JP5284496B2 - GAME SYSTEM AND GAME DEVICE - Google Patents

Description

  The present invention relates to a gaming system including a server installed in a game arcade and a gaming device that enables a gaming machine to use a gaming value owned by a player, and the gaming device.

  Conventionally, as a means for authenticating whether or not a main control board of a gaming machine which is an example of a gaming machine installed in a game hall is appropriate, the chip ID of the main control board is sent to the center via an in-ground management device. There is a transmission to the management device, and the center management device checks whether or not the transmitted chip ID matches the regular chip ID stored in advance (Patent Document 1).

JP 2010-162425 A

  However, in this conventional device, information such as a chip ID necessary for authentication is deleted immediately after transmission. As a result, every time authentication is performed, the center management apparatus must be inquired and collated via the on-site management apparatus, resulting in inconvenience that complicates the processing associated with authentication.

  In other words, in the conventional system, information necessary for authentication is erased immediately after transmission, and thus there is a disadvantage in that the processing associated with authentication is complicated.

  The present invention has been conceived in view of such circumstances, and an object of the present invention is to prevent inconvenience that causes complication of processing due to the information necessary for authentication being immediately deleted.

(1) The present invention uses a server (a hall server in FIG. 10) installed in a game arcade and a gaming value (prepaid balance, number of balls, or number of stored balls) owned by the player (P units) 2. A gaming system comprising a gaming device (CU3) that enables gaming by S units 2S),
The server transmits game hall identification information (unified store code) for identifying the game hall in which the server is installed to the gaming device (transmits the unified store code of FIG. 10). Including a hall server CPU and input / output interface)
The gaming device is:
Authentication processing means (substrate initial key / shipping key authentication in FIG. 17, communication control IC authentication sequence using temporary authentication key in FIG. 24) for performing authentication processing using temporary authentication data (substrate initial key, temporary authentication key); ,
On the condition that the authentication result by the authentication processing means is proper, the main authentication data acquisition storage means (the board authentication key in FIG. 10 is used for acquiring and storing the main authentication data (board authentication key, main authentication key)). The update information is received from the CU control unit to be received, the security board information inquiry sequence in FIGS. 13 and 14, the S211 and S212 in FIG. 26A, the S224 in FIG. 27A, and the CU control unit in FIG. SC that generates and stores the authentication key, S216 and S217 in FIG. 26B, S226 and S227 in FIG. 27B,
This authentication processing means for executing authentication processing using the main authentication data stored in the main authentication data acquisition storage means (substrate authentication key authentication in FIG. 18, communication control IC using the main authentication key in FIG. 24) Authentication sequence) and
Match determination means (S1102 in FIG. 28) for comparing the game hall identification information transmitted this time from the game hall identification information transmission means and the game hall identification information transmitted last time to determine whether they match. ,
The authentication data stored in the authentication data acquisition and storage means is erased when the match determination means determines that they do not match in the state where the authentication processing by the authentication processing means is executed, and the book Authentication processing switching means (S1104, S2205 in FIG. 28) for switching from authentication processing using authentication data to authentication processing using temporary authentication data.

  According to the above configuration, in order to perform authentication processing using the temporary authentication data and the main authentication data stored in the gaming device itself, there is no need to inquire and authenticate the center management device every time authentication is performed. Inconveniences that cause complications can be prevented. Further, when the gaming device is moved to another game hall, the game hall identification information for identifying the game hall transmitted this time from the game hall identification information transmitting means, and the game hall identification information transmitted last time, Is determined by the match determination means, the authentication data stored in the authentication data acquisition storage means is erased, and the authentication process using the authentication data is used for the temporary authentication data. Switched to authentication processing. As a result, it is possible to prevent inconvenience that the main authentication data used before the relocation is leaked at the relocation destination game arcade, and security can be ensured by an authentication process using temporary authentication data.

(2) According to another aspect of the present invention, it is possible to play a game using a gaming machine (P 2 or S 2S) using a game value (prepaid balance, number of balls, or number of balls) owned by the player. A gaming device (CU3),
Authentication processing means (substrate initial key / shipping key authentication in FIG. 17, communication control IC authentication sequence using temporary authentication key in FIG. 24) for performing authentication processing using temporary authentication data (substrate initial key, temporary authentication key); ,
On the condition that the authentication result by the authentication processing means is proper, the main authentication data acquisition storage means (the board authentication key in FIG. 10 is used for acquiring and storing the main authentication data (board authentication key, main authentication key)). The update information is received from the CU control unit to be received, the security board information inquiry sequence in FIGS. 13 and 14, the S211 and S212 in FIG. 26A, the S224 in FIG. 27A, and the CU control unit in FIG. SC that generates and stores the authentication key, S216 and S217 in FIG. 26B, S226 and S227 in FIG. 27B,
This authentication processing means for executing authentication processing using the main authentication data stored in the main authentication data acquisition storage means (substrate authentication key authentication in FIG. 18, communication control IC using the main authentication key in FIG. 24) Authentication sequence) and
Unified store code of the game arcade identification information receiving means (10 for receiving the game arcade identification information for identifying the game field transmitted from the server (hall server of FIG. 10) installed in Yu Technical field Receiving SC325b input / output interface),
This with the received game arcade identification information and determines coincidence determining means for determining whether or not matching by comparing the game arcade identification information previously received (S1102 in FIG. 28) by the Yu technique field identification information receiving means,
The authentication data stored in the authentication data acquisition and storage means is erased when the match determination means determines that they do not match in the state where the authentication processing by the authentication processing means is executed, and the book Authentication processing switching means (S1104, S2205 in FIG. 28) for switching from authentication processing using authentication data to authentication processing using temporary authentication data.

  According to the above configuration, in order to perform authentication processing using the temporary authentication data and the main authentication data stored in the gaming device itself, there is no need to inquire and authenticate the center management device every time authentication is performed. Inconveniences that cause complications can be prevented. Further, when the gaming device is moved to another game hall, the game hall identification information for identifying the game hall transmitted this time from the game hall identification information transmitting means, and the game hall identification information transmitted last time, Is determined by the match determination means, the authentication data stored in the authentication data acquisition storage means is erased, and the authentication process using the authentication data is used for the temporary authentication data. Switched to authentication processing. As a result, it is possible to prevent inconvenience that the main authentication data used before the relocation is leaked at the relocation destination game arcade, and security can be ensured by an authentication process using temporary authentication data.

(3) In the gaming system of (1) or the gaming device of (2),
The gaming device is:
First control means (CU control unit 323 or SC325b);
Second control means (SC 325b or communication control IC 325a) connected to be communicable with the first control means,
The authentication processing means performs a mutual authentication process using the temporary authentication data between the first control means and the second control means (the substrate initial key authentication sequence of FIGS. 13 and 15 or the FIG. 24 of FIG. 24). Communication control IC authentication sequence using temporary authentication key).

  According to said structure, the security of the 1st control means and the 2nd control means which are contained in the game device can be ensured.

(4) In the gaming system or gaming device of (3) above,
The first control means is a gaming device control means (CU control unit 323) for controlling the gaming device,
The second control means is security check means (SC325b) for checking security.

  According to said structure, the security of the game apparatus control means for controlling a game device and the security check means for performing a security check can be ensured.

(5) In the gaming system or gaming device of (3) above,
The first control means is a security check means (SC325b) for performing a security check,
The second control means is communication control means (communication control IC 325a) for performing communication control with the gaming machine.

  According to said structure, the security of the security check means for performing a security check and the communication control means for performing communication control with a game machine can be ensured.

It is a front view which shows a card unit and a pachinko machine. It is a block diagram which shows the control circuit used for a card unit and a pachinko machine. It is explanatory drawing for demonstrating the various data memorize | stored in the card unit side and the pachinko machine side, and its transmission / reception. It is explanatory drawing explaining the outline of the command and response which are transmitted / received between a card unit and a pachinko machine. It is a figure which shows an example of a process with the card unit and the pachinko machine at the time of power activation. It is a figure which shows an example of a process with a card unit and a pachinko machine when a card is inserted in a card unit. It is a figure which shows an example of a process with a card unit and a pachinko machine when lending a ball from the prepaid balance of the inserted card. It is a figure which shows an example of a process with a card unit and a pachinko machine when paying out a lot of balls and paying out a stored ball. It is a figure which shows an example of a process with a card unit and a pachinko machine when returning the inserted card | curd. It is a figure for demonstrating the encryption key used for communication between a key management server and communication control IC. It is explanatory drawing explaining the outline of the command and response transmitted / received between CU control part 323 and security chip (SC) 325b. It is explanatory drawing explaining the outline of the command and response transmitted / received between CU control part 323 and security chip (SC) 325b. It is a figure for demonstrating the starting process at the time of power activation of CU control part 323, and hall installation. It is a figure for demonstrating the process of power activation and normal start-up of the CU control part. It is a figure for demonstrating the process at the time of the power activation of CU control part 323, and factory shipment. It is a figure for demonstrating the process of the authentication sequence of a board | substrate maker code. It is a figure for demonstrating the process of the authentication sequence of a board | substrate initial stage key or a board | substrate shipping key. It is a figure for demonstrating the process of the authentication sequence of board | substrate serial ID and a board | substrate authentication key. It is a figure for demonstrating the process in the case of inquiring about security board information. It is a figure for demonstrating the process of a gaming machine chip information inquiry sequence. It is a figure for demonstrating the process of a board | substrate authentication key authentication abnormality sequence. It is a figure explaining the process of the inquiry timeout sequence of security board | substrate information. It is a figure explaining the process of the inquiry (collation) timeout sequence of gaming machine chip information. It is a figure explaining the process of the business message sequence between SC325b and communication control IC325b. It is a flowchart for demonstrating the process of board | substrate authentication key authentication. It is an example of the flowchart for demonstrating the switching process of communication mode, (a) is a communication mode switching process between CU control part-SC, (b) is a communication mode switching process between SC-communication control IC. It is another example of the flowchart for demonstrating the switching process of communication mode, (a) is the communication mode switching process between CU control part-SC, (b) is the communication mode switching process between SC-communication control IC. is there. It is a flowchart for demonstrating the authentication operation | movement of the check of a unified store code. It is a flowchart for demonstrating the authentication operation | movement of a board maker code. It is a perspective view which shows the state which opened the front door of the slot machine. It is explanatory drawing for demonstrating the various data currently stored in each of a card unit and a slot machine, and its transmission / reception aspect.

Hereinafter, embodiments of the present invention will be described with reference to the drawings.
<Configuration of pachinko machine>
First, the configuration of the pachinko machine according to the present embodiment will be described with reference to FIG. Each game island (not shown) arranged in the game hall (hall) has an enclosed circulation pachinko machine (hereinafter abbreviated as a game machine, pachinko machine, or P machine) 2 as an example of a game machine. Has been. Note that a card unit (hereinafter also abbreviated as CU) 3 as an example of a gaming device is installed in a one-to-one correspondence with the pachinko machine 2 at a side position on a predetermined side of the pachinko machine 2. Yes.

  The pachinko machine 2 encloses a pachinko ball as an example of a game medium inside, and when the player operates the hitting operation handle 25, the firing motor 18 (see FIG. 2) is driven to make one shot of the enclosed ball. The game board 26 is configured so that it can be played one by one in the game area 27 in front of the game board 26. Specifically, a touch sensor is provided around the batting operation handle 25, and the player's hand touches the touch sensor while the player is operating the batting operation handle 25, and the player's hand. Is detected by the touch sensor, and the firing motor 18 is driven. In this state, the hitting momentum is adjusted in accordance with the amount of rotation of the hitting operation handle 25 by the player, and the ball is shot into the game area 27.

  The pachinko machine 2 shown in FIG. 1 is a so-called first type of pachinko machine, and a variable display device (also referred to as a special symbol) 278 is provided in the center of the game area 27. In addition, the game area 27 is provided with a plurality of types of winning holes through which the inserted pachinko balls can be won. In the game area 27 shown in FIG. 1, one large winning opening (variable winning ball apparatus) 271, three normal winning holes 272, 273, 274 and three start winning holes 275, 276, 277 are shown. ing. In particular, the start winning opening 276 is configured by an electric tulip that can be changed between a first state (for example, an open state) that is advantageous to the player and a second state (for example, a closed state) that is disadvantageous to the player. .

  The variable display device 278 variably displays based on the detection signal of the start winning ball won in each start winning opening 275, 276, 277. When the display result of the variable display device is a combination of specific identification information (for example, a glance), a big hit state is established and the big prize opening 271 is opened.

  In addition, since the display result of the variable display device is a combination of predetermined special identification information (for example, a combination of probability variation symbols such as 777) out of a combination of jackpot symbols (grooves), the probability variation big hit state is A probability variation state (probability variation state) in which the occurrence probability of the jackpot is improved after the occurrence of the jackpot state is generated.

  Pachinko balls that have been driven into the game area 27 win at any of the winning openings or are collected at the out opening (not shown) without winning. The pachinko balls won at the winning opening and the pachinko balls collected at the out mouth are again returned to the hitting ball launch position through the collection path in the pachinko machine 2. Then, when the player operates the hitting operation handle 25, the pachinko ball at the hitting position is again shot into the game area 27.

  A display 54 is provided at a position below the game area 27 in the pachinko machine 2. The display 54 is composed of a liquid crystal display device.

  Further, a counting button 28 is provided at the left position of the hitting operation handle 25 in the pachinko machine 2 for counting the game balls to the holding balls. As will be described in detail later, when the count button 28 is pressed once, for example, 100 balls are counted from the game balls to the holding balls, and when pressed for a long period of time (long press), the game balls currently held are considered. Then, the number of game balls is counted from the number of balls corresponding to the number of balls pressed.

  Thus, since the counting button 28 is provided on the P table side, the operability of the player sitting facing the P table can be improved as compared with the case where the counting button 28 is provided on the CU side.

<Configuration of card unit>
Next, the configuration of the card unit according to the present embodiment will be described with reference to FIG. This card unit 3 is a visitor card (also referred to as a general card) having a prepaid function, which is a game recording medium issued to a general player who has not registered as a member, or a member who has registered as a member in the game hall. A membership card that is a game recording medium issued to a player is received. Visitor cards and membership cards are composed of IC cards.

  The card unit 3 that has received these cards has a function of converting the game value (for example, the card balance, the number of possessed balls, or the number of stored balls) possessed by the player specified by the record information of the card into “game ball data”. Have In the pachinko machine 2, a ball game equivalent to the number of balls specified by the data of game balls is made possible. That is, “game ball data” is data indicating the number of remaining fireable shots. In the following description, “game ball data” is simply referred to as “game ball” in the same manner as a stored ball and a holding ball.

  On the front side of the card unit 3, a bill insertion slot 302 for inserting bills, a protruding portion 305 formed to project forward from the front side of the device, and a card insertion / discharge port for inserting a membership card or a visitor card 309 etc. are provided. The member card or visitor card inserted into the card insertion / discharge port 309 is received by a card reader / writer (not shown), and information recorded on the card is read.

  In the protrusion 305 described above, on the surface facing the player, the display 312 and the membership card ID recorded on the membership card (also simply referred to as the card ID) and the membership card when the membership card is received. An IR (Infrared) photosensitive unit 320 receives an infrared signal from a replay button 319 for executing a replay game using the number of stored balls specified by the ID and a remote control (not shown) possessed by an attendant of the game hall. An IR light receiving unit that converts the signal into an electronic signal and outputs it is provided.

  The display 312 displays the prepaid balance (also referred to as card balance or simply balance) recorded on the inserted game recording medium (card), but can display the number of game balls and other various information. In addition, the surface is configured with a transparent touch panel, and various operations can be input by touching various display items displayed on the display unit of the display 312 with a finger.

  When the replay button 319 is operated and the number of possessed balls acquired by the player is recorded on the inserted card, a part of the number of possessed balls is withdrawn and converted into a game ball, and the converted game ball Based on this, it becomes possible to play a game with the pachinko machine 2. On the other hand, if the inserted card is a membership card and the number of possessions is not recorded and the stored balls are recorded in the hall management computer, etc., a part of the stored balls is withdrawn and converted into game balls Thus, a game with the pachinko machine 2 becomes possible. That is, when both the stored ball and the holding point are stored in association with the inserted card, the holding ball is withdrawn preferentially. In addition to the replay button 319, a dedicated ball payout button for withdrawing the possession ball may be provided, and the replay button 319 may be a button dedicated to withdrawal of the stored ball.

  Here, the “storing ball” is a game medium deposited in a game hall, and is generally managed by a hall management computer or other management computer installed in the game hall.

  “Number of possessed balls” is the number of balls that the player possesses as a result of the player playing the game with the gaming machine on the card, and the number of balls that have not yet been deposited in the game hall That is. Generally, the number of balls that the player has acquired on the day of the game hall is called “mochidama”, and the number of balls that the player has acquired before the previous day and that has been deposited in the amusement hall is “save ball”. Say.

  The “game ball” is data on the number of balls that can be fired by the gaming machine. As described above, this data is generated in exchange for withdrawing the balance of the prepaid card, the holding ball, or the stored ball.

  Note that the number of possessed balls may be managed by a management device for managing the number of possessed balls set in the game hall. In short, the difference between “sold balls” and “mochidama” is the number of balls that have been deposited in the amusement hall as a result of a storage operation for depositing in the amusement hall, or is still deposited in the amusement hall. It is a point whether it is the number of balls of the stage which is not.

  In the present embodiment, the stored ball data is not recorded directly on the membership card, but is stored in association with the membership card number in a hall server (see FIG. 10) installed in a game hall such as a hall management computer, based on the membership card number. It is configured to be able to search for the corresponding storage balls. On the other hand, Mochitama records directly on the card. However, the present invention is not limited to this, and both may be stored in the hall server in association with the card number. In the case of a visitor card, Mochitama is recorded directly on the visitor card. However, the present invention is not limited to this, and the ball may be stored in the hall server in association with the card number. When storing in the hall server in association with the card number, data that can specify the time stored in the hall server may be written in the card (member card, visitor card) and discharged. Also, the prepaid balance is directly written on a card (member card, visitor card) and discharged.

  Note that the timing for storing the holding ball in a card (member card, visitor card) or hall server is stored in a fixed period, for example, in real time every time the counting button 28 is operated and the counting process is performed. Or when storing the card in a batch.

  The banknote inserted into the banknote insertion slot 302 is taken in by a currency discriminator (not shown), and its authenticity and banknote type are identified.

  A ball lending button (also referred to as a lending button) 321 and a return button 322 are further provided on the front side of the card unit 3. The ball lending button 321 is a button for performing an operation (conversion operation to a game ball) for withdrawing the balance recorded on the inserted card and using it in a game by the pachinko machine 2. The return button 322 is operated when the player finishes the game, and the number of game balls determined at the end of the game on the inserted card (the number of balls at the time of card insertion-the number of conversions to game balls + counting operation) This is an operation button for memorizing and discharging the number of possessed balls counted by.

<Configuration of card unit and pachinko machine>
FIG. 2 is a block diagram showing the configuration of the card unit 3 and the pachinko machine 2. With reference to FIG. 2, the outline of the control circuit of the card unit 3 and the pachinko machine 2 will be described.

  The card unit 3 is provided with a CU control unit 323 composed of a microcomputer or the like. The CU control unit 323 includes a CPU (Central Processing Unit) as a control center, a ROM (Read Only Memory) storing a program for operating the CPU and control data, and a RAM (RAM) functioning as a work area of the CPU. Random Access Memory) and an input / output interface for maintaining signal consistency with peripheral devices.

  The CU control unit 323 is provided with an external communication unit (not shown) for communicating with a hall management computer and a hall server (see FIG. 63) for security management, and the payout of the pachinko machine 2 A security board 325 is provided for communication with the control board 17 while ensuring security. The card unit 3 is provided with a connection part (not shown) to the pachinko machine 2 side, and the pachinko machine 2 is provided with a connection part (not shown) to the card unit 3 side. These connection parts are constituted by connectors, for example.

  The security board 325 on the CU side and the payout control board 17 on the P platform side are communicably connected via this connector and connection wiring. The security board 325 is provided with a communication control IC 325a for controlling communication between the security board 325 and the payout control board 17, and a security chip (SC) 325b for monitoring the security of the pachinko machine 2. The security chip (SC) 325b includes a CPU (Central Processing Unit) as a control center, a ROM (Read Only Memory) that stores programs and control data for operating the CPU, and a RAM that functions as a work area for the CPU. (Random Access Memory), an input / output interface for maintaining signal consistency with peripheral devices, and the like are provided. The SC 325b further includes a fraud detection unit 1325. The fraud detection unit 1325 performs fraud detection by monitoring the game ball addition request information notified from the CU control unit 323 to the P-unit 2, and manages keys when fraud is detected. Notify the server (see FIG. 10). Also, the setting value (constant) for fraud detection is notified from the key management server as board control information. The communication control IC 325a includes a CPU (Central Processing Unit) as a control center, a ROM (Read Only Memory) that stores programs and control data for operating the CPU, and a RAM (Random Access) that functions as a work area for the CPU. Memory) and an input / output interface for maintaining signal consistency with peripheral devices.

  Each RAM of the CU control unit 323, the security chip (SC) 325b, and the communication control IC 325a is composed of a backup RAM whose stored data is not erased even when the power is interrupted. Note that an EEPROM may be used instead of the backup RAM.

  The authenticity and type of the banknote are identified by the above-described money identifier, and the identification result signal is input to the CU control unit 323. When the IR photosensitive unit 320 receives infrared rays emitted from a remote controller owned by a game attendant, the received light signal is input to the CU control unit 323. The card reader / writer reads the recorded information of the inserted card, and the read information is input to the CU control unit 323. At the same time, the data to be written to the inserted card from the CU control unit 323 to the card reader / writer. When transmitted, the card reader / writer writes the data to the inserted card.

  The CU control unit 323 manages and stores the player's possession balls when the player is playing. Data such as a balance or the number of game balls is output from the CU control unit 323 to the display control unit 350 and converted into display data by the display control unit 350. The display data converted by the display control unit 350 is output to the display 312 and the display 312 displays the output display data. Further, when the player operates a touch panel provided on the surface of the display 312, the operation signal is input to the CU control unit 323 via the display control unit 350. When the player operates the ball lending button 321, the operation signal is input to the CU control unit 323. The ball lending button 321 is not limited to the configuration provided in the CU 3, and may be configured so as to be provided in the P platform 2 and input an operation signal to the CU control unit 323. When the player operates the replay button 319, the operation signal is input to the CU control unit 323. When the player operates the return button 322, the operation signal is input to the CU control unit 323.

  In the pachinko machine 2, the main control board 16 that controls the progress of the game of the pachinko machine 2, the payout control board 17 that manages and stores the game balls, and the drive control of the launch motor 18 based on commands from the payout control board 17 And a variable display device 278 are provided. In FIG. 2, a display control board (also referred to as an effect control board) that controls display of the variable display device based on a command from the main control board 16 is omitted.

  The main control board 16 is provided on the game board 26. The main control board 16 is equipped with a game control microcomputer as the main control unit 161. A microcomputer for gaming machine control includes a CPU (Central Processing Unit) as a control center, a ROM (Read Only Memory) that stores programs and control data for operating the CPU, and a RAM (RAM that functions as a work area for the CPU). Random Access Memory) and an input / output interface for maintaining signal consistency with peripheral devices. The main controller 161 is connected to a winning sensor 162 and a radio wave sensor 163 provided on the game board 26. The game board 26 is further provided with a display control board (effect control board) for controlling the variable display device 278 and the like.

  The payout control board 17 is provided on the front frame 6 (game frame). The payout control board 17 is equipped with a payout control microcomputer which is a payout control unit 171. The payout control microcomputer includes a CPU (Central Processing Unit) as a control center, a ROM (Read Only Memory) storing a program for operating the CPU and control data, and a RAM (RAM) functioning as a work area of the CPU. Random Access Memory) and an input / output interface for maintaining signal consistency with peripheral devices.

  Further, a firing ball detection switch (not shown), an out ball detection switch 701, a foul ball detection switch 33, a counting button 28, and a radio wave sensor 173 are provided on the payout control board 17 in an electrically connected state. . The radio wave sensor 173 is for detecting an illegal act of illegally transmitting radio waves and mainly turning on the ball raising switch (upper) 41a. A detection signal of the radio wave sensor 173 is input to the payout control unit 171 via an input port (not shown) of the payout control board 17. As described above, the ball raising switch (upper) 41a detects the launch of a game ball by changing from on to off, and the payout control unit 171 subtracts “1” from the number of game balls based on the detection. To do. Accordingly, when the ball raising switch (upper) 41a is always turned on by an improper radio wave, the number of game balls is not subtracted no matter how many balls are fired. Such radio fraud is detected by the radio wave sensor 173. In addition, there is a possibility that not only the ball raising switch (upper) 41a but also the fired ball detection switch may be subject to fraud by radio waves. In other words, when only the ball raising switch (upper) 41a is always turned on by the illegal radio wave, the ball is not detected to be detected, while the actually fired ball is collected and detected by the firing ball detection switch. The number of fired balls and recovered balls (out-balls) is flawed, an abnormality is detected, and the fraud detection information “number of fired / OUT mismatched balls” is transmitted from the P unit 2 to the CU3. Become. However, by sending unauthorized radio waves to the fired ball detection switch to make it undetectable, there is a problem that the fraud detection information of the “number of fired / OUT mismatched balls” is not transmitted from the P stand 2 to the CU 3. . In the present embodiment, since the radio wave sensor 173 also detects unauthorized radio waves transmitted to such a shot ball detection switch, the above-described inconvenience can be prevented.

  From main control board 16 to payout control board 17, main control chip ID, winning opening information, round information, connection confirmation signal, winning detection signal, starting winning opening winning information, error information, number of symbols determined, jackpot information, manufacturer specific Jackpot information is sent.

  The main control chip ID (also referred to as main chip ID) is a chip ID recorded on the main control board 16 of the pachinko machine 2, and is transmitted to the payout control board 17 when the pachinko machine 2 is turned on. Information. The winning opening information is information including the type of winning opening (start winning opening, normal winning opening, large winning opening) and the number of winning balls (the number of payout balls when a game ball enters the winning opening). It is transmitted to the dispensing control board 17 when the machine 2 is turned on. The round information is information on the number of rounds when a big hit is made, and is transmitted to the payout control board 17 when the pachinko machine 2 is powered on.

  The connection confirmation signal is a signal for confirming that the main control board 16 and the payout control board 17 are connected, and a signal of a predetermined voltage is constantly supplied from the main control board 16 to the payout control board 17. The payout control board 17 is configured to control the operation on the condition that the payout control board 17 receives the predetermined voltage signal. The winning detection signal is a detection signal of a pachinko ball that has won a winning opening other than the starting winning opening. Upon receiving this detection signal, the payout control board 17 performs control to add the number of balls to be given to one winning ball to the number of game balls and the number of added balls. This will be described in detail later.

  The start winning award winning information is information indicating that a pachinko ball has won a winning winning opening 1 or a starting winning opening 2. The error information is information for notifying the payout control board 17 when an error occurs while the main control board 16 is performing game control.

  The symbol determination number of times is information on symbols determined as display results of the variable display device for winnings at each start winning opening.

  The jackpot information is information indicating that a jackpot has occurred. The breakdown includes common jackpot information indicating a jackpot common to each manufacturer and manufacturer-specific jackpot information indicating a manufacturer-specific jackpot. The common jackpot information is a jackpot commonly used by each gaming machine manufacturer, such as 15 round jackpots, and includes probability variation information when a probability change occurs with the jackpot. When the time-short state (control state for shortening the variable display time of the variable display device) occurs, the time-shortage information is included. The manufacturer-specific big hit is a big hit state that is adopted only by a certain gaming machine manufacturer, such as sudden probability change (surprise).

  A health check command and a winning ball number acceptance command are transmitted from the payout control board 17 to the main control board 16. The health check command is a command for checking whether or not the main control board 16 is operating normally. The prize ball number acceptance command is a command indicating that the additional number of balls has been accepted.

  An out ball detection signal is input from the out ball detection switch 701 to the payout control board 17. The payout control board 17 to which the out ball detection signal is input subtracts and updates the number of in-game balls (the number of floating balls floating in the game area 27) as will be described later. In the payout control board 17 to which the foul ball detection signal is input from the foul ball detection switch 33, as described later, the addition ball number and the game ball number are added and updated, and the in-game ball number is subtracted and updated. A shot detection signal is input from the shot detection switch to the payout control board 17. The payout control board 17 to which the fired ball detection signal is input updates the number of in-game balls by subtraction.

  The security board 325 of the card unit 3 and the payout control board 17 of the pachinko machine 2 are electrically connected. As will be described later, a recovery request, a recovery detail request, and communication start from the security board 325 to the payout control board 17 Various commands such as a request, a communication end request, a status information request, a card insertion notification, a card return notification, and a communication test request are transmitted.

  The recovery request is a command that requests the pachinko machine 2 to notify the recovery information, as will be described later. The payout control board 17 receives the recovery request and notifies the card unit 3 of the recovery information of the pachinko machine 2. The recovery detail request is a command for requesting the pachinko machine 2 to notify the recovery detailed information. The payout control board 17 receives the recovery detail request and notifies the card unit 3 of the recovery detailed information of the pachinko machine 2. The communication start request is a command for requesting the pachinko machine 2 to start communication. The payout control board 17 responds to the card unit 3 with the communication start in response to the communication start request. The communication end request is a command for requesting the pachinko machine 2 to end communication. The payout control board 17 receives a communication end request and responds to the card unit 3 with a communication end.

  The status information request is a command that requests the pachinko machine 2 to notify the status information. The payout control board 17 receives the status information request and notifies the card unit 3 of the status information of the pachinko machine 2. The card insertion notification is a command for notifying the pachinko machine 2 that a card has been inserted. The payout control board 17 receives a card insertion notification and responds to the card unit 3 that a card has been inserted. The card return notification is a command for notifying the pachinko machine 2 that the card has been returned. The payout control board 17 receives a card return notification and responds to the card unit 3 that the card has been returned. The communication test request is a command for notifying the pachinko machine 2 of test data. The payout control board 17 responds with test data to the card unit 3 in response to the communication test request.

  Various responses such as a recovery response, a recovery detail response, a communication start response, a communication end response, a status information response, a card insertion response, a card return response, and a communication test response are transmitted from the payout control board 17 to the security board 325.

  The front frame 6 (game frame) is provided with a firing control board 31 and a firing motor 18. The firing control board 31 emits the firing motor 18 and drives the firing motor 18 when a touch ring input signal for detecting that the player is touching the hitting ball operating handle 25 is input.

  A firing control signal and a firing permission signal are output from the dispensing control board 17 to the firing control board 31. Upon receiving this, the launch control board 31 outputs a signal for exciting the launch motor 18. Thereby, the pachinko ball is in a state where it is bullet-launched into the game area 27.

  A display 54 is provided in the front frame 6 (game frame). The display unit 54 receives display data from the display control unit 350 of the card unit 3 and displays a display screen. As described above, in this embodiment, the P-side display 54 is controlled on the CU side, but instead, the display 54 is controlled to be displayed on the P-side. A display control substrate may be provided. In this case, the display control board controls display of the display 54 based on a command from the payout control unit 171.

<Transmission / reception mode between card unit side and pachinko machine side>
Next, FIG. 3 is a schematic diagram showing main data among various data stored on the card unit 3 side and the pachinko machine 2 side, and its transmission / reception mode. With reference to FIG. 3, main ones of various data stored on the card unit 3 side (CU side) and the pachinko machine 2 side (P base side) and transmission / reception modes thereof will be described.

  In the present embodiment, the fluctuation of the number of game balls is calculated on the P stand 2 side, and the current latest game ball number is stored and managed. The current number of game balls is also calculated and stored on the CU 3 side, but the number of game balls is based on information transmitted from the P stand 2 side. On the other hand, the number of possessed balls (the number of cards possessed), the number of stored balls, and the card balance (balance) are managed and stored on the CU3 side.

  FIG. 3 shows RAM storage data provided in the CU control unit 323 on the CU 3 side and RAM storage data mounted on the payout control board 17 on the P stand 2 side. First, when the power supply is turned on for the first time when the P stand 2 (pachinko machine 2) and the CU 3 (card unit 3) are electrically connected for the first time after being installed in the game hall, the payout control board on the P stand 2 side. 17 has a main chip ID (main control chip ID) transmitted from the main control board 16, transmits the main chip ID to the CU3 side, and also issues a payout chip ID (payout) stored in the payout control board 17 itself. Control chip ID) is transmitted to the CU3 side.

  On the CU3 side, the transmitted main chip ID and payout chip ID are stored. Next, data of the connection time, that is, the time at which communication is started after the CU 3 side and the P base 2 side are connected is transmitted from the CU 3 side to the P base 2 side, and the transmitted connection time is transmitted on the P base 2 side. Remember.

  In this state, three pieces of information of the main chip ID, the payout chip ID, and the connection time identified on the CU3 side are stored on the CU3 side and the P stand 2 side. When the power is turned on thereafter, the three pieces of information, that is, the main chip ID, the payout chip ID, and the previous connection time data are transmitted from the P stand 2 side to the CU 3 side.

  On the CU 3 side, the transmitted data is collated with the data already stored, and it is determined whether or not the same P base 2 is connected as in the previous time. As for the connection time data, every time the power is turned on, new connection time data in which communication between the CU 3 side and the P base 2 side is started is transmitted from the CU 3 side to the P base 2 side. Time data is stored on the P table 2 side.

  Each time a command and response is transmitted between the CU 3 side and the P base 2 side, the serial number is incremented by “1”, and the serial number is stored on the CU 3 side and the P base 2 side. This serial number is a communication number for confirming whether or not communication is properly performed by updating the number every time data is transmitted / received between the CU 3 and the P unit 2. The last serial number is a number updated at the end of the updated communication number.

  A specific mode of serial number backup in the CU 3 and the P stand 2 in this embodiment will be described. The CU 3 backs up and stores the serial number transmitted to the P base 2 by a command, and when it receives the serial number from the P base 2 next, it rewrites the serial number stored in the backup and stores it. Then, when the next command is transmitted, the serial number stored in the backup is updated by 1 and transmitted to the P unit 2, and the transmitted serial number is stored in the backup. In CU3, such processing is repeated.

  Similarly, the serial number received from the CU3 by the command is backed up and stored in the P unit 2, and when the response is transmitted from the P unit 2 to the CU3 next time, the serial number stored in the backup is updated by 1 and transmitted. Store the sent serial number as a backup. When the next response is received, the serial number stored in the backup is rewritten and stored in the received serial number. Such processing is repeated in the P stand 2.

  For example, a command is transmitted from the CU 3 side to the P base 2 side, and the serial number n at that time is transmitted, and the transmitted serial number n is stored on the P base 2 side. Then, when a response is returned from the P platform 2 side to the CU 3 side, the stored serial number n is added together (n + 1) and transmitted. On the CU3 side, since the returned serial number n + 1 is incremented by 1 from the already stored serial number n, it is determined that data communication has been performed normally, and the next time the command is sent, the serial number is incremented by 1 and n + 2. A serial number is sent to the P stand 2 side.

  The latest game machine information (game machine information being counted) is transmitted from the P machine 2 side to the CU 3 side. This latest game table information is stored in the latest game table information storage area of the RAM of the payout control unit 171 (see FIG. 2) on the P table 2 side. Specifically, information on the added ball number counter, information on the subtracted ball number counter, and information on the counted ball number counter are included. The number of game balls is not included in the latest game table information, and is transmitted from the P table 2 side to the CU 3 side as the count value of the game ball number counter as will be described later.

  Information on these counters is collectively transmitted to the CU side as a response. The added ball number counter is a counter that counts the added ball number. The added ball is the sum of “the number of winning balls × the number of winning balls” and “the number of back balls”. The back ball is a foul ball. That is, the addition ball indicates the number that the addition ball counter should add to the game ball. The subtraction ball number counter is a counter that counts the number of subtraction balls. The subtraction ball is the “number of fired balls”. That is, the number of balls detected by the output change from on to off of the ball raising switch (upper) 41a. Note that the “number of balls to be subtracted” does not include the “number of balls to be counted”. The counting ball counter is a counter that counts the counting balls. The counting ball is “the number of balls converted from game balls to holding balls by the counting operation”.

  In addition, when a back ball is generated, the back ball is returned to the hitting ball launching position, and the hitting ball launching operation is performed with the ball feeding to the hitting ball launching position being stopped so that all the back balls are fired into the game area. Even if a back ball is generated, the back ball may be controlled not to be counted as an additional ball. In this case, “addition balls = number of winning balls × number of winning balls”.

  For example, when a pachinko ball that has been placed in the game area 27 wins and the winning information is transmitted from the main control board 16 to the payout control board 17, an additional ball to which a gaming ball is added based on the winning information. The added ball number counter counts the number, and the value of the added ball number counter (added ball number) is transmitted from the P stand 2 side to the CU 3 side. Also, the subtraction ball counter counts the number of shot balls as the number of subtraction balls based on the output change from on to off of the ball raising switch (upper) 41a due to the pachinko ball being shot in the game area 27, The value of the subtraction ball number counter (subtraction ball number) is transmitted from the P stand 2 side to the CU3 side.

  Alternatively, the payout control unit 171 counts the number of gaming balls as the number of counting balls by pressing the counting button 28, and transmits the value of the counting ball number counter (counting number of balls) from the P stand 2 side to the CU3 side.

  On the P-unit 2 side, each time the values of the addition ball counter, the subtraction ball counter, and the counting ball counter are transmitted to the CU 3 side, the count values are stored in the previous gaming machine information storage area (the RAM of the payout control unit 171). Etc.) are stored (rewritten) as backup data, and the values of the added ball counter, subtracted ball counter, and counted ball counter as the latest game table information are cleared to 0 (excluding the game ball counter). In the present embodiment, “clear” has the same meaning as “initialization”.

  As a result, the game table information transmitted to the CU 3 side immediately before is added to the storage area of the previous game table information (game table information transmitted immediately before). Stored as data. When the latest game machine information is not transmitted from the P machine 2 side to the CU 3 side, the backup data includes not only the value of each counter at the time of the next transmission but also the value of each counter of the previous time that was not transmitted. It is intended to enable transmission.

  Further, the payout control board 17 updates the value of the game ball counter in response to the occurrence of a prize, the firing of a ball, the occurrence of a back ball, and the occurrence of a counting ball (conversion from a game ball to a holding ball), The updated value of the game ball counter is transmitted to the CU 3 side as the number of game balls.

  On the CU3 side, in the accumulated data storage area in the RAM, the number of game balls, the number of cards held (simply referred to as the number of balls), the number of stored balls, the balance, the total number of added balls (total number of added balls), the total subtraction The number of balls (the total number of subtracted balls) and the number of balls at the time of card insertion are stored. The number of cards possessed is the number of balls obtained by subtracting the number of possessed balls paid out (the number of balls converted from the number of cards possessed to the number of game balls) from the number of balls possessed when the card is inserted, and adding the counted number of balls. That is, the card possession number is the number of possession possessed by the player at the present time.

  The total number of added balls is added based on the value (number of added balls) of the added ball counter transmitted from the P stand 2 side to update the number of balls. Further, the number of balls is updated by subtracting the total number of subtraction balls based on the value of the subtraction ball counter (the number of subtraction balls) transmitted from the P stand 2 side. Further, based on the value of the counting ball number counter transmitted from the P stand 2, the number of card holding balls is added and updated. In this way, the CU 3 can manage the latest information by updating the total added ball number, the total subtracted ball number, and the card holding ball number with the latest game table information transmitted from the P table 2 one by one. It becomes possible.

  As shown in the figure, the CU 3 has an area for storing game balls, and also receives a count value of a game ball number counter (also referred to as game ball number or game ball total number information) from the P stand 2 side. CU3 updates the area for storing game balls in the following procedure. That is, the CU 3 stores the value based on the value of the added ball number counter (added ball number), the value of the subtracted ball number counter (subtracted ball number), and the value of the counted ball number counter transmitted from the P side. The number of game balls being updated is updated, and it is determined whether or not the count value of the game ball counter transmitted from the P platform side at the same timing matches the updated number of game balls. If they match, the game is allowed to continue, but if they do not match, control to shift to an error state is performed.

  As a result, for example, error notification is performed by the abnormality notification lamp or the indicator 312 or an error notification signal indicating that an error has occurred is transmitted to the hall management computer or hall server (in this case, hall management). An error notification may be made by a computer or hall server). As a result, a predetermined notification that prompts an artificial response by a staff member is performed.

  Instead of shifting to an error state and stopping the game, the number of game balls stored on the CU 3 side is replaced with the count value of the game ball number counter transmitted from the P unit 2 side. Also good. Alternatively, it may be corrected to an average value of the number of game balls managed on the CU 3 side and the number of game balls stored on the P stand 2 side.

  As described above, in this embodiment, the number of game balls is also stored on the CU 3 side, but it is determined whether or not the number of game balls matches the number of game balls managed and stored on the P-unit 2 side. (CU3 side function). Therefore, even if a situation occurs in which the number of game balls stored on the P stand 2 side does not match the number of game balls stored on the CU 3 side due to fraud or other circumstances, it can be checked. Here, the determination function is provided on the CU3 side. However, for example, the number of game balls stored on the CU3 side and the number of game balls stored on the P unit 2 side are stored by the hall server or hall management computer connected to the CU3. The number of game balls being received may be received, and it may be determined whether or not the two match.

  As shown in FIG. 3, the CU 3 has a storage area for storing the number of cards held and the number of stored balls, a storage area for storing the card balance of the received (inserted) card, and the total number of added balls (the number of added balls). (Cumulative total), the total number of subtracted balls (total number of subtracted balls), and a storage area for storing balls when the card is inserted. The CU control unit 323 (see FIG. 2) stores a stored ball in response to an input requesting the use of the stored ball (for example, a press input of the replay button 319 provided in the CU 3 (when there is no holding ball)). Subtract a certain number of balls from the area.

  The CU control unit 323 (see FIG. 2) is an input requesting the use of the holding ball (for example, pressing input of the replay button 319 provided on the CU 3 when the holding ball is present (however, when the holding ball is present)) Accordingly, a predetermined number of balls are subtracted from the storage area for storing balls. Further, the CU control unit 323 (see FIG. 2) subtracts a predetermined value from a storage area for storing the card balance in response to an input requesting the use of the card balance (for example, pressing input of the ball lending button 321).

  When a player performs an operation to deduct the value from the player's own gaming value (for example, prepaid balance, number of balls, or number of stored balls) and use it for the game, the number of balls for the withdrawal The number of balls to be added to the number counter is transmitted from the CU 3 side to the P stand 2 side. In response to this, the P stand 2 side adds and updates the game ball counter.

  On the other hand, in the gaming system according to the present embodiment, it is possible to accept a so-called wagon service order or the like in which the gaming value owned by the player is withdrawn and exchanged for a drink or the like. However, access to wagon services with game balls is restricted, and wagon services can only be received with holding balls. This is an image in which, in a conventional encapsulated pachinko machine in which each counter is provided, it is prohibited to grab a ball before counting remaining on a plate by hand and use it for a wagon service.

  For this reason, in this embodiment, when the operation for performing the wagon service is executed, if the number of balls is less than the number corresponding to the desired menu of the wagon service, the player is prompted to perform the counting operation. Has been. When the player performs a counting operation at that time, the number of counting balls based on the operation is transmitted from the P stand 2 side to the CU 3 side. In response to this, the CU3 side subtracts the number of game balls and adds and updates the number of card possessions.

<Commands and responses sent and received between the CU and the P platform>
Next, with reference to FIG. 4, the outline of the command and response transmitted / received between the card unit (CU) 3 and the pachinko machine (P unit) 2 will be described.

  FIG. 4 shows the transmission direction, whether the data to be transmitted is a command or a response, the name of transmission information, and its outline.

  First, a command named recovery request is transmitted from the CU 3 to the P unit 2. This recovery request command is for requesting recovery information from the P unit 2. A response named “recovery response” is transmitted from the P base 2 to the CU 3. This response of the recovery response notifies the CU 3 of the recovery information.

  A command named “recovery detail request” is transmitted from the CU 3 to the P unit 2. This recovery detail request command is for requesting recovery detail information from the P unit 2. A response named “Recovery Detail Response” is transmitted from the P base 2 to the CU 3. This response of the recovery detail response notifies the CU 3 of the recovery detail information. These recovery detail request and recovery detail response are transmitted / received only when the recovery process is executed. Specifically, the CU 3 transmits a recovery detail request command to the P unit 2 only when the CU 3 that has received the above-described recovery response determines that the recovery process is to be executed based on the information of the recovery response. This will be described in detail later. The recovery process needs to be executed when a power failure occurs in the CU 3 or the P stand 2 and a communication line disconnection is detected. In the present embodiment, the recovery process is also executed when the power source is turned on at the start of business in the game hall (see FIG. 10), but is not executed when the power source is turned on at the start of business. It may be controlled to execute when a power interruption occurs and a communication line disconnection is detected.

  A communication start request command is transmitted from the CU 3 to the P unit 2. This communication start request command requests the P base 2 to start communication. A response of a communication start response is transmitted from the P base 2 to the CU3. This response to the communication start response is a response to the CU 3 for communication start.

  A communication end request command is transmitted from the CU 3 to the P platform 2. This communication end request command requests the P unit 2 to end communication. A response of a communication end response is transmitted from the P base 2 to the CU3. This communication end response is a response to the end of communication to the CU3.

  A status information request command is transmitted from the CU 3 to the P platform 2. This status information request command is for requesting the status of the CU 3 to the P unit 2. The CU 3 uses this command to periodically check the status of the P base 2. The status information request command includes the number of balls to be added from the CU side to the P platform side shown in FIG.

  A response of a status information response is transmitted from the P base 2 to the CU3. This response of the status information response is to notify the information / status of the P platform 2 to the CU 3. The response of the information response includes the latest game table information and the number of game balls shown in FIG.

  A card insertion notification command is transmitted from the CU 3 to the P stand 2. This card insertion notification command notifies the P unit 2 of card insertion. A response of the card insertion response is transmitted from the P base 2 to the CU3. The response of this card insertion response is a response to the card insertion to the CU3.

  A card return notification command is transmitted from the CU 3 to the P stand 2. This card return notification command notifies the P unit 2 of a card return. A response of a card return response is transmitted from the P stand 2 to the CU 3. The response of this card return response is a response to the card return to CU3.

  A communication test request command is transmitted from the CU 3 to the P platform 2. This communication test request command notifies the P unit 2 of test data. A response of the communication test response is transmitted from the P base 2 to the CU3. The response of this card return response is a response of test data to CU3.

<Main sequence in communication between CU and P platform>
Next, processing executed by the CPU in the CU control unit 323 and processing executed by the CPU mounted on the payout control board 17 will be described with reference to FIGS.

  First, with reference to FIG. 5, the processing of the connection sequence at power-on will be described. The process of the connection sequence in FIG. 5 is a process executed when communication is resumed after the communication between the CU 3 and the P stand 2 is normally completed. More specifically, it is executed when communication is resumed after the power of the CU 3 is turned off while the card is not inserted. A typical example is a case where the power supply is turned off after one day of business at the amusement hall is finished, and the power supply is turned on at the start of business the next day.

  First, power is turned on. When the power is turned on, communication is started after the firing motor 18 is stopped on the P stand 2 to stop the game. Thereafter, an authentication sequence is started, and information including the main chip ID and the payout chip ID is transmitted from the P base 2 to the CU3. The CU 3 sends the received main chip ID and payout chip ID to the upper management server, asks whether the main chip ID and the payout chip ID are properly registered, and has the result returned. . If it is properly registered, an appropriate authentication result is obtained.

  After the authentication sequence, the CU 3 transmits a recovery request to the P unit 2. That is, the CU 3 requests the P unit 2 to transmit recovery information.

  In response to this, the P base 2 returns the recovery information backed up in the P base 2 (specifically, the payout control board 17) to the CU 3 as a response based on the received recovery request command (recovery response). ).

  This recovery information includes the last last transmission serial number, the last inserted card ID, and the previous card insertion time.

  Upon receiving the recovery response, the CU 3 determines whether or not the previously inserted card ID and the previous card insertion time of the recovery information match the stored card ID and the card insertion time. The CU 3 transmits a recovery detail request to the P unit 2 when the card ID and the card insertion time match. That is, the CU 3 transmits the recovery data to the P unit 2. This recovery data includes the previous last transmission serial number and the number of additional balls. At the stage where the card is not yet inserted into the CU 3 when the power is turned on, the card ID = 0 and the card insertion time = 0 on both the CU 3 side and the P base 2 side.

  In response to this, the P machine 2 executes recovery processing based on the received recovery data, and returns the recovery data backed up inside the P machine 2 (specifically, the payout control board 17) to the CU 3 as a response. (Recovery detailed response).

  This recovery data includes previous game table information, previous game information, latest game table information, and latest game information.

  The CU 3 that has received this detailed recovery response starts recovery processing from that point. This recovery process is a process for recovering the consistency of each other's data between the CU 3 and the P stand 2 and is executed not only when the power is turned on, but also when a trouble occurs and is recovered. Executed.

  The CU 3 counts up the serial number each time a command such as a recovery request is transmitted. However, it does not count up when retransmitting a command. When the P unit 2 receives a command having the same serial number as the previously received serial number, it determines that a communication failure has occurred and the CU 3 has retransmitted the command. The CU 3 backs up the serial number when the command is transmitted. Each time the P unit 2 transmits a response corresponding to the received command, it increments the serial number. However, it is not counted up when the response is retransmitted. When receiving a response with the same serial number as the previously received serial number, the CU 3 determines that a communication failure has occurred and the P base 2 has retransmitted the response. The P unit 2 backs up the serial number when the response is transmitted.

  After the authentication sequence is completed, the CU 3 transmits a recovery request command to the P unit 2 with the serial number “n”. The P base 2 counts up the serial number and returns a response of the recovery response to the CU 3 as “n + 1”. Further, the CU 3 transmits a recovery detail request command to the P unit 2 with the serial number “n + 2”. The P unit 2 counts up the serial number and returns a response of the recovery detail response to the CU 3 as “n + 3”.

  Thereafter, the CU 3 counts up the serial number to “n + 4”, and transmits a communication start request (recovery clear ON) command to the P unit 2. In response to this, the P unit 2 clears the recovery data. Then, the P platform 2 counts up the serial number to “n + 5” and returns a response to the communication start response to the CU 3. In response, CU3 clears the recovery data. Thereafter, a status information request command and a status information response response are transmitted and received between the CU 3 and the P platform 2.

  The CU 3 transmits a status information request command of serial number = n + 6 to the P unit 2. In response to this, the P table 2 backs up the number of game balls, the number of added balls, the number of subtracted balls, the number of symbol stops, the number of winning prizes, and the data of the game table state. Further, the P stand 2 clears the values of the counters of the number of added balls, the number of subtracted balls, the number of symbol stops, and the number of winning prizes to zero. Then, the P platform 2 returns a response of the status information response of serial number = n + 7 to the CU3.

  The CU 3 that has received the response backs up the data on the number of game balls, the number of added balls, the number of subtracted balls, the number of symbol stops, the number of winning prizes, and the status of the game table based on the status information response. Note that the breakdown of the number of added balls is “the number of winning balls × the number of winning balls” and “the number of back balls”. The breakdown of the number of subtraction balls is “number of fired balls”.

  Thereafter, the CU3 transmits a status information request command with a serial number = n + 8 to the P unit 2, and the P unit 2 returns a response with a status information response with a serial number = n + 9 to the CU3. Each time the P unit 2 transmits a response of the status information response, it backs up the data and clears the counter. Further, the CU 3 backs up the data every time it receives a response of the status information response.

  Next, with reference to FIG. 6, the process of CU3 and P stand 2 when a card is inserted is demonstrated. First, before inserting a card, the CU 3 transmits a status information request command including a serial number = n and a card insertion state = OFF to the P unit 2. In response to this, the P unit 2 returns a response of the status information response including serial number = n + 1 and game prohibition to the CU3.

  Thereafter, when the card is inserted, the CU 3 outputs a command signal for taking the card to the card reader / writer, and the card reader / writer reads the information recorded on the taken card and receives the read information. For example, the card insertion process is executed.

  The CU 3 is in a card information inquiry state for a predetermined period after the card is inserted. This is in the middle of verifying whether the inserted card is appropriate, whether it is a membership card registered at the game hall, or inquiring the ball server, etc. This means that the display unit 312 and the display unit 54 on the P table 2 side are in the process of executing the process.

  Since the CU 3 does not authenticate the inserted card while displaying that the inserted card is being inquired on the display 312, the status information request including the serial number = n + 2 and the card insertion state = OFF is issued. A command is transmitted to the P unit 2. In response to this, the P unit 2 returns a response of the status information response including serial number = n + 3 and game prohibition to the CU3. The display 54 on the P platform 2 side is controlled by the display control unit 350 of the CU 3 to display that the card is being inquired.

  Thereafter, when the inserted card is authenticated, the CU 3 transmits a card insertion notification command including a serial number = n + 4, a card ID, and a card insertion time to the P unit 2. In response to this, the P table 2 backs up the received card ID and card insertion time data to the RAM of the payout control unit 171 and returns a response of the card insertion response including the serial number = n + 5 to the CU3. Also in CU3, the card ID of the inserted card is stored in the RAM or the like of the CU control unit 323.

  In response to this, the CU 3 sends a status information request command including a serial number = n + 6 and a card insertion state = ON to the P unit 2 to notify the P unit 2 of the card insertion status. The P table 2 receives the notification that the card is being inserted, permits the game, and returns a response of the status information response including the serial number = n + 7 and the game permission to the CU 3.

  While the card is being inserted, CU3 sends a status information request command including serial number = n + 8 and card insertion status = ON to P-unit 2, and P-unit 2 sends a response of status information response including serial number = n + 9 and game permission. Reply to CU3.

  Next, with reference to FIG. 7, a process for lending a game ball from the prepaid balance of the inserted card will be described. That is, a process when the prepaid balance recorded on the inserted card is consumed will be described. In the process of FIG. 7, the current number of game balls is “50” balls. First, the CU 3 transmits a status information request command including a serial number = n and a game ball addition request = OFF to the P unit 2. In response to this, the P platform 2 returns a response of the status information response including the serial number = n + 1 and the number of game balls = 50 to the CU3.

  Thereafter, when the player performs a lending operation (ball lending operation) in which the “lending” button is pressed once, CU3 lends 500 yen, that is, 125 balls. When the ball lending button (lending button) 321 is pressed, the CU 3 confirms prepaid consumption for 500 yen, and the number of game balls = 50 (number of game balls before update) +125 (number of added balls) = 175. Back up your data. In this way, the balance consumption is determined by the CU 3 alone when the lending operation is performed. Thereafter, CU3 is in the display of addition. During this addition display, the display unit 54 is displayed that 125 balls are withdrawn from the balance and are being added to the game balls.

  Next, the CU 3 transmits a status information request command including the serial number = n + 2, the game ball addition request = ON, and the number of addition balls = 125 to the P unit 2. In response, P 2 updates the number of game balls to the number of game balls = 50 (current number of game balls) +125 (number of additional balls) = 175, serial number = n + 3, number of additional balls = 175, game balls. A response of the status information response including the addition result = OK is returned to CU3.

  Thereafter, CU3 sends a status information request command including serial number = n + 4 and game ball addition request = OFF to P unit 2, and P unit 2 returns a status information response including serial number = n + 5 and the number of additional balls = 175. A response is returned to CU3.

  Next, with reference to FIG. 8, the process of paying out and holding out and replaying will be described. In FIG. 8, the initial number of game balls is “50” balls. The replay process in FIG. 13 is similar to the process at the time of consumption of the balance shown in FIG. First, the CU 3 transmits a status information request command including a serial number = n and a game ball addition request = OFF to the P unit 2. In response to this, the P platform 2 returns a response of the status information response including the serial number = n + 1 and the number of game balls = 50 to the CU3.

  Thereafter, when the player presses the replay button 319 in a state where there is a ball or a storage ball, the CU 3 confirms the consumption of 125 balls from the ball or the storage ball, updates the number of game balls, Data of number = 50 (number of game balls before update) +125 (number of added balls) = 175 is backed up. In this way, the consumption of the holding balls or the stored balls is determined by the CU 3 alone when the operation of pressing the replay button 319 is performed. In addition, when both the holding ball and the storage ball exist, consumption of the holding ball is given priority.

  In place of the control to prioritize the holding ball, a storage ball replay button and a holding ball replay button are provided, and the player can select and operate either the storage ball consumption or the holding ball consumption by operating the selection. You may do it. In other words, the replay button is used to obtain a game ball (game point) from a stored ball (stored medal) and a game ball (game point) from a stored ball (stored medal) replay button. You may comprise two with a holding ball (pointing) replay button. In addition, a holding ball payout button may be provided in CU3, and the holding ball payout button may be pressed to convert from a holding ball (a point) to a game ball (a game point).

  Thereafter, the CU 3 displays the addition of the game balls, and transmits a status information request command including the serial number = n + 2, the game ball addition request = ON, and the number of added balls = 125 to the P unit 2. In response, P 2 updates the number of game balls to the number of game balls = 50 (current number of game balls) +125 (number of additional balls) = 175, serial number = n + 3, number of additional balls = 175, game balls. A response of the status information response including the addition result = OK is returned to CU3.

  Note that CU3 indicates that the game ball is being added by displaying on the display 54 that 125 balls are being dropped from the holding ball or the stored ball and being added to the game ball.

  Thereafter, CU3 sends a status information request command including serial number = n + 4 and game ball addition request = OFF to P unit 2, and P unit 2 returns a status information response including serial number = n + 5 and the number of additional balls = 175. A response is returned to CU3.

  Next, with reference to FIG. 9, the return process of a membership card, a general balance card, and a general possession card will be described. In FIG. 9, the number of balls specified by the inserted recording medium (member card or the like) is “0” balls, and the initial number of game balls is “200” balls. First, the CU 3 transmits a status information request command including serial number = n and counting ball reception = OFF to the P unit 2. In response to this, the P stand 2 returns a response of the status information response including the serial number = n + 1, the number of game balls = 200, the number of counting balls = 0, and counting = OFF to the CU3.

  Thereafter, the player performs an operation of converting the game ball into a holding ball by long-pressing the count button 28 (an operation of pressing the button for 1 second or longer). By long-pressing the count button 28, 100 balls out of the number of game balls are counted and counted as counting balls in one command / response period (200 ms). When the initial number of game balls is “200”, the number of game balls is “100” and the counting ball is “100” in one command / response period.

  However, in the counting display performed on the display 54, the number of game balls and the number of counting balls are not instantaneously changed to such numbers, but the game balls are gradually counted and decreased. The effect is such that the ball is gradually increased. For this reason, until the counting display is completed, the number of game balls and the number of points on display on the display 54 do not match the number of game balls and points on the memory on the CU side and the P side.

  However, instead of such control, the counting status (conversion status) of the points on the display may be synchronized with the actual data conversion processing. In this case, since the data counting process (conversion process) can be completed immediately, the counting display (conversion display) synchronized therewith also ends immediately. In this case, it may not be possible to sufficiently notify the player that the data has been counted. Therefore, while displaying the count, the display may be switched from the middle to the display “Counting is completed”. In this case, the card return operation may be validated from the stage when the display of “counting has been completed” is started.

  Immediately after the operation of long-pressing the count button 28 is performed, the CU 3 transmits a status information request command including serial number = n + 2 and count ball reception = OFF to the P platform 2.

  In response to this, in order to notify the CU 3 that the number of gaming balls = 100 and the number of counting balls = 100, the P stand 2 has a serial number = n + 3, the number of gaming balls = 100, the number of counting balls = 100, and counting = A status information response including ON is returned to CU3. In response to the response of the state information response, CU3 adds the counted number of balls (100 balls) to the number of balls (0 ball) and updates it to the number of balls = 100, and the number of game balls = 200 (game balls before update) Number) −100 (the number of counting balls) = 100 data is backed up.

  In response to the response of the state information response, the CU 3 performs display for counting 100 game balls in succession to the display for counting the previous 100 game balls.

  Thereafter, the CU 3 transmits a status information request command including serial number = n + 4 and counting ball reception = ON to the P base 2. The reason why the counting ball reception = ON is to notify the P stand 2 of the reception of the counting ball in response to the response of the previous status information response.

  In order to notify the CU 3 that the number of game balls = 0 and the number of count balls = 100, the P table 2 that is long-pressing the count button 28 has a serial number = n + 5, the number of game balls = 0, the number of count balls = 100, A response of a status information response including ON during counting = ON is returned to CU3. Upon receiving the response to the status information response, CU3 adds the counted number of balls (100 balls) to the number of balls (100 balls) and updates the number of balls to 200, and the number of game balls = 100 (game balls before update) Number) −100 (number of balls) = 0.

  In response to the response of the state information response, the CU 3 performs display for counting 100 game balls in succession to the display for counting the previous 100 game balls.

  As the count display progresses, the number of game balls on the display on the display 54 eventually becomes zero. The player confirms that the number of game balls has become 0 and releases the counting button 28. By releasing the count button 28, the operation of converting the game ball into a holding ball is completed.

  Thereafter, the player performs an operation of pressing the return button 322. The CU 3 transmits a card return notification command including a serial number = n + 6 to the P unit 2 by performing an operation in which the player presses the return button 322. In response to this, the P platform 2 returns a response of the card return response including the serial number = n + 7, the card ID held on the payout control board 17 and the card insertion time to the CU 3.

  In response, the CU 3 compares the returned card ID and card insertion time with the card ID and card insertion time stored at the time of card insertion, and determines whether or not they match. . On the condition that they match, the card inserted in the card insertion / discharge slot 309 is returned to the player. At that time, the CU 3 transmits the card ID of the card and the data on the number of balls to the hall server, and the hall server stores the data on the number of balls in association with the card ID of the card. If they do not match, an error is determined and error processing is executed. As the error processing, for example, control for prohibiting the return of the card in accordance with the return operation is performed to hold the card inside the CU 3, or the writing process to the holding card is prohibited. Further, an error notification by an abnormality notification lamp or the like, notification of occurrence of abnormality to the hall server, and the like are performed. When the card is returned, the hall server may control to write and record the number of balls in the card instead of storing the number of balls in association with the card ID of the card. Good.

  Thereafter, the CU 3 transmits a status information request command including a serial number = n + 8 and a card insertion state = OFF to the P unit 2. When receiving the state information response including the card insertion state = OFF, the P base 2 clears the card ID and the card insertion time data held in the payout control board 17. In response to this, the P stand 2 returns a response of the status information response including the serial number = n + 9, the number of game balls = 0, the number of balls to be counted = 0, and the counting in progress = OFF to the CU3.

<Encryption key used for communication between key management server and communication control IC>
Next, an encryption key used for communication between the key management server and the communication control IC will be described. FIG. 10 is a diagram for explaining an encryption key used for communication from the key management server to the communication control IC 325a. First, encryption keys used for communication between the key management server and the communication control IC 325a mainly include a board shipment key, a board initial key, a board authentication key, a main authentication key, a temporary authentication key, and an effective key (commercial). , Communication key 1 (session key) and communication key 2 (session key). The board shipment key is used for communication between the CU control unit and the SC, and is used only for encryption of a communication test message before shipment. The board initial key is used for communication between the CU control unit and the SC, and is received by the CU control unit 323 during the initial communication with the hall server, and stored in the RAM of the CU control unit 323. The SC 325b generates a substrate initial key from the embedded information at the time of manufacture and stores it in the RAM. Authentication communication (substrate initial key mode) using the substrate initial key is permitted (timed operation) only for a limited period. Here, in the board initial key mode, as described above, it is necessary to communicate normally with the hall server at least once to acquire the board initial key, and thus security is ensured.

  Here, the “limited period” is a limited period of two days, for example. In this way, by enabling timed operation, even if the key cannot be exchanged with the key management server immediately after the system is installed in the hall, the hall will start operating immediately after the system is installed. It becomes possible. In addition, as a limited period, you may set the period defined in one day, for example to every morning from 9:00 to 17:00.

  The above-described board initial key mode has a restriction that enables authentication communication using the board initial key for a limited period of time, but the present invention is not limited to this, and the amount of money that can be used ( Card balance or cash) may be limited. Alternatively, when the number of symbol variations in the variable display device reaches a certain number, the game may be forcibly terminated and the gaming machine may be controlled to be disabled. Alternatively, when the cumulative number of jackpots reaches a certain number, the game may be forcibly terminated and the gaming machine may be controlled to be disabled. In addition, it may be possible to allow only a game by inserting cash and prevent a game using the remaining card amount, or to limit the game to a game using a holding ball.

  The board authentication key is an encryption key that is used for communication between the CU control unit and the SC and is received as part of the board security information from the key management server. By performing authentication communication using the board authentication key, the communication mode (board authentication key mode) is switched from the timed operation using the board initial key to the permanent operation (normal operation). This board authentication key is stored in the RAM of the CU control unit and the RAM of the SC.

  In both the timed operation using the board initial key and the permanent operation using the board authentication key, the CU control unit 323 receives the valid key stored in the hall server, and the SC 325b receives the valid key as the communication control IC 325a. This is realized by enabling communication between the P platform and the CU.

  This authentication key is used for communication between the SC and the communication control IC, is generated by the SC 325b from the update information received from the key management server, and is stored in the RAM of the SC 325b. The communication control IC 325a is also similar to the SC 325b. Are generated from the update information and stored in the RAM of the communication control IC 325a. Note that this authentication key may be acquired from a key management server or the like. Further, the CU control unit 323 and the communication control IC 325a may generate themselves without receiving update information from a key management server or the like. In addition, the CU control unit 323 and the communication control IC 325a themselves generate predetermined second data by acquiring predetermined first data from a key management server or the like, and this authentication key is obtained from the first data and the second data. You may make it produce | generate.

  The temporary authentication key is used for communication between the SC and the communication control IC, and until the authentication key is generated (or until a set allowable time (for example, two days) elapses), the SC 325b and Used for encryption communication with the communication control IC 325a. The encrypted communication using the temporary authentication key (temporary authentication key mode) is allowed (timed operation) only for a limited period (eg, 2 days). SC 325b and communication control IC 325a store temporary authentication keys in their respective ROMs from the manufacturing stage. The valid key (commercial) is a key that is received by the SC 325b via the CU control unit 323 and transmitted (set) to the communication control IC 325a during initial communication with the hall server. Communication with P devices becomes possible by setting the effective key. The valid key is data for activating the communication control IC 325a. In other words, the valid key is permission information for permitting communication between the CU and the P platform.

  The communication key 1 (session key) is used for communication between the CU control unit and the SC, is used for business message communication for gaming machines, and is created every business day by the SC 325b using some variable. For example, a counter value (random number) or date / time information may be used as the variable. The communication key 2 (session key) is used for communication between the SC and the communication control IC, and is used for business message communication for gaming machines.

  Note that even if the key described above has a configuration in which the key data is embedded in each part as it is, the information for generating the key data is stored in each part. The key data may be generated by using the key.

  Next, a method for acquiring an encryption key and a method for performing encrypted communication using the acquired encryption key will be described. First, the SC 325b acquires an effective key via the CU control unit 323 at the first communication with the hall server. The SC 325b transmits (sets) the acquired effective key to the communication control IC 325a, thereby enabling communication with the P units. The CU control unit 323 receives the board initial key at the first communication with the hall server, and stores it in the RAM of the CU control unit 323. The SC 325b generates a substrate initial key from the embedded information at the time of manufacture and stores it in the RAM. The SC 325b performs cryptographic authentication with the CU control unit 323 using the acquired substrate initial key, and performs cryptographic communication with the CU control unit 323 in a timely manner using the substrate initial key. In addition, the hall server that has received the connection request sent from the CU control unit 323 when the power is turned on returns a unified store code for identifying the game arcade where the hall server is installed to the CU control unit 323. Specifically, the unified store code is transmitted from the input / output interface of the hall server to the CU control unit 323 according to the control of the CPU of the hall server.

  On the other hand, authentication is performed between the CU control unit 323 and the SC 325b using the board manufacturer code stored as initial information in both. The board manufacturer code is a code that identifies the manufacturer that manufactured the security board 325. A board connection request and a board connection response are exchanged on the condition that the authentication using the board manufacturer code is successful (see FIG. 16). The unified store code is included in the board connection request transmitted from the CU control unit 323 to the SC 325b, and the SC 325b acquires the unified store code by receiving the board connection request.

  Next, the CU control unit 323 requests the board security information from the key management server and receives the board security information transmitted from the key management server via the hall server, so that the board security information is included in the board security information. Get the board authentication key. The CU control unit performs cryptographic authentication with the SC using the acquired board authentication key, and performs cryptographic communication with the SC using the board authentication key. Note that the CU control unit 323 does not change the key from the board initial key to the board authentication key immediately after obtaining the board authentication key, but on condition that the gaming machine is in a non-operating state as described later. Change the key.

  The board authentication key may be generated by the CU control unit 323 itself instead of being acquired from the key management server or the like, and the CU control unit 323 itself acquires predetermined first data from the key management server or the like. Predetermined second data may be generated, and a board authentication key may be generated from the first data and the second data.

  Next, SC 325b performs cryptographic communication with communication control IC 325a using the stored temporary authentication key. Then, the SC decrypts the update information acquired from the key management server by performing cryptographic communication with the CU control unit using the board authentication key, and inquires about the board inquiry number. If the inquiry board inquiry number matches, the SC generates a main authentication key from the update information and performs cryptographic communication with the communication control IC 325a using the generated main authentication key. The authentication key is not stored in the communication control IC 325a from the time of shipment, and is generated from the update information in the same manner as the SC 325b.

  Next, the SC notifies the CU control unit of the communication key 1 and performs communication with the CU control unit using the communication key 1 to enable business message communication with the gaming machine. Become. In addition, the SC receives a notification of the communication key 2 from the communication control IC by setting an effective key for the communication control IC, and performs subsequent communication with the communication control IC using the communication key 2. Thus, business message communication with a gaming machine becomes possible.

<Commands and responses sent and received between the CU control unit and the SC>
Next, communication within the CU 3 shown in FIG. 2 will be described. In particular, communication between the CU control unit 323 and the security chip (SC) 325b of the security board 325 will be described. First, with reference to FIG. 11 and FIG. 12, an outline of commands and responses transmitted and received between the CU control unit 323 and the security chip (SC) 325b will be described.

  11 and 12 show the transmission direction, whether the data to be transmitted is a command or a response, the name of transmission information, and its outline.

  First, a command named board connection request is transmitted from the CU control unit 323 to the SC 325b. This board connection request command requests the SC 325b to connect to a gaming machine (P 2). A response named “substrate connection response” is transmitted from the SC 325 b to the CU control unit 323. This response to the board connection response notifies the CU control unit 323 of a response to the board connection request.

  A board shipment key request command is transmitted from the CU control unit 323 to the SC 325b. This board shipment key request command requests the board 325b for a board shipment key. A response of the board shipment key response is transmitted from the SC 325b to the CU control unit 323. The response of the board shipment key response is to notify the CU control unit 323 of the board shipment key.

  A board manufacturer code authentication request 1 command is transmitted from the CU control unit 323 to the SC 325b. The board manufacturer code is a code that identifies the manufacturer that manufactured the security board 325, and is stored in the CU control unit 323 and the SC 325b. The board manufacturer code authentication request 1 command requests the SC 325b to authenticate the board manufacturer code. A response of the board manufacturer code authentication response 1 is transmitted from the SC 325 b to the CU control unit 323. This response of the board manufacturer code authentication response 1 notifies the CU control unit 323 of the authentication information of the board serial ID.

  A board manufacturer code authentication request 2 command is transmitted from the CU control unit 323 to the SC 325b. This command of the board manufacturer code authentication request 2 requests the SC 325b to authenticate the board serial ID. A response of the board manufacturer code authentication response 2 is transmitted from the SC 325 b to the CU control unit 323. The response of the board manufacturer code authentication response 2 is to notify the CU control unit 323 of board manufacturer code authentication information.

  A command of the board serial ID authentication request 1 is transmitted from the CU control unit 323 to the SC 325b. This command of the board serial ID authentication request 1 requests the SC 325b to authenticate the board serial ID. A response of the board serial ID authentication response 1 is transmitted from the SC 325 b to the CU control unit 323. The response of the board serial ID authentication response 1 notifies the CU control unit 323 of the board serial ID authentication information.

  A command of the board serial ID authentication request 2 is transmitted from the CU control unit 323 to the SC 325b. The command of the board serial ID authentication request 2 requests the SC 325b to authenticate the board serial ID. A response of the board serial ID authentication response 2 is transmitted from the SC 325 b to the CU control unit 323. The response of the board serial ID authentication response 2 is to notify the CU control unit 323 of board serial ID authentication information.

  The command of the board initial key authentication request 1 is transmitted from the CU control unit 323 to the SC 325b. The command of the board initial key authentication request 1 requests the SC 325b to authenticate the board initial key. A response of the board initial key authentication response 1 is transmitted from the SC 325 b to the CU control unit 323. The response of the board initial key authentication response 1 notifies the CU control unit 323 of the board initial key authentication result.

  The command of the board initial key authentication request 2 is transmitted from the CU control unit 323 to the SC 325b. The board initial key authentication request 2 command requests the SC 325b to authenticate the board initial key. A response of the board initial key authentication response 2 is transmitted from the SC 325 b to the CU control unit 323. The response of the board initial key authentication response 2 notifies the CU control unit 323 of the board initial key authentication result.

  The command of the board authentication key authentication request 1 is transmitted from the CU control unit 323 to the SC 325b. The command of the board authentication key authentication request 1 requests the SC 325b to authenticate the board authentication key. The response of the board authentication key authentication response 1 is transmitted from the SC 325b to the CU control unit 323. This response of the board authentication key authentication response 1 notifies the CU control unit 323 of the authentication result of the board authentication key.

  The command of the board authentication key authentication request 2 is transmitted from the CU control unit 323 to the SC 325b. The command of the board authentication key authentication request 2 requests the SC 325b to authenticate the board authentication key. A response of the board authentication key authentication response 2 is transmitted from the SC 325 b to the CU control unit 323. The response of the board authentication key authentication response 2 notifies the CU control unit 323 of the authentication result of the board authentication key.

  A command for board shipment key authentication request 1 is transmitted from the CU control unit 323 to the SC 325b. The command of the board shipping key authentication request 1 requests the SC 325b to authenticate the board shipping key. The response of the board authentication key authentication response 1 is transmitted from the SC 325b to the CU control unit 323. The response of the board shipping key authentication response 1 is to notify the CU control unit 323 of the board shipping key authentication result.

  A command of board shipment key authentication request 2 is transmitted from the CU control unit 323 to the SC 325b. The command of the board shipping key authentication request 2 is for requesting the board 325b to authenticate the board shipping key. A response of the board shipping key authentication response 2 is transmitted from the SC 325b to the CU control unit 323. The response of the board shipping key authentication response 2 is to notify the CU control unit 323 of the board shipping key authentication result.

  A version information notification command is transmitted from the CU control unit 323 to the SC 325b. This version information notification command notifies the SC 325b of the version of the board authentication key. A version information response is transmitted from the SC 325 b to the CU control unit 323. The response of this version information response notifies the CU control unit 323 that the version information has been received.

  A board authentication result notification command is transmitted from the CU control unit 323 to the SC 325b. This board authentication result notification command notifies the SC 325b of the authentication result between the CU control unit 323 and the SC 325b. A response of the board authentication result response is transmitted from the SC 325b to the CU control unit 323. The response of the board authentication result response is to notify the CU control unit 323 of the authentication result between the CU control unit 323 and the SC 325b.

  A security board inquiry instruction notification command is transmitted from the CU control unit 323 to the SC 325b. This security board inquiry instruction notification command requests security board inquiry information from the SC 325b. A response of the security board inquiry result is transmitted from the SC 325b to the CU control unit 323. The response of the security board inquiry result notifies the CU control unit 323 of the security board inquiry information.

  A security board information notification command is transmitted from the CU control unit 323 to the SC 325b. This security board information notification command notifies the security board information to the SC 325b. A response of the security board information result is transmitted from the SC 325b to the CU control unit 323. The response of the security board information result notifies the CU control unit 323 that the security board information has been received.

  A counter information request command is transmitted from the CU control unit 323 to the SC 325b. This counter information request command requests counter information from the SC 325b. A response of a counter information response is transmitted from the SC 325b to the CU control unit 323. This response of the counter information response notifies the CU control unit 323 of the counter information.

  A communication key request command is transmitted from the CU control unit 323 to the SC 325b. This communication key request command requests the SC 325b for a communication key. A response of the communication key response is transmitted from the SC 325b to the CU control unit 323. This response of the communication key response notifies the CU control unit 323 of the communication key.

  A gaming machine chip inquiry instruction notification command is transmitted from the CU control unit 323 to the SC 325b. This gaming machine chip inquiry instruction notification command requests inquiry information about gaming machine chips from the SC 325b. A response of the gaming machine chip inquiry result is transmitted from the SC 325b to the CU control unit 323. The response of the gaming machine chip inquiry result notifies the CU control unit 323 of inquiry information of gaming machine chips.

  A gaming machine chip information notification command is transmitted from the CU control unit 323 to the SC 325b. The gaming machine chip information notification command notifies the SC 325b of the result of checking the gaming machine chip information. A response of the gaming machine chip information result is transmitted from the SC 325b to the CU control unit 323. The response of the gaming machine chip information result notifies the CU control unit 323 that the gaming machine chip collation result has been received.

  A substrate state request command is transmitted from the CU control unit 323 to the SC 325b. This command for requesting the substrate status is for requesting the substrate status to the SC 325b. A response of the substrate state response is transmitted from the SC 325b to the CU control unit 323. The response of the substrate state response notifies the CU control unit 323 of the substrate state.

<Main sequence in communication between CU control unit and SC>
Next, a process executed by the CPU in the CU control unit 323 and a process executed by the security chip (SC) 325b will be described with reference to FIGS.

  First, with reference to FIG. 13, a process for starting up the CU control unit 323 when the power is turned on and the hall is installed will be described. FIG. 13 shows a sequence when the power supply is first turned on after the CU 3 is installed in the amusement hall, and in particular, a startup sequence at the time of hall installation using the board initial key will be described.

  First, when the power of the CU3 is turned on, the CU control unit 323 and the SC325b are activated. When the power is first turned on after CU3 is installed in the amusement hall, the CU control unit 323 receives the board initial key A from the host device (specifically, from the hall server), the MAC key of the board initial key A, the valid Acquire a key (for commercial / P shipment). Here, the board initial key A is an encryption key that is downloaded from the hall server and stored in the CU control unit 323 when first communicating with the host device after being delivered to the amusement hall, and is installed in the key management center. This is an encryption key used for communication between the CU control unit 323 and the SC 325b until the board information (board serial ID and board authentication key) stored in the key management server is acquired. The board initial key A is decrypted using the board manufacturer code, while the MAC key of the board initial key A is similarly decrypted using the board manufacturer code. Such decryption is performed by a decryption method conforming to the AES (Advanced Encryption Standard) encryption method.

  Thereafter, the CU control unit 323 and the SC 325b execute a board manufacturer code authentication sequence, a board initial key authentication sequence, and a security board information inquiry sequence.

  The board manufacturer code authentication sequence authenticates the board manufacturer code between the CU control unit 323 and the SC 325b using a challenge / response method. After processing the board manufacturer code authentication sequence, the CU control unit 323 and the SC 325b use the board initial key acquired from the hall server as the encryption key, perform the board initial key authentication sequence, and perform authentication when the board initial key authentication is completed. It becomes. Detailed processing of the board initial key authentication sequence will be described later.

  Thereafter, the CU control unit 323 and the SC 325b perform the security board information inquiry sequence using the board initial key obtained from the hall server as the encryption key, and the acquisition is OK when the security board information can be obtained. The security board information is acquired from the key management server of the key management center, and includes a board serial ID, a board authentication key, and the like. Details of the security board information inquiry sequence will be described later. The board authentication key is an encryption key that is downloaded from a key management server installed in the key management center and used for communication between the CU control unit 323 and the SC 325b. The key management server stores the board authentication key in association with the board serial number or the like.

  When the security board information can be acquired by the security board information inquiry sequence, the SC 325b performs authentication with the communication control IC 325a.

  Thereafter, the CU control unit 323 and the SC 325b use the board initial key acquired from the hall server as the encryption key, perform a communication key exchange sequence, and exchange a communication key for business message communication.

  Thereafter, the CU control unit 323 and the SC 325b use the substrate initial key as the encryption key, perform a communication key exchange sequence, and generate a communication key. In the communication key exchange sequence, the substrate authentication key is used as the encryption key when the substrate information can be acquired in the substrate information acquisition sequence. However, when the substrate information cannot be acquired, the substrate initial key is used as the encryption key for a limited time. Specifically, the communication key is generated using a random number and current time data. The method for generating this communication key (session key) is not limited to random number and current time data, but any variable data other than the key used for mutual authentication between encrypted communication devices can be used. Also good. Note that the communication key exchange sequence is for exchanging a key (communication key) used for encryption communication with a gaming machine in order to enable gaming by the gaming machine, and detailed processing will be described later.

  When the communication key can be generated by the communication key exchange sequence, the SC 325b acquires the gaming machine chip information from the communication control IC 325a.

  Thereafter, the CU control unit 323 and the SC 325b use the communication key acquired from the communication key exchange sequence as the encryption key, perform a gaming machine chip information inquiry sequence, and inquire / notify gaming machine chip information. The gaming machine chip information includes a main control chip number and a payout control chip number. Detailed processing of the gaming machine chip information authentication sequence will be described later.

  By performing the above processing, the CU control unit 323 and the SC 325b can perform business message communication with the gaming machine. By performing business telegram communication with this gaming machine, gaming can be performed on the gaming machine. The business message communication with the gaming machine is operated using a communication key (session key). The communication at this time is time-limited communication as described above, and is allowed only for a certain period (for example, 2 days). The communication mode performed through the above processing is the restricted communication mode (substrate initial key mode (substrate initial key operation)). If a certain period (for example, 2 days) is exceeded in this timed operation, the temporary operation is stopped and the overage is notified from the SC 325b to the key management server via the CU control unit 323 and the hall server. The

  Thereafter, the CU 3 makes a recovery request to the P unit 2, and the P unit 2 sends a response (recovery response) of the recovery response including the previous last transmission serial number, the previously inserted card ID, and the previous card insertion time to the CU 3. Send back.

  Next, with reference to FIG. 14, processing for turning on the power and normal startup of the CU control unit 323 will be described. FIG. 14 shows a sequence when the power is normally turned on after the CU 3 is installed in the amusement hall, and in particular, a startup sequence using a board authentication key will be described.

  First, when the power of the CU3 is turned on, the CU control unit 323 and the SC325b are activated. When the power is first turned on after the CU 3 is installed in the amusement hall, the CU control unit 323 receives the board serial ID key, the board from the host device (specifically, from the key management server via the hall server). The MAC key of the authentication key version, the board authentication key A, and the board authentication key A is acquired. The board serial ID key is decrypted using the board initial key, the board initial key A is decrypted using the board serial ID, and the MAC key of the board initial key A is similarly decrypted using the board serial ID. Is done. Such decryption is performed by a decryption method according to the AES encryption method.

  Thereafter, the CU control unit 323 and the SC 325b execute a board manufacturer code authentication sequence, a board authentication key authentication sequence, and a security board information inquiry sequence.

  The board manufacturer code authentication sequence authenticates the board manufacturer code between the CU control unit 323 and the SC 325b using a challenge / response method. After processing the board manufacturer code authentication sequence, the CU control unit 323 and the SC 325b perform the board authentication key authentication sequence using the board authentication key acquired from the key management server as the encryption key. Detailed processing of the board authentication key authentication sequence will be described later.

  Thereafter, the CU control unit 323 and the SC 325b perform the security board information inquiry sequence using the board authentication key acquired from the key management server as the encryption key only when the key is updated.

  The SC 325b executes authentication with the communication control IC 325a when the board authentication key can be authenticated by the board authentication key authentication sequence and there is no key update, or when there is a key update and authentication can be performed by the security board information inquiry sequence. .

  Thereafter, the CU control unit 323 and the SC 325b use the board authentication key as the encryption key, perform a communication key exchange sequence, and generate a communication key. Specifically, the communication key is generated using a random number and current time data. The method for generating this communication key (session key) is not limited to random number and current time data, but any variable data other than the key used for mutual authentication between encrypted communication devices can be used. Also good. Note that the communication key exchange sequence is for exchanging a key (communication key) used for encryption communication with a gaming machine in order to enable gaming by the gaming machine, and detailed processing will be described later.

  When the communication key can be generated by the communication key exchange sequence, the SC 325b further acquires gaming machine chip information from the communication control IC 325a.

  Thereafter, the CU control unit 323 and the SC 325b use the communication key acquired from the communication key exchange sequence as the encryption key, perform a gaming machine chip information inquiry sequence, and inquire / notify gaming machine chip information. The gaming machine chip information includes a main control chip number and a payout control chip number. Detailed processing of the gaming machine chip information authentication sequence will be described later.

  By performing the above processing, the CU control unit 323 and the SC 325b can perform business message communication with the gaming machine. By performing business telegram communication with this gaming machine, gaming can be performed on the gaming machine. A communication key (session key) is used for business message communication with this gaming machine. Communication at this time is a normal communication mode (board authentication key mode (board authentication key operation)) without restriction as in the restricted communication mode.

  Next, with reference to FIG. 15, processing for turning on the power of the CU control unit 323 and starting up at the time of factory shipment will be described. FIG. 15 shows a sequence at the time of factory shipment before the CU 3 is shipped to the amusement hall, and in particular, a factory shipment start-up sequence using a board shipment key will be described. This sequence is a process in the CU control unit 323 and the SC 325b that is not connected to the host device at the time of factory shipment.

  First, when the power of the CU3 is turned on, the CU control unit 323 and the SC325b are activated. The CU control unit 323 and the SC 325b execute a board manufacturer code authentication sequence and a board initial key authentication sequence.

  The board manufacturer code authentication sequence authenticates the board manufacturer code between the CU control unit 323 and the SC 325b using a challenge / response method. After processing the board manufacturer code authentication sequence, the CU control unit 323 and the SC 325b perform the board initial key authentication sequence using the board initial key as the encryption key. However, since the CU3 is not yet installed in the game arcade at the factory shipment stage, the CU control unit 323 cannot acquire the base initial key from the hall server of the game arcade, and as a result, the board initial key authentication is performed. The result is NG.

  After that, since the board initial key authentication sequence is authentication NG, the CU control section 323 sends a board shipment key request command to the SC 325b to request the board shipment key used for testing the security board 325. Send to. After receiving the board shipment key request command from the CU control unit 323, the SC 325b transmits a board shipment key response response including the board shipment key to the CU control unit 323.

  Thereafter, the CU control unit 323 and the SC 325b perform a board shipping key authentication sequence using the board shipping key acquired from the SC 325b as the encryption key. Detailed processing of the board shipping key authentication sequence will be described later.

  If the board shipping key can be authenticated by the board shipping key authentication sequence, the SC 325b performs authentication with the communication control IC 325a.

  Thereafter, the CU control unit 323 and the SC 325b use the board shipment key as the encryption key, perform a communication key exchange sequence, and generate a communication key. Specifically, the communication key is generated using a random number and current time data. The method for generating this communication key (session key) is not limited to random number and current time data, but any variable data other than the key used for mutual authentication between encrypted communication devices can be used. Also good. Note that the communication key exchange sequence is for exchanging a key (communication key) used for encryption communication with a gaming machine in order to enable gaming by the gaming machine, and detailed processing will be described later.

  When the communication key can be generated by the communication key exchange sequence, the SC 325b acquires the gaming machine chip information from the communication control IC 325a.

  Thereafter, the CU control unit 323 and the SC 325b use the communication key acquired from the communication key exchange sequence as the encryption key, perform a gaming machine chip information inquiry sequence, and inquire / notify gaming machine chip information. The gaming machine chip information includes a main control chip number and a payout control chip number. Detailed processing of the gaming machine chip information authentication sequence will be described later.

  Thereafter, the CU 3 makes a communication test request to the P unit 2, and the P unit 2 transmits a communication test response to the CU 3.

  By performing the above processing, the CU control unit 323 and the SC 325b can communicate with the gaming machine only by the communication test message. By performing communication of this communication test message, a communication test at the time of factory shipment is performed. The CU3 that has passed the communication test at the time of shipment from the factory is delivered to the amusement hall, and the first power-on sequence is the hall installation sequence described with reference to FIG. 13, and is executed after obtaining the board authentication key. The sequence is the normal startup sequence described with reference to FIG.

Next, with reference to FIG. 16, the processing of the board manufacturer code authentication sequence will be described.
First, the CU control unit 323 transmits a board manufacturer code authentication request 1 command for requesting board manufacturer code authentication to the SC 325b. Since the board manufacturer code authentication is performed using the challenge / response method, the CU control unit 323 requests the challenge code from the SC 325b.

  Upon receiving the board manufacturer code authentication request 1 command, the SC 325b generates a challenge code based on the board manufacturer code, and notifies the CU control unit 323 of the generated challenge code as a response of the board manufacturer code authentication response 1.

  Upon receiving the board manufacturer code authentication response 1 command, the CU control unit 323 generates a response code based on the challenge code, and notifies the generated response code to the SC 325b using the board manufacturer code authentication request 2 command. Specifically, the response code is generated by encrypting the challenge code received using the board manufacturer code as a key.

  The SC 325b that has received the board manufacturer code authentication request 2 command checks the response code (specifically, if the challenge code is extracted by decrypting the response code using the board manufacturer code as a key), the challenge code matches. Assume that the check result is OK. Then, the check result is notified to the CU control unit 323 as a response of the board manufacturer code authentication response 2. At this time, the CU control unit 323 acquires authentication log information such as a board manufacturer code authentication result from the SC 325b.

  On the other hand, if the challenge codes do not match, the check result is NG (inappropriate). In such a case, the authentication is repeated n times, and SC 325b becomes a no-response state (HALT) in the case of NG for n times continuously, and the board authentication key and the main authentication key are cleared (see FIG. 29). After entering the no-response state (HALT), the SC 325b does not authenticate with the communication control IC 325a, and repairs are performed at the factory.

  The CU control unit 323 notifies the SC 325b of the CU control unit specific information (unified store code, unit number, current time), and transmits a board connection request command for requesting connection with the gaming machine.

  After receiving the board connection request command from the CU control unit 323, the SC 325b retains the information on the unified store code, the bedtime, and the current time, and when the previous unified store code matches, the CU control unit 323 A response of the board connection response notifying that the connection request has been accepted (OK) is returned.

  On the other hand, when it does not coincide with the previous unified store code, a response of the substrate connection response notifying that the connection request is not accepted (NG) is returned to the CU control unit 323, and the substrate stored in the RAM In addition to clearing the authentication key, a transition is made to a substrate initial key mode (see FIG. 13), which is a mode for proceeding with the substrate initial key as an encryption key. At this time, the CU control unit 323 acquires authentication log information such as a board connection request result from the SC 325b.

  Next, with reference to FIG. 17, the processing of the authentication sequence of the board initial key or the board shipping key will be described.

  First, as shown in FIG. 17, in the state of the substrate initial key mode, which is a mode for proceeding with processing using the substrate initial key as an encryption key, authentication using the basic initial key is performed in FIG. In the case of the substrate shipping key mode, which is a mode in which processing is advanced using the key as an encryption key, authentication using the base shipping key is performed in FIG. Therefore, “/” in FIG. 17 is a symbol representing either one. The CU control unit 323 sends a board initial key / board shipment key authentication request 1 command for requesting authentication information to the SC 325b. The command of the board initial key / board shipping key authentication request 1 is not encrypted, but may be encrypted using the board initial key / board shipping key as the encryption key.

  The SC 325b that has received the command of the board initial key / board shipping key authentication request 1 encrypts the random number A of the authentication information with the board initial key or the board shipping key and sends the H-MAC with the MAC key to the CU control unit 323. It calculates and returns with the response of the board initial key / board shipment key authentication response 1.

  The CU control unit 323 that has received the board initial key / board shipping key authentication response 1 command decrypts the random number A of the authentication information and checks the MAC in order to verify the board initial key or board shipping key.

  Thereafter, the CU control unit 323 encrypts the random number B of the authentication information with the board initial key or the board shipping key, calculates the H-MAC with the MAC key, and requests the board initial key / board shipping key authentication request to the SC 325b. Send with command 2. The command of the board initial key / board shipping key authentication request 2 is encrypted using the board initial key or the board shipping key as the encryption key.

  The SC 325b that has received the command of the board initial key / board shipping key authentication request 2 decrypts the random number B of the authentication information and checks the MAC in order to verify the board initial key or board shipping key to the CU control unit 323. To do. The SC 325b returns an authentication result to the CU control unit 323 as a response of the board initial key / board shipment key authentication response 2. At this time, the CU control unit 323 acquires authentication log information such as a board initial key authentication result and a board shipping key authentication result from the SC 325b.

  Next, with reference to FIG. 18, the processing of the authentication sequence of the board serial ID and the board authentication key will be described.

  First, the communication between the CU control unit 323 and the SC 325b is performed in the state of the board authentication key mode, which is a mode in which processing is performed using the board authentication key as an encryption key. The CU control unit 323 authenticates the board serial ID to the SC 325b. The command of the board serial ID authentication request 1 for requesting is sent. Since the board serial ID authentication is performed using a challenge / response method, the CU control unit 323 requests a challenge code from the SC 325b.

  The SC 325b that has received the command of the board serial ID authentication request 1 generates a challenge code based on the board serial ID, and notifies the CU control unit 323 of the generated challenge code as a response of the board serial ID authentication response 1.

  The CU control unit 323 that has received the command of the board serial ID authentication response 1 generates a response code based on the challenge code (specifically, generates a response code by encrypting the challenge code using the board serial ID as a key), The generated response code is notified to the SC 325b by the command of the board serial ID authentication request 2.

  Upon receiving the board serial ID authentication request 2 command, the SC 325b checks the response code (specifically, decrypts the response code using the board serial ID as a key and extracts the challenge code), and the challenge code matches. If the check result is OK. Then, the check result is notified to the CU control unit 323 by the response of the board serial ID authentication response 2. If the check result is NG, the SC 325b notifies the CU control unit 323 that the check result is included in the authentication result in the board authentication result notification and the board authentication result response, and notifies the NG. At this time, the CU control unit 323 acquires authentication log information such as a board serial ID authentication result from the SC 325b.

  Thereafter, the CU control unit 323 transmits a version information notification command to the SC 325b in order to notify the version information of the board authentication key. Note that the version information notification command is encrypted using the board authentication key as the encryption key.

  Upon receiving the version information notification command, the SC 325b returns a response of the version information response to notify the CU control unit 323 that the version information of the board authentication key has been received. Note that the response of the version information response is not encrypted, but may be encrypted using a board authentication key as an encryption key.

  Thereafter, the CU control unit 323 transmits a command of the board authentication key authentication request 1 for requesting authentication information to the SC 325b. The command of the board authentication key authentication request 1 is not encrypted, but may be encrypted using the board authentication key as the encryption key.

  The SC 325b that has received the command of the board authentication key authentication request 1 encrypts the random number A of the authentication information with the board authentication key and calculates the H-MAC with the MAC key to the CU control unit 323, and the board authentication key authentication. Reply with response 1 response.

  Upon receiving the board authentication key authentication response 1 command, the CU control unit 323 decrypts the random number A of the authentication information and checks the MAC in order to verify the board authentication key.

  Thereafter, the CU control unit 323 encrypts the random number B of the authentication information with the board authentication key, calculates the H-MAC with the MAC key, and transmits it to the SC 325b with the command of the board authentication key authentication request 2. The command of the board authentication key authentication request 2 is encrypted using the board authentication key as the encryption key.

  Upon receiving the board authentication key authentication request 2 command, the SC 325b decrypts the random number B of the authentication information and checks the MAC in order to verify the board authentication key to the CU control unit 323. Then, the SC 325b returns an authentication result as a response of the board authentication key authentication response 2 to the CU control unit 323.

  Thereafter, the CU control unit 323 transmits a board authentication result notification command to the SC 325b in order to notify the board authentication result. The board authentication result notification command is encrypted using the board authentication key as the encryption key. The board authentication result notification command notifies the SC 325b of the board serial ID authentication and the board authentication key authentication result.

  The SC 325b that has received the board authentication result notification command transmits a board authentication result response command to the CU control unit 323 in order to notify the board serial ID authentication and the board authentication key authentication result. The board authentication result response command is encrypted using the board authentication key as the encryption key. At this time, the CU control unit 323 acquires authentication log information such as a board authentication result from the SC 325b.

  Next, FIG. 19 is a diagram for explaining a process in the case of inquiring about security board information. Referring to FIG. 19, first, the CU control unit 323 transmits a security board inquiry instruction notification command to the SC 325b in order to request information for inquiring of the host device. Note that the security board inquiry instruction notification command to be transmitted is encrypted using the board initial key or the board authentication key as the encryption key.

  The SC 325b that has received the security board inquiry instruction notification command notifies the CU control unit 323 of information (board serial number and inquiry information) for inquiring of the host device (specifically, the key management server via the hall server). A response of the security board inquiry result is returned to the CU control unit 323. Note that the response of the security board inquiry instruction notification to be returned is encrypted by using the board initial number or board authentication key as the board serial number as the encryption key, and the CU control unit 323 and the hall server cannot decrypt the key (hereinafter referred to as the key). The query information is encrypted with a “secret key”. As a result, the inquiry information can be decrypted and decrypted only by the key management server.

  Upon receiving the response of the security board inquiry result, the CU control unit 323 receives information on the security board 325 (board serial number and Query information) and wait for a response from the host device. While inquiring about security board information, the CU control unit 323 and the SC 325b do not wait for a response from the host device, and process the next step (for example, communication control IC authentication processing, gaming machine chip information authentication processing, gaming machine Business message processing, etc.), and necessary processing is performed when security board information is received.

  Thereafter, when receiving the inquiry result of the security board information (board serial ID and board authentication key) from the host device, the CU control unit 323 notifies the security board information to the SC 325b. Specifically, the CU control unit 323 transmits a security board information notification command including the board serial ID and the board authentication key, which is the inquiry result, to the SC 325b. Note that the security board information notification command to be transmitted is encrypted using the board initial key or the board authentication key as the encryption key.

  After receiving the security board information notification command, the SC 325b confirms the inquiry number and sends a response of the security board information result to notify the CU control unit 323 that the security board information notification command has been normally received. Send back. The key update information is used at the next reset. The response of the security board information result to be returned does not need to be encrypted. However, in the case of encryption, a board initial key or a board authentication key is used as the encryption key.

  Thereafter, if the reception result is OK, the CU control unit 323 stores the board serial ID key and the board authentication key A and uses them as authentication key information at the next reset. In addition, the CU control unit 323 acquires authentication log information for board information inquiry and board information notification.

Next, the processing of the gaming machine chip information inquiry sequence will be described with reference to FIG.
First, the CU control unit 323 transmits a gaming machine chip inquiry instruction notification command for inquiring gaming machine chip information to the SC 325b. Note that the gaming machine chip inquiry instruction notification command to be transmitted does not have to be encrypted, but when encrypted, a communication key is used as the encryption key.

  On the other hand, the SC 325b acquires gaming machine chip information from the communication control IC. Thereafter, the SC 325b that has received the gaming machine chip inquiry instruction notification command has completed the acquisition of the gaming machine chip information, so the response of the gaming machine chip inquiry result including the information of gaming machine chip inquiry result = OK is CU controlled. Reply to part 323. The gaming machine chip information includes a main control chip ID, a payout control chip ID, and the like. Note that the response of the returned gaming machine chip inquiry result is that the main control chip ID and the payout control chip ID are encrypted with the secret key, and other information is encrypted using the communication key as the encryption key.

  After that, when receiving the response of the returned gaming machine chip inquiry result, the CU control unit 323 includes the main control chip number and the payout control chip number in the host device (key management server or hall server: see FIG. 10). Queries gaming machine chip information and waits for a response from the host device. During the gaming machine chip information inquiry, the CU control unit 323 and the SC 325b execute the processing of the next step (business message processing with the gaming machine) without receiving a response from the host device. Since it takes time (for example, about 2 hours) to inquire about gaming machine chip information, the operation of the gaming machine cannot be stopped during that time, so the next step processing is not performed without a response from the host device. (Business message processing with game machine) is executed. It should be noted that during the gaming machine chip information inquiry, even if a reset operation (for example, operation of a reset button (not shown) or power-on, etc.) is performed, the gaming machine chip inquiry instruction notification request is not issued again.

  After that, when receiving the matching result of the gaming machine chip information from the host device, the CU control unit 323 notifies the SC 325b of the matching result. Specifically, the CU control unit 323 transmits a gaming machine chip information notification command including a matching result to the SC 325b. Note that the gaming machine chip verification result notification command to be transmitted is encrypted using the communication key as the encryption key.

  After receiving the gaming machine chip information notification command, the SC 325b returns a response of the gaming machine chip information result to notify the CU control unit 323 of the gaming machine manufacturer code and model code when the collation result is OK. Note that the response of the gaming machine chip information result to be returned is encrypted using the communication key as the encryption key.

  At the same time, the CU control unit 323 obtains an authentication log such as a gaming machine chip information inquiry and a gaming machine chip information collation result included in the gaming machine chip information result from the SC 325b.

Next, with reference to FIG. 21, the processing of the sequence of board authentication key authentication abnormality will be described.
First, when the power of the CU3 is turned on, the CU control unit 323 and the SC325b are activated.

  Thereafter, the CU control unit 323 and the SC 325b execute a board manufacturer code authentication sequence and a board authentication key authentication sequence.

  The board manufacturer code authentication sequence authenticates the board manufacturer code between the CU control unit 323 and the SC 325b using a challenge / response method. After processing the board manufacturer code authentication sequence, the CU control unit 323 and the SC 325b perform the board authentication key authentication sequence using the board authentication key acquired from the key management server as the encryption key. If the board authentication key authentication is authentication NG, the SC 325b clears the board authentication key information as an authentication error.

  Thereafter, the CU control unit 323 and the SC 325b execute a board initial key authentication sequence. At this time, the communication of the board initial key authentication sequence is encrypted using the board initial key as the encryption key.

  When the authentication of the board initial key authentication sequence is authentication OK, the security board information inquiry sequence, the communication key exchange sequence, the gaming machine chip information inquiry are performed in the same manner as the hall installation start-up sequence process shown in FIG. Processing such as a sequence is performed, and business message communication with the gaming machine becomes possible. The subsequent communication is encrypted using the communication key as the encryption key.

  Note that the SC 325b notifies the key management server 801 of an alarm “abnormal board authentication key update” indicating that the authentication of the board authentication key sequence is authentication NG.

  Next, FIG. 22 is a diagram for explaining processing of a security board information inquiry timeout sequence.

  First, the CU control unit 323 transmits a security board inquiry instruction notification command to the SC 325b in order to request information for inquiring of the host device. Note that the security board inquiry instruction notification command to be transmitted is encrypted using the board initial key or the board authentication key as the encryption key.

  The SC 325b that has received the security board inquiry instruction notification command notifies the CU control unit 323 of information (board serial number and inquiry information) for inquiring of the host device (specifically, the key management server via the hall server). A response of the security board inquiry result is returned to the CU control unit 323. The response of the security board inquiry instruction notification to be returned is encrypted using the board serial number as the encryption key and the board initial key or the board authentication key, and the inquiry information is encrypted with the secret key. As a result, the inquiry information can be decrypted and decrypted only by the key management server.

  Upon receiving the response of the security board inquiry result, the CU control unit 323 receives information on the security board 325 (board serial number and Query information) and wait for a response from the host device. While inquiring about security board information, the CU control unit 323 and the SC 325b do not wait for a response from the host device, and process the next step (for example, communication control IC authentication processing, gaming machine chip information authentication processing, gaming machine Business message processing etc.).

  After that, the CU control unit 323, when receiving the security board information inquiry result (board serial ID and board authentication key) from the host device, times out the waiting time for the security board information inquiry, the CU 3 2 transmits a status information request command for requesting information on the second status. The status information request command is encrypted using a communication key as an encryption key. The SC 325b that has received the status information request command acquires the gaming machine chip information of the P unit 2 via the communication control IC 325a.

  Then, the SC 325b returns a response of the status information response to the CU 3. At this time, the SC 325b returns a status information response including “board inquiry present” indicating that the security board information is requested to the key management center.

  In response to the above-described security board inquiry, the CU control unit 323 transmits a security board inquiry instruction notification command to the SC 325b in order to request information to make an inquiry to the host device. Note that the security board inquiry instruction notification command to be transmitted is encrypted using the board initial key or the board authentication key as the encryption key.

  The SC 325b that has received the security board inquiry instruction notification command notifies the CU control unit 323 of information (board serial number and inquiry information) for inquiring of the host device (specifically, the key management server via the hall server). The response of the security board inquiry result is returned to the CU control unit 323 again. The response of the security board inquiry instruction notification to be returned is encrypted using the board serial number as the encryption key and the board initial key or the board authentication key, and the inquiry information is encrypted with the secret key. As a result, the inquiry information can be decrypted and decrypted only by the key management server.

  Upon receiving the response of the security board inquiry result, the CU control unit 323 receives information on the security board 325 (board serial number and Query information) and continue to wait for a response from the host device.

  Next, FIG. 23 is a diagram for explaining processing of a gaming machine chip information inquiry (collation) timeout sequence.

  First, the CU control unit 323 transmits a gaming machine chip inquiry instruction notification command to request information (specifically, gaming machine chip information) for inquiring of the host device to the SC 325b. Note that the gaming machine chip inquiry instruction notification command to be transmitted is encrypted using a communication key as an encryption key.

  On the other hand, the SC 325b acquires the gaming machine chip information from the communication control IC, and then the SC 325b that has received the gaming machine chip inquiry instruction notification command inquires of the host device (specifically, the key management server via the hall server). In order to notify the CU control unit 323 of information (main control chip information and payout control chip information), a response of the gaming machine chip inquiry result (authentication OK) is returned to the CU control unit 323. Note that the response of the game machine chip inquiry instruction notification to be returned is encrypted with the main control chip ID and the payout control chip ID using a secret key, and the other information is encrypted using a communication key as an encryption key.

  The CU control unit 323 that has received the response of the gaming machine chip inquiry result sends the gaming machine chip information (mainly the main management chip information and the payout control chip information) to the host device (specifically, the key management server via the hall server). Control chip information and payout control chip information) and wait for a response from the host device. While inquiring about the gaming machine chip information, the CU control unit 323 and the SC 325b do not wait for a response from the host device, and process the next step (for example, authentication processing of the communication control IC, authentication processing of the security board information, gaming machine Business message processing, etc.) and the processing necessary when the gaming machine chip information is received.

  However, after that, the CU control unit 323 determines that the waiting time for the gaming machine chip information inquiry has timed out before receiving the gaming machine chip information inquiry result (main control chip information and payout control chip information) from the host device. The CU 3 transmits a status information request command for requesting information on the status of the P platform 2. The status information request command is encrypted using a communication key as an encryption key. The SC 325b that has received the status information request command acquires the gaming machine chip information of the P unit 2 via the communication control IC 325a.

  Then, the SC 325b returns a response of the status information response to the CU 3. At this time, the SC 325b returns a status information response including “chip information inquiry present” indicating that an inquiry to the key management center for gaming machine chip information is requested.

  In response to the above gaming machine chip information inquiry, the CU control unit 323 transmits a gaming machine chip inquiry instruction notification command to the SC 325b in order to request information for inquiring of the host device. Note that the gaming machine chip inquiry instruction notification command to be transmitted is encrypted using a communication key as an encryption key.

  Upon receiving the gaming machine chip inquiry instruction notification command, the SC 325b notifies the CU control unit 323 of information (main control chip information and payout control chip information) for inquiring of the host device (specifically, the key management server via the hall server). In order to do this, the response of the gaming machine chip inquiry result is sent back to the CU control unit 323 again. Note that the response of the game machine chip inquiry instruction notification to be returned is encrypted with the main control chip ID and the payout control chip ID using a secret key, and the other information is encrypted using a communication key as an encryption key.

  The CU control unit 323 that has received the response of the gaming machine chip inquiry result sends the gaming machine chip information (mainly the main management chip information and the payout control chip information) to the host device (specifically, the key management server via the hall server). Control chip information and payout control chip information) and continue to wait for a response from the host device.

  Characteristic parts of the sequence between the CU control unit 323 and the SC 325b described with reference to FIGS. 13 to 23 will be described below.

  There is a “board initial key authentication sequence” (see FIG. 13) as a sequence executed after the CU 3 is received and installed in the amusement hall. This "Board Initial Key Authentication Sequence" is obtained by downloading the board initial key from the host device (hall server) and authenticating using the board initial key when the power is turned on for the first time after being installed in the amusement hall. Sequence. On the condition that the authentication result of this board initial key authentication sequence is OK, the “security board information inquiry sequence” is executed using this board initial key (see FIG. 13). The board authentication key is downloaded and stored from the host device (key management server) by this security board information inquiry sequence, and thereafter, various authentication sequences, communication key exchange sequences, etc. are executed using this board authentication key, and the communication key is obtained. Using this, business message communication with the gaming machine is executed (see FIG. 14).

  On the other hand, as a result of executing the security board information inquiry sequence (see FIG. 13) using the board initial key, the board authentication key may not be acquired. The board authentication key is sent to the key management server by the CU manufacturer when the CU manufacturer ships CU3 to the game hall, and stored in the key management server. The board authentication key stored in advance in the key management server is downloaded and stored, but the transmission of the board authentication key from the CU manufacturer to the key management server may be delayed for some reason. In addition, when the CU3 installed in the amusement hall attempts to download the board authentication key by executing the security board information inquiry sequence, an unexpected situation occurs between the key management server and the CU3 and communication is impossible. May be offline. In such a case, the board authentication key cannot be downloaded.

  If the board authentication key cannot be downloaded and the actual operation such as business message communication with the gaming machine after that cannot be performed at all, operational problems such as a decrease in the operating rate at the amusement hall occur. Therefore, when such an unforeseen situation occurs, control is performed so that the temporary operation of the actual operation can be performed using the board initial key which is a temporary authentication key. Specifically, the communication key exchange sequence is executed using the board initial key acquired from the host device (specifically, the hall server), and the communication key (session key) is generated using the random number and the time data. Then, the communication key (session key) is shared between the CU control unit 323 and the SC 325b, and business message communication is performed using the communication key (session key), and actual operation control is performed. The actual operation control using the communication key exchanged using the board initial key is allowed only for a certain period because the board initial key is a temporary key and the board authentication key cannot be obtained. Temporary operation is controlled. Specifically, actual operation control using this board initial key is allowed for only two days, and when the board authentication key cannot be obtained even at the time of power-up on the third day, the subsequent control is stopped, Control is performed to notify that an abnormality has occurred and to notify the hall server or hall management computer that an abnormality has occurred. The temporary operation time limit control that is allowed for a certain period of time (for example, two days) with the board initial key is that the board initial key is stored in the hall server, so that at least the CU control unit 323 has the hall server. It is allowed in a state where it is guaranteed that it is connected to

  Further, the above-mentioned “substrate initial key / shipping key authentication sequence” is executed at the time of factory shipment shown in FIG. 17, that is, even at a stage where the board has not yet been carried into the game arcade. When the board initial key authentication sequence is executed at this stage, since the board initial key has not yet been acquired, the result of execution of this board initial key authentication sequence using the board initial key is derived as the NG authentication result. The Then, each sequence after the board shipping key request and the board shipping key response shown in FIG. 17 is executed, and communication between the gaming machine and the communication test message is executed. In other words, it is determined by the “substrate initial key / shipping key authentication sequence” whether the substrate initial key has been acquired or not at the time of factory shipment. The sequence is also effectively used to determine whether the initial stage key has been acquired or whether the initial stage key has not been acquired.

<Main sequence in communication between communication control IC and security chip>
Next, FIG. 24 is a diagram for explaining processing of a business message sequence between the SC 325b and the communication control IC 325a. With reference to FIG. 24, the processing of the SC 325b and the communication control IC 325a after the CU 3 is turned on will be described.

  First, when the power of the CU3 is turned on, the SC 325b and the communication control IC 325a are activated. When activated, the SC 325b performs authentication with the CU control unit 323, and when activated, the communication control IC 325a performs authentication with the gaming machine.

  Thereafter, the SC 325b and the communication control IC 325a perform the communication control IC authentication sequence using the authentication key or the temporary authentication key as the encryption key. In the “temporary authentication key mode” described with reference to FIG. 10, the temporary authentication key is used, and in the case of the main authentication key mode after the main authentication key is generated, the main authentication key is used.

  Thereafter, the SC 325b and the communication control IC 325a perform the security information update sequence using the main authentication key or the temporary authentication key as the encryption key. Further, the SC 325b and the communication control IC 325a perform a gaming machine chip information authentication sequence using the authentication key or the temporary authentication key as the encryption key.

  Thereafter, the SC 325b transmits a communication key request command for requesting a communication key to the communication control IC 325a. The communication key request command is encrypted using the authentication key or the temporary authentication key as the encryption key.

  Upon receiving the communication key request command, the communication control IC 325a generates a communication key (session key) for communicating the business message with the gaming machine, and notifies the generated communication key to the SC 325b in response to the communication key response. Note that the response of the communication key response to be returned is encrypted using the authentication key or the temporary authentication key as the encryption key. Specifically, the communication key (session key) is generated using a random number and current time data. The current time data may be generated by the communication control IC 325a itself or received from another device. The method for generating the communication key (session key) is not limited to the random number and the current time data, and any data may be used as long as it is variable data other than the key used for the above-described mutual authentication.

After the above process is completed, business message communication with the gaming machine becomes possible.
FIG. 25 is a flowchart for explaining specific control of “authentication by the board authentication key”. Referring to FIG. 25, a series of processing described below is performed between CU control unit 323 and SC 325b.

  In step S201, an authentication process (unit authentication) using a board serial ID is performed using a challenge response method (see board serial ID authentication request / responses 1 and 2 in FIG. 18).

  When the single authentication in step S201 is completed, the key version is checked in the next step S202 (see version information notification / response in FIG. 18).

  When the key version check in step S202 is completed, device authentication using the board authentication key is performed in the next step S203 (see board authentication key authentication request / responses 1 and 2 in FIG. 18).

  When the device authentication process in step S203 is completed, the authentication results in steps S201 to S203 are mutually notified in the next step S204, and the process proceeds to the next step S205 (board authentication result notification / response in FIG. 18). reference).

  In step S205, it is determined whether or not the notified authentication result is normal. If the authentication result is normal, the process proceeds to step S206. If the authentication result is not normal, the process proceeds to step S207.

  In step S206, it is further determined whether or not the CU control unit 323 has the security board information acquired from the SC 325b. If the CU control unit 323 has the security board information to be acquired, the process proceeds to step S209 and the acquisition is performed. If the security board information is not included, the process proceeds to step S210.

  In step S209, the board authentication key authentication process between the CU control units 323 and SC325b further shifts to a security board information inquiry process, and the process ends. On the other hand, in step S210, the authentication in the board authentication key mode ends normally, and the process ends. In this case, the game machine chip information is collated between the CU control units 323 and SC325b.

  On the other hand, if the authentication result is not normal in step S205, the process proceeds to step S206. In this step S206, it is determined whether or not the number of retries is the third time. If the number of retries is the third time, the process proceeds to step S208, and the number of retries is not the third time (the first or second number of retries) If so, the process returns to step S201, and the authentication process is performed again.

  In step S208, the SC325b board authentication abnormality is set to a standby state until a reset operation (for example, operation of a reset button (not shown) or power-on). After the reset operation, it is activated again in a mode (substrate initial key mode) in which authentication processing is performed again using the substrate initial key as an encryption key, each authentication processing is performed, and the processing ends. In this case, the business of that day is operated in this board initial key mode throughout the day, and when the power is turned on the next day, a security board information acquisition request is issued again to the key management server to try to acquire the security board information (see FIG. 22). Further, as shown in step S208a, the inquiry process for the security board information may be executed again at this time without waiting for the power-up of the next day. In this case, while the game is progressing by the operation in the board initial key mode, the inquiry process of the security board information is also advanced in parallel.

  FIG. 26A is an example of a flowchart for explaining a communication mode switching process between the CU control unit and the SC. Referring to FIG. 26A, in step S211, the CU control unit 323 requests a board authentication key from the key management server, and the process proceeds to the next step S212.

  In step S212, the CU control unit 323 obtains a board authentication key from the security board information sent from the key management server, and transmits update information in the security board information to the SC 325b, and next step S213. The process proceeds.

  In step S213, the CU control unit 323 determines whether or not the gaming machine is in a non-operating state. When the mode switching process in the next step S214 is performed, the number of balls added / subtracted cannot be communicated with the gaming machine that is executing the switching process, so that the gaming machine is not in operation before the mode switching process in step S214. It is determined whether or not. Whether or not the gaming machine is in a non-operating state is determined based on whether or not a player's card is inserted in the CU. When no card is inserted, the gaming machine is determined to be in an inoperative state, while when a card is inserted, the gaming machine is determined to be in an operating state. If the gaming machine corresponding to the CU control unit 323 is in a non-operating state, the process proceeds to step S214. If the gaming machine corresponding to the CU control unit 323 is not in a non-operating state, the gaming machine is in a non-operating state. Step S213 is performed until.

  In step S214, based on the board authentication key acquired in step S212, the CU control unit 323 advances the process using the board authentication key as the encryption key from the mode in which the board initial key is used as the encryption key (board initial key mode). The communication mode is switched to the mode (board authentication key mode), and the process ends.

  FIG. 26B is an example of a flowchart for explaining a communication mode switching process between the SC and the communication control IC. With reference to FIG.26 (b), SC325b acquires the update information from CU control part 323 in step S216. As described above, the CU control unit 323 transmits update information to the SC 325b in step S212. Receiving it, the SC 325b acquires the update information. Next, in step S217, the SC 325b generates this authentication key from the acquired update information. Next, similarly to step S213 described above, in step S218, the SC 325b determines whether or not the gaming machine is in a non-operating state, and executes the process of step S219 on the condition that it is in a non-operating state. In step S219, the SC 325b uses the authentication key as the encryption key from the mode (provisional authentication key mode) in which the temporary authentication key is used as the encryption key for the communication mode between the SC 325b and the communication control IC 325a based on the generated authentication key. Switch to the mode to proceed with the process (this authentication key mode).

  According to such an embodiment, before the authenticity of the CU is authenticated by the board authentication key registered in the key management server, a normal communication mode is entered and the game on the P cards using the remaining card amount is performed. It can be prevented from becoming possible. Furthermore, even when the board authentication key registered in the key management server cannot be received, the restricted communication mode is set and a game on the P units is allowed, so that flexible operation is possible. In addition, in this case, since the game is allowed under a predetermined restriction compared to the normal communication mode, the operation can be performed without requiring authentication with the board authentication key stored in the key management server. It can be prevented from continuing.

  FIGS. 27A and 27B are other examples of a flowchart for explaining the communication mode switching process. Referring to FIG. 27A showing the communication mode switching process between the CU control unit and the SC, in step S221, the CU control unit 323 requests security board information from the key management server, and the next step S222 is performed. The process proceeds.

  In step S222, the hall server acquires the security board information requested by the CU control unit 323 from the key management server from the key management server, and the hall server acquires the board authentication key from the security board information. Next, in step S223, the hall server determines whether or not the gaming machine corresponding to the CU control unit 323 that has requested the security board information is in a non-operating state for the same purpose as in step S213 described above. When the gaming machine becomes non-operating, the hall server transmits the acquired board authentication key to the CU control unit 323 in step S224, and the CU control unit 323 that has received the update information in the security board information is SC325b. Send to. Next, in step S225, based on the board authentication key acquired in step S2224, the CU control unit 323 performs processing using the board authentication key as the encryption key from the mode in which processing is performed using the board initial key as the encryption key (board initial key mode). The communication mode is switched to the mode (board authentication key mode) to advance the process, and the process ends.

  Next, with reference to FIG. 27B showing the communication mode switching process between the SC and the communication control IC, the SC 325b acquires update information from the CU control unit 323 in step S226. As described above, the CU control unit 323 transmits update information to the SC 325b in step S224. Receiving it, the SC 325b acquires the update information. Next, in step S227, the SC 325b generates this authentication key from the acquired update information. Next, in step S228, the SC 325b obtains the authentication key from the mode (provisional authentication key mode) in which the temporary authentication key is used as the encryption key for the communication mode between the SC 325b and the communication control IC 325a based on the generated authentication key. Switch to a mode in which processing is performed as an encryption key (this authentication key mode).

  According to such an embodiment, even when the hall server receives the board authentication key from the key management server in the restricted communication mode, the board authentication key is immediately transmitted to the CU when the P units are in operation. Provided in the restricted communication mode because the board authentication key is sent from the hall server to the CU and switched to the normal communication mode on the condition that the gaming machine is in a non-operating state, instead of switching to the normal communication mode. It is possible to prevent the player from suffering any disadvantages by affecting the game that has been played.

<Authentication operation between SC 325b and CU control unit 323>
Next, the unified store code check and the board manufacturer code authentication will be described in more detail.

  First, with reference to FIG. 28, the unified store code check process by SC325b will be described. This process is an authentication operation in which the SC 325b checks the unified store code notified at the time of the board connection request and the unified store code notified last time, and determines that the installed store has changed when there is a mismatch. The SC 325b determines whether or not the stored previous unified store code is a dummy code (step S1101). For example, all data of the dummy code of the unified store code is “0xFF”. This dummy code is used in place of the normal unified store code at the time of shipment before the CU 3 is installed in the amusement hall (store), and is already stored in the SC 325b at the time of shipment. Then, at the time of shipment, a dummy code is input to the SC 325b via the CU control unit 323, and the SC 325b determines that the input dummy code matches the stored dummy code and authenticates it. The dummy code is stored as a default in the hall server of the amusement hall as a temporary shop code when a unified store code has not yet been acquired for a newly opened game hall (hall). Then, the dummy code is downloaded from the hall server to the CU 3 installed in the game hall of the newly opened store, and the SC 325b determines that the downloaded dummy code matches the stored dummy code and authenticates it. Allows gaming.

  The hall server that has acquired the regular unified store code transmits the unified store code to the CU control unit 323. Upon receiving the request, the CU control unit 323 transmits the unified store code to the SC 325b when the board connection is requested at the next power-on. Receiving it, SC325b, when determining that the previous unified store code stored is a dummy code (step S1101: YES), updates the memory to the unified store code notified from the hall server at the time of board connection request. However, it does not initialize the board authentication key and the main authentication key information and operates by taking over the previous authentication modes. Thereafter, the SC 325b stores the authentication log information (step S1106). The initialization of the board authentication key and the main authentication key information is a process required when the CU 3 installed in a certain game arcade is moved to another game arcade, but is a dummy code stored in the SC 325b. Is updated to the unified store code, the amusement hall of the newly opened store obtains the unified store code and downloads the unified store code to the CU3. It is not necessary to initialize the key and the authentication key information. Conversely, if the board authentication key and this authentication key information are initialized in such a case, a board authentication key acquisition request is required again, increasing the number of board initial key operations (timed operation) in one business day, and timed operation. There is a disadvantage that the grace period is reduced. In order to avoid such inconvenience, control is performed so that the board authentication key and the main authentication key information are not initialized.

  On the other hand, if the SC 325b determines that the previous unified store code stored is not a dummy code (step S1101: NO), the unified store code notified from the hall server at the time of board connection request and the stored previous store code are stored. It is determined whether or not the unified store code matches (step S1102).

  If the SC 325b determines that the unified store code notified from the hall server at the time of board connection request matches the previous unified store code stored (YES in step S1102), the authentication process is performed on the board initial key. Transition to an authentication sequence, or transition to a board authentication key authentication sequence (step S1103). Note that the SC 325b transitions to the board authentication key authentication sequence when the previous authentication mode is the board authentication key mode, and shifts to the board initial key authentication sequence when the previous authentication mode is any other authentication mode.

  On the other hand, if the SC 325b determines that the unified store code notified from the hall server at the time of board connection request does not match the previous unified store code stored (step S1102: NO), the board authentication key information The authentication key information is initialized (cleared) (step S1104). Such a mismatch in the unified store code occurs when the CU 3 installed in a certain game hall is moved to another game hall. Since CU3 has been moved to another amusement hall, the board authentication key information and the main authentication key information used in the previous amusement hall are initialized (cleared) to ensure security. When the unified store code notified from the CU control unit 323 is changed, the SC 325b sets initialization (clear) of the authentication key in the communication control IC 325a and starts authentication with the temporary authentication key. Note that when the SC 325b initializes (clears) the authentication key information, the communication control IC 325a may also control to initialize (clear) the authentication key information, and particularly performs such control. Instead, the SC 325b may return to authentication with the temporary authentication key because the authentication key does not exist at the next authentication with the communication control IC 325a.

  Further, the SC 325b initializes (clears) the board authentication key information and the main authentication key information in step S1104, and then transitions the authentication process to the board initial key authentication sequence and the temporary authentication key sequence (step S1105).

  In step S1103, the SC 325b transitions the authentication process to the board initial key authentication sequence, or transitions to the board authentication key authentication sequence. In step S1104, the SC 325b stores the authentication log information after transitioning to the board initial key authentication sequence. (Step S1106).

  FIG. 29 is a flowchart for explaining the board manufacturer code authentication operation. The board manufacturer code authentication is an authentication operation in which the SC 325b and the CU control unit 323 perform authentication using the board manufacturer code stored as initial information. Referring to FIG. 29, first, SC 325b and CU control unit 323 perform unit authentication by a challenge / response method using the stored board manufacturer code. (Step S1201). The response code generated at the time of single unit authentication is generated, for example, by performing block encryption of the challenge code using the stored board manufacturer code as a key and then hashing with a hash function.

  The SC 325b determines whether the authentication result obtained by checking the response code generated by the CU control unit 323 with respect to the generated challenge code is normal (step S1202). If the SC 325b determines that the authentication result is normal (step S1202: YES), the SC 325b determines whether it has already been authenticated with the board authentication key (step S1203). On the other hand, when the SC 325b determines that the authentication result is not normal (abnormal) (step S1202: NO), the SC 325b determines whether it is abnormal continuously (eg, three times) n times (step S1204).

  If the SC 325b determines that the board authentication key has already been authenticated (step S1203: YES), the process proceeds to the board authentication key authentication process and maintains the board authentication key authentication sequence (step S1205). On the other hand, if the SC 325b determines that the board authentication key has not been authenticated (step S1203: NO), the process proceeds to the board initial key authentication process (step S1206).

  SC325b returns a process to step S1201, when it is judged that it is not abnormal continuously n times (step S1204: NO). On the other hand, when the SC 325b determines that the abnormality is continuous n times (step S1204: YES), the board authentication key information and the main authentication key information are initialized (cleared) to ensure security (step S1207). . Thereby, the inconvenience that the board authentication key information and the main authentication key information are stolen can be prevented. Thereafter, the SC 325b makes a transition to a board initial key authentication process (step S1208).

  In step S1205, the SC 325b maintains the board authentication key authentication sequence, or transitions to the board initial key authentication process in steps S1206 and S1208, and then saves the authentication log information (step S1209).

<Slot machine>
Next, a slot machine will be described as another example of the gaming machine. FIG. 30 is a perspective view showing a state in which the front door of the slot machine is opened. In the description so far, the slot machine is also abbreviated as “S” in the following because of the abbreviation of the pachinko machine as “P”.

  The above gaming system using game balls and holding balls is also applied to the S units. However, in the S platform, the game is played without using balls, and hence the game balls will be referred to as game points and the holding balls as points.

  Referring to FIG. 30, in the slot machine 2S, a front door 2bS is provided to the main body frame 2aS so that the front door 2bS can be opened and closed with its left edge as a swing center. Although not shown in FIG. 30, a CU is connected to the left side of the slot machine 2S in the same manner as the P units.

  In the slot machine 2S, the number of bets is set by using game points, and the game points are added and updated in accordance with winning. For this reason, when playing a game in the slot machine 2S, a medal insertion operation is not necessary. Therefore, the slot machine 2S is not provided with a medal slot and a medal payout slot.

  Inside the casing of the slot machine 2S, reels 2L, 2C, and 2R (hereinafter also referred to as a left reel, a middle reel, and a right reel) in which a plurality of types of symbols are arranged on the outer periphery are juxtaposed in a horizontal direction. Of the symbols arranged on the reels 2L, 2C and 2R, three consecutive symbols are arranged so as to be seen from the see-through window 10 provided on the front door 2bS. A plurality of types of symbols are drawn in a predetermined order on the outer peripheral portions of the reels 2L, 2C, and 2R.

  A touch panel display 510 is provided in a portion surrounding each reel 2L, 2C, 2R of the front door 2bS. The display 510 is a display corresponding to the P displays 54, and displays various types of information (game points, points, etc.) of the same type as the display 54, as well as the number of bets set in the game. Is displayed. The display unit 510 is connected to the display control unit 350 of the CU in the same manner as the display unit 54 in FIG. 2 and is controlled on the CU side. The indicator 510 is not provided in a portion surrounding each of the reels 2L, 2C, and 2R, but is provided at a lower panel portion (at a position below the start switch 7S shown in FIG. You may provide in the panel part provided with the conventional S medal payout opening.

  Further, the front door 2bS has a single BET switch 5S that is operated when setting the number of bets using “game points = 1” corresponding to one medal, and the maximum determined according to the game state. When setting the number of bets (for example, “game point = 3” in the normal game state before BB occurrence and RT (Replay Time) where the winning probability of replay is high, “game point = 2” in the bonus) The MAXBET switch 6S is operated, the start switch 7S is operated when the game is started, and the stop switches 8L, 8C, 8R are respectively operated when the rotation of the reels 2L, 2C, 2R is stopped. Yes.

  When playing a game in the slot machine 2S, first, as with the P machines, after securing a game point using the adjacent CU, the number of bets is set using the game point. The game points can be obtained by withdrawing the balance of the prepaid card inserted into the CU, points, or a stored medal (corresponding to P stored balls) deposited in the game hall. In order to use the game points, the single BET switch 5S or the MAXBET switch 6S may be operated. In the present embodiment, for example, by setting the number of bets to 1, the game points are deducted by 1, and the display of the game points on the display 510 is also subtracted and updated. When the bet number is set, the pay line determined according to the bet number and the gaming state is valid, and the operation of the start switch 7S is valid, that is, the game can be started.

  When the start switch 7S is operated while the game can be started, the reels 2L, 2C, and 2R rotate, and the symbols of the reels 2L, 2C, and 2R continuously change. When any one of the stop switches 8L, 8C, 8R is operated in this state, the rotation of the corresponding reels 2L, 2C, 2R is stopped, and the display result is derived and displayed on the fluoroscopic window 10.

  Then, when all the reels 2L, 2C, 2R are stopped, one game is completed, and a predetermined symbol combination (hereinafter also referred to as a role) on the activated pay line is displayed on each reel 2L, 2C, When the 2R display result is stopped, a prize is generated, a game point determined according to the prize is given to the player, and the display of the game point on the display 510 is also added and updated.

  In the case of S units, it is possible to count game points as in the case of P units. As shown in FIG. 30, the slot machine 2S is provided with a counting button 28S for counting game points and converting them into points. The ball lending button, the return button, and the replay button are provided on the CU side (see FIG. 2). The player executes the counting operation based on an arbitrary timing or a display for prompting the counting operation on the display unit 510 in the same manner as the P units. Then, the game points are counted and the display 510 displays a state in which the points are increased while the game points are decreased. The ball lending button may be provided not on the CU side but on the P platform side and the S platform side. In this case, the operation signal of the ball lending button may be directly input to the CU 2 or may be transmitted to the CU 3 as a status information response via the P unit 2 or the S unit (slot machine) 2S. It may be.

  The types of winning combinations are determined according to the state of the game, but can be broadly divided into special roles with a shift to the big bonus (BB) and regular bonus (RB), and small roles with payout of medals. And a re-gamer (replay) that allows the next game to be started without the need to set the bet amount.

  Which of a plurality of types of winning combinations is to be won or whether any winning combination is to be excluded is determined by, for example, the main control unit (S) controlling the slot machine 2S when a start operation is detected. It corresponds to the main control unit 161 of the stand). This determination is made, for example, by drawing a random number generated from a predetermined random number generator or generated on software.

  After that, the main control unit waits for the reel stop operation by the player, draws in the symbol corresponding to the winning combination in the predetermined frame number range based on the stop operation time, otherwise draws another symbol Is controlled to stop the three symbols and determine whether or not there is a prize. If the main control base determines that a winning is made, the main control base gives the player game points according to the type of winning (adds game points).

  In other words, the game can be started by setting a predetermined number of bets for one game using the gaming value by using the S units, and a plurality of types of identification information that can be identified can be displayed in a variable manner. A slot machine in which one game is completed when a display result is derived to the variable display device, and a winning can be generated according to the display result derived to the variable display device, which is displayed on the variable display device Before the result is derived, a predetermining unit that determines whether or not to allow a plurality of types of winnings to be generated, and causing the variable display device to derive a display result according to the determination result of the predetermining unit A slot machine including derivation control means for performing control and giving means for giving a game value when the winning occurs is configured.

  FIG. 31 is an explanatory diagram for explaining various data stored in each of the card unit and the slot machine and their transmission / reception modes. This FIG. 31 is obtained by replacing the terminology of FIG. 3 described as the configuration of the P units with that for the S units, and the mode is the same as that described with reference to FIG. The description of is omitted.

<Modifications and feature points>
Next, modifications and feature points of the present embodiment described above are listed.

  (1) When a slot machine (S units), which is an example of a gaming machine, is applied to the above gaming system, for example, there are P units of reels and various sensor parts attached to the reels and a main control board for controlling the reels. Corresponding to the board, other configurations correspond to P game frames. However, the S units do not require the various detection switches 41a, 701, 33, the launch control board 31, and the launch motor 18 of the game frame shown in FIG.

  A conventional S unit is provided with a credit function. When this function is enabled, the credit is subtracted when the number of bets is set, and the credit is added when a winning occurs. However, there is an upper limit for credits, and when a winning occurs when the number of credits reaches the upper limit value, medals are paid out from the hopper.

  On the other hand, in the S units according to the present embodiment, game points are subtracted when the bet number is set, and game points are added when a winning occurs. Further, when the game points reach a predetermined number, a display for prompting a counting operation is made, and the gaming points are converted into points by performing the counting operation. For this reason, it is not necessary to pay out medals when the credit reaches the upper limit unlike the conventional S units. As a result, it is not necessary to provide a hopper on the S platform according to the present embodiment.

  As a result, the amusement hall does not need to secure a large number of medals, reducing the economic burden. The game arcade is also freed from operations such as replenishment / collection of medals and maintenance operations to deal with clogged medals. The player is relieved from the hassle of inserting medals for each betting operation after the credit is full, and can easily concentrate on the game.

  On the other hand, if S units become medalless, a player who has won a large number of medals will not be able to act to show off his arms by stacking boxes with medals beside the seat. Inconvenience arises. However, in this embodiment, since the function of displaying the dollar box is provided as described above, it is possible to prevent such inconvenience. In addition, it is desirable for the dollar box display in the case of S units to have a large number of medals loaded instead of a large number of balls.

  When S machines are applied as a gaming machine, each type of data is expressed as follows using two types of data, “Points” and “Game Points”, and “Credit” and “Credit Excess Points”. It is also possible to configure a gaming system that is converted. Note that these four types of data are displayed on the S displays 510.

  First, when a conversion operation (lending operation, saving medal payout operation, and point payout operation) from a prepaid card balance, a saving medal, or a point is detected, each is withdrawn and converted into a gaming point. The

  A game point is data corresponding to a medal in a conventional slot machine. For this reason, for example, it is desirable to display the number of game points on the display 510 and to display the number of medal images corresponding to the game points. For example, when a pseudo-insertion medal operation (for example, an operation of pushing a medal) such that a player touches the medal image and inserts it into the slot machine is detected, the medal image disappears and the game points are subtracted. Instead, one bet is set. By performing such a pseudo medal insertion operation three times, the bet number is set to the maximum value of three.

  Thereafter, when a pseudo medal insertion operation is further detected, a credit is added in accordance with the detection. An upper limit value (for example, 50) is set for the credit, and when the credit exceeds the upper limit value, a credit excess point is added.

  The betting amount setting can be performed using the game points as described above, and can also be performed using credits. That is, if the one-sheet BET switch 5S is operated, 1 is added to the betting number setting value and 1 is subtracted from the credit. If the MAXBET switch 6S is operated, the bet number is set to 3, and the credit is subtracted according to the bet number setting.

  As a result of the game, when a winning occurs, a number of points corresponding to the winning is added to the credit. When a winning that exceeds the upper limit of credit occurs, the score for the excess is stored as a credit excess point. This credit excess point corresponds to a medal to be paid out when a winning occurs exceeding the upper limit of credit in the conventional slot machine. For this reason, for example, it is desirable to display the credit excess points on the display 510 and to display the number of medal images corresponding to the credit excess points. Further, it is desirable to change the color of this medal image so that it can be distinguished from the medal image corresponding to the game point.

  Further, it is desirable that the credit excess points are converted into game points by the player's operation. For example, when a pseudo medal conversion operation (for example, an operation of pushing a medal) is performed such that the player touches the medal image corresponding to the credit excess point and converts it to a game point, the medal image disappears and the credit excess Points are subtracted and game points are added.

  Alternatively, if the credit becomes less than the upper limit value, the credit excess point may be automatically converted into credit.

  When the player performs a counting operation, each of the game points, credits, and credit excess points is counted and converted into points. As a result, the player's points are posted as “card possession number + game points + credits + credit excess points”. The “card possession number” is the number of points before conversion (the number of possessions currently owned by the player) that has not been converted into game points.

  In the above description, the four types of data of points, game points, credits, and credit excess points may be stored on both sides by exchanging data between the CU and S units. You may memorize | store only in the S stand side only by CU side. Further, the credit excess point may be a target for dollar box display.

  Moreover, although the example using a credit excess point was demonstrated in the above description, it is not necessary to use a credit excess point. In this case, when the credit limit is exceeded, it may be added to the game points.

  (2) In the present embodiment, game points are added by consuming the card count. Alternatively, game points are added by consuming stored balls (stored medals). That is, the card frequency or the stored ball is converted into game points. On the other hand, the card power and the stored balls are not converted into points (count balls, count medals). However, the card power and the stored ball may be once converted into points.

  (3) In the present embodiment, game points are converted into points by counting operation. The conversion rate in this case is 1: 1. However, the conversion rate in the case of conversion may be other than 1: 1. For example, when 100 game points are converted, 97 points obtained by subtracting three of them may be converted into points. Or you may make it convert into the number of game balls obtained by multiplying a predetermined ratio of less than 100% with respect to a point.

  (4) The recording medium for recording the holding point in an identifiable manner may use a mobile terminal such as a smartphone. In this case, the communication unit for communicating with the mobile terminal is provided in the CU, and the CU recognizes the ID stored in the mobile terminal by holding the mobile terminal over the communication unit. The game is made possible by the procedure as described. On the other hand, at the end of the game, the portable terminal is again held over the communication unit, so that the score at the end of the game is added to the player's score through the ID.

  (5) The operation means for counting game points may be provided on the CU side. In this case, the operation means may be displayed on a touch panel, or may be constituted by a physical switch.

  (6) In the present embodiment, when an uncounted game point remains when a card return operation is performed, a message prompting the counting is displayed on the P display or the CU side display. However, instead of such a configuration, when an uncounted game point remains when the card return operation is performed, the counting display is automatically started and the display on the P table or the CU side is used. It may be notified that automatic counting has started because there are still uncounted game points, or that, in addition, the card will be returned after completion of automatic counting.

  Alternatively, when an uncounted game point remains when the card return operation is performed, it is determined that there is a possibility that the player may leave the table temporarily, and the display (CU side or P stand side) You may display the message which confirms whether it is temporary leaving. Further, the display device may be constituted by a touch panel so that the player can input a response to the message. Furthermore, if the response input is the end of the game, a message prompting the counting operation is displayed. On the other hand, if the response input is temporarily away from the desk, the card may be temporarily ejected while the ID of the card is stored on the CU side, the P platform side, or both. Thereafter, when a card with the same ID is inserted, the game is resumed from the original state.

  (7) The counting time from the start of the counting operation to the completion of the counting display is based on the game points when the game points are less than the first reference value and when the game points exceed the first reference value. The increasing rate of the counting time may be reduced. As a result, while it is possible to produce an effect of counting display as if counting a real ball, it can be prevented that it takes too much time to complete counting due to an increase in game points. Further, when the game points exceed a certain reference value, all the counting times may be the same. Alternatively, the same counting time may be adopted regardless of the number of game points without providing a reference value.

  (8) As a counting operation means for counting the game balls, one that exhibits a counting function when operated a predetermined number of times twice or more may be employed. As a result, erroneous operation can be prevented. Further, in this case, one function may be used to exhibit another function different from the counting function. For example, when there is no operation for a predetermined time (for example, within 1 second) after the operation is performed once, a function to turn on a lamp for calling a store clerk is exhibited, and within 1 second from 1 operation. When the second operation is detected, it is conceivable to perform the counting function.

  (9) Referring to FIG. 3, the P platform is provided with a counting ball counter that temporarily stores the counted counting balls (held balls), but does not include a counter that stores the cumulative value of the counting balls. . However, a counting ball cumulative storage counter that stores the cumulative value of counting balls may be provided on the P platform side. In addition, the CU side is provided with an area for storing card holding balls (counting balls). If a holding ball is recorded on the inserted card itself, this area holds the card holding ball. The current number of players' balls, including balls, is stored. For this reason, only in this area, the number of counting balls counted by the player in the current game cannot be specified. Therefore, an area for storing the number of counting balls counted by the player in this game may be further provided on the CU side. In this case, the CU adds balls to the area based on the information on the number of balls that are sent from the P cars after the game starts, and when the balls are converted into game balls, Subtract the holding ball.

  (10) In order to change the number of game points to be converted in one operation according to the time for which the count button is kept pressed, for example, when a long press (for example, continuous operation for 1 second or more), While all are counted, only 200 balls may be counted in a short press (for example, continuous operation for less than 1 second). However, in this case, when the remaining number of game balls is small, for example, when it is less than 200 balls, it is desirable that all game balls are counted by operating the counting button.

  (11) Depending on the remaining number of game points, when the number of points counted by one short press operation of the counting button is made different, for example, the following may be considered. For example, when the number of game points is less than 200, all the game points are counted by one short press operation of the counting button. When the game points are 200 or more and less than 1000, 200 points are counted by one short press operation. When the game points are 1000 or more and less than 5000, 1000 points are counted by one short press operation. When the game points are 5000 or more and less than 10,000, 2000 points are counted by one short press operation. When the number of game points is 10,000 or more, 2500 points are counted by one short press operation. The above numerical values are specific examples and can be set as appropriate.

  (12) When counting game balls (game points) and converting points, not only counting display but also counting sound may be output from a speaker. In addition, when counting the game points, it is conceivable to display an image in which balls are dropped one by one from the ball storage tray to the counter.

  (13) Timing for performing conversion display (display indicating that game balls are counted and the number of balls is increased) based on a counting operation and subtracting game points on the data The timing for adding the points can be varied. The calculation may be executed after the conversion display is completed. For this purpose, count data may be transmitted from the gaming machine to the CU after the conversion display is completed. It should be noted that such a modification can be similarly applied to the case where the points are converted into game points.

  (14) In the present embodiment, in the communication between the CU and the gaming machine, a command-response method is adopted in which the CU is a primary station and the gaming machine is a secondary station. The relationship between and may be reversed. Alternatively, instead of adopting such a communication system having a master-slave relationship, a system may be employed in which both send data to the other party when a request to communicate occurs.

  (15) In FIG. 3 or FIG. 31, the game balls (game points) are stored on both the gaming machine side and the CU side, but the game balls (game points) are stored only on the game machine side, and the CU It may not be stored on the side. On the other hand, the card holding balls (scoring points) are stored only on the CU side, but may also be stored on the gaming machine side. In particular, game balls (game points) are stored only on the gaming machine side, while card holding balls (points) are stored only on the CU side to clarify the division of data storage management. Good.

  (16) The counting display and various notifications performed on the display device 54 may be performed on the display device 312 as well.

  (17) In CU3, based on the value of the added ball number counter (added ball number) and the value of the subtracted ball number counter (subtracted ball number) transmitted from the P platform side, the stored game ball number is updated. When the number of game balls stored is subtracted based on the value of the counting ball number counter transmitted from the P platform side, if the value of the number of game balls becomes negative, an error (abnormal) determination is made. Then, error processing may be performed. As a specific example of error processing, error notification is performed by an abnormality notification lamp or the like, or an error notification signal indicating that an error has occurred is transmitted to the hall management computer or hall server (in this case, the hall management computer). Or an error notification by the hall server may be performed).

  (18) When a lending operation or a conversion operation (lending operation) from a holding point (held ball) to a gaming point (game ball) is detected, the gaming points may be counted up one by one. In order to shorten the waiting time of the player, a display may be made so that a plurality of points (for example, 25 points equivalent to 100 yen) are counted up. Conversely, when a game point counting operation is executed, a display may be made so that the points are counted up by a plurality of points. Furthermore, the number of units for counting up and displaying game points or points may be set from a plurality of types. In the setting, it is conceivable to use a touch panel of P or S display devices.

  (19) When the counting operation is executed, the holding points may be counted up at an accelerated rate when a predetermined time has elapsed since the starting of counting up the holding points. Alternatively, a speed-up button for accelerating the count display may be displayed on the touch panel display on the CU side or the gaming machine side, and the operation may be detected to display the acceleration count display. By performing the acceleration counting display of the points in this way, the waiting time of the player when counting a large number of gaming points can be shortened.

  (20) A touch sensor may be provided on the hitting operation handle, and the counting operation may be invalidated while the touch sensor detects that the player is holding the hitting operation handle. Invalidating the counting operation means detecting the counting operation but not executing the counting operation based on the detection output, or not detecting the counting operation itself. Or, if the player does not invalidate the counting operation only by touching the hitting operation handle, and if the counting operation is disabled if the hitting operation handle is turned to such an extent that the ball firing drive pulse is output. Good.

  In these cases, when a counting operation is detected, a message “Please release handle” may be displayed on the display of the gaming machine or CU. Alternatively, when the counting operation button is displayed as an icon on the touch panel screen, the counting operation button may be grayed out to notify the player that the operation is impossible.

  (21) At least one or all of the ball lending button, the return button, the replay button, and the counting button may be provided on the gaming machine side, or may be provided on the CU side. Further, it is conceivable that the button is displayed on the display device on the gaming machine side or the CU side described as the touch panel type display device.

  (22) The sequence control shown in FIG. 5 to FIG. 9 is not limited to the transmission / reception sequence between control devices in a single gaming machine such as CU3, P stand 2, S stand 2S, etc., particularly for processing related to security. Instead, for example, the present invention may be applied to a transmission / reception sequence between a plurality of gaming machines such as CU3, P unit 2, jet counter, and POS terminal.

  (23) In the above-described embodiment, the identity of the player is determined based on the card ID, but instead of or in addition to this, the identity of the player is determined based on the player's fingerprint, retina and other biomass. A determination may be made.

  (24) In the above-described embodiment, the number of game balls and game points are directly added by the occurrence of a win. Instead, the points are added by the occurrence of a win, and the added points are added. It may be controlled to withdraw and add the number of game balls or game points.

  (25) In the above-described embodiment, when the value is deducted within the range of the valuable value owned by the player (the prepaid balance, the possession ball, the accumulated ball) and the corresponding game points are added, the deducted value However, instead, for example, it may be controlled to add game points that are smaller by the amount equivalent to the consumption tax with respect to the value actually withdrawn.

  (26) In the above-described embodiment, authentication is performed using various authentication keys. However, authentication may be performed using, for example, an ID for authentication instead of the various authentication keys.

<Various configurations included in the embodiment>
(1-1) The present invention uses a server (a hall server in FIG. 10) installed in a game arcade and a gaming value (a prepaid balance, a number of balls or a number of balls) owned by a player ( A gaming system provided with a gaming device (CU3) that enables a game by P units 2 and S units 2S),
The server transmits game hall identification information (unified store code) for identifying the game hall in which the server is installed to the gaming device (transmits the unified store code of FIG. 10). Including a hall server CPU and input / output interface)
The gaming device is:
Authentication processing means (substrate initial key / shipping key authentication in FIG. 17, communication control IC authentication sequence using temporary authentication key in FIG. 24) for performing authentication processing using temporary authentication data (substrate initial key, temporary authentication key); ,
On the condition that the authentication result by the authentication processing means is proper, the main authentication data acquisition storage means (the board authentication key in FIG. 10 is used for acquiring and storing the main authentication data (board authentication key, main authentication key)). The update information is received from the CU control unit to be received, the security board information inquiry sequence in FIGS. 13 and 14, the S211 and S212 in FIG. 26A, the S224 in FIG. 27A, and the CU control unit in FIG. SC that generates and stores the authentication key, S216 and S217 in FIG. 26B, S226 and S227 in FIG. 27B,
This authentication processing means for executing authentication processing using the main authentication data stored in the main authentication data acquisition storage means (substrate authentication key authentication in FIG. 18, communication control IC using the main authentication key in FIG. 24) Authentication sequence) and
Match determination means (S1102 in FIG. 28) for comparing the game hall identification information transmitted this time from the game hall identification information transmission means and the game hall identification information transmitted last time to determine whether they match. ,
The authentication data stored in the authentication data acquisition and storage means is erased when the match determination means determines that they do not match in the state where the authentication processing by the authentication processing means is executed, and the book Authentication processing switching means (S1104, S2205 in FIG. 28) for switching from authentication processing using authentication data to authentication processing using temporary authentication data.

  According to the above configuration, in order to perform authentication processing using the temporary authentication data and the main authentication data stored in the gaming device itself, there is no need to inquire and authenticate the center management device every time authentication is performed. Inconveniences that cause complications can be prevented. Further, when the gaming device is moved to another game hall, the game hall identification information for identifying the game hall transmitted this time from the game hall identification information transmitting means, and the game hall identification information transmitted last time, Is determined by the match determination means, the authentication data stored in the authentication data acquisition storage means is erased, and the authentication process using the authentication data is used for the temporary authentication data. Switched to authentication processing. As a result, it is possible to prevent inconvenience that the main authentication data used before the relocation is leaked at the relocation destination game arcade, and security can be ensured by an authentication process using temporary authentication data.

(1-2) In another aspect of the present invention, it is possible to use a gaming machine (P-unit 2, S-unit 2S) using a gaming value (prepaid balance, number of possessions, or number of stored balls) owned by the player. A gaming device (CU3)
Authentication processing means (substrate initial key / shipping key authentication in FIG. 17, communication control IC authentication sequence using temporary authentication key in FIG. 24) for performing authentication processing using temporary authentication data (substrate initial key, temporary authentication key); ,
On the condition that the authentication result by the authentication processing means is proper, the main authentication data acquisition storage means (the board authentication key in FIG. 10 is used for acquiring and storing the main authentication data (board authentication key, main authentication key)). The update information is received from the CU control unit to be received, the security board information inquiry sequence in FIGS. 13 and 14, the S211 and S212 in FIG. 26A, the S224 in FIG. 27A, and the CU control unit in FIG. SC that generates and stores the authentication key, S216 and S217 in FIG. 26B, S226 and S227 in FIG. 27B,
This authentication processing means for executing authentication processing using the main authentication data stored in the main authentication data acquisition storage means (substrate authentication key authentication in FIG. 18, communication control IC using the main authentication key in FIG. 24) Authentication sequence) and
A game hall that receives game hall identification information for identifying the game hall transmitted from a server (Hall server in FIG. 10) installed in the game hall when the game device is installed in the game hall. Identification information receiving means (input / output interface of SC325b for receiving the unified store code of FIG. 10);
A match determination means (S1102 in FIG. 28) for comparing the game hall identification information received this time by the game hall identification information receiving means with the previously received game hall identification information to determine whether they match;
The authentication data stored in the authentication data acquisition and storage means is erased when the match determination means determines that they do not match in the state where the authentication processing by the authentication processing means is executed, and the book Authentication processing switching means (S1104, S2205 in FIG. 28) for switching from authentication processing using authentication data to authentication processing using temporary authentication data.

  According to the above configuration, in order to perform authentication processing using the temporary authentication data and the main authentication data stored in the gaming device itself, there is no need to inquire and authenticate the center management device every time authentication is performed. Inconveniences that cause complications can be prevented. Further, when the gaming device is moved to another game hall, the game hall identification information for identifying the game hall transmitted this time from the game hall identification information transmitting means, and the game hall identification information transmitted last time, Is determined by the match determination means, the authentication data stored in the authentication data acquisition storage means is erased, and the authentication process using the authentication data is used for the temporary authentication data. Switched to authentication processing. As a result, it is possible to prevent inconvenience that the main authentication data used before the relocation is leaked at the relocation destination game arcade, and security can be ensured by an authentication process using temporary authentication data.

(1-3) In the gaming system (1-1) or the gaming device (1-2),
The gaming device is:
First control means (CU control unit 323 or SC325b);
Second control means (SC 325b or communication control IC 325a) connected to be communicable with the first control means,
The authentication processing means performs a mutual authentication process using the temporary authentication data between the first control means and the second control means (the substrate initial key authentication sequence of FIGS. 13 and 15 or the FIG. 24 of FIG. 24). Communication control IC authentication sequence using temporary authentication key).

  According to said structure, the security of the 1st control means and the 2nd control means which are contained in the game device can be ensured.

(1-4) In the gaming system or gaming device according to (1-3) above,
The first control means is a gaming device control means (CU control unit 323) for controlling the gaming device,
The second control means is security check means (SC325b) for checking security.

  According to said structure, the security of the game apparatus control means for controlling a game device and the security check means for performing a security check can be ensured.

(1-5) In the gaming system or gaming device according to (1-3) above,
The first control means is a security check means (SC325b) for performing a security check,
The second control means is communication control means (communication control IC 325a) for performing communication control with the gaming machine.

  According to said structure, the security of the security check means for performing a security check and the communication control means for performing communication control with a game machine can be ensured.

(2-1) The present invention is for a game that enables a game by a gaming machine (P 2 and S 2S) using a game value (prepaid balance, number of balls, or number of balls) owned by the player. A device (CU3),
First control means (CU control unit 323 or SC325b);
Second control means (SC 325b or communication control IC 325a) communicably connected to the first control means;
First authentication means (board manufacturer code authentication in FIG. 16, S1201, S1202, S1204 in FIG. 29) for performing authentication using manufacturer specifying information (board manufacturer code) for specifying the manufacturer of the second control means;
Data storage means (RAM of the CU control unit 323, RAM and ROM of the SC 325b, RAM and ROM of the communication control IC 325a) for storing authentication data (substrate initial key, temporary authentication key, substrate authentication key, and main authentication key) ,
Second authentication means for authenticating the first control means and the second control means using the data for authentication stored in the data storage means when the authentication by the first authentication means is successful (see FIG. 13 substrate initial key authentication sequence, substrate authentication key authentication sequence of FIG. 14, communication control IC authentication sequence using the main authentication key or temporary authentication key of FIG. 24),
A data erasure unit (S1207 in FIG. 29) for erasing the authentication data stored in the data storage unit when the authentication by the first authentication unit fails.

  According to the above configuration, in order to authenticate the first control means and the second control means using the authentication data stored in the gaming apparatus itself, the center management apparatus is inquired for each authentication. There is no need for authentication, and inconveniences that cause complication of processing can be prevented. Further, when an illegal act such as replacing the second control means with an unauthorized one is performed, the authentication using the manufacturer specifying information for specifying the manufacturer of the second control means fails, and is stored in the data storage means. The data for authentication that has been deleted is deleted. As a result, it is possible to prevent as much as possible the inconvenience of leaking authentication data for a gaming device that has been cheated.

(2-2) In the gaming apparatus of (2-1) above,
The second authentication means includes
Temporary authentication processing means for performing authentication processing using temporary authentication data (substrate initial key, temporary authentication key) (substrate initial key authentication sequence of FIGS. 13 and 15, communication control IC authentication using temporary authentication key of FIG. 24) Sequence)
Main authentication processing means for performing authentication processing using the main authentication data (board authentication key, main authentication key) on the condition that the authentication result by the temporary authentication processing means is appropriate (the board authentication key authentication sequence in FIG. Communication control IC authentication sequence using 24 real authentication keys),
The data storage means stores the main authentication data (the RAM of the CU control unit 323 and the RAM of the SC 325b store the board authentication key, and the RAM of the SC 325b and the RAM of the communication control IC 325a store the main authentication key. ),
The data erasure means erases the authentication data stored in the data storage means (S1208 in FIG. 29).

  According to the above configuration, when an illegal act such as replacing the second control means with an unauthorized one is performed, the authentication data stored in the data storage means is erased. The inconvenience of leaking the authentication data of the business device can be prevented as much as possible.

  The embodiment disclosed this time should be considered as illustrative in all points and not restrictive. The scope of the present invention is defined by the terms of the claims, rather than the description above, and is intended to include any modifications within the scope and meaning equivalent to the terms of the claims.

  2 Pachinko machine, 2S slot machine, 3 card unit, 16 main control board, 17 payout control board, 26 game board, 54, 312 display, 309 card insertion / discharge port, 319 replay button, 320 IR light receiving unit, 321 Lending button, 322 return button, 161 main control unit, 325 display control unit, 171 payout control unit, 323 CU control unit.

Claims (2)

A gaming system comprising a server installed in a game arcade and a gaming device that enables gaming by a gaming machine using a gaming value owned by the player,
The server includes a game hall identification information transmitting means for transmitting game hall identification information for identifying a game hall in which the server is installed to the gaming device,
The gaming device is:
Authentication processing means for performing authentication processing using temporary authentication data;
Authentication data acquisition storage means for performing processing for acquiring and storing the authentication data on condition that the authentication result by the authentication processing means is appropriate;
Authentication processing means for executing authentication processing using the authentication data stored in the authentication data acquisition storage means;
A match determination means for determining whether or not the game hall identification information transmitted this time from the game hall identification information transmission means and the game hall identification information transmitted last time are matched,
The authentication data stored in the authentication data acquisition and storage means is erased when the match determination means determines that they do not match in the state where the authentication processing by the authentication processing means is executed, and the book A gaming system comprising: an authentication process switching means for switching from an authentication process using authentication data to an authentication process using temporary authentication data. A gaming device that allows a gaming machine to use a gaming value owned by a player,
Authentication processing means for performing authentication processing using temporary authentication data;
Authentication data acquisition storage means for performing processing for acquiring and storing the authentication data on condition that the authentication result by the authentication processing means is appropriate;
Authentication processing means for executing authentication processing using the authentication data stored in the authentication data acquisition storage means;
A gaming facility identification information receiving means for receiving a game arcade identification information for identifying the game hall sent from server installed in Yu technique field,
A coincidence determining means for determining whether or not matching by comparing the currently received game arcade identification information and game arcade identification information previously received by the Yu technique field identification information receiving means,
The authentication data stored in the authentication data acquisition and storage means is erased when the match determination means determines that they do not match in the state where the authentication processing by the authentication processing means is executed, and the book A gaming apparatus comprising: an authentication process switching means for switching from an authentication process using authentication data to an authentication process using temporary authentication data.

Images