means are:
Key sharing means (S103 in FIG. 74 (a), FIG. 74) for sharing the key by encrypting the initial key before being updated by the key updating means by the first encryption communication processing means and distributing it to the partner control means. (B) S130, S131).

  According to such a configuration, since the encryption key used for the encryption communication is independently updated by the same update method in the first control means and the second control means, the encryption communication using the fixed key that does not change is performed. Compared with security.

(10-3) In the gaming system of (10-2) above, the encryption key is an initial vector portion (FIG. 67 (a) is also an initial vector portion R) that takes over without updating the initial key data. , Including an update unit (message counter unit N and cipher block counter unit I) to be updated,
The key update means updates the update unit without updating the initial vector unit (S107, S108, S109 in FIG. 74A),
The key sharing means distributes and shares the initial vector part as the initial key (S103 in FIG. 74A and S130 and S131 in FIG. 74B).

  According to such a configuration, since the initial vector portion that is not updated is distributed and shared as the initial key, it is updated by the key update unit as a cause when the decryption unit cannot decrypt. It is possible to determine the cause of whether the renewal part has been misunderstood or the initial vector part has been misunderstood for some reason.

(10-4) According to another aspect of the present invention, there is provided a gaming apparatus (first control means (main control section 323) and second control means (CU communication control section 80) that perform cryptographic communication with each other ( Card unit 3),
Both the first control means and the second control means are:
First cryptographic communication processing means for performing cryptographic communication with each other (cryptographic communication in the SE1 mode of FIGS. 8, 9, 11, 12, 13, 14, and 19);
Second encryption communication processing means (encrypted communication in the SE2 mode of FIGS. 7 and 15) that performs encrypted communication having a higher security level than the encryption communication by the first encryption communication processing means.

  According to such a configuration, the encrypted communication is performed by the first encrypted communication processing means, and after the encrypted communication, the encrypted communication having a higher security level than the encrypted communication by the first encrypted communication processing means is performed. Since the encryption communication by the encryption communication processing means is performed, even if the security of the encryption communication by the first encryption communication processing means is broken, the second encryption communication process that is an encryption communication with a higher security level that is performed thereafter. The encryption communication by the means is possible, and the security can be maintained by the high security level encryption communication by the second encryption communication processing means.

(10-5) In the gaming machine according to (10-4), the second encrypted communication processing means includes:
Key update means (FIG. 67 (a)) used for encryption communication performs key update processing for independently updating the first control means and the second control means by the same update method. 67 (b) to FIG. 75 counter updating process),
Encryption means for generating ciphertext using the key updated by the key update means;
Decryption means (FIG. 67 (b), S105 in FIG. 74 (a)) that receives the ciphertext generated by the encryption means and decrypts it using the key updated by the key update means,
The key update means performs the key update process in response to transmission / reception of ciphertext (FIGS. 67 (b) to 73; one transmission or reception (ciphertext data length 96 bytes) / (key length 16 bytes). ) = 6 is added and updated),
Both the first control means and the second control means are:
Key sharing means (S103 in FIG. 74 (a), FIG. 74) for sharing the key by encrypting the initial key before being updated by the key updating means by the first encryption communication processing means and distributing it to the partner control means. (B) S130, S131).

  According to such a configuration, since the encryption key used for the encryption communication is independently updated by the same update method in the first control means and the second control means, the encryption communication using the fixed key that does not change is performed. Compared with security.

(10-6) In the gaming machine according to (10-4) or (10-5), the encryption key is an initial vector portion (FIG. 67 (a)) that takes over without updating the initial key data. An initial vector part R) and an update part (message counter part N and cipher block counter part I) to be updated,
The key update means updates the update unit without updating the initial vector unit (S107, S108, S109 in FIG. 74A),
The key sharing means distributes and shares the initial vector part as the initial key (S103 in FIG. 74A and S130 and S131 in FIG. 74B).

  According to such a configuration, since the initial vector portion that is not updated is distributed and shared as the initial key, it is updated by the key update unit as a cause when the decryption unit cannot decrypt. It is possible to determine the cause of whether the renewal part has been misunderstood or the initial vector part has been misunderstood for some reason.

(11-1) A game that can be played with points, a gaming machine (pachinko machine 2) to which points are added according to the occurrence of a prize, and a player's own gaming value (prepaid balance, number of balls, Or a gaming system comprising a gaming device (card unit 3) that is communicably connected to the gaming machine while adding points using the number of balls)
A mode switching means for switching between a sales mode in which a player can play a game and a non-business mode (request for changing the trial hit mode in FIG. 49);
The gaming machine is
Specific means (microcomputer for gaming machine control, addition ball counter, subtraction ball counter) for identifying the amount of change in the number of points (addition balls, subtraction balls) depending on the use of the game and the occurrence of winnings,
Update information (operation response including the number of added balls and the number of subtracted balls) that can identify the amount of change, and information transmitting means (ball number control unit 17) for transmitting to the gaming device,
The gaming device is:
Main possession point storage means for storing points (RAM that stores “the number of game balls”);
Information receiving means (CU communication control unit 80) for receiving the update information;
A score update unit (main control unit 323) for updating the score stored in the main score storage unit based on the update information;
The score update means does not update the score in the non-business mode (the number of added balls, the number of subtracted balls, and the number of game balls are not transmitted from the P stand 2 during the test hit mode, and the game balls are played in the CU3. Do not update the number).

  According to such a configuration, since the point management is performed on the gaming device side, it is not necessary to provide the point management function on the gaming machine side, and accordingly, the cost of the gaming machine can be suppressed as much as possible. .

  In particular, gaming machines tend to have a shorter replacement cycle in a game arcade than gaming devices in order to be able to provide more highly-oriented games quickly. For that reason, there is an advantage that the running cost of the game hall where the gaming machine is introduced can be reduced by holding the point management function not on the gaming machine side but on the gaming device side to reduce the cost of the gaming machine. is there.

  In addition, since the points are not updated in the non-business mode, the player enters the non-business mode when switching to the business mode in which the player can play and the non-business mode and returning to the business mode. The number of points is the same as the number of points just before the transition, and it is possible to prevent the number of points from being wrong.

(11-2) In the gaming system according to (11-1), the gaming device includes:
A score storage means for storing score data in the sales mode when the business mode is shifted to the non-business mode (a RAM for storing the total number of added balls, the total number of subtracted balls, and the number of game balls in FIG. 2) 90, a RAM for storing the total addition number, the total subtraction number, and the number of points in FIG.
When the operation for canceling the non-business mode is performed, the game state return is made such that the game is resumed by returning to the score in the business mode based on the score data stored in the score storage means Means (when returning to the non-business mode, the game is resumed based on the total number of added balls, the total number of subtracted balls, and the number of game balls, or the total added number, the total number of subtracted points, and the number of points).

  According to such a configuration, when the business mode is shifted to the non-business mode and the business mode is restored, the game can be resumed from the number of points immediately before the transition to the non-business mode.

(11-3) In the gaming system according to (11-1) or (11-2), the gaming machine includes:
A game area (game area 27) in which a game medium is launched; and
Non-business mode canceling means for canceling the non-business mode (FIG. 61; game) on the condition that the presence / absence of winning of the launched game medium is confirmed when the operation for canceling the non-business mode is performed Is completed, the card unit is notified of the completion of mode switching preparation by “operation response”.

  According to such a configuration, it is possible to prevent inconvenience that the non-business mode is canceled although the presence / absence of winning of the launched game medium is not determined.

(11-4) In the gaming system according to any one of (11-1) to (11-3), the gaming machine includes:
It includes a variable display device (variable display device) that can change the display state, and when the display result of the variable display device becomes a predetermined specific display mode, it becomes a specific gaming state (big hit) that is advantageous to the player ,further,
When the variable display device receives a command to shift to the non-business mode during variable display or during the specific game state, the variable display device is not variably displayed and is not in the specific game state Non-business mode transition control means for performing control to shift to the non-business mode after entering the state (FIG. 62; switching the operation mode of the main control board to the payout control unit after confirming that the design is not changing and not being a big hit Send ready).

  According to such a configuration, it is possible to prevent the inconvenience of shifting to the non-business mode in spite of the variable display of the variable display device or the specific gaming state.

(11-5) According to another aspect of the present invention, a player is provided with a connection unit that is communicably connected to a gaming machine that can be played with points and that has points added in response to the occurrence of a prize. A gaming device (card unit 3) for adding points using the gaming value of possession,
A score storage means for storing the score (RAM for storing “the number of game balls”);
Information receiving means (CU communication control unit 80) for receiving, from the gaming machine, update information capable of specifying the amount of change in points according to the use of the game and the occurrence of winnings;
A score update unit (main control unit 323) for updating the score stored in the score storage unit based on the update information;
The score update means does not update the score when the gaming machine is shifted from a sales mode in which a player can play a game to a non-business mode (P in the trial hit mode). The number of added balls, the number of subtracted balls, and the number of game balls are not transmitted from the base 2, and the number of game balls is not updated in CU3).

  According to such a configuration, since the point management is performed on the gaming device side, it is not necessary to provide the point management function on the gaming machine side, and accordingly, the cost of the gaming machine can be suppressed as much as possible. .

  In particular, gaming machines tend to have a shorter replacement cycle in a game arcade than gaming devices in order to be able to provide more highly-oriented games quickly. For that reason, there is an advantage that the running cost of the game hall where the gaming machine is introduced can be reduced by holding the point management function not on the gaming machine side but on the gaming device side to reduce the cost of the gaming machine. is there.

  In addition, since the points are not updated in the non-business mode, the player enters the non-business mode when switching to the business mode in which the player can play and the non-business mode and returning to the business mode. The number of points is the same as the number of points just before the transition, and it is possible to prevent the number of points from being wrong.

  The embodiment disclosed this time should be considered as illustrative in all points and not restrictive. The scope of the present invention is defined by the terms of the claims, rather than the description above, and is intended to include any modifications within the scope and meaning equivalent to the terms of the claims.

  2 Pachinko machine, 2S slot machine, 3 card unit, 4 wooden frame, 5 front frame, 6 glass door, 12 glass door closing detector, 16,116 main control board, 17,117 payout control unit, 26 game board, 309 Card insertion / discharge port, 312 display, 319 replay button, 321 lending button, 322 return button, 323 main control unit, 54 display.

Claims (2)

A gaming system comprising a first control means and a second control means for performing cryptographic communication with each other,
Both the first control means and the second control means are:
Mutual authentication processing means for performing a plurality of types of mutual authentication processing with different authentication methods between the first control means and the second control means;
The result of executing all the plural types of mutual authentication without notifying the control means of the authentication partner of the authentication result when the authentication result of each mutual authentication by the mutual authentication processing unit is inappropriate. A game system, comprising: a general notifying means for summarizing abnormalities and notifying a control means of an authentication partner. A gaming device comprising a first control means and a second control means for performing cryptographic communication with each other,
Both the first control means and the second control means are:
Mutual authentication processing means for performing a plurality of types of mutual authentication processing with different authentication methods between the first control means and the second control means;
The result of executing all the plural types of mutual authentication without notifying the control means of the authentication partner of the authentication result when the authentication result of each mutual authentication by the mutual authentication processing unit is inappropriate. A game apparatus comprising: a general notifying means for summarizing abnormalities and notifying the control means of the authentication partner.

Images