JP6592229B2 - GAME SYSTEM AND GAME DEVICE - Google Patents

Description

  The present invention includes a gaming machine and a gaming device that accepts a recording medium capable of specifying a value for playing a game on the gaming machine and enables a game using the value specified on the recording medium. The present invention relates to a game system and a game device included in the game system.

  Conventionally, a circulation path for circulating a plurality of balls as an example of a game medium in a gaming machine has been formed, and a storage unit for storing game points has been provided, and game points are stored in accordance with ball lending operations. There is a gaming machine in which game points are subtracted from the storage unit according to the ball launching operation, and game points are added to the storage unit according to the occurrence of winning (for example, Patent Document 1).

JP 2013-42801 A

  There may be a case where a plurality of rates, which are unit prices for lending game media, are used even in one game hall. However, in a gaming machine such as Patent Document 1, it is not possible to fluidly support a plurality of rates.

  The present invention has been conceived in view of such circumstances, and an object of the present invention is to provide a gaming system and a gaming apparatus capable of fluidly supporting a plurality of rates.

(1) A gaming machine (for example, a pachinko machine 2 and a slot machine 2S) and a recording medium (for example, a membership card) that can specify a value (for example, a prepaid balance, a holding ball, and a stored ball) for playing with the gaming machine And a gaming device (for example, a card unit 3) that accepts a visitor card) and enables a game using the value specified by the recording medium (for example, adding the number of game balls and the number of game points). A system,
The recording medium has a first value (for example, a prepaid balance, 4 pachis) that allows a game at a high rate (for example, a rate of 4 yen per pachinko ball, a rate of 20 yen per coin). Second-class value (for example, prepaid balance, etc.) that enables games at a low rate (for example, a rate of less than 4 yen per pachinko ball, a rate of less than 20 yen per coin) 1-patch holding ball, 1-patch storage ball) (for example, see FIG. 77), and the type of the recording medium includes a member recording medium corresponding to a member player and a non-member player. And corresponding non-member recording media,
The gaming device is:
Setting means (for example, step S527 in FIG. 78) for setting which of the high rate and the low rate is allowed;
Adding means for adding the value acquired in the game in accordance with the setting by the setting means to the value included in either the first category value or the second category value (see, for example, FIG. 12; step S516 in FIG. 78 or The rate set in step S527 is determined, and the acquired value is added to the first-class value or the second-class value of the determined rate.Game with a prepaid balance that can be used in both 1-patch and 4-patch The value acquired in (4) may be added to a 4-patch holding ball, or the value acquired by a gaming machine with a 4-patch storage ball may be added to a 4-patch holding ball.)
A return processing means for performing processing for returning the recording medium,
The return processing means
When the non-member recording medium is accepted and the return operation is accepted, if at least one of the first class value and the second class value is equal to or greater than a predetermined monetary value, the non-member Return the recording media,
When the non-member recording medium is accepted and the return operation is accepted, if each of the first class value and the second class value is less than the predetermined monetary value, the non-member record Restrict the return of media,
When the member recording medium is accepted, when the return operation is accepted, the member regardless of the size of each of the first type value and the second type value specified by the member recording medium Allow the return of recording media,
Absent of value that will be managed by the gaming machine, and, when the game machine is not controlled advantageously state, changes from one to the other of said high rate and the low rate by the setting means Is possible,
In the case of any of the cases and the gaming machine if of value that will be managed by the gaming machine is present is controlled advantageously state, from one of the high rate and the low rate by the setting means Changes to the other are prohibited ,
When there is a value managed by the gaming machine when a change operation from one of the high rate and the low rate by the setting means to the other is accepted, the value managed by the gaming machine is A promotion notification that prompts an operation for adding by the adding means as a value managed by the gaming apparatus is performed.

  According to such a configuration, it is possible to set a plurality of rates in a fluid manner by the gaming device and enable a game. As a result, it is possible to provide a gaming system capable of fluidly supporting a plurality of rates.

(2) A recording medium (for example, a membership card or a visitor card) that can specify a value (for example, a prepaid balance, a possession ball, a storage ball) for playing a game on a gaming machine (for example, a pachinko machine 2, a slot machine 2S). A gaming device (for example, a card unit 3) that accepts and enables a game using the value specified by the recording medium (for example, adds the number of game balls and the number of game points),
The recording medium has a first value (for example, a prepaid balance, 4 pachis) that allows a game at a high rate (for example, a rate of 4 yen per pachinko ball, a rate of 20 yen per coin). Second-class value (for example, prepaid balance, etc.) that enables games at a low rate (for example, a rate of less than 4 yen per pachinko ball, a rate of less than 20 yen per coin) 1-patch holding ball, 1-patch storage ball) (for example, see FIG. 77), and the type of the recording medium includes a member recording medium corresponding to a member player and a non-member player. And corresponding non-member recording media,
Setting means (for example, step S527 in FIG. 78) for setting which of the high rate and the low rate is allowed;
Adding means for adding the value acquired in the game in accordance with the setting by the setting means to the value included in either the first category value or the second category value (see, for example, FIG. 12; step S516 in FIG. 78 or The rate set in step S527 is determined, and the acquired value is added to the first-class value or the second-class value of the determined rate.Game with a prepaid balance that can be used in both 1-patch and 4-patch The value acquired in (4) may be added to a 4-patch holding ball, or the value acquired by a gaming machine with a 4-patch storage ball may be added to a 4-patch holding ball.)
A return processing means for performing processing for returning the recording medium,
The return processing means
When the non-member recording medium is accepted and the return operation is accepted, if at least one of the first class value and the second class value is equal to or greater than a predetermined monetary value, the non-member Return the recording media,
When the non-member recording medium is accepted and the return operation is accepted, if each of the first class value and the second class value is less than the predetermined monetary value, the non-member record Restrict the return of media,
When the member recording medium is accepted, when the return operation is accepted, the member regardless of the size of each of the first type value and the second type value specified by the member recording medium Allow the return of recording media,
Absent of value that will be managed by the gaming machine, and, when the game machine is not controlled advantageously state, changes from one to the other of said high rate and the low rate by the setting means Is possible,
In the case of any of the cases and the gaming machine if of value that will be managed by the gaming machine is present is controlled advantageously state, from one of the high rate and the low rate by the setting means Changes to the other are prohibited ,
When there is a value managed by the gaming machine when a change operation from one of the high rate and the low rate by the setting unit to the other is accepted, the value managed by the gaming machine is A promotion notification that prompts an operation to be added by the adding means as a value managed by the gaming apparatus is performed.

  According to such a configuration, it is possible to set a plurality of rates in a fluid manner by the gaming device and enable a game. As a result, it is possible to provide a gaming apparatus capable of fluidly supporting a plurality of rates.

(3) In the gaming system of (1) or the gaming device of (2),
The gaming device further includes:
Return operation accepting means for accepting the return operation of the recording medium (for example, pressing the “card return” button in FIG. 14);
The first class value specified by the recording medium is less than a first threshold; and
Determination means (for example, step S553 in FIG. 80) for determining whether the second type value specified by the recording medium is less than a second threshold;
When the return operation is accepted by the return operation accepting unit, the determining unit determines that the first type value is less than the first threshold value or the second type value is less than the second threshold value. If it is, return restriction means for restricting the return of the recording medium (for example, return is impossible unless an operator operates in step S556 and step S557 in FIG. 80).

  According to such a configuration, when the first type value specified by the recording medium is less than the first threshold value or the second type value is less than the second threshold value, the return of the recording medium is restricted. As a result, it is possible to prevent discharge of the recording medium that can specify the first type value or the second type value less than the threshold value.

(4) In the gaming system of (1) or the gaming device of (2),
The gaming device further includes:
Return operation accepting means for accepting the return operation of the recording medium (for example, pressing the “card return” button in FIG. 14);
The first class value specified by the recording medium is less than a first threshold; and
Determination means (for example, step S553 in FIG. 80) for determining whether the second type value specified by the recording medium is less than a second threshold;
When the return operation is accepted by the return operation accepting unit, the determining unit determines that the first type value is less than the first threshold value and the second type value is less than the second threshold value. In the case where the value is less than the value, it is provided with a summing means (for example, step S554 in FIG. 80, step S547 in FIG. 79) for converting the less valuable value into the greater value and adding together.
The determination unit determines whether the value added by the adding unit is less than the first threshold if the value is the first type value, and is less than the second threshold if the value is the second type value. (For example, step S555 in FIG. 80),
The gaming device further includes:
When it is determined that the combined value is less than the first threshold value or the second threshold value by the determination unit, the return of the recording medium is restricted, and when it is determined that the value is not less than the first threshold value, the recording medium Return means (for example, step S556 in FIG. 80, step S557, processing after the return permission determination processing in FIG. 14).

  According to such a configuration, when the total value of the first type value and the second type value specified on the recording medium is less than the threshold value, the return of the recording medium is restricted. As a result, it is possible to prevent discharge of the recording medium that can specify the first type value or the second type value less than the threshold value.

(5) In the gaming system of (1) or the gaming device of (2),
The gaming device further includes:
Return operation accepting means for accepting the return operation of the recording medium (for example, pressing the “card return” button in FIG. 14);
The first class value specified by the recording medium is equal to or greater than a first threshold; and
Determination means (for example, step S552 in FIG. 80) for determining whether the second type value specified by the recording medium is equal to or greater than a second threshold;
When the return operation is accepted by the return operation accepting unit, the determining unit determines that the first type value is greater than or equal to the first threshold or the second type value is greater than or equal to the second threshold. If it has been done, it is provided with return means for returning the recording medium (for example, processing after the return permission determination processing in FIG. 14).

  According to such a configuration, the recording medium can be returned when the first type value specified by the recording medium is equal to or greater than the first threshold value or the second type value is equal to or greater than the second threshold value. As a result, it is possible to prevent discharge of the recording medium that can specify the first type value or the second type value less than the threshold value.

(6) In the gaming system of (1) or the gaming device of (2),
The gaming device further includes:
Return operation accepting means for accepting the return operation of the recording medium (for example, pressing the “card return” button in FIG. 14);
Determining means for determining whether the sum of the first class value and the second class value specified on the recording medium is less than a threshold (for example, in step S553 in FIG. Although it is determined whether or not it is less than a substantial amount, it may be determined whether or not the sum of the balls of each rate is less than or equal to 500 yen).
When the return operation is accepted by the return operation accepting unit, if the sum is determined to be less than the threshold value by the determining unit, the return of the recording medium is restricted and determined not to be less In this case, there is a return means for returning the recording medium (for example, step S556 in FIG. 80, step S557, processing after the return permission determination processing in FIG. 14).

  According to such a configuration, when the sum of the first class value and the second class value specified by the recording medium is less than the threshold value, the return of the recording medium is restricted, and when it is not less, the recording date value Can be returned. As a result, it is possible to prevent the discharge of the recording medium capable of specifying the first type value or the second type value less than the threshold value.

(7) In any one of the gaming system and gaming device of (3) to (6) above,
When the return operation is accepted by the return operation accepting unit, the determination unit is not added when there is a value that is not added to either the first type value or the second type value. Judgment is made on the value obtained by adding the value to one of the first class value and the second class value (for example, in step S553 in FIG. 80, it is determined whether or not the money of each rate is less than 500 yen equivalent). However, it is possible to determine whether the sum of the balls of each rate and the uncounted game balls is less than 500 yen.)

  According to such a configuration, it is possible to determine whether or not the first type value and the second type value specified by the recording medium are less than the threshold value in consideration of the value that has not yet been specified by the recording medium. it can. As a result, a more effective determination can be made.

(8) In any one of the gaming system and gaming device according to (1) to (7) above,
The first class value and the second class value can be converted into each other (for example, step S511 to step S515 in FIG. 78, step S547 in FIG. 79).

  According to such a configuration, when the value of one rate is lost, the value of the other rate can be converted into the value of one rate if the value of the other rate is available. As a result, the convenience for the player can be improved.

(9) In the gaming system or gaming device of (8) above,
The first type value and the second type value can be converted to each other when it is determined that no game is being performed (for example, the number of game balls has become zero and a predetermined time has elapsed). When the symbol is not changing and the game is not in the specific game state or the special game state (for example, when it is determined in step S514 in FIG. 78 that no game operation is being performed).

  According to such a configuration, when the first type value or the second type value is used and a game is performed, conversion to the other value cannot be performed. As a result, the first type value and the second type value can be prevented from being mixed.

(10) In any one of the gaming system and gaming device according to (1) to (9) above,
When it is determined that the game is not being performed (for example, the number of game balls has become zero and a predetermined time has elapsed, the symbol is not changing, and the game is not in a specific game state or a special game state. In the case, the setting can be changed (for example, the rate switching setting is performed in step S527 on the condition that it is determined that the game operation is not being performed in step S523 in FIG. 78).

  According to such a configuration, when the first type value or the second type value is used and a game is being performed, the setting change to the other value is not allowed. As a result, the first type value and the second type value can be prevented from being mixed.

(11) In any one of the gaming system and gaming device of (1) to (10) above,
When it is determined that a game is being performed, or when a lottery effect indicating whether the game is in a specific gaming state that is advantageous to the player is being performed, the first type value or the second value It is further provided with notifying means for notifying or suggesting which of the similar values is used for the game (for example, step S517 in FIG. 78. The notification may be made on the gaming machine side or on the gaming device). It is good.)

  According to such a configuration, it is possible to let the player know which of the first type value or the second type value is used to play the game.

(12) In any one of the gaming system and gaming device of (1) to (11) above,
The gaming device further includes:
Gaming device side transmitting means for transmitting information indicating the setting by the setting means to the gaming machine (for example, step S518 in FIG. 78. Whether the status information request is the first type value or the second type value) May be included and transmitted.).

  According to such a configuration, it is possible to cause the gaming machine to perform a response according to whether the first type value or the second type value is used to play the game (for example, the first type value and the second type value). It is possible to display on the gaming machine which of the two kinds of values is used to play the game).

(13) In the gaming system or gaming device of (12) above,
The gaming machine is
When the game result is transmitted to the gaming device, the gaming machine side transmitting means (for example, the counting device shown in FIG. When the process is performed, the status information response includes whether it is the first type value or the second type value and is transmitted.

  According to such a configuration, the gaming device can determine whether the value used for the game set by the gaming device matches the value used for the game received from the gaming machine. As a result, it is possible to find fraud and abnormalities such that the two do not match.

(1-1) The present invention is connected to a gaming machine (pachinko machine 2, slot machine 2S) that gives a predetermined gaming point when a winning occurs, and is connected to the gaming machine so as to be able to communicate with the valuable value ( A gaming system comprising a gaming device (card unit 3) that enables gaming on the gaming machine using a balance, stored balls, number of gaming balls, cash, etc.,
The gaming device is:
Player identification information reading means (card reader / writer) for reading player identification information (C-ID or the like) for identifying a player who performs a game;
Player identification information storage means for storing the player identification information read by the player identification information reading means (the CU control unit 323 stores the card ID read by the card reader / writer);
When starting a game, player identification information transmission control means for controlling to transmit the player identification information read by the player identification information reading means to the gaming machine (card ID is notified by card insertion notification in FIG. 9). Notification)
The gaming machine is
Storage means (FIG. 9; backup card ID) for storing player identification information transmitted under the control of the player identification information transmission control means;
When the game is finished, transmission control means for performing control to transmit the player specifying information stored in the storage means to the gaming device (FIG. 14; P table 2 is backed up by a card return response). Send C-ID)
Game point storage means for storing the game points (game ball counter in FIG. 6);
Conversion request transmitting means for transmitting a conversion request for converting the gaming point to the holding point to the gaming device based on an operation (counting) for converting the gaming point into a predetermined holding point (FIG. 12; P table 2 includes a count request = ON state information request is transmitted)
The gaming device is:
Based on the conversion request transmitted from the conversion request transmitting means, a conversion process for converting the gaming points into the holding points is executed (FIG. 12: the number of counting balls is added to the number of holding balls) and the conversion is performed. A conversion processing unit that returns a conversion approval indicating that the request has been accepted to the gaming machine (FIG. 12; transmits a count response = ON state information request);
Identical determination for determining whether or not the same player is specified by the player specifying information transmitted under the control of the transmission control means and the player specifying information stored in the player specifying information storage means Means (FIG. 14; determination of coincidence between the C-ID stored from the time of card insertion on the CU3 side and the C-ID notified by the card return response).

  According to such a configuration, the game points are converted into points based on the conversion operation, and the same game is determined by the player specification information transmitted from the gaming machine and the player specification information stored at the start of the game. By determining whether or not the player is specified, it is possible to determine the identity between the information specifying the player at the start of the game and the information specifying the player at the end of the game. Further, it is possible to end the game based on the determination result, and it is possible to prevent the disadvantage that the game is ended by a player different from the player at the start of the game.

(1-2) The present invention includes a connection portion for connecting to a gaming machine (pachinko machine 2, slot machine 2S) that gives a predetermined gaming point when a winning occurs, and is valuable to the player. A gaming device (card unit 3) that enables games on the gaming machine using (balance, stored balls, number of gaming balls, cash, etc.),
Player specifying information reading means (card reader / writer) for reading player specifying information (C-ID or the like) for specifying a player who performs a game;
Player identification information storage means for storing the player identification information read by the player identification information reading means (the CU control unit 323 stores the card ID read by the card reader / writer);
When starting a game, player identification information transmission control means for performing control for transmitting the player identification information read by the player identification information reading means to the gaming machine (card ID is notified by card insertion notification in FIG. 9). Notification)
Stored in the player specifying information storage means and the player specifying information transmitted from the gaming machine storing the player specifying information transmitted under the control of the player specifying information transmission control means when the game is ended. The same determination means for determining whether or not the same player is specified based on the player specifying information (FIG. 14; C-ID stored from the time of card insertion on the CU3 side and card return response) Match determination with the C-ID notified in the above),
Based on a conversion request from the gaming machine based on an operation (counting operation) for converting the game points into predetermined points, a conversion process for converting the game points into the points is executed (FIG. 12; adding the number of counting balls to the number of holding balls) and returning a conversion approval indicating that the conversion request has been accepted to the gaming machine (FIG. 12; sending a count response = ON state information request); including.

  According to such a configuration, the game points are converted into points based on the conversion operation, and the same game is determined by the player specification information transmitted from the gaming machine and the player specification information stored at the start of the game. By determining whether or not the player is specified, it is possible to determine the identity between the information specifying the player at the start of the game and the information specifying the player at the end of the game. Further, it is possible to end the game based on the determination result, and it is possible to prevent the disadvantage that the game is ended by a player different from the player at the start of the game.

(1-3) In the gaming system of (1-1) or the gaming device of (1-2),
The gaming device is:
A game hall specifying information storage means (CU3 stores a store code in which the game apparatus is installed) that stores game hall specifying information capable of specifying the game hall in which the game apparatus is installed;
Control device identification information storage means (CU3 stores SC substrate ID) for storing control device identification information (SC substrate ID) that can identify the control device (security chip 325b) provided in the gaming device;
A recording medium receiving means (card insertion / ejecting port 309) for receiving a recording medium capable of specifying the player's gaming value;
When the recording medium is received by the recording medium receiving means, the game hall specifying information stored in the game hall specifying information storage means and the control device specifying information stored in the control apparatus specifying information storage means Further includes transmission means for transmitting to the gaming machine (FIG. 9; transmitting store code and SC board ID by card insertion notification when a card is inserted).

  According to such a configuration, it is possible to determine whether or not the game hall specifying information and the control device specifying information are the same.

(1-4) In the gaming system (1-1) or the gaming device (1-2),
The gaming device is:
Including a recording medium receiving means (card insertion / ejecting port 309) for receiving a recording medium capable of specifying the player's gaming value;
The recording medium accepting means returns the accepted recording medium only when all the game points are converted into the possession points based on the conversion request transmitted from the conversion request transmitting means (FIG. 14). If game points remain during the card return operation, a count button operation is prompted, and card return processing is executed on condition that the game ball has become 0 by the count operation).

  According to such a configuration, it is possible to prevent the recording medium from being returned with game points remaining in the gaming machine.

(2-1) The present invention is a gaming system comprising a gaming machine (P 2 and S 2S) and a gaming device (CU3) that enables gaming on the gaming machine,
The gaming machine is
Information transmitting means for transmitting game specifying information (game table information (the number of game balls, the number of added balls, the number of subtracted balls)) for specifying game information that changes as a game is performed (FIG. 15). To FIG. 17, input / output interface of the payout control unit 171),
The game specification information before transmission which is the game specification information before transmission to the gaming device (the latest game table information (game table information being counted)) is stored and the transmission is game specification information transmitted to the gaming device. Game specific information storage means (FIG. 6: RAM of the payout control unit 171) for storing already-played game specific information (previous game table information),
The gaming device is:
Information storage means for storing the game information (FIG. 6: RAM of the CU control unit 323);
Information updating means (FIG. 6: CPU of the CU control unit 323) for updating the information stored in the information storage means based on the game specific information transmitted from the information transmitting means,
The information transmitting means stores the pre-transmission game stored in the game specifying information storage means at the time of communication recovery after recovery from an incommunicable state where the gaming machine and the gaming device cannot communicate with each other. Including game specific information distinction transmitting means (see FIGS. 16 and 17) for transmitting the specific information and the transmitted game specific information in such a manner that the gaming device can distinguish between them,
The gaming device is:
Based on the pre-transmission game identification information, the transmitted game identification information, and the information stored in the information storage means transmitted by the game identification information distinction transmission means, the pre-transmission game identification information and the transmitted Suitability determining means (S301, S303, S311, S312 in FIG. 28, S323 in FIG. 29) for determining whether or not the game specifying information is appropriate information;
Matching means for matching the gaming machine and game information based on the pre-transmission game specifying information and the transmitted game specifying information on condition that the appropriateness determining means determines that the game is appropriate (FIG. 28). Further includes a RAM of the CU control unit 323 for storing the number of game balls received when the answer is NO in S303, S313 in FIG.

  According to the above configuration, the pre-transmission game identification information sent from the gaming machine at the time of communication recovery, the transmitted game identification information, and the information stored in the gaming device side are compared, and the pre-transmission gaming machine identification information, It is determined whether or not the transmitted game identification information is appropriate information, and in order to ensure consistency between the gaming machine and the game information on the condition that it is determined to be appropriate. In addition, it is possible to prevent improper restoration processing of game information on the gaming device side based on the pre-transmission game specifying information and the transmitted game specifying information as much as possible.

  In addition, the game identification information sent from the gaming machine side at the time of communication restoration is the game identification information before transmission which is the game identification information before being transmitted to the gaming device and the game identification information transmitted to the gaming device. Since the game specific information is transmitted separately from the game specific information, the suitability of each game specific information can be individually determined as compared to the case where the game specific information is transmitted collectively together. Appropriate judgment results can be obtained by fine judgment.

(2-2) Another aspect of the present invention is a gaming device (CU3) that enables gaming on gaming machines (P 2 and S 2S),
Information storage means (FIG. 6: RAM of the CU control unit 323) for storing game information that changes when a game is played in the gaming machine;
Information receiving means (FIGS. 15 to 17, communication control IC 325a) for receiving game specifying information for specifying the game information from the gaming machine;
Information updating means (FIG. 6: CPU of the CU control unit 323) for updating the information stored in the information storage means based on the game specifying information received by the information receiving means;
The information receiving means includes the pre-transmission game specifying information transmitted from the gaming machine as the game specifying information at the time of communication recovery after recovery from a communication disabled state where communication with the gaming machine cannot be performed (recovery). Including game specific information distinction receiving means (see FIGS. 16 and 17) for receiving in a manner capable of distinguishing transmitted game specific information that is the game specific information one time before game specific information before transmission;
The gaming device is:
Based on the pre-transmission game specific information received by the game specific information distinction receiving means, the transmitted game specific information, and the information stored in the information storage means, the pre-transmission game specific information and the transmitted game. Suitability determination means for determining whether the specific information is appropriate information (S301, S303, S311, S312 in FIG. 28, S323 in FIG. 29);
Matching means for matching the gaming machine and game information based on the pre-transmission game specifying information and the transmitted game specifying information on condition that the appropriateness determining means determines that the game is appropriate (FIG. 28). Further includes a RAM of the CU control unit 323 for storing the number of game balls received when the answer is NO in S303, S313 in FIG.

  According to the above configuration, the pre-transmission game identification information sent from the gaming machine at the time of communication recovery, the transmitted game identification information, and the information stored in the gaming device side are compared, and the pre-transmission gaming machine identification information, It is determined whether or not the transmitted game identification information is appropriate information, and in order to ensure consistency between the gaming machine and the game information on the condition that it is determined to be appropriate. In addition, it is possible to prevent improper restoration processing of game information on the gaming device side based on the pre-transmission game specifying information and the transmitted game specifying information as much as possible.

  In addition, the game identification information sent from the gaming machine side at the time of communication restoration is the game identification information before transmission which is the game identification information before being transmitted to the gaming device and the game identification information transmitted to the gaming device. Since the game specific information is transmitted separately from the game specific information, the suitability of each game specific information can be individually determined as compared to the case where the game specific information is transmitted collectively together. Appropriate judgment results can be obtained by fine judgment.

(2-3) Still another aspect of the present invention is a gaming machine (P unit 2, S unit 2S) capable of communicating with a gaming device that enables gaming on a gaming machine,
Information transmitting means (FIGS. 15 to 17, input / output interface of payout control unit 171) for transmitting game specifying information for specifying game information that changes as a result of a game to be performed;
The game specification information before transmission which is the game specification information before transmission to the gaming device (the latest game table information (game table information being counted)) is stored and the transmission is game specification information transmitted to the gaming device. Game specific information storage means (FIG. 6: RAM of the payout control unit 171) for storing already-played game specific information (previous game table information),
The information transmission means includes the game specification information before transmission stored in the game specification information storage means and the game specification information stored in the game specification information storage means at the time of communication recovery after recovery from an incommunicable state in which communication with the gaming device is impossible. It includes a game specific information distinguishing / transmitting means (see FIGS. 16 and 17) for transmitting the transmitted game specific information in such a manner that the gaming device can distinguish it.

  According to the above configuration, the gaming device compares the pre-transmission game identification information sent from the gaming machine at the time of communication recovery, the transmitted game identification information, and the information stored on the gaming device side before the transmission. In order to determine whether or not the gaming machine identification information and the transmitted gaming identification information are appropriate information, and to ensure consistency between the gaming machine and the gaming information on the condition that it is determined to be appropriate Thus, it is possible to prevent improper restoration processing of game information on the gaming device side based on the pre-transmission game specifying information determined to be inappropriate or the transmitted game specifying information as much as possible.

  In addition, the gaming device is configured so that the game identification information sent from the gaming machine side at the time of communication recovery is the game identification information before transmission to the gaming device and the game identification information transmitted to the gaming device. Since the information is transmitted separately from the transmitted game specific information that is information, the suitability of each game specific information is individually judged as compared to the case where the game specific information is transmitted together. Therefore, it is possible to obtain an appropriate determination result based on detailed determination of appropriateness.

(2-4) In the game system of (2-1) or the game device of (2-2),
The gaming device is:
A game hall specifying information storage means (RAM of the payout control unit 171) for storing game hall specifying information (FIG. 9: store code) capable of specifying the game hall in which the game device is installed;
Control device specifying information storage means (RAM of the payout control unit 171) for storing control device specifying information (FIG. 9: SC board ID) capable of specifying the control device provided in the gaming device;
A recording medium receiving means (card reader / writer) for receiving a recording medium (card) capable of specifying a player's own gaming value (prepaid balance, holding balls, savings);
When the recording medium is received by the recording medium receiving means, the game hall specifying information stored in the game hall specifying information storage means and the control device specifying information stored in the control apparatus specifying information storage means It further includes transmission means (FIG. 9: communication control IC 325a) for transmitting to the gaming machine.

  According to the above configuration, the game hall identification information and the control device identification information transmitted from the gaming device at the time of receiving the recording medium before the communication recovery, and the game hall identification transmitted at the time of the recording medium reception after the communication recovery It is possible for the gaming machine side to compare the information and the control device specifying information to determine whether or not they match.

(2-5) In the gaming system (2-1) (2-4) or the gaming machine (2-3) above,
The gaming machine is
Order information (serial number (normal serial number)) that can specify to what repetition stage the game specifying information repeatedly transmitted by the information transmitting means has been received by the gaming apparatus is received from the gaming apparatus when the communication is restored. Order information receiving means (input / output interface of the payout control unit 171);
Based on the order information received by the order information receiving means, game specifying information reception determining means (FIGS. 15 to 17) for determining whether or not the game specifying information has been received by the gaming device until the last repetition stage. : A determination by comparing the last transmission serial numbers of the CU side and the P platform side)
The game specific information distinction transmitting means determines the pre-transmission game specific information and the transmitted game specific when the game specific information reception determining means determines that the game specific information has not been received until the last repetition stage. Information is transmitted in such a manner that the gaming device can distinguish the information (FIG. 16: The latest game machine information is transmitted in the first status information response after the communication start response after the previous game machine information is included in the recovery response) .

  According to the above configuration, when it is determined that the game specifying information is not received by the gaming device until the last repetition stage, the gaming device can distinguish between the pre-transmission game specifying information and the transmitted game specifying information. Since it is transmitted in a mode, it is possible for the gaming device side to maintain consistency of game information including game identification information that has not been received. In addition, when it is determined that the game specifying information has been received up to the last repetition stage, the transmitted game specifying information is not transmitted to the gaming device unnecessarily, and the burden associated with information transmission can be reduced accordingly.

(2-6) In the gaming system (2-1) (2-4) (2-5) or the gaming device (2-2) (2-4) above,
The gaming device is:
Game information receiving means for receiving the current game information from the gaming machine (FIG. 6, FIG. 15: receiving a status information response of number of game balls = 480, number of added balls = 3, number of subtracted balls = 23),
Based on the game specifying information received by the information receiving means, game information suitability judging means for judging suitability of the current game information received by the game information receiving means (FIG. 6: game balls stored in CU3) And the number of game balls transmitted from the P unit 2 are compared to determine a match).
The game information suitability determining means includes
Game information calculating means for calculating the current game information based on the initial value and the game specifying information based on the game information received by the game information receiving means when the communication is restored (FIG. 28B) Is added to the initial number of game balls stored in S313 and the number of added balls sent from the P stand 2 shown in FIG. When,
By comparing the game information calculated by the game information calculating means with the current game information received by the game information receiving means, the suitability of the current game information received by the game information receiving means is determined. (FIG. 6: The CU 3 compares the stored number of game balls with the number of game balls transmitted from the P unit 2 to determine coincidence).

  According to the above configuration, the current game information received from the gaming machine at the time of communication restoration is used as the initial value by the gaming device, and the current game information is calculated based on the initial value and the game specifying information. The game information becomes new game information in which the error with the game information on the gaming machine side is eliminated, and the suitability judgment is made by comparing the new game information with the current game information transmitted from the gaming machine side. It becomes possible to carry out accurately.

(2-7) Game system of (2-1) (2-4) (2-5) (2-6) above or game of (2-2) (2-4) (2-6) above In the device
The suitability determining means includes
The transmitted game identification information received by the game identification information distinction receiving means is compared with the information stored in the information storage means to determine whether or not the transmitted game identification information is appropriate information. First determination means (S301, S303 in FIG. 28, S323 in FIG. 29);
Information stored in the information storage means and updated based on the transmitted game specifying information determined to be appropriate by the first determining means and transmitted by the game specifying information distinction transmitting means A second determination unit (S311 and S312 in FIG. 28) that compares the pre-transmission game identification information with the pre-transmission game identification information to determine whether the pre-transmission game identification information is appropriate information.

  According to the above configuration, the suitability determination of the two game specifying information is performed by determining the suitability of the pre-transmission game specifying information by the first determining means and determining the suitability of the transmitted game specifying information by the second determining means. Can be done steadily.

(3-1) The present invention includes first control means (SC325b) and second control means (CU control unit 323) connected to be communicable with the first control means. , A game system for enabling a game by S units 2S),
The first control means includes monitoring means (S11 in FIG. 66) for monitoring the reception interval of the message received from the second control means,
When the monitoring unit detects that the reception interval of the message is less than a predetermined period (YES in S12 of FIG. 66), predetermined error processing (transmits error information and transmits a response message to the received message) And error processing execution means (S13 to S15 in FIG. 66) for executing (prohibit message and stop receiving a message from the CU control unit 323).

  According to such a configuration, when it is detected a predetermined number of times that the message reception interval is less than the specified period, a predetermined error process is executed. Therefore, security fraud using responses to various transmission data is performed. Analysis can be made difficult.

(3-2) A gaming device (CU control unit 323) for enabling gaming with gaming machines (P 2 and S 2S),
When it is detected a predetermined number of times that a reception interval of a message received from the gaming device is less than a specified period (YES in S12 of FIG. 66), a predetermined error processing (error information is transmitted, a response message to the received message) Communication means (communication unit included in the CU control unit 323) that communicates with the game control device (SC325b) that executes transmission prohibition, and stops receiving telegrams from the CU control unit 323,
The communication means transmits the telegram to the game control device at an interval equal to or longer than the specified period (the communication unit transmits a telegram at an interval of 200 ms measured by a timer provided in the CU control unit 323).

  According to such a configuration, since the gaming device transmits a telegram at an interval equal to or longer than a predetermined period, the reception interval of the telegram may be less than the predetermined time on the game control device connected thereto. When it is detected a predetermined number of times, a predetermined error process is executed, and it is possible to identify whether it is a legitimate gaming device by executing the error process. As a result, it is possible to make unauthorized analysis of security using responses obtained by sending various data by connecting an unauthorized analysis device that mimics the operation of a gaming device to the game control device. It becomes.

(3-3) The present invention is a game control device (SC325b) for enabling a game by a gaming machine,
Receiving means (S10 in FIG. 66) for receiving a message necessary for controlling the gaming machines (P stand 2, S stand 2S);
Monitoring means (S11 in FIG. 66) for monitoring the reception interval of messages received by the receiving means;
When the monitoring unit detects that the reception interval of the message is less than a predetermined period (YES in S12 of FIG. 66), predetermined error processing (transmits error information and transmits a response message to the received message) Error processing executing means (S13 to S15 in FIG. 66) for executing (prohibiting prohibition and stopping the reception of a message from the CU control unit 323).

  According to such a configuration, when it is detected a predetermined number of times that the message reception interval is less than the specified period, a predetermined error process is executed. Therefore, security fraud using responses to various transmission data is performed. Analysis can be made difficult.

  (3-4) In the above (3-1) and (3-2), the error process execution means stops the reception function of the message as the predetermined error process (S15 in FIG. 66).

  According to such a configuration, when it is detected a predetermined number of times that the reception interval of the message is less than the specified period, the response function for the message is not transmitted because the reception function of the message is stopped. It becomes possible to make it difficult to perform fraud analysis of security using responses to various transmission data.

(3-5) In any one of the above (3-1), (3-3), and (3-4),
The error process execution means stops the reception function of the electronic message as the predetermined error process, and executes a process for transmitting error information to the gaming machine (S13 and S15 in FIG. 66).

  According to such a configuration, when it is detected a predetermined number of times that the message reception interval is less than the specified period, the message reception function is stopped and error information is transmitted to the gaming machine. Since the response message is not transmitted and error information is transmitted to the gaming machine, it is possible to make it difficult to perform an unauthorized analysis of security using responses to various transmission data.

  (3-6) In (3-1) and (3-3) above, an abnormality type for determining an abnormality type (communication error, command abnormality (incorrect)) based on the number of communication retries (S22 and S27 in FIG. 67). It further includes determination means (S23, S24 in FIG. 67).

  According to such a configuration, it is possible to classify an abnormality by paying attention to the number of communication retries.

(3-7) In the above (3-1) (3-2),
The second control means (the gaming device) requests the gaming machine to transmit verification information (main chip ID, payout chip ID) for verifying identification information stored in the gaming machine. A collation request means (S30 in FIG. 68);
The collation request means does not respond to the request even if a predetermined waiting period (inquiry waiting timer time) has elapsed since the game machine was requested to transmit the collation information (S33 in FIG. 68). YES) and the request is retransmitted (timeout process in S38 of FIG. 68 (as shown in FIG. 60, the state information request (P units) is transmitted and the game machine chip inquiry instruction notification is retransmitted)) When a verification request command (health check (operation designation = game machine chip information inquiry request)) is received from the server, the request is retransmitted without waiting for the waiting period to elapse (S35 in FIG. 68).

  According to such a configuration, even before the standby period elapses, since the transmission of verification information is requested in response to an external verification request command, it is possible to quickly respond to an external request.

(3-8) In the above (3-1) (3-3) (3-6),
The error processing execution means changes the response period interval for the received message to an interval longer than the predetermined period as the predetermined error processing (normally, after the partner (CU control unit 323) transmits the message. The response message is transmitted so that the response message reaches the other party in 200 ms, but the interval may be lengthened (for example, three times the normal value).

  According to such a configuration, when it is detected a predetermined number of times that the reception interval of the message is less than the specified period, the response interval for the received message is changed to an interval longer than the predetermined period. It becomes time-consuming to analyze this, and it becomes possible to make it difficult to perform fraud analysis of security using responses to various transmission data.

(3-9) In the above (3-1) (3-3) (3-6),
The error process execution means changes the response period interval for the received message as the predetermined error process to an interval exceeding the specified period (normally, after the partner (CU control unit 323) transmits the message. The response message is transmitted so that the response message reaches the other party in 200 ms, but the interval may be lengthened (for example, three times the normal value).

  According to such a configuration, when it is detected a predetermined number of times that the message reception interval is less than the specified period, the response period interval for the received message is changed to an interval exceeding the specified period. Analysis takes time, and it becomes possible to make it difficult to perform security fraud analysis using responses to various transmission data.

(3-10) In the above (3-1) (3-3) (3-5) (3-6) (3-8) (3-9),
The error processing execution means detects that the message reception interval is less than a predetermined period by the monitoring means continuously for a predetermined number of times (S12: n1 in FIG. 66 is a predetermined number of times of 2 or more). In addition, predetermined error processing is executed.

  According to such a configuration, since the predetermined error processing is executed when the reception interval of the message is less than the specified time continuously, the reception interval happens to be normal due to a malfunction in the control and not illegal. It is possible to prevent the inconvenience that error processing is executed when it deviates from the above.

(3-11) The present invention is a gaming system comprising a gaming machine (P 2 and S 2S) and a gaming device (CU3) that enables gaming on the gaming machine,
The gaming device is:
A first control means (SC325b) and a second control means (communication control IC 325a) capable of communicating with each other;
Mutual authentication means (communication control IC authentication sequence of FIG. 33) for performing mutual authentication between the first control means and the second control means;
On the condition that the authentication result by the mutual authentication means is appropriate, identification information (main chip ID and payout control chip ID) for confirming the authenticity of the gaming machine is received from the gaming machine and based on the identification information Gaming machine identification information authenticating means (gaming machine chip information authentication sequence in FIG. 33) for performing processing for authenticating the authenticity of the gaming machine,
Communication key generation means for generating a communication key used for encrypted communication between the first control means and the second control means after the processing for authentication by the gaming machine identification information authentication means is executed (Generate a communication key (session key) for communicating game machines and business messages),
The first control means and the second control means perform cryptographic communication using the communication key generated by the communication key generation means (the communication key generated by the communication control IC 325a is transmitted to the SC 325b, and between them. Cryptographic communication is performed using this communication key).

  According to the above configuration, the generation of the communication key used for the encryption communication between the first control unit and the second control unit is an appropriate result by mutual authentication between the first control unit and the second control unit. Even if the communication key is leaked at the time of encryption communication, it is possible to prevent fraudulent acts such as misusing the key and scrambling the mutual authentication monitoring, and this is a security vulnerability. Sex can be overcome as much as possible. In addition, the communication key is prevented from being generated without receiving any identification information for confirming the authenticity of the gaming machine from the gaming machine and authenticating the authenticity of the gaming machine based on the identification information. can do.

(3-12) Another aspect of the present invention is a gaming device (CU3) that enables gaming on gaming machines (P stand 2, S stand 2S),
A first control means (SC325b) and a second control means (communication control IC 325a) capable of communicating with each other;
Mutual authentication means (communication control IC authentication sequence of FIG. 33) for performing mutual authentication between the first control means and the second control means;
On the condition that the authentication result by the mutual authentication means is appropriate, identification information (main chip ID and payout control chip ID) for confirming the authenticity of the gaming machine is received from the gaming machine and based on the identification information Gaming machine identification information authenticating means (gaming machine chip information authentication sequence in FIG. 33) for performing processing for authenticating the authenticity of the gaming machine,
Communication key generating means for generating a communication key used for encrypted communication between the first control means and the second control means after the processing for authentication by the gaming machine identification information authentication means is executed (Generate communication key for game machine business message of FIG. 33),
The first control means and the second control means perform cryptographic communication using the communication key generated by the communication key generation means (the communication key generated by the communication control IC 325a is transmitted to the SC 325b, and between them. Cryptographic communication is performed using this communication key).

  According to the above configuration, the generation of the communication key used for the encryption communication between the first control unit and the second control unit is an appropriate result by mutual authentication between the first control unit and the second control unit. Even if the communication key is leaked at the time of encryption communication, it is possible to prevent fraudulent acts such as misusing the key and scrambling the mutual authentication monitoring, and this is a security vulnerability. Sex can be overcome as much as possible. In addition, the communication key is prevented from being generated without receiving any identification information for confirming the authenticity of the gaming machine from the gaming machine and authenticating the authenticity of the gaming machine based on the identification information. can do.

(3-13) In the game system of (3-11) or the game device of (3-12),
The gaming apparatus has setting means for performing communication activation information setting processing for setting communication activation information (valid key) for enabling communication between the second control means and the gaming machine (FIG. 33). Security information update sequence)
The communication key generation means performs encrypted communication between the first control means and the second control means after the process for authentication is executed and the communication activation information setting process is executed. A communication key to be used is generated (FIG. 33).

  According to the above configuration, it is possible to prevent the inconvenience that a communication key is generated even though communication between the second control means and the gaming machine is not activated.

(3-14) In the gaming system of (3-11) (3-13) or the gaming device of (3-12) (3-13),
The communication key generation means executes a repeated generation process for newly generating the communication key every predetermined period (control to update the communication key for game machine business message when the SC 325b detects the update period of the communication key The iterative generation process generates a communication key using change data that can be changed between the previous communication key generation and the current communication key generation (communication using current time data and a random number). Generate a key).

  According to the above configuration, the iterative generation process for newly generating a communication key every predetermined period is performed by using the change data that can change between the generation of the previous communication key and the generation of the current communication key. Therefore, even if the communication key is once leaked, a new communication key is generated using changeable change data different from that at the time of generation of the leaked communication key, and the new communication is performed. Since encryption communication is performed using a key, even if an attempt is made to decrypt communication using the new communication key with a leaked key, decryption cannot be performed, and security can be improved.

(3-15) The present invention is a gaming system including first control means (SC325b) and second control means (communication control IC 325a) connected to be communicable with the first control means,
First mutual authentication processing means for generating an authentication key used for mutual authentication between the first control means and the second control means and performing a first mutual authentication process using the authentication key (FIGS. 34 and 36). : The first authentication sequence and the second authentication sequence are performed using the authentication key immediately after the update (this authentication key)),
Operation processing means (FIG. 33, FIG. 34: first authentication sequence) for executing operation processing by the first control means and the second control means when an authentication result by the first mutual authentication processing is appropriate. When the authentication result by the communication control IC authentication sequence including the second authentication sequence is appropriate, business message communication with the gaming machine is possible)
When the authentication result by the first mutual authentication process is inappropriate (FIG. 36: when the authentication result by the sequence of the first authentication sequence to the version management information response is inappropriate), the first control means and the second Second mutual authentication processing means for performing second mutual authentication processing using the authentication key stored in the control means from the manufacturing stage (FIG. 36: first authentication sequence and second authentication sequence using temporary authentication key) And)
The operation processing unit executes a limited operation process by the first control unit and the second control unit when an authentication result by the second mutual authentication process is appropriate (timed operation with a limited time limit). Process).

  According to the above configuration, when the authentication result by the first mutual authentication process for generating the authentication key and performing the mutual authentication between the first control means and the second control means is inappropriate, the first control means When the second mutual authentication process is performed with the second control means using the authentication key stored from the manufacturing stage, and the authentication result by the second mutual authentication process is appropriate, the first control means and the second control Since the limited operation process by means is executed, it is possible to prevent the inconvenience that the operation process cannot be performed at all when the authentication result by the first authentication process is inappropriate. In addition, when the authentication result of the first mutual authentication process is inappropriate, the operation process is not allowed to be executed indefinitely, but is limited to the limited operation process. It is also possible to prevent the inconvenience that is performed.

(3-16) Another aspect of the present invention is a game control apparatus including first control means (SC325b) and second control means (communication control IC 325a) connected to be communicable with the first control means. Because
First mutual authentication processing means for generating an authentication key used for mutual authentication between the first control means and the second control means and performing a first mutual authentication process using the authentication key (FIGS. 34 and 36). : The first authentication sequence and the second authentication sequence are performed using the authentication key immediately after the update (this authentication key)),
Operation processing means (FIG. 33, FIG. 34: first authentication sequence) for executing operation processing by the first control means and the second control means when an authentication result by the first mutual authentication processing is appropriate. When the authentication result by the communication control IC authentication sequence including the second authentication sequence is appropriate, business message communication with the gaming machine is possible)
When the authentication result by the first mutual authentication process is inappropriate (FIG. 36: when the authentication result by the sequence of the first authentication sequence to the version management information response is inappropriate), the first control means and the second Second mutual authentication processing means for performing second mutual authentication processing using the authentication key stored in the control means from the manufacturing stage (FIG. 36: first authentication sequence and second authentication sequence using temporary authentication key) And)
The operation processing unit executes a limited operation process by the first control unit and the second control unit when an authentication result by the second mutual authentication process is appropriate (timed operation with a limited time limit). Process).

  According to the above configuration, when the authentication result by the first mutual authentication process for generating the authentication key and performing the mutual authentication between the first control means and the second control means is inappropriate, the first control means When the second mutual authentication process is performed with the second control means using the authentication key stored from the manufacturing stage, and the authentication result by the second mutual authentication process is appropriate, the first control means and the second control Since the limited operation process by means is executed, it is possible to prevent the inconvenience that the operation process cannot be performed at all when the authentication result by the first authentication process is inappropriate. In addition, when the authentication result of the first mutual authentication process is inappropriate, the operation process is not allowed to be executed indefinitely, but is limited to the limited operation process. It is also possible to prevent the inconvenience that is performed.

(3-17) In the game system of (3-15) or the game control device of (3-16),
When the authentication result by the first mutual authentication process is inappropriate, an abnormality notification means for sending a notification that an abnormality has occurred to the management server (FIG. 36: “Authentication key update abnormality” alarm is sent to the key management server. Is further provided.

  According to the above configuration, the management server can grasp that the authentication result by the first mutual authentication process is inappropriate.

(3-18) In the game system according to (3-15) (3-17) or the game control device according to (3-16) (3-17),
The operation processing means executes the operation processing only within a predetermined period (for example, two days) as the limited operation processing.

  According to the above configuration, since the operation process is executed only within a predetermined period as the limited operation process, the operation process in an unstable state where the authentication result of the first authentication process is inappropriate. It is possible to reduce the security problem caused by allowing the password indefinitely.

(4-1) The present invention includes first control means (SC325b) and second control means (CU control unit 323) connected to be communicable with the first control means. , A game system for enabling a game by S units 2S),
The first control means and the second control means use mutual authentication processing means (FIG. 61) for performing mutual authentication processing between one and the other using mutual authentication information (substrate authentication key in S203 of FIG. 61). S201 to S205),
Authentication information storage means for storing the authentication information (a key storage area of the CU control unit 323 and SC 325b);
Authentication information updating means (FIG. 62 (a), FIG. 63 (a)) for updating authentication information stored in the authentication information storage means;
When the first control means and the second control means fail in the mutual authentication processing (YES in S207 in FIG. 61), whether or not the authentication using authentication information without authentication results after the update has failed An authentication information discriminating means (S2071 in FIG. 61) for discriminating whether or not the authentication using authentication information that has been authenticated later has failed
61. An authentication result transmitting unit (S2074 in FIG. 61) that transmits an authentication result including error information corresponding to the determination result of the authentication information determining unit.

  According to the above configuration, when mutual authentication processing fails, whether authentication using authentication information without authentication results after updating failed or authentication using authentication information with authentication results after updating failed? Since the authentication result including the error information corresponding to the determination result is transmitted, it is possible to guess the cause of the authentication failure by referring to the authentication result.

(4-2) The present invention is a gaming apparatus (CU control unit 323 or SC325b) for enabling gaming by a gaming machine,
Mutual authentication processing means (S201 to S205 in FIG. 61) for performing mutual authentication processing with the communication device (SC325b) using the authentication information (substrate authentication key in S203 in FIG. 61);
Authentication information storage means for storing the authentication information (a key storage area of the CU control unit 323 or SC 325b);
Authentication information updating means (FIG. 62 (a), FIG. 63 (a)) for updating authentication information stored in the authentication information storage means;
When the mutual authentication process has failed (YES in S207 in FIG. 61), whether the authentication using authentication information without authentication results after the update has failed or the authentication using authentication information with authentication results after the update has been performed. An authentication information discriminating means (S2071 in FIG. 61) for discriminating whether or not the failure
61. An authentication result transmitting unit (S2074 in FIG. 61) that transmits an authentication result including error information corresponding to the determination result of the authentication information determining unit.

  According to the above configuration, when mutual authentication processing fails, whether authentication using authentication information without authentication results after updating failed or authentication using authentication information with authentication results after updating failed? Since the authentication result including the error information corresponding to the determination result is transmitted, it is possible to guess the cause of the authentication failure by referring to the authentication result.

(4-3) The present invention is a game control device (CU control unit 323 or SC325b) for enabling a game by a gaming machine,
It is determined whether mutual authentication processing has failed in authentication using authentication information with no authentication record after update or whether mutual authentication processing has failed in authentication using authentication information with authentication record after update (FIG. 61). S2071) An authentication result including error information corresponding to the determination result is transmitted (S2074 in FIG. 61). S201 to S205),
Authentication information storage means for storing the authentication information (a key storage area of the CU control unit 323 or SC 325b);
Authentication information updating means (FIG. 62 (a), FIG. 63 (a)) for updating authentication information stored in the authentication information storage means.

  According to the above configuration, when mutual authentication processing fails, whether authentication using authentication information without authentication results after updating failed or authentication using authentication information with authentication results after updating failed? Since the authentication result including the error information corresponding to the determination result is transmitted from the gaming device, it is possible to guess the cause of the authentication failure by referring to the authentication result.

(4-4) In the above (4-1) (4-2),
The authentication result transmitting means transmits error information indicating an abnormal update of the authentication information when the authentication information determining means determines that the authentication using authentication information having no authentication result after the update has failed. 62 (S2073 in FIG. 62), when the authentication information discriminating means discriminates that the authentication using the authentication information with authentication results after the update has failed, error information indicating a storage abnormality of the authentication information storage means is transmitted. (S2072 in FIG. 62).

  According to the above configuration, based on the error information, it can be estimated whether the cause of the authentication failure is an update abnormality of the authentication information or a storage abnormality of the authentication information storage unit.

(4-5) In the above (4-1), the first control means and the second control means are both
First cryptographic communication processing means (SE1 mode) for performing cryptographic communication with each other;
Second cryptographic communication processing means (SE2 mode) for performing cryptographic communication with a higher security level than the cryptographic communication by the first cryptographic communication processing means after the cryptographic communication by the first cryptographic communication processing means;
The first control means (SC325b) transmits a first encryption key (upstream counter) used for encrypted communication by the second encrypted communication processing means from the first control means to the second control means. First encryption key update means for updating each time transmission is completed,
The second control means (CU control unit 323) sends a second encryption key (down counter) used for encryption communication by the second encryption communication processing means from the second control means to the first control means. 2nd encryption key update means updated whenever transmission of the electronic message is completed.

  According to the above configuration, the first control unit and the second control unit communicate with each other using an encryption key that differs depending on the communication direction. Can increase security.

(4-6) In the above (4-5), the first encryption key updating unit receives the message from the second control unit (CU control unit 323), and then the first encryption key is updated. (Up counter) is incremented by a predetermined value (+1),
The second encryption key update means counts up the second encryption key by a predetermined value based on the reception of the message from the first control means (+1),
The first control means and the second control means are encryption key storage means (CU control unit 323 and SC 325b) for storing the first encryption key (upstream counter) and the second encryption key (downstream counter). When the decryption abnormality occurs with the encryption key stored in the encryption key storage means, the decryption is retried with the encryption key obtained by counting up the encryption key by the predetermined value. (S152, S154, S156 to S158 in FIG. 45, FIG. 75, FIG. 76).

  According to the above configuration, even when a decryption abnormality occurs, decryption is retried with an encryption key obtained by counting up the encryption key by a predetermined value, and as a result, decryption can be successful. Therefore, even if a decryption abnormality occurs due to the temporary deterioration of communication quality or the like, communication can be continued by automatically restoring the encryption key.

(4-7) The present invention relates to first control means (CU control unit 323 or CU3, P stand 2, jet counter, POS terminal, etc.) and second control connected to be communicable with the first control means. A gaming system comprising means (security chip 325b or CU3, P stand 2, jet counter, POS terminal, etc.),
The first control means and the second control means include mutual authentication processing means (substrate initial key authentication sequence of FIGS. 49 and 51) for performing mutual authentication processing using mutual authentication information (substrate initial key). ,
At least one of the first control means and the second control means does not store the authentication information at the manufacturing stage (the CU control unit does not store the board initial key) and carries it into the game hall. After that, the authentication information is acquired and stored from the server when communication with the server becomes possible (FIG. 49: the CU control unit stores the board initial key downloaded from the host device),
The mutual authentication processing means derives an inappropriate authentication result when at least one of the first control means and the second control means does not store the authentication information (FIG. 51: Acquisition of a board initial key) If the board initial key authentication is performed without the authentication, the authentication result will be NG)
The first control means and the second control means are:
After the authentication information is stored, execute the mutual authentication process and various processes after the mutual authentication process (execute the substrate initial key authentication sequence and the subsequent communication key exchange sequence in FIG. 49),
The mutual authentication process is executed even before the authentication information is stored (the board initial key authentication sequence in FIG. 51 is executed), and an inappropriate authentication result (NG) is derived by the mutual authentication process. Thus, the process (FIG. 51: Communication of communication test message by substrate shipping key) prepared for execution at the stage before the authentication information is stored is executed.

  According to the above configuration, the first control means and the second control means obtain the authentication information from the server when the communication with the server becomes possible after being carried into the amusement hall and use the authentication information. Mutual authentication processing is performed to ensure security. On the other hand, the mutual authentication process is executed even when the authentication information is not yet stored, and as a result, an inappropriate authentication result is derived, thereby preparing for execution at a stage before the authentication information is stored. It is controlled to execute the processing that is being performed. In other words, whether or not to execute the process prepared for executing the mutual authentication process executed for security assurance after obtaining the authentication information at the stage before the authentication information is stored. Complicating control by providing a special determination step that determines whether or not to execute processing prepared for execution at the stage before the authentication information is stored. Can be prevented.

  (4-8) In the gaming system according to (4-7) above, the storage of the authentication information is performed when the power is turned on for the first time after being brought into the game hall (FIG. 49).

  According to the above configuration, the authentication information is stored when the power is turned on for the first time after being loaded into the amusement hall. After that, during actual operation in the amusement hall, between the first control means and the second control means. Mutual authentication processing for securing the security of the system is executed, and security during actual operation can be secured.

  (4-9) In the gaming system of (4-7) or (4-8) above, the processing prepared to be executed at the stage before the authentication information is stored is shipped to the game hall This is a test process to be executed before communication (communication test message communication in FIG. 51).

  According to the above configuration, the process prepared to be executed at the stage before the authentication information is stored is a test process executed before shipping to the game hall, and as a result, the process is carried into the game hall. This test process is executed at a stage before the game is completed, and the tested product that has been subjected to the test process can be carried into the game arcade.

  (4-10) In the gaming system of (4-9) above, the test process is a process of executing encrypted communication of a test message using a test key stored in advance (FIG. 51: Board shipment) Communication test message communication using a key).

  According to the above configuration, the test message is encrypted using the test key stored in advance and the test process is performed, so the security of the test message itself can be ensured.

(4-11) According to another aspect of the present invention, a gaming machine (CU3, P unit 2, S unit) including a first control unit and a second control unit communicably connected to the first control unit. 2S, jet counter, POS, etc.)
The first control means and the second control means include mutual authentication processing means (substrate initial key authentication sequence of FIGS. 49 and 51) for performing mutual authentication processing using mutual authentication information,
At least one of the first control means and the second control means does not store the authentication information at the manufacturing stage (the CU control unit does not store the board initial key) and carries it into the game hall. After that, the authentication information is acquired and stored from the server when communication with the server becomes possible (FIG. 49: the CU control unit stores the board initial key downloaded from the host device),
The mutual authentication processing means derives an inappropriate authentication result when at least one of the first control means and the second control means does not store the authentication information (FIG. 51: Acquisition of a board initial key) If the board initial key authentication is performed without the authentication, the authentication result will be NG)
The first control means and the second control means are:
After the authentication information is stored, execute the mutual authentication process and various processes after the mutual authentication process (execute the substrate initial key authentication sequence and the subsequent communication key exchange sequence in FIG. 49),
The mutual authentication process is executed even before the authentication information is stored (the board initial key authentication sequence in FIG. 51 is executed), and an inappropriate authentication result (NG) is derived by the mutual authentication process. Thus, the process (FIG. 51: Communication of communication test message by substrate shipping key) prepared for execution at the stage before the authentication information is stored is executed.

  According to the above configuration, the first control means and the second control means obtain the authentication information from the server when the communication with the server becomes possible after being carried into the amusement hall and use the authentication information. Mutual authentication processing is performed to ensure security. On the other hand, the mutual authentication process is executed even when the authentication information is not yet stored, and as a result, an inappropriate authentication result is derived, thereby preparing for execution at a stage before the authentication information is stored. It is controlled to execute the processing that is being performed. In other words, whether or not to execute the process prepared for executing the mutual authentication process executed for security assurance after obtaining the authentication information at the stage before the authentication information is stored. Complicating control by providing a special determination step that determines whether or not to execute processing prepared for execution at the stage before the authentication information is stored. Can be prevented.

  (4-12) In the gaming machine of the above (4-11), the storage of the authentication information is performed when the power is turned on for the first time after being brought into the game hall (FIG. 49).

  According to the above configuration, the authentication information is stored when the power is turned on for the first time after being loaded into the amusement hall. After that, during actual operation in the amusement hall, between the first control means and the second control means. Mutual authentication processing for securing the security of the system is executed, and security during actual operation can be secured.

  (4-13) In the gaming machine of the above (4-11) or (4-12), the processing prepared to be executed at the stage before the authentication information is stored is shipped to the game hall This is a test process executed before (communication test message communication in FIG. 51).

  According to the above configuration, the process prepared to be executed at the stage before the authentication information is stored is a test process executed before shipping to the game hall, and as a result, the process is carried into the game hall. This test process is executed at a stage before the game is completed, and the tested product that has been subjected to the test process can be carried into the game arcade.

  (4-14) In the gaming machine of the above (4-13), the test process is a process for executing encrypted communication of a test message using a test key stored in advance (FIG. 51: board shipping key) Communication test message communication using).

  According to the above configuration, the test message is encrypted using the test key stored in advance and the test process is performed, so the security of the test message itself can be ensured.

(4-15) The present invention relates to first control means (CU control unit 323 or CU3, P stand 2, jet counter, POS terminal, etc.) and second control connected to be communicable with the first control means. A gaming system comprising means (security chip 325b or CU3, P stand 2, jet counter, POS terminal, etc.),
Mutual authentication processing means (substrate initial key authentication sequence in FIG. 49) for performing mutual authentication processing using a temporary operation key (substrate initial key) between the first control means and the second control means;
An authentication key acquisition unit (security board information inquiry sequence in FIGS. 49 and 55) for performing a process of acquiring the authentication key (substrate authentication key) on the condition that the authentication result by the mutual authentication processing unit is appropriate;
A main operation processing unit (business message communication with the gaming machine of FIG. 50) for executing an operation process using the main authentication key acquired by the main authentication key acquiring unit;
Temporary operation processing means for executing temporary operation processing using the temporary authentication key when the authentication key cannot be acquired as a result of the processing by the authentication key acquisition means (FIG. 49: Query security board information) The communication key exchange sequence (FIG. 57) is executed using the substrate initial key without executing the sequence and the substrate initial key authentication sequence.

  According to the above configuration, since the process for obtaining the authentication key is executed on the condition that the mutual authentication process is performed using the temporary authentication key and the authentication result is appropriate, high security can be ensured. It becomes possible. In addition, when the authentication key cannot be acquired as a result of the acquisition process of the authentication key, a temporary operation process is executed using the temporary authentication key. It is possible to prevent inconveniences that cannot be achieved at all.

  (4-16) In the gaming system of (4-15), the temporary operation processing means executes the temporary operation processing only within a predetermined period (for example, the operation is limited to two days). Tolerate).

  According to the above configuration, since the temporary operation process is executed only within a predetermined period, the temporary operation process in an unstable state when the authentication key cannot be obtained is allowed indefinitely. Can reduce security problems.

  (4-17) In the gaming system according to (4-15) or (4-16), the authentication key acquisition means is a server (key management server) that stores the authentication key in association with an identification number. 800), an identification number (substrate serial number) is transmitted to obtain the main authentication key corresponding to the identification number (FIG. 55).

  According to the above configuration, the authentication key is stored in the server in association with the identification number, and the authentication key corresponding to the identification number is acquired by transmitting the identification number to the server. This authentication key can be acquired only if the authentication key is stored in the server in association with the identification number, and the authentication key can be acquired only when the authorized identification number registered with the authentication key is sent. Security is ensured.

(4-18) In the gaming system of (4-17), the game system further includes a server (key management server 800) that stores the authentication key in association with the identification number,
The server receives information including an identification number (substrate serial ID) used for the apparatus shipped by a manufacturer that manufactures the apparatus that acquires and stores the main authentication key and the main authentication key. The main authentication key is stored in association with the included identification number (the board authentication key is stored in association with the board serial ID).

  According to the above configuration, the server receives the information including the identification number used for the device shipped by the manufacturer that manufactured the device that acquires and stores the authentication key and the authentication key, and is included in the information In order for the server to store this authentication key in association with the identification number, this authentication key can be acquired from the server only for legitimate devices shipped by the manufacturer, and devices other than the legitimate device shipped by the manufacturer can obtain this authentication key. Security can be secured by preventing inconvenience that can be acquired as much as possible.

(4-19) In another aspect of the present invention, the first control unit (CU control unit 323 or CU3, P stand 2, jet counter, POS terminal, etc.) is connected to the first control unit so as to be communicable. A gaming machine (CU3, P table 2, jet counter, POS terminal, etc.) equipped with a second control means (security chip 325b or CU3, P table 2, jet counter, POS terminal, etc.),
Mutual authentication processing means (substrate initial key authentication sequence in FIG. 49) for performing mutual authentication processing using a temporary operation key (substrate initial key) between the first control means and the second control means;
An authentication key acquisition unit (security board information inquiry sequence in FIGS. 49 and 55) for performing a process of acquiring the authentication key (substrate authentication key) on the condition that the authentication result by the mutual authentication processing unit is appropriate;
A main operation processing unit (business message communication with the gaming machine of FIG. 50) for executing an operation process using the main authentication key acquired by the main authentication key acquiring unit;
Temporary operation processing means for executing temporary operation processing using the temporary authentication key when the authentication key cannot be acquired as a result of processing by the authentication key acquiring means (FIG. 49: board serial ID authentication) The communication key exchange sequence (FIG. 57) is executed using the substrate initial key without executing the sequence and the substrate initial key authentication sequence.

  According to the above configuration, since the process for obtaining the authentication key is executed on the condition that the mutual authentication process is performed using the temporary authentication key and the authentication result is appropriate, high security can be ensured. It becomes possible. In addition, when the authentication key cannot be acquired as a result of the acquisition process of the authentication key, a temporary operation process is executed using the temporary authentication key. It is possible to prevent inconveniences that cannot be achieved at all.

  (4-20) In the gaming machine of the above (4-19), the temporary operation processing means executes the temporary operation processing only within a predetermined period (for example, operation is limited to two days) To do).

  According to the above configuration, since the temporary operation process is executed only within a predetermined period, the temporary operation process in an unstable state when the authentication key cannot be obtained is allowed indefinitely. Can reduce security problems.

  (4-21) In the gaming machine of (4-19) or (4-20) above, the authentication key acquisition means stores a server (key management server 800) that stores the authentication key in association with the identification number. ), An identification number (substrate serial number) is transmitted to obtain the authentication key corresponding to the identification number (FIG. 55).

  According to the above configuration, the authentication key is stored in the server in association with the identification number, and the authentication key corresponding to the identification number is acquired by transmitting the identification number to the server. This authentication key can be acquired only if the authentication key is stored in the server in association with the identification number, and the authentication key can be acquired only when the authorized identification number registered with the authentication key is sent. Security is ensured.

(4-22) The present invention relates to first control means (CU control unit 323 or CU3, P stand 2, jet counter, POS terminal, etc.) and second control connected to be communicable with the first control means. A gaming system comprising means (security chip 325b or CU3, P stand 2, jet counter, POS terminal, etc.),
Pre-shipment processing means for performing pre-shipment processing using a test key between the first control means and the second control means at a stage before shipment to the game arcade (FIG. 51: communication by board shipping key) Test message communication),
After being delivered to the amusement hall, an actual operation processing means for performing processing during actual operation at the game hall using an authentication key (board authentication key) between the first control means and the second control means ( Business message communication with the gaming machine of FIG.

  According to the above configuration, the pre-shipment processing is performed using the test key, while the actual operation processing is performed using the authentication key. Even if the test key is leaked, the actual operation is performed. As long as the authentication key at the time does not leak, security during actual operation can be maintained.

  (4-23) In the gaming system of (4-22) above, an initial key (board initial key) is acquired from the server (hall server 801) when the power is first turned on after being delivered to the game arcade, and the initial key is used. The initial key use processing means (the board initial key authentication sequence and the security board information inquiry sequence shown in FIG. 49) is further provided.

  According to the above-described configuration, since the initial key is acquired when the power is turned on for the first time when the game is turned on and the process using the initial key is executed, the process using the initial key to ensure security is performed thereafter. It becomes possible.

  (4-24) In the gaming system of (4-23), the initial key use processing means executes processing for acquiring the authentication key from a server (inquiry for security board information in FIGS. 49 and 55). sequence).

  According to the above configuration, in acquiring an authentication key used for processing in actual operation from the server, an authentication key is obtained by acquiring an initial key from the server and executing processing using the initial key prior to that. Processing for acquiring from the server will be performed, and the processing for acquiring the authentication key from the server itself can be a process that guarantees security using the initial key, and security can be further improved. .

(4-25) In another aspect of the present invention, the first control unit (CU control unit 323 or CU3, P stand 2, jet counter, POS terminal, etc.) is connected to the first control unit so as to be communicable. A gaming machine (CU3, P table 2, jet counter, POS terminal, etc.) equipped with a second control means (security chip 325b or CU3, P table 2, jet counter, POS terminal, etc.),
Pre-shipment processing means for performing pre-shipment processing using a test key between the first control means and the second control means at a stage before shipment to the game arcade (FIG. 51: communication by board shipping key) Test message communication),
After being delivered to the amusement hall, an actual operation processing means for performing processing during actual operation at the game hall using an authentication key (board authentication key) between the first control means and the second control means ( Business message communication with the gaming machine of FIG.

  According to the above configuration, the pre-shipment processing is performed using the test key, while the actual operation processing is performed using the authentication key. Even if the test key is leaked, the actual operation is performed. As long as the authentication key at the time does not leak, security during actual operation can be maintained.

  (4-26) In the gaming machine of (4-25) above, the initial key (board initial key) is acquired from the server (hall server 801) and used when the power is first turned on after being delivered to the game arcade. Initial key use processing means (substrate initial key authentication sequence and security substrate information inquiry sequence in FIG. 49) for executing processing is further provided.

  According to the above-described configuration, since the initial key is acquired when the power is turned on for the first time when the game is turned on and the process using the initial key is executed, the process using the initial key to ensure security is performed thereafter. It becomes possible.

  (4-27) In the gaming machine of (4-26), the initial key use processing means executes processing for acquiring the authentication key from the server (security board information inquiry sequence of FIGS. 49 and 55). ).

  According to the above configuration, in acquiring an authentication key used for processing in actual operation from the server, an authentication key is obtained by acquiring an initial key from the server and executing processing using the initial key prior to that. Processing for acquiring from the server will be performed, and the processing for acquiring the authentication key from the server itself can be a process that guarantees security using the initial key, and security can be further improved. .

  A recording medium processing apparatus is configured by CU3. The CU control unit 323 or the SC 325b constitutes a gaming device that enables gaming with a gaming machine. Further, the CU control unit 323 or the SC 325b constitutes a game control device for enabling a game with a gaming machine.

  When the gaming device fails in the mutual authentication process, it is determined whether the authentication using the authentication information without the authentication record after the update fails or the authentication using the authentication information with the authentication record after the update fails. Authentication information determining means for determining (S2071 in FIG. 61) and authentication result transmitting means (S2074 in FIG. 61) for transmitting an authentication result including error information corresponding to the determination result of the authentication information determining means. Yes.

  On the other hand, the game control device includes mutual authentication processing means for performing mutual authentication processing with the gaming device.

  In other words, the gaming device is a device including the authentication information discriminating means and the authentication result transmitting means, while the game control device communicates with a device including such means to perform communication and performs mutual authentication processing. Device.

  In the case of this embodiment, the CU control unit 323, which is an example of a gaming device, also has a function as the gaming device in relation to the SC 325b. The SC 325b, which is an example of a game control device, also has a function as the game device in relation to the CU control unit 323.

(5-1) The present invention provides a first control unit (security chip: SC325b, CU control unit 323, communication control IC 325a, payout control unit 171 and the like) and a first control unit connected in serial communication with the first control unit. A gaming system comprising two control means (communication control ICs 325a, SC325b, payout control unit 171 and main control unit 161, etc.) (between SC and communication control IC, between CU control unit and SC, communication control IC- Communication between the payout control units and between the payout control unit and the main control unit),
State confirmation means for transmitting a confirmation message from the first control means to the second control means to confirm the state of the second control means (for example, in communication between the SC and the communication control IC, FIGS. 30 to 32: Status check request)
A status confirmation response means (for example, SC) which transmits a response message to the confirmation message transmitted by the status confirmation means from the second control means to the first control means and responds to the status confirmation of the second control means. -In communication between communication control ICs, FIG. 30 to FIG. 32: transmission of status confirmation response),
In the first control means, a message reading means for reading a message after transmitting the confirmation message (for example, in the communication between the SC and the communication control IC, FIG. 32: reading of a message on the SC 325b side);
A state in which the second byte information of the message read by the message reading means is different from the inversion information of the first byte of the read message (for example, in communication between the SC and the communication control IC in FIG. 32: If it continues until SC-communication control IC disconnection detection time is established, it is determined that a disconnection has occurred between the first control means and the second control means (for example, between SC and communication control IC). FIG. 32: SC325b determines that a disconnection has occurred).

  According to the above configuration, when serial communication is performed between the control means, it is possible to easily detect that the cause of the communication abnormality is that the wiring connecting the control means is disconnected. .

(5-2) The present invention is a gaming device (CU) for enabling a game by a gaming machine (communication is possible between SC and communication control IC and between CU control unit and SC),
First control means (security chip: SC325b, CU control unit 323);
Second control means (communication control ICs 325a and SC325b) connected to the first control means so as to enable serial communication;
State confirmation means for transmitting a confirmation message from the first control means to the second control means to confirm the state of the second control means (for example, in communication between the SC and the communication control IC, FIGS. 30 to 32: Status check request)
A status confirmation response means (for example, SC) which transmits a response message to the confirmation message transmitted by the status confirmation means from the second control means to the first control means and responds to the status confirmation of the second control means. -In communication between communication control ICs, FIG. 30 to FIG. 32: transmission of status confirmation response),
In the first control means, a message reading means for reading a message after transmitting the confirmation message (for example, in the communication between the SC and the communication control IC, FIG. 32: reading of a message on the SC 325b side);
A state in which the second byte information of the message read by the message reading means is different from the inversion information of the first byte of the read message (for example, in communication between the SC and the communication control IC in FIG. 32: If it continues until SC-communication control IC disconnection detection time is established, it is determined that a disconnection has occurred between the first control means and the second control means (for example, between SC and communication control IC). FIG. 32: SC325b determines that a disconnection has occurred).

  According to the above configuration, when serial communication is performed between the control means, it is possible to easily detect that the cause of the communication abnormality is that the wiring connecting the control means is disconnected. .

(5-3) The present invention is a game control device (security chip: SC325b) for connecting to a communication control means (communication control IC 325a) so as to be capable of serial communication and enabling a game by a gaming machine,
State confirmation means for transmitting a confirmation message to the communication control means to confirm the state of the communication control means (FIG. 30 to FIG. 32: transmission of a state confirmation request);
After transmitting the confirmation message from the communication control means, a message reading means for reading the message (FIG. 32: reading of the message on the SC 325b side);
A predetermined setting condition (for example, FIG. 32: SC-communication control IC disconnection detection time) that the second byte information of the message read by the message reading means is different from the inversion information of the first byte of the read message. If it continues until it is established, it includes disconnection determination means (FIG. 32: SC325b determines that disconnection has occurred) that determines that a disconnection has occurred with the communication control means.

  According to the above configuration, when serial communication is performed between the control means, it is possible to easily detect that the cause of the communication abnormality is that the wiring connecting the control means is disconnected. .

(5-4) The present invention is a game control device (communication control IC 325a) that is connected to a security control means (security chip: SC325b) so as to be capable of serial communication and enables a game by a gaming machine.
A response message reply means (FIG. 30 to FIG. 32: transmission of a status confirmation response) that returns a response message to the security control means when a confirmation message is received from the security control means;
The response message reply means transmits the second byte information of the response message to the security control means as inversion information of the first byte of the response message, whereby the second byte of the message read by the security control means If the state of the information is continuously different from the inversion information of the first byte of the read message until a predetermined setting condition (for example, FIG. 32: SC-communication control IC disconnection detection time) is satisfied, the game control device If a disconnection occurs between the two, the security control means (FIG. 32: SC325b determines that a disconnection has occurred) enables determination.

  According to the above configuration, when serial communication is performed between the control means, it is possible to easily detect that the cause of the communication abnormality is that the wiring connecting the control means is disconnected. .

(5-5) In the above (5-1) to (5-3),
The wiring for connecting the first control means and the second control means to enable serial communication is a clock line for communicating a clock signal (a clock line for inputting a serial clock output from the master to the slave). ) And a data line for communicating messages (a first data line for inputting data output from the master to the slave and a second data line for inputting data output from the slave to the master) Including at least
The disconnection determination means determines whether at least one of the clock line and the data line is disconnected.

  According to the above configuration, when serial communication is performed between the control means, the cause of the communication abnormality is that at least one of the clock line and the data line connecting the control means is disconnected. If there is, it can be easily detected.

(5-6) In the above (5-1) and (5-2),
The first control unit transmits the message again to the second control unit when the response of the message transmitted to the second control unit is no response (FIG. 31: business message transmission (retransmission)). )

  According to the above configuration, communication abnormality can be easily detected when serial communication is performed between the control means.

(5-7) In the above (5-6),
The second control means transmits the message response again to the first control means,
The first control means transmits the message again only to the second control means.

  According to the above configuration, communication abnormality can be easily detected when serial communication is performed between the control means. In addition, since a message response is not transmitted again from the second control unit to the first control unit, an illegal act of intentionally acquiring a message response from the second control unit can be prevented.

(5-8) In the above (5-1), the first control means and the second control means are both
First cryptographic communication processing means (SE1 mode) for performing cryptographic communication with each other;
Second cryptographic communication processing means (SE2 mode) for performing cryptographic communication with a higher security level than the cryptographic communication by the first cryptographic communication processing means after the cryptographic communication by the first cryptographic communication processing means;
The first control means (SC325b) transmits a first encryption key (upstream counter) used for encrypted communication by the second encrypted communication processing means from the first control means to the second control means. First encryption key update means for updating each time transmission is completed,
The second control means (CU control unit 323) sends a second encryption key (down counter) used for encryption communication by the second encryption communication processing means from the second control means to the first control means. 2nd encryption key update means updated whenever transmission of the electronic message is completed.

  According to the above configuration, the first control unit and the second control unit communicate with each other using an encryption key that differs depending on the communication direction. Can increase security.

(5-9) In the above (5-8), the first encryption key updating unit receives the message from the second control unit (CU control unit 323), and then the first encryption key is updated. (Up counter) is incremented by a predetermined value (+1),
The second encryption key update means counts up the second encryption key by a predetermined value based on the reception of the message from the first control means (+1),
The first control means and the second control means are encryption key storage means (CU control unit 323 and SC 325b) for storing the first encryption key (upstream counter) and the second encryption key (downstream counter). When the decryption abnormality occurs with the encryption key stored in the encryption key storage means, the decryption is retried with the encryption key obtained by counting up the encryption key by the predetermined value. (S152, S154, S156 to S158 in FIG. 45, FIG. 47, FIG. 48).

  According to the above configuration, even when a decryption abnormality occurs, decryption is retried with an encryption key obtained by counting up the encryption key by a predetermined value, and as a result, decryption can be successful. Therefore, even if a decryption abnormality occurs due to the temporary deterioration of communication quality or the like, communication can be continued by automatically restoring the encryption key.

(5-10) The present invention relates to first control means (CU control unit 323 or CU3, P stand 2, jet counter, POS terminal, etc.) and second control connected to be communicable with the first control means. A gaming system comprising means (security chip 325b or CU3, P stand 2, jet counter, POS terminal, etc.),
The first control means and the second control means include mutual authentication processing means (substrate initial key authentication sequence of FIGS. 49 and 51) for performing mutual authentication processing using mutual authentication information (substrate initial key). ,
At least one of the first control means and the second control means does not store the authentication information at the manufacturing stage (the CU control unit does not store the board initial key) and carries it into the game hall. After that, the authentication information is acquired and stored from the server when communication with the server becomes possible (FIG. 49: the CU control unit stores the board initial key downloaded from the host device),
The mutual authentication processing means derives an inappropriate authentication result when at least one of the first control means and the second control means does not store the authentication information (FIG. 51: Acquisition of a board initial key) If the board initial key authentication is performed without the authentication, the authentication result will be NG)
The first control means and the second control means are:
After the authentication information is stored, execute the mutual authentication process and various processes after the mutual authentication process (execute the substrate initial key authentication sequence and the subsequent communication key exchange sequence in FIG. 49),
The mutual authentication process is executed even before the authentication information is stored (the board initial key authentication sequence in FIG. 51 is executed), and an inappropriate authentication result (NG) is derived by the mutual authentication process. Thus, the process (FIG. 51: Communication of communication test message by substrate shipping key) prepared for execution at the stage before the authentication information is stored is executed.

  According to the above configuration, the first control means and the second control means obtain the authentication information from the server when the communication with the server becomes possible after being carried into the amusement hall and use the authentication information. Mutual authentication processing is performed to ensure security. On the other hand, the mutual authentication process is executed even when the authentication information is not yet stored, and as a result, an inappropriate authentication result is derived, thereby preparing for execution before the authentication information is stored. It is controlled to execute the processing that is being performed. In other words, whether or not to execute the process prepared for executing the mutual authentication process executed for security assurance after obtaining the authentication information at the stage before the authentication information is stored. Complicating control by providing a special determination step that determines whether or not to execute processing prepared for execution at the stage before the authentication information is stored. Can be prevented.

  (5-11) In the gaming system of (5-10) above, the storage of the authentication information is performed when the power is turned on for the first time after being brought into the game hall (FIG. 49).

  According to the above configuration, the authentication information is stored when the power is turned on for the first time after being loaded into the game hall. Mutual authentication processing for securing the security of the system is executed, and security during actual operation can be secured.

  (5-12) In the gaming system of (5-10) or (5-11) above, the processing prepared to be executed at the stage before the authentication information is stored is shipped to the game hall This is a test process executed before the communication (communication test message communication in FIG. 51).

  According to the above configuration, the process prepared to be executed at the stage before the authentication information is stored is a test process executed before shipping to the game hall, and as a result, the process is carried into the game hall. This test process is executed at a stage before the game is completed, and the tested product that has been subjected to the test process can be carried into the game arcade.

  (5-13) In the gaming system of (5-12) above, the test process is a process of executing a test message encrypted communication using a test key stored in advance (FIG. 51: Board shipment) Communication test message communication using a key).

  According to the above configuration, the test message is encrypted using the test key stored in advance and the test process is performed, so the security of the test message itself can be ensured.

(5-14) According to another aspect of the present invention, a gaming machine (CU3, P unit 2, S unit) including a first control unit and a second control unit communicably connected to the first control unit. 2S, jet counter, POS, etc.)
The first control means and the second control means include mutual authentication processing means (substrate initial key authentication sequence of FIGS. 49 and 51) for performing mutual authentication processing using mutual authentication information,
At least one of the first control means and the second control means does not store the authentication information at the manufacturing stage (the CU control unit does not store the board initial key) and carries it into the game hall. After that, the authentication information is acquired and stored from the server when communication with the server becomes possible (FIG. 49: the CU control unit stores the board initial key downloaded from the host device),
The mutual authentication processing means derives an inappropriate authentication result when at least one of the first control means and the second control means does not store the authentication information (FIG. 51: Acquisition of a board initial key) If the board initial key authentication is performed without the authentication, the authentication result will be NG)
The first control means and the second control means are:
After the authentication information is stored, execute the mutual authentication process and various processes after the mutual authentication process (execute the substrate initial key authentication sequence and the subsequent communication key exchange sequence in FIG. 49),
The mutual authentication process is executed even before the authentication information is stored (the board initial key authentication sequence in FIG. 51 is executed), and an inappropriate authentication result (NG) is derived by the mutual authentication process. Thus, the process (FIG. 51: Communication of communication test message by substrate shipping key) prepared for execution at the stage before the authentication information is stored is executed.

  According to the above configuration, the first control means and the second control means obtain the authentication information from the server when the communication with the server becomes possible after being carried into the amusement hall and use the authentication information. Mutual authentication processing is performed to ensure security. On the other hand, the mutual authentication process is executed even when the authentication information is not yet stored, and as a result, an inappropriate authentication result is derived, thereby preparing for execution at a stage before the authentication information is stored. It is controlled to execute the processing that is being performed. In other words, whether or not to execute the process prepared for executing the mutual authentication process executed for security assurance after obtaining the authentication information at the stage before the authentication information is stored. Complicating control by providing a special determination step that determines whether or not to execute processing prepared for execution at the stage before the authentication information is stored. Can be prevented.

  (5-15) In the gaming machine of the above (5-14), the storage of the authentication information is performed when the power is turned on for the first time after being brought into the game hall (FIG. 49).

  According to the above configuration, the authentication information is stored when the power is turned on for the first time after being loaded into the game hall. Mutual authentication processing for securing the security of the system is executed, and security during actual operation can be secured.

  (5-16) In the gaming machine of the above (5-14) or (5-15), the processing prepared to be executed at the stage before the authentication information is stored is shipped to the game hall This is a test process executed before (communication test message communication in FIG. 51).

  According to the above configuration, the process prepared to be executed at the stage before the authentication information is stored is a test process executed before shipping to the game hall, and as a result, the process is carried into the game hall. This test process is executed at a stage before the game is completed, and the tested product that has been subjected to the test process can be carried into the game arcade.

  (5-17) In the gaming machine of the above (5-16), the test process is a process for executing encrypted communication of a test message using a test key stored in advance (FIG. 51: board shipping key) Communication test message communication using)

  According to the above configuration, the test message is encrypted using the test key stored in advance and the test process is performed, so the security of the test message itself can be ensured.

(5-18) The present invention relates to first control means (CU control unit 323 or CU3, P stand 2, jet counter, POS terminal, etc.) and second control connected to be communicable with the first control means. A gaming system comprising means (security chip 325b or CU3, P stand 2, jet counter, POS terminal, etc.)
Mutual authentication processing means (substrate initial key authentication sequence in FIG. 49) for performing mutual authentication processing using a temporary operation key (substrate initial key) between the first control means and the second control means;
An authentication key acquisition unit (security board information inquiry sequence in FIGS. 49 and 55) for performing a process of acquiring the authentication key (substrate authentication key) on the condition that the authentication result by the mutual authentication processing unit is appropriate;
A main operation processing unit (business message communication with the gaming machine of FIG. 50) for executing an operation process using the main authentication key acquired by the main authentication key acquiring unit;
Temporary operation processing means for executing temporary operation processing using the temporary authentication key when the authentication key cannot be acquired as a result of the processing by the authentication key acquisition means (FIG. 49: Query security board information) The communication key exchange sequence (FIG. 57) is executed using the substrate initial key without executing the sequence and the substrate initial key authentication sequence.

  According to the above configuration, since the process for obtaining the authentication key is executed on the condition that the mutual authentication process is performed using the temporary authentication key and the authentication result is appropriate, high security can be ensured. It becomes possible. In addition, when the authentication key cannot be acquired as a result of the acquisition process of the authentication key, a temporary operation process is executed using the temporary authentication key. It is possible to prevent inconveniences that cannot be achieved at all.

  (5-19) In the gaming system according to (5-18), the temporary operation processing means executes the temporary operation processing only within a predetermined period (for example, the operation is limited to two days). Tolerate).

  According to the above configuration, since the temporary operation process is executed only within a predetermined period, the temporary operation process in an unstable state when the authentication key cannot be obtained is allowed indefinitely. Can reduce security problems.

  (5-20) In the gaming system according to (5-18) or (5-19) above, the authentication key acquisition means is a server (key management server) that stores the authentication key in association with an identification number. 800), an identification number (substrate serial number) is transmitted to obtain the main authentication key corresponding to the identification number (FIG. 55).

  According to the above configuration, the authentication key is stored in the server in association with the identification number, and the authentication key corresponding to the identification number is acquired by transmitting the identification number to the server. This authentication key can be acquired only if the authentication key is stored in the server in association with the identification number, and the authentication key can be acquired only when the authorized identification number registered with the authentication key is sent. Security is ensured.

(5-21) The gaming system according to (5-20) further includes a server (key management server 800) that stores the authentication key in association with the identification number,
The server receives information including an identification number (substrate serial ID) used for the apparatus shipped by a manufacturer that manufactures the apparatus that acquires and stores the main authentication key and the main authentication key. The main authentication key is stored in association with the included identification number (the board authentication key is stored in association with the board serial ID).

  According to the above configuration, the server receives the information including the identification number used for the device shipped by the manufacturer that manufactured the device that acquires and stores the authentication key and the authentication key, and is included in the information Since the server stores the authentication key in association with the identification number, the authentication key can be acquired from the server only for the legitimate device shipped by the manufacturer, and the device other than the legitimate device shipped by the manufacturer Security can be secured by preventing inconvenience that can be acquired as much as possible.

(5-22) In another aspect of the present invention, the first control means (CU control unit 323 or CU3, P stand 2, jet counter, POS terminal, etc.) is connected to the first control means in a communicable manner. A gaming machine (CU3, P table 2, jet counter, POS terminal, etc.) equipped with a second control means (security chip 325b or CU3, P table 2, jet counter, POS terminal, etc.),
Mutual authentication processing means (substrate initial key authentication sequence in FIG. 49) for performing mutual authentication processing using a temporary operation key (substrate initial key) between the first control means and the second control means;
An authentication key acquisition unit (security board information inquiry sequence in FIGS. 49 and 55) for performing a process of acquiring the authentication key (substrate authentication key) on the condition that the authentication result by the mutual authentication processing unit is appropriate;
A main operation processing unit (business message communication with the gaming machine of FIG. 50) for executing an operation process using the main authentication key acquired by the main authentication key acquiring unit;
Temporary operation processing means for executing temporary operation processing using the temporary authentication key when the authentication key cannot be acquired as a result of processing by the authentication key acquiring means (FIG. 49: board serial ID authentication) The communication key exchange sequence (FIG. 57) is executed using the substrate initial key without executing the sequence and the substrate initial key authentication sequence.

  According to the above configuration, since the process for obtaining the authentication key is executed on the condition that the mutual authentication process is performed using the temporary authentication key and the authentication result is appropriate, high security can be ensured. It becomes possible. In addition, when the authentication key cannot be acquired as a result of the acquisition process of the authentication key, a temporary operation process is executed using the temporary authentication key. It is possible to prevent inconveniences that cannot be achieved at all.

  (5-23) In the gaming machine of the above (5-22), the temporary operation processing means executes the temporary operation processing only within a predetermined period (for example, operation is limited to two days) To do).

  According to the above configuration, since the temporary operation process is executed only within a predetermined period, the temporary operation process in an unstable state when the authentication key cannot be obtained is allowed indefinitely. Can reduce security problems.

  (5-24) In the gaming machine of the above (5-22) or (5-23), the authentication key acquisition means is a server (key management server 800) that stores the authentication key in association with the identification number. ), An identification number (substrate serial number) is transmitted to obtain the authentication key corresponding to the identification number (FIG. 55).

  According to the above configuration, the authentication key is stored in the server in association with the identification number, and the authentication key corresponding to the identification number is acquired by transmitting the identification number to the server. This authentication key can be acquired only if the authentication key is stored in the server in association with the identification number, and the authentication key can be acquired only when the authorized identification number registered with the authentication key is sent. Security is ensured.

(5-25) The present invention relates to first control means (CU control unit 323 or CU3, P stand 2, jet counter, POS terminal, etc.) and second control connected to be communicable with the first control means. A gaming system comprising means (security chip 325b or CU3, P stand 2, jet counter, POS terminal, etc.),
Pre-shipment processing means for performing pre-shipment processing using a test key between the first control means and the second control means at a stage before shipment to the game arcade (FIG. 51: communication by board shipping key) Test message communication),
After being delivered to the amusement hall, an actual operation processing means for performing processing during actual operation at the game hall using an authentication key (board authentication key) between the first control means and the second control means ( Business message communication with the gaming machine of FIG.

  According to the above configuration, the pre-shipment processing is performed using the test key, while the actual operation processing is performed using the authentication key. Even if the test key is leaked, the actual operation is performed. As long as the authentication key at the time does not leak, security during actual operation can be maintained.

  (5-26) In the gaming system of (5-25) above, an initial key (board initial key) is acquired from the server (hall server 801) and used when the power is turned on for the first time after being delivered to the game arcade. The initial key use processing means (the board initial key authentication sequence and the security board information inquiry sequence shown in FIG. 49) is further provided.

  According to the above-described configuration, since the initial key is acquired when the power is turned on for the first time when the game is turned on and the process using the initial key is executed, the process using the initial key to ensure security is performed thereafter. It becomes possible.

  (5-27) In the gaming system of (5-26), the initial key use processing means executes processing for acquiring the authentication key from the server (inquiry for security board information in FIGS. 49 and 55). sequence).

  According to the above configuration, in acquiring an authentication key used for processing in actual operation from the server, an authentication key is obtained by acquiring an initial key from the server and executing processing using the initial key prior to that. Processing for acquiring from the server will be performed, and the processing for acquiring the authentication key from the server itself can be a process that guarantees security using the initial key, and security can be further improved. .

(5-28) In another aspect of the present invention, the first control means (CU control unit 323 or CU3, P stand 2, jet counter, POS terminal, etc.) and the first control means are communicably connected. A gaming machine (CU3, P table 2, jet counter, POS terminal, etc.) equipped with a second control means (security chip 325b or CU3, P table 2, jet counter, POS terminal, etc.),
Pre-shipment processing means for performing pre-shipment processing using a test key between the first control means and the second control means at a stage before shipment to the game arcade (FIG. 51: communication by board shipping key) Test message communication),
After being delivered to the amusement hall, an actual operation processing means for performing processing during actual operation at the game hall using an authentication key (board authentication key) between the first control means and the second control means ( Business message communication with the gaming machine of FIG.

  According to the above configuration, the pre-shipment processing is performed using the test key, while the actual operation processing is performed using the authentication key. Even if the test key is leaked, the actual operation is performed. As long as the authentication key at the time does not leak, security during actual operation can be maintained.

  (5-29) In the gaming machine of the above (5-28), an initial key (board initial key) is acquired from the server (hall server 801) when the power is turned on for the first time when it is delivered to the amusement hall, and the initial key is used. Initial key use processing means (substrate initial key authentication sequence and security substrate information inquiry sequence in FIG. 49) for executing processing is further provided.

  According to the above-described configuration, since the initial key is acquired when the power is turned on for the first time when the game is turned on and the process using the initial key is executed, the process using the initial key to ensure security is performed thereafter. It becomes possible.

  (5-30) In the gaming machine of (5-29), the initial key use processing means executes processing for acquiring the authentication key from the server (security board information inquiry sequence of FIGS. 49 and 55). ).

  According to the above configuration, in acquiring an authentication key used for processing in actual operation from the server, an authentication key is obtained by acquiring an initial key from the server and executing processing using the initial key prior to that. Processing for acquiring from the server will be performed, and the processing for acquiring the authentication key from the server itself can be a process that guarantees security using the initial key, and security can be further improved. .

  A gaming device for enabling gaming by a gaming machine is configured by the CU 3b. The communication control IC 325a or the SC 325b constitutes a game control device for enabling a game with a gaming machine.

  The gaming device includes first control means (security chip: SC325b), second control means (communication control IC 325a) connected to the first control means so as to be capable of serial communication, and the first control means to the second control means. A confirmation message is transmitted to the control means to confirm the state of the second control means (FIGS. 30 to 32: transmission of a confirmation request), and the confirmation message transmitted by the condition confirmation means A status confirmation response means for transmitting a response message from the second control means to the first control means and performing a status confirmation response of the second control means (FIGS. 30 to 32: transmission of a status confirmation response); In the first control means, a message reading means for reading a message after transmitting the confirmation message (FIG. 32: reading of a message on the side of the SC 325b) and two bytes of the message read by the message reading means. When the state in which the eye information is different from the inversion information of the first byte of the read message continues until a predetermined setting condition (for example, FIG. 32: SC-communication control IC disconnection detection time) is satisfied, the first control is performed. Disconnection determination means for determining that a disconnection has occurred between the means and the second control means (FIG. 32: SC325b determines that a disconnection has occurred).

  On the other hand, the game control device is a device included in the above-described game device, and is a device that includes a state confirmation unit, a message reading unit, and a disconnection determination unit, or a device that is connected to the device so as to be capable of serial communication.

  In the case of the present embodiment, the CU 3 as an example of a gaming device includes a communication control IC 325a and an SC 325b, and also has a function as the gaming device.

It is a front view which shows a card unit and a pachinko machine. It is a block diagram which shows the control circuit used for a card unit and a pachinko machine. It is a block diagram for demonstrating display control of a game ball number display and a display. It is explanatory drawing for demonstrating the notification process when abnormality is detected as a result of mutual authentication. It is a figure for demonstrating the encryption key used for communication between a key management server and communication control IC. It is explanatory drawing for demonstrating the various data memorize | stored in the card unit side and the pachinko machine side, and its transmission / reception. It is explanatory drawing explaining the outline of the command and response which are transmitted / received between a card unit and a pachinko machine. It is a figure which shows an example of a process with the card unit and the pachinko machine at the time of power activation. It is a figure which shows an example of a process with a card unit and a pachinko machine when a card is inserted in a card unit. It is a figure which shows an example of a process with a card unit and a pachinko machine when lending a ball from the prepaid balance of the inserted card. It is a figure which shows an example of a process with a card unit and a pachinko machine when paying out a lot of balls and paying out a stored ball. It is a figure which shows an example of the normal process of a card unit and a pachinko machine when counting game balls. It is a figure which shows an example used as the count NG at the place of the card unit and pachinko machine when counting game balls. It is a figure which shows an example of the count process when a player performs card return operation. It is a figure which shows an example of a process when there exists a power supply disconnection and a communication line disconnection, and the command of the status information request | requirement from a card unit to a pachinko machine has not reached | attained. It is a figure which shows an example of a process when there exists a power supply disconnection and a communication line disconnection and the response of a status information response has not reached | attained from a pachinko machine to a card unit. It is a figure which shows another example of a process when there exists a power supply disconnection and a communication line disconnection and the response of a status information response has not reached | attained from a pachinko machine to a card unit. It is a figure which shows an example of a process when there exists a power supply disconnection and a communication line disconnection, and the command of the addition request | requirement from a card unit to a pachinko machine has not arrived. It is a figure which shows an example of a process when there exists a power supply disconnection and a communication line disconnection, and the response of the addition response from a pachinko machine to a card unit has not reached | attained. It is a figure which shows another example of a process when there exists a power supply disconnection and a communication line disconnection, and the response of the addition response from a pachinko machine to the card unit has not yet reached. It is a figure which shows another example of a process when there exists a power supply disconnection and a communication line disconnection, and the command of the addition request | requirement from a card unit to a pachinko machine has not reached | attained. It is a figure which shows an example of a process when there exists a power supply disconnection and a communication line disconnection, and the response of the count response from a pachinko machine to the card unit has not yet reached. It is a figure which shows an example of a process when there exists a power supply disconnection and a communication line disconnection, and the command of the count request | requirement from a card unit to a pachinko machine has not reached | attained. It is a figure which shows another example of a process when there exists a power supply disconnection and a communication line disconnection and the response of the count response from a pachinko machine to the card unit has not yet reached. It is a figure which shows an example of a process at the time of the game ball addition result abnormality at the time of ball lending, holding ball payout, and saving ball payout. It is a conceptual diagram for demonstrating operation | movement of P platform and CU regarding an addition serial number. It is a conceptual diagram for demonstrating operation | movement of P stand and CU regarding a count serial number. It is a figure for demonstrating an example of the operation | movement regarding a 1st and 2nd check process. It is a figure for demonstrating an example of the operation | movement regarding a 3rd check process. It is a figure explaining the transmission process of the business message between SC and communication control IC. It is a figure explaining the process of communication abnormality detection between SC and communication control IC. It is a figure explaining the process of a communication line disconnection detection between SC and communication control IC. It is a figure explaining the process of the business message sequence between SC and communication control IC. It is a figure explaining the process of the authentication sequence of communication control IC. It is a figure explaining the process of a 1st authentication sequence. It is a figure explaining the process of the authentication abnormality sequence of communication control IC. (A) (b) is a figure which shows the counter used for encryption and decryption of SE2 mode, (c) is explanatory drawing explaining the structure of block cipher encryption by SE2 mode. It is explanatory drawing explaining the mechanism of the block cipher decoding by SE2 mode. It is a figure which shows the encryption communication in the normal time when the receiving side which received the encryption communication text is decoded appropriately. It is a figure which shows the process at the time of abnormality when the response from SC to the CU control part does not arrive. It is a figure which shows the process at the time of abnormality when the command from SC to a SC does not arrive. It is a figure which shows the process of the modified example at the time of the abnormality of the response unreachable shown in FIG. It is a figure which shows the modification of the process at the time of the abnormality which a command has not reached | attained. (A) is a flowchart which shows the encryption process by SE2 mode, (b) is a flowchart which shows the decryption process by SE2 mode. (A) is a flowchart showing the specific control contents of the counter repair process shown in FIGS. 40 and 41, and (b) shows the specific control contents of the repair process of the modified example shown in FIGS. It is a flowchart. It is a figure for demonstrating the counter operation | movement of the decoding process by SE2 mode. It is a sequence diagram for demonstrating the automatic restoration (CU side) of the counter at the time of SE2 mode. It is a sequence diagram for demonstrating the automatic restoration (SC side) of the counter at the time of SE2 mode. It is a figure for demonstrating the starting process at the time of power activation of a CU control part, and hall installation. It is a figure for demonstrating the process of power activation and normal start-up of a CU control part. It is a figure for demonstrating the process at the time of the power activation and factory shipment of a CU control part. It is a figure for demonstrating the process of the authentication sequence of a board | substrate maker code. It is a figure for demonstrating the process of the authentication sequence of a board | substrate initial stage key or a board | substrate shipping key. It is a figure for demonstrating the process of the authentication sequence of board | substrate serial ID and a board | substrate authentication key. It is a figure for demonstrating the process in the case of inquiring about security board information. It is a figure for demonstrating the process of a gaming machine chip information inquiry sequence. It is a figure explaining a communication exchange key sequence. It is a figure for demonstrating the process of a board | substrate authentication key authentication abnormality sequence. It is a figure explaining the process of the inquiry timeout sequence of security board | substrate information. It is a figure explaining the process of the inquiry (collation) timeout sequence of gaming machine chip information. It is a flowchart for demonstrating the process of board | substrate authentication key authentication. It is an example of the flowchart for demonstrating the switching process of communication mode, (a) is a communication mode switching process between CU control part-SC, (b) is a communication mode switching process between SC-communication control IC. It is another example of the flowchart for demonstrating the switching process of communication mode, (a) is the communication mode switching process between CU control part-SC, (b) is the communication mode switching process between SC-communication control IC. is there. It is a flowchart for demonstrating the authentication operation | movement of the check of a unified store code. It is a flowchart for demonstrating the authentication operation | movement of a board maker code. It is a flowchart for demonstrating a reception interval monitoring process. It is a flowchart for demonstrating an abnormal message | telegram monitoring process. It is a flow chart for explaining gaming machine chip inquiry processing. It is a figure which shows the encryption communication in the normal time when the receiving side which received the encryption communication text is decoded appropriately. It is a figure which shows the process at the time of abnormality when the response from SC to the CU control part does not arrive. It is a figure which shows the process at the time of abnormality when the command from SC to a SC does not arrive. It is a figure which shows the process of the modification at the time of the abnormality of the response unreachable shown in FIG. It is a figure which shows the modification of the process at the time of the abnormality which a command has not reached | attained. It is a figure for demonstrating the counter operation | movement of the decoding process by SE2 mode. It is a sequence diagram for demonstrating the automatic restoration (CU side) of the counter at the time of SE2 mode. It is a sequence diagram for demonstrating the automatic restoration (SC side) of the counter at the time of SE2 mode. It is explanatory drawing of the memory | storage table for managing the flowchart which shows the flow of a gift process, and the value of a player possession. It is a flowchart which shows the flow of a rate related process. It is a flowchart which shows the flow of a conversion process. It is a flowchart which shows the flow of a return permission determination processing. It is explanatory drawing of the memory | storage table for managing the flowchart which shows the flow of the gift process as a modification, and the value of player possession. It is a perspective view which shows the state which opened the front door of the slot machine. It is explanatory drawing for demonstrating the various data memorize | stored in each of a card unit and a slot machine, and its transmission / reception aspect.

Embodiments according to the present invention will be described below with reference to the drawings.
<Configuration of pachinko machine>
First, the configuration of the pachinko machine according to the present embodiment will be described with reference to FIG. Each game island (not shown) arranged in the game hall (hall) has an enclosed circulation pachinko machine (hereinafter abbreviated as a game machine, pachinko machine, or P machine) 2 as an example of a game machine. Has been. In addition, card units (hereinafter sometimes abbreviated as CUs) 3 are installed in a one-to-one correspondence with the pachinko machine 2 at side positions on a predetermined side of the pachinko machine 2.

  The pachinko machine 2 encloses a pachinko ball as an example of a game medium inside, and when the player operates the hitting operation handle 25, the firing motor 18 (see FIG. 2) is driven to make one shot of the enclosed ball. The game board 26 is configured so that it can be played one by one in the game area 27 in front of the game board 26. Specifically, a touch sensor is provided around the batting operation handle 25, and the player's hand touches the touch sensor while the player is operating the batting operation handle 25, and the player's hand. Is detected by the touch sensor, and the firing motor 18 is driven. In this state, the hitting momentum is adjusted in accordance with the amount of rotation of the hitting operation handle 25 by the player, and the ball is shot into the game area 27.

  The pachinko machine 2 shown in FIG. 1 is a so-called first type of pachinko machine, and a variable display device (also referred to as a special symbol) 278 is provided in the center of the game area 27. In addition, the game area 27 is provided with a plurality of types of winning holes through which the inserted pachinko balls can be won. In the game area 27 shown in FIG. 1, one large winning opening (variable winning ball apparatus) 271, three normal winning holes 272, 273, 274 and three start winning holes 275, 276, 277 are shown. ing. In particular, the start winning opening 276 is configured by an electric tulip that can be changed between a first state (for example, an open state) that is advantageous to the player and a second state (for example, a closed state) that is disadvantageous to the player. .

  The variable display device 278 includes a variable display unit capable of variably displaying a plurality of types of identification information (symbols), and based on the detection signals of the start winning balls won in each start winning opening 275, 276, 277. Start variable display of multiple types of identification information. When the display result of the variable display device is a combination of specific identification information (for example, a glance), a big hit state is established and the big prize opening 271 is opened.

  Further, the display result of the variable display device 278 becomes a combination of predetermined special identification information (for example, a combination of probability variation symbols such as 777) out of a combination of jackpot symbols (a slotted pattern), so that the probability variation big hit state And a probability variation state (probability variation state) in which the probability of occurrence of the jackpot is improved after the end of the jackpot state.

  Pachinko balls that have been driven into the game area 27 are won in any of the winning openings or are collected in the out opening 154 without winning. The pachinko balls that have won any of the winning holes and the pachinko balls collected at the out-port 154 are returned again to the hitting ball launch position through the collection path in the pachinko machine 2. Then, when the player operates the hitting operation handle 25, the pachinko ball at the hitting position is again shot into the game area 27.

  A display 54 is provided at a position below the game area 27 in the pachinko machine 2. The display 54 is composed of a liquid crystal display device, and displays various effect images linked to the display of the points, the remaining card amount, or the variable display device 278 to the player.

  Further, a counting button 28 is provided at the left position of the hitting operation handle 25 in the pachinko machine 2 for counting the game balls to the holding balls. In the present embodiment, the counting operation is repeatedly executed according to the time for which the counting button 28 is kept pressed. It should be noted that, regardless of the pressing duration time, if the button is pressed once, a predetermined number (for example, 100 balls) may be counted from the gaming ball to the holding ball, or the counting button 28 is pressed once. All of the game balls currently owned by the player may be counted regardless of the pressing time (regardless of whether the button is pressed for a long time).

  As described above, since the counting button 28 is provided on the pachinko machine (P) 2 side, the person is sitting facing the pachinko machine 2 as compared with the case where the counting button 28 is provided on the card unit (CU) 3 side. Can improve the operability of the player.

  A game ball number display 29 for displaying the number of game balls is provided at the upper right of the counting button 28. The game ball number display 29 is a 7-segment display. The game ball number display 29 may be configured by a liquid crystal display, an organic EL display, or other display.

  The pachinko machine 2 according to the present embodiment can be divided into a game board 26 and other game frames (front frames) 6. In particular, the gaming board 26 is different for each model of pachinko machine developed by each company, while the gaming machine frame 6 is a common common frame regardless of the model. For this reason, it is sufficient for the game store to replace only the game board 26 when replacing a new stand.

<Configuration of card unit>
Next, the configuration of the card unit 3 according to the present embodiment will be described with reference to FIG. This card unit 3 is a visitor card (also referred to as a general card) having a prepaid function, which is a game recording medium issued to a general player who has not registered as a member, or a member who has registered as a member in the game hall. Receive a membership card, which is a game recording medium issued to a player. Visitor cards and membership cards are composed of IC cards.

  The card unit 3 that has received these cards has a function of converting the game value (for example, the remaining card amount, the number of balls, or the number of stored balls) owned by the player specified by the record information of the card into “game ball data”. Have In the pachinko machine 2, a ball game equivalent to the number of balls specified by the data of game balls is made possible. That is, “game ball data” is data indicating the number of remaining balls that can be fired. In the following description, “game ball data” is simply referred to as “game ball” in the same manner as a stored ball and a holding ball.

  On the front side of the card unit 3, a bill insertion slot 302 for inserting bills, a protruding portion 305 formed to project forward from the front side of the device, and a card insertion / discharge port for inserting a membership card or a visitor card 309 etc. are provided. A membership card or a visitor card inserted into the card insertion / discharge port 309 is received by a card reader / writer (not shown), and information recorded on the card is read.

  In the protrusion 305 described above, on the surface facing the player, the display unit 312 and the member card ID recorded on the member card when the member card is received (also simply referred to as a card ID or C-ID). ) And a replay button 319 for performing a replay game using the number of stored balls specified by the member card ID.

  The display 312 displays the prepaid balance recorded on the inserted game recording medium (card) (also referred to as the card balance or simply the balance), but can display the number of game balls and various other information. In addition, the surface is configured with a transparent touch panel, and various operations can be input by touching various display items displayed on the display unit of the display 312 with a finger.

  When the replay button 319 is operated, if the number of possessed balls acquired by the player is recorded on the inserted card, a part of the number of possessed balls is withdrawn and converted into a game ball, and the converted game ball is converted into a converted game ball. Based on this, it is possible to play a game with the pachinko machine 2. On the other hand, if the inserted card is a membership card and the number of possession balls is not recorded and the storage ball is recorded in the hall management computer, etc., a part of the storage ball is withdrawn and becomes a game ball. It is converted, and the game by the pachinko machine 2 becomes possible. That is, when both the stored ball and the holding ball are stored in association with the inserted card, the holding ball is withdrawn preferentially. Separately from the replay button 319, a dedicated ball payout button for withdrawing the holding ball may be provided, and the replay button 319 may be a button dedicated to the withdrawal of the stored ball.

  Here, the “storing ball” is a ball deposited in the hall with a ball acquired before the previous day, and becomes a game ball by paying out the saving ball. The storage ball is a game medium deposited in a game hall, and is generally managed by a hall management computer or other management computer installed in the game hall.

  “Mochitama” is a ball acquired on the day and becomes a game ball by paying out the possessionball. In addition, the number of possession balls is the number of game balls owned by the player as a result of the player playing with the gaming machine on the card, and the number of balls that have not yet been deposited in the game hall That is. Generally, the number of balls that the player has acquired on the day of the game hall is called “mochidama”, and the number of balls that the player has acquired before the previous day and that has been deposited in the amusement hall is “save ball”. Say.

  A “game ball” is a ball that can be fired by a gaming machine. As described above, the data on the number of game balls is generated in exchange for withdrawing the remaining amount of the prepaid card, holding balls, or storing balls.

  Note that the number of possessed balls may be managed by a management device for managing the number of possessed balls set in the game hall. In short, the difference between “sold balls” and “mochidama” is the number of balls that have been deposited in the amusement hall as a result of a storage operation for depositing in the amusement hall, or is still deposited in the amusement hall. It is a point whether it is the number of balls of the stage which is not.

  In the present embodiment, the stored ball data is not recorded directly on the membership card, but is stored in association with the membership card number in the hall server 801 (upper server) 801 (see FIG. 4) installed in the game hall such as the hall management computer. The corresponding storage card can be searched based on the membership card number. On the other hand, Mochitama records directly on the card. However, the present invention is not limited to this, and both may be stored in the hall server 801 installed in the hall in association with the card number. In the case of a visitor card, Mochitama is recorded directly on the visitor card. However, the present invention is not limited to this, and the ball may be stored in the hall server 801 in association with the card number. When the hall server 801 stores the card number in association with the card number, data that can specify the time stored in the hall server 801 may be written on the card (member card, visitor card) and discharged. Also, the prepaid balance is written directly on a card (member card, visitor card) and discharged.

  Note that the timing of storing the holding ball in the card (member card, visitor card) or hall server 801 is stored in real time every time the counting button 28 is operated and the counting process is performed, for example, at regular intervals. It is conceivable that the timing is such that it is stored or stored in a lump when the card is returned.

  Also, when the player finishes the game and returns the card from the card unit 3, the possession ball stored in the card unit 3 is temporarily stored in the hall server 801 as a stored ball, and the player returns the card. When the card is inserted into the same or another card unit 3 again on the same day as the date of receiving the card, only the possession balls for the day that have been stored once as stored balls are stored again in the card unit 3, and the range of the possessed balls The game balls may be added to allow the game to be played.

  The banknote inserted into the banknote insertion slot 302 is taken in by a currency discriminator (not shown), and its authenticity and banknote type are identified.

  On the front side of the card unit 3, an IR (Infrared) photosensitive unit (also referred to as an IR light receiving unit) 320, a ball lending button (also referred to as a lending button) 321 and a card return button 322 are further provided. The IR photosensitive unit 320 is an IR photosensitive unit 320 that receives an infrared signal from a remote controller (not shown) possessed by an attendant at a game arcade, converts the infrared signal into an electronic signal, and outputs the electronic signal. The ball lending button 321 is a button for performing an operation (conversion operation to a game ball) for withdrawing the remaining amount recorded on the inserted card and using it in a game by the pachinko machine 2. The card return button 322 is operated when the player finishes the game, and the number of game balls determined at the end of the game in the inserted card (the number of balls at the time of card insertion−the number of conversions to game balls + count) This is an operation button for memorizing and discharging the number of possessed balls counted by the operation.

<Configuration of card unit and pachinko machine>
FIG. 2 is a block diagram showing the configuration of the card unit 3 and the pachinko machine 2. With reference to FIG. 2, the outline of the control circuit of the card unit 3 and the pachinko machine 2 will be described.

  The card unit 3 is provided with a CU control unit 323 composed of a microcomputer or the like. The CU control unit 323 is a main control function unit of the card unit 3, and is a CPU (Central Processing Unit) as a control center, a ROM (Read Only Member) that stores programs for operating the CPU, control data, and the like. ), A RAM (Random Access Memory) functioning as a work area of the CPU, an input / output interface for maintaining signal consistency with peripheral devices, and the like.

  The CU control unit 323 is provided with an external communication unit (not shown) for communicating with a hall management computer and a hall server 801 (see FIG. 4) for security management. A security board (SC board) 325 for communicating with the payout control board 17 of the pachinko machine 2 while ensuring security is connected to the CU control unit 323. The security board 325 is a security monitoring function unit of the card unit 3. Note that the CU control unit 323 may be provided on the security board 325, or the CU control unit 323 may be provided on a board different from the security board 325. The card unit 3 is provided with a connection part (not shown) to the pachinko machine 2 side, and the pachinko machine 2 is provided with a connection part (not shown) to the card unit 3 side. These connection parts are constituted by connectors, for example.

  The security board 325 on the card unit 3 side and the payout control board 17 on the pachinko machine 2 side are communicably connected via this connector and connection wiring. The security board 325 is provided with a communication control IC 325a for controlling communication between the security board 325 and the payout control board 17, and a security chip (SC) 325b for monitoring the security of the pachinko machine 2. The SC 325b further includes a fraud detection unit 1325. The fraud detection unit 1325 performs fraud detection by monitoring the game ball addition request information notified from the CU control unit 323 to the pachinko machine 2, and manages the key when fraud is detected. The server 800 (see FIG. 4) is notified. Further, the setting value (constant) for fraud detection is notified from the key management server 800 as board control information.

  To the CU control unit 323, the authenticity and type of the banknote are identified by the above-described money identifier, and the identification result signal is input. In addition, when the IR photosensitive unit 320 receives infrared rays emitted from a remote controller owned by an attendant at the game hall, a light reception signal is input to the CU control unit 323. The card reader / writer reads the information recorded in the inserted card into the CU control unit 323, and the read information is input to the CU control unit 323. The CU control unit 323 writes the information to the card reader / writer. When data is transmitted, the card reader / writer writes the data to the inserted card. The card recording information includes a card ID. The CU control unit 323 stores the card ID read by the card reader / writer until the game ends.

  The CU control unit 323 manages and stores the player's possession balls when the player is playing. Data such as the remaining amount or the number of game balls is output from the CU control unit 323 to the display control unit 350, and is converted into display data by the display control unit 350. The display data converted by the display control unit 350 is transmitted to the pachinko machine 2. The display data transmitted to the pachinko machine 2 is input to the display 312 via the relay board 14. The display 312 displays an image corresponding to the display data. Further, when the player operates a touch panel provided on the surface of the display 312, the operation signal is input to the CU control unit 323 via the display control unit 350. When the player operates the ball lending button 321, the operation signal is input to the CU control unit 323. The ball lending button 321 is not limited to the configuration provided in the CU 3, and may be provided in the pachinko machine 2 to input an operation signal to the CU control unit 323. When the player operates the replay button 319, the operation signal is input to the CU control unit 323. When the player operates the card return button 322, the operation signal is input to the CU control unit 323.

  In the pachinko machine 2, the main control board 16 that controls the progress of the game of the pachinko machine 2, the payout control board 17 that manages and stores the game balls, and the drive control of the launch motor 18 based on commands from the payout control board 17 A launch control board 31, a variable display device 278, and an effect control board 15 that controls the display of the variable display device 278 based on a command transmitted from the main control board 16.

  The main control board 16 and the effect control board 15 are provided on the game board 26. The main control board 16 is equipped with a game control microcomputer as the main control unit 161. The main control unit 161 is a main control function unit of the gaming machine. A microcomputer for gaming machine control includes a CPU (Central Processing Unit) as a control center, a ROM (Read Only Member) storing a program for operating the CPU and control data, and a RAM (RAM) functioning as a CPU work area. Random Access Memory) and an input / output interface for maintaining signal consistency with peripheral devices. The main controller 161 is connected to a winning sensor 162 and a radio wave sensor 163 provided on the game board 26.

  When a ball wins each start winning opening 275, 276, 277, the main control unit 161 draws a random number for determining a big hit (or further including a small hit) / off and stores the random number. This is called reserved storage. The maximum value of the number of reserved memories is, for example, 4. When the variable display device 278 is ready to start a new variable display, the main control unit 161 digests one reserved memory, makes a jackpot determination based on the reserved memory, and derives the display result from the variable start. The variable display time to reach is determined from multiple types. Further, when the big hit is determined, it is also determined whether or not the probability fluctuation is caused. The main control unit 161 transmits the result of the jackpot determination (including whether or not to change the probability) and information regarding the variable display time to the effect control unit 151 mounted on the effect control board 15 as commands.

  The variable display command transmitted from the main control unit 161 to the effect control unit 151 specifies a variable start command indicating the start of variable display, a display result command indicating the result of variable display (big hit / out), and a variable display pattern. A variable display time command that is possible, a variable stop command that indicates the timing for deriving and displaying a variable display result, and the like are included. Furthermore, the commands transmitted from the main control unit 161 to the production control unit 151 include a command that can identify the progress status of the big hit during the big hit, a command that indicates the occurrence of a new reserved memory, and the occurrence of an error in the gaming state. There are commands to show.

  The effect control unit 151 determines the variable display content of the variable display device 278 based on these commands transmitted from the main control unit 161. For example, the effect control unit 151 specifies a variable display result and a variable display time based on a command transmitted from the main control unit 161, determines a stop symbol, and a variable display pattern (reach presence / absence, reach type). In addition, the effect pattern of the notice effect related to the big hit or reach is determined. The effect control unit 151 controls display of the variable display device 278 according to the determined variable display content.

  The effect control board 15 is also connected to the display 54 via the relay board 14 on the gaming machine frame 6 side. The effect control unit 151 transmits a display control signal for variable display or the like to the variable display device 278 and transmits a display control signal for performing display in conjunction with the display of the variable display device 278 to the display unit 54. Is possible. The relay board 14 and the display 54 may be provided on the CU3 side. In this case, the effect control board 15 on the P stand 2 side is connected to the relay board 14 provided in the CU 3.

  The payout control board 17 is provided on the front frame 6 (game frame). The payout control board 17 is equipped with a payout control microcomputer which is a payout control unit 171. The payout control unit 171 is a payout control function unit of the gaming machine. The payout control microcomputer includes a CPU (Central Processing Unit) as a control center, a ROM (Read Only Member) storing a program for operating the CPU and control data, and a RAM (RAM) functioning as a work area of the CPU. Random Access Memory) and an input / output interface for maintaining signal consistency with peripheral devices.

  Further, a firing ball detection switch 903, an out ball detection switch 701, a foul ball detection switch 33, a counting button 28, and a radio wave sensor 173 are provided on the payout control board 17 in an electrically connected state. The radio wave sensor 173 is for detecting an illegal act of illegally transmitting radio waves and mainly turning on the ball raising switch (upper) 41a. A detection signal of the radio wave sensor 173 is input to the payout control unit 171 via an input port (not shown) of the payout control board 17. The ball raising switch (upper) 41a detects the launch of a game ball by changing from on to off, and based on the detection, the payout control unit 171 subtracts “1” from the number of game balls.

  Accordingly, when the ball raising switch (upper) 41a is always turned on by an improper radio wave, the number of game balls is not subtracted no matter how many balls are fired. Such radio fraud is detected by the radio wave sensor 173.

  From main control board 16 to payout control board 17, main control chip ID, winning opening information, round information, connection confirmation signal, winning detection signal, starting winning opening winning information, error information, number of symbols determined, jackpot information, manufacturer specific Jackpot information is sent.

  The main control chip ID (also referred to as main chip ID) is a chip ID recorded on the main control board 16 of the pachinko machine 2, and is transmitted to the payout control board 17 when the pachinko machine 2 is turned on. Information. The winning opening information is information including the type of winning opening (start winning opening, normal winning opening, large winning opening) and the number of winning balls (the number of payout balls when a game ball enters the winning opening). It is transmitted to the dispensing control board 17 when the machine 2 is turned on. The round information is information on the number of rounds when a big hit is made, and is transmitted to the payout control board 17 when the pachinko machine 2 is powered on.

  The connection confirmation signal is a signal for confirming that the main control board 16 and the payout control board 17 are connected, and a signal of a predetermined voltage is constantly supplied from the main control board 16 to the payout control board 17. The payout control board 17 is configured to control the operation on the condition that the payout control board 17 receives the predetermined voltage signal. The winning detection signal is a detection signal of a pachinko ball that has won a winning opening other than the starting winning opening. Upon receiving this detection signal, the payout control board 17 performs control to add the number of balls to be given to one winning ball to the number of game balls and the number of added balls.

  The start winning award winning information is information indicating that a pachinko ball has won a prize in any of the starting winning awards. The error information is information for notifying the payout control board 17 when an error occurs while the main control board 16 is performing game control.

  The symbol determination number of times is information on symbols determined as display results of the variable display device for winnings at each start winning opening.

  The jackpot information is information indicating that a jackpot has occurred. The breakdown includes common jackpot information indicating a jackpot common to each manufacturer and manufacturer-specific jackpot information indicating a manufacturer-specific jackpot. The common jackpot information is a jackpot commonly used by each gaming machine manufacturer, such as 15 round jackpots, and includes probability variation information when a probability change occurs with the jackpot. When the time-short state (control state for shortening the variable display time of the variable display device) occurs, the time-shortage information is included. The manufacturer-specific big hit is a big hit state that is adopted only by a certain gaming machine manufacturer, such as sudden probability change (surprise).

  A health check command and a winning ball number acceptance command are transmitted from the payout control board 17 to the main control board 16. The health check command is a command for checking whether or not the main control board 16 is operating normally. The prize ball number acceptance command is a command indicating that the additional number of balls has been accepted.

  An out ball detection signal is input from the out ball detection switch 701 to the payout control board 17. The payout control board 17 to which the out ball detection signal is input subtracts and updates the number of in-game balls (the number of floating balls floating in the game area 27) as will be described later. In the payout control board 17 to which the foul ball detection signal is input from the foul ball detection switch 33, as described later, the addition ball number and the game ball number are added and updated, and the in-game ball number is subtracted and updated. A shot detection signal is input from the shot detection switch 903 to the payout control board 17. The payout control board 17 to which the fired ball detection signal is input updates the number of in-game balls by subtraction.

  The security board 325 of the card unit 3 and the payout control board 17 of the pachinko machine 2 are electrically connected, and various commands are transmitted from the security board 325 to the payout control board 17 as described later. On the contrary, various responses are transmitted from the payout control board 17 to the security board 325 as described later.

  In addition to the payout control board 17, the front frame 6 (game frame) is provided with a relay board 14, a launch control board 31, a launch motor 18, and a game ball number display 29. The game ball number indicator 29 may be directly attached to the front frame 6, but it may be attached to the front frame 6 like an upper plate or a lower plate provided on the front side of a normal pachinko machine from which balls are paid out. You may make it provide in the aspect which can be rotated. The same applies to the display 54. The payout control unit 171 of the payout control board 17 displays the number of game balls currently owned by the player on the game ball number display 29.

  A firing control signal and a firing permission signal are output from the dispensing control board 17 to the firing control board 31. Upon receiving this, the launch control board 31 outputs a signal for exciting the launch motor 18. Thereby, the pachinko ball is in a state where it is bullet-launched into the game area 27. The firing control board 31 emits a firing motor excitation output to drive the firing motor 18 when a touch ring input signal for detecting that the player is touching the hitting ball operating handle 25 is input.

  A display 54 is provided in the front frame 6 (game frame). The display 54 receives display data (display control signal) from the display control unit 350 of the card unit 3 via the relay board 14. Further, the display unit 54 receives display data (display control signal) from the effect control board 15 via the relay board 14.

  The relay board 14 outputs a display control signal from one of the effect control board 15 and the display control unit 350 to the display 54 and outputs the display control signal to the display 54 based on the display control signal from the effect control board 15 or the display control unit 350. A switching circuit 141 for displaying an image is mounted.

  In this embodiment, the display 54 on the pachinko machine 2 side is configured to be controlled on the CU side. Instead, the display 54 is controlled to be displayed on the pachinko machine 2 side. A display control substrate may be provided. In this case, the display control board controls display of the display 54 based on a command from the payout control unit 171.

  The RAM clear switch 293 is a switch for erasing game table information and game information stored in the RAM of the P table 2, and after the P table enters an error state, the store clerk operates the switch to initialize It becomes possible to return to the state. The RAM clear switch 293 is operated by a store clerk after the card is discharged, for example.

<Pachinko ball circulation route>
Here, the circulation path of the pachinko balls in the pachinko machine 2 will be outlined with reference to FIG. 1 and FIG.

  When the player operates the hitting operation handle 25, the firing motor 18 is driven. As a result, one pachinko ball that has been supplied to the launch position is shot by the hitting hammer and the pachinko ball is driven into the game area 27.

  The detection of the play of the game ball is detected when the ball raising switch (upper) 41a is changed from on to off. This detection is detected by a port input on the payout control board 17 (see FIG. 2) on which the payout control unit 171 is provided. Based on the detection, the payout control unit 171 subtracts “1” from the number of game balls. To do.

  Out of balls that have been driven into the game area 27, the out balls that have entered the out port 154 (see FIG. 1) flow down the out ball flow path and are detected by an out ball detection switch 701 provided in the middle. . The foul balls flow down through the foul ball return path and are detected by a foul ball detection switch 33 provided in the middle of the foul ball.

  All winning balls that have won the winning opening and the variable winning ball device are collected on the back of the gaming machine and guided to the collection ball passing path. Similarly, out balls and foul balls are also guided to the collection ball passing path. A firing ball detection switch 903 is provided in the collection ball passage route. For this reason, the winning ball, the out ball, and the foul ball are all detected by the firing ball detection switch 903. That is, the fired ball detection switch 903 is a switch that detects all of the bullets that have been bulleted. When the number detected by the switch and the number of shots of the pachinko balls shot by the firing motor 18 become equal, it can be determined that all the pachinko balls that have been driven are collected.

  Therefore, in the present embodiment, the difference between the number of shots detected by the shot ball detection switch 903 and the number of bullets is calculated. When this difference is not zero, the balls that have been driven into the game area 27 have not been collected. It is determined that it is not. By making this determination, it can be determined whether the game area 27 is rolling, or whether there is a floating ball that does not fall due to being caught between nails or the like in the game area.

<Display control of touch panel>
FIG. 3 is a block diagram for explaining display control of the game ball number display 29 and the display 54. FIG. 3 shows only the main components related to the display control of the game ball number display 29 and the display unit 54 among the various configurations of the CU 3 and the P stand 2 shown in FIG.

  The main control unit 161 mounted on the main control board 16 transmits various types of game information that change with game control to the payout control part 171 of the payout control board 17. The payout control unit 171 transmits ball number information and the like to the CU control unit 323 based on the game information transmitted from the main control unit 161, and controls display of the game ball number display 29. As a result, the number of game balls currently owned by the player is displayed on the game ball number display 29, and the display of the number of game balls is subtracted and updated based on the ball launch or counting operation, The display of the number of game balls is added and updated on the basis of a ball rental operation or the like.

  The CU control unit 323 updates the game information such as the number of game balls stored by itself based on the number of balls information transmitted from the payout control unit 171. Further, the CU control unit 323 stores the remaining amount of the card and the player's possession ball, and the display control unit displays information for display based on the stored game information on the display 54 on the P table 2 side. To 350. The display control unit 350 transmits a display control signal based on the information to the relay board 14 on the P table 2 side.

  On the other hand, a display control signal from the effect control unit 151 of the effect control board 15 is also input to the relay board 14. The effect control unit 151 transmits a display control signal for display control of the variable display device 278 based on various variable display commands received from the main control unit 161 to the variable display device 278 and controls the display 54. A display control signal for transmission is also transmitted to the relay board 14.

  Usually, the display control signal is transmitted to the relay board 14 only from the display control unit 350 side of the CU 3, and the display control signal is not transmitted from the effect control unit 151. As a result, normally, the display unit 54 displays information such as points and card balance based on the display control signal from the display control unit 350 of the CU 3. However, when the effect control unit 151 detects a change in the gaming state of the gaming machine based on the command transmitted from the main control unit 161, it transmits a display control signal corresponding to the change in the gaming state to the relay board 14. .

  When the display control signal is input from the effect control unit 151, the switching circuit 141 receives the display control signal input from the effect control unit 151 instead of the display control signal input from the display control unit 350 to the display unit 54. Switch the circuit to transmit. As a result, the display 54 normally displays a score based on the display control on the CU 3 side. For example, when the game state changes due to a big hit display on the variable display device 278, the display The display of 54 is switched to one that interlocks with the display of the variable display device 278 such as a jackpot display. After that, when transmission of the display control signal from the effect control unit 151 to the relay board 14 is stopped, the switching circuit 141 returns the signal input source to the switching source. As a result, information based on the display control on the CU 3 side is displayed again on the display unit 54.

  That is, in the above example, the switching circuit 141 has a configuration in which, among the effect control unit 151 and the display control unit 350, the display control signal input from the effect control unit 151 is preferentially transmitted to the display unit 54. Since the display control signal is input to the switching circuit 141 only from the display control unit 350 in normal times, information based on the display control on the CU3 side is displayed on the display unit 54, and a switching condition such as occurrence of a big hit is established. When the display control signal is input from the effect control unit 151, the display control signal is prioritized and transmitted to the display 54, and the display on the display 54 is switched.

  However, instead of this, the switching circuit 141 adopts a configuration in which the display control signal input from the display control unit 350 is preferentially transmitted to the display unit 54 among the effect control unit 151 and the display control unit 350. Also good.

  That is, the switching circuit 141 performs an effect display that is linked to the display of the variable display device 278 on the display 54 based on a display control signal that is always received from the effect control unit 151 at a normal time, and there are few remaining game points and points. When a display control signal for displaying that fact is input from the CU 3 side when the predetermined switching condition is established, the signal input source is switched from the effect control unit 151 to the display control unit 359, whereby the display 54 However, the game effect screen may change to a screen for notifying that there are few game points or points remaining.

  In the present embodiment, the display control of the game ball number display 29 for displaying the number of game balls is not performed by the CU 3 but by the P stand 2 directly related to the fluctuation of the game ball number. When used and subtracted or added by game, the updated number of game balls can be immediately reflected on the game ball number display 29.

  If the display control of the game ball number display 29 is performed by the CU 3, from the CU 3 to the game ball number display 29 based on the information on the number of game balls transmitted from the P stand 2 to the CU 3. A display control signal is sent. However, in this case, the number of game balls actually changes depending on the communication status between the CU 3 and the P stand 2, but the change is displayed on the game ball number display 29. There is a risk of inconvenience that it will not be reflected immediately. According to the present embodiment, such inconvenience can be prevented.

  On the other hand, since the display 54 controls the display on the CU3 side, the display control of the P stand 2 is compared with the case where the P stand 2 that controls the display of the game ball number display 29 further controls the display 54. The burden can be reduced.

  Here, a specific example of switching the display of the display unit 54 will be given. For example, during normal times, the remaining amount of the card is displayed on the display (touch panel) 54 based on the display control of the display control unit 350 of the CU 3, and the display on the display 54 can be changed according to the change in the gaming state such as a big hit. An example can be given in which the display is switched to one linked to the display of the display device 278.

  Alternatively, the display (touch panel) 54 normally displays in conjunction with the display of the variable display device 278 (based on the display control of the effect control unit 151), and game points are displayed on the display 54 according to the decrease in game points. The example which displays the image which alert | reports that there are few remaining can be given.

  In addition, when the display device 54 performs a display operation with a display control signal transmitted from the effect control unit 151 to the relay board 14, the relay board 14 simply relays the signal transmitted from the effect control unit 151 and displays it as it is. It suffices to have a function of transmitting to the device 54. On the other hand, there may be a case where the signal form of the display control signal for causing the display device 54 to perform display operation and the signal form of the display control signal transmitted from the effect control unit 151 are different. In addition to the switching circuit 141, the relay substrate 14 may be provided with a conversion circuit that converts the signal form.

  Further, when the switching condition is established, the display image displayed on the display unit 54 by the display control signal transmitted from the effect control unit 151 and the display control signal transmitted from the effect control unit 151 are displayed on the variable display device 278. The images may be the same or different. If they are different, it is necessary to store two types of image data, that is, image data for the variable display device 278 and image data for the display 54 in the effect control unit 151.

  The game ball number display 29 may be configured to be controlled by the main control unit 161, or the effect control unit 151 transmits a command related to the number of game balls from the main control unit 161 to the effect control unit 151. It is good also as a structure which controls display.

  As described above, according to the present embodiment described above, since the display information of the P table 2 can display the effect information related to the variable display, it is possible to provide a game with a high effect in effect together with the variable display device 278. In addition, when a condition for displaying game information sent from the CU 3 side is established on the display unit 54, display control for displaying the game information on the display unit 54 is executed by the CU 3, so the condition is established. In this case, the display 54 can be used not only for game effects but also for display of game information by the CU 3, and the display control burden of the P table 2 accompanying display of game information can be reduced.

<Notification processing of abnormality that occurred in card unit and pachinko machine>
FIG. 4 is an explanatory diagram for explaining notification processing when an abnormality is detected as a result of mutual authentication.

  Referring to FIG. 4, when an abnormality occurs in CU control unit 323, security board 325, payout control unit 171, or main control board 16, notification is given in the direction indicated by the arrow in FIG. 4. For the abnormality mentioned here, the CU control unit 323, the security board 325, the payout control unit 171, or the main control board 16 is replaced with another illegally manufactured product, or malfunction or failure occurs due to noise or the like. Or offline status due to disconnection or the like. The key management server 800 shown in FIG. 4 manages a key that stores the SID and authentication key of the CU control unit 323 in association with each serial ID (also referred to as SID) of the electronic component in the card unit 3. It is a server. The key management server 800 is a server that can communicate with the main control board 16. Key management server 800 is communicably connected to hall servers 801 of a plurality of halls nationwide.

  First, when an abnormality occurs in the security substrate 325 of the card unit 3, the CU control unit 323 detects an abnormality as a result of the mutual authentication performed between the CU control unit 323 and the security substrate 325 described above. This mutual authentication includes authentication by a session key in addition to serial ID authentication and board authentication key authentication described later.

  The serial ID is a serial ID (substrate serial ID) of the security board 325, and is stored in the ROM of the SC 325b when the SC 325b of the security board 325 is manufactured. Further, when the CU 3 is brought into the amusement hall and connected to the hall server 801, the board serial ID is downloaded from the key management server 800 of the key management center via the hall server 801 and stored in the CU control unit 323. The

  When the CU control unit 323 detects an abnormality in the security board 325, the CU control unit 323 notifies the hall server 801 to that effect and transmits an abnormality notification command to the display control unit 350 of the card unit 3. The CU control unit 323 controls the display 312 to display that an abnormality has occurred and causes the display control unit 350 to perform an abnormality notification by lighting or blinking an abnormality notification lamp (not shown). Further, the CU control unit 323 transmits a signal indicating that an abnormality has occurred from the external communication unit to the hall management computer.

  When an abnormality occurs in the CU control unit 323 of the card unit 3, the security board 325 detects the occurrence of the abnormality by the above-described mutual authentication, and notifies the payout control unit 171 of a signal (abnormality notification signal) indicating that fact. . In response, the payout control unit 171 notifies the main control board 16 that an abnormality has occurred. As described above, the main control board 16 performs control to operate the abnormality notification lamp and transmits a signal indicating that an abnormality has occurred to the hall management computer.

  When the security board 325 detects an abnormality of the payout control unit 171, the CU control unit 323 is notified of this, and the CU control unit 323 notifies the hall server 801 accordingly.

  As described above, when the security board 325 detects an abnormality of the CU control unit 323, the security board 325 notifies the payout control unit 171 of the fact. When detecting an abnormality of the payout control unit 171, the security board 325 notifies the CU control unit 323 of the fact. The notification destination of abnormality occurrence by the security board 325 is different. The reason for this is that even if the control unit in which an abnormality has occurred is notified that an abnormality has occurred, no abnormality notification control is performed and no abnormality prevention measure is provided. In addition, the security board 325 has a communication control function but does not have an abnormality notification control function. Therefore, the abnormality notification cannot be controlled by itself, and for this reason, notification is made that an abnormality has occurred in the direction of the control unit opposite to the control unit where the abnormality has occurred. The payout control unit 171 that has received the notification of the occurrence of the abnormality from the security board 325 notifies the main control board 16 to that effect. Upon receiving the notification, the main control board 16 performs the same control for abnormality notification as described above.

  When an abnormality occurs in the payout control unit 171, the security board 325 detects that fact and notifies the CU control unit 323 that the abnormality has occurred. The CU control unit 323 performs the above-described abnormality notification control. The hall server 801 is notified that an abnormality has occurred. When an abnormality occurs in the payout control unit 171, it is detected that an abnormality has occurred in the main control board 16, and upon receiving the notification, the above-described abnormality notification control is performed.

  As described above, the payout control board 17 detects and notifies the abnormality to the main control board 16 when an abnormality occurs in the security board 325, while notifies the abnormality to the main control board 16. It detects and notifies the security board 325 that an abnormality has occurred. As with the security board 325 described above, the payout control board 17 is also controlled for anomaly notification even when a notice is given to the control unit in which an abnormality has occurred when it is detected that an abnormality has occurred. Therefore, a notification is sent to the control unit or control board on the opposite side of the control unit where the abnormality has occurred. The security board 325 and the payout control board 17 are not connected to an abnormality notification means such as an abnormality notification lamp or an abnormality notification display, and have a function of performing abnormality notification control themselves even when an abnormality is detected. Absent. In the above description, the security board 325 and the payout control board 17 are not connected to an abnormality notification means such as an abnormality notification lamp or an abnormality notification display, and perform abnormality notification control themselves even when an abnormality is detected. Although described as having no function, the security board 325 and the payout control board 17 may be provided with an abnormality notification function to directly notify that an abnormality has occurred.

<Encryption key used for communication between key management server and communication control IC>
Next, an encryption key used for communication between the key management server and the communication control IC will be described. FIG. 5 is a diagram for explaining an encryption key used for communication from the key management server to the communication control IC 325a. First, encryption keys used for communication between the key management server and the communication control IC 325a mainly include a board shipment key, a board initial key, a board authentication key, a main authentication key, a temporary authentication key, and an effective key (commercial). , Communication key 1 (session key) and communication key 2 (session key).

  The board shipment key is used for communication between the CU control unit and the SC, and is used only for encryption of a communication test message before shipment. The board initial key is used for communication between the CU control unit and the SC, and is received by the CU control unit 323 at the first communication with the hall server 801 and stored in the RAM of the CU control unit 323. The SC 325b generates a substrate initial key from the embedded information at the time of manufacture and stores it in the RAM. Authentication communication (substrate initial key mode) using the substrate initial key is permitted (timed operation) only for a limited period. Here, in the board initial key mode, as described above, it is necessary to communicate normally with the hall server 801 at least once to acquire the board initial key, and thus security is ensured.

  Here, the “limited period” is a limited period of two days, for example. In this way, by enabling timed operation, even if the key cannot be exchanged with the key management server immediately after the system is installed in the hall, the hall will start operating immediately after the system is installed. It becomes possible. In addition, as a limited period, you may set the period defined in one day, for example to every morning from 9:00 to 17:00.

  The above-described board initial key mode has a restriction that enables authentication communication using the board initial key for a limited period of time, but the present invention is not limited to this, and the amount of money that can be used ( Card balance or cash) may be limited. Alternatively, when the number of symbol variations in the variable display device reaches a certain number, the game may be forcibly terminated and the gaming machine may be controlled to be disabled. Alternatively, when the cumulative number of jackpots reaches a certain number, the game may be forcibly terminated and the gaming machine may be controlled to be disabled. In addition, it may be possible to allow only a game by inserting cash and prevent a game using the remaining card amount, or to limit the game to a game using a holding ball.

  The board authentication key is an encryption key that is used for communication between the CU control unit and the SC and is received as part of the board security information from the key management server. By performing authentication communication using the board authentication key, the communication mode (board authentication key mode) is switched from the timed operation using the board initial key to the permanent operation (normal operation). This board authentication key is stored in the RAM of the CU control unit and the RAM of the SC.

  In both the timed operation using the board initial key and the permanent operation using the board authentication key, the CU control unit 323 receives the effective key stored in the hall server 801, and the SC 325b controls the communication of the effective key. By setting the IC 325a, communication between the P platform and the CU can be realized.

  This authentication key is used for communication between the SC and the communication control IC, is generated by the SC 325b from the update information received from the key management server, and is stored in the RAM of the SC 325b. The communication control IC 325a is also similar to the SC 325b. Are generated from the update information and stored in the RAM of the communication control IC 325a. Note that this authentication key may be acquired from a key management server or the like. Further, the CU control unit 323 and the communication control IC 325a may generate themselves without receiving update information from a key management server or the like. In addition, the CU control unit 323 and the communication control IC 325a themselves generate predetermined second data by acquiring predetermined first data from a key management server or the like, and this authentication key is obtained from the first data and the second data. You may make it produce | generate.

  The temporary authentication key is used for communication between the SC and the communication control IC, and until the authentication key is generated (or until a set allowable time (for example, two days) elapses), the SC 325b and Used for encryption communication with the communication control IC 325a. The encrypted communication using the temporary authentication key (temporary authentication key mode) is allowed (timed operation) only for a limited period (eg, 2 days). SC 325b and communication control IC 325a store temporary authentication keys in their respective ROMs from the manufacturing stage. The valid key (commercial) is a key that is received by the SC 325b via the CU control unit 323 during the initial communication with the hall server 801 and transmitted (set) to the communication control IC 325a. Communication with P devices becomes possible by setting the effective key. The valid key is data for activating the communication control IC 325a. In other words, the valid key is permission information for permitting communication between the CU and the P platform.

  The communication key 1 (session key) is used for communication between the CU control unit and the SC, is used for business message communication for gaming machines, and is created every business day by the SC 325b using some variable. For example, a counter value (random number) or date / time information may be used as the variable. The communication key 2 (session key) is used for communication between the SC and the communication control IC, and is used for business message communication for gaming machines.

  Note that even if the key described above has a configuration in which the key data is embedded in each part as it is, the information for generating the key data is stored in each part. The key data may be generated by using the key.

  Next, a method for acquiring an encryption key and a method for performing encrypted communication using the acquired encryption key will be described. First, the SC 325b acquires an effective key via the CU control unit 323 at the time of initial communication with the hall server 801. The SC 325b transmits (sets) the acquired effective key to the communication control IC 325a, thereby enabling communication with the P units. The CU control unit 323 receives the board initial key during the first communication with the hall server 801 and stores it in the RAM of the CU control unit 323. The storage area in the RAM of the CU control unit 323 constitutes a key storage area for storing keys. The SC 325b generates a substrate initial key from the embedded information at the time of manufacture and stores it in the RAM. The storage area in the RAM of the SC 325b constitutes a key storage area for storing keys. The SC 325b performs cryptographic authentication with the CU control unit 323 using the acquired substrate initial key, and performs cryptographic communication with the CU control unit 323 in a timely manner using the substrate initial key.

  In addition, the hall server 801 that has received the connection request sent from the CU control unit 323 when the power is turned on returns a unified store code for identifying the game arcade where the hall server 801 is installed to the CU control unit 323. To do. Specifically, the unified store code is transmitted from the input / output interface of the hall server 801 to the CU control unit 323 under the control of the CPU of the hall server 801.

  On the other hand, authentication is performed between the CU control unit 323 and the SC 325b using the board manufacturer code stored as initial information in both. The board manufacturer code is a code that identifies the manufacturer that manufactured the security board 325. A board connection request and a board connection response are exchanged on the condition that the authentication using the board manufacturer code is successful (see FIG. 52). The unified store code is included in the board connection request transmitted from the CU control unit 323 to the SC 325b, and the SC 325b acquires the unified store code by receiving the board connection request.

  Next, the CU control unit 323 requests the board security information from the key management server and receives the board security information transmitted from the key management server via the hall server 801, so that the board security information is included in the board security information. Get the board authentication key. The CU control unit performs cryptographic authentication with the SC using the acquired board authentication key, and performs cryptographic communication with the SC using the board authentication key. Note that the CU control unit 323 does not change the key from the board initial key to the board authentication key immediately after obtaining the board authentication key, but on condition that the gaming machine is in a non-operating state as described later. Change the key.

  The board authentication key may be generated by the CU control unit 323 itself instead of being acquired from the key management server or the like, and the CU control unit 323 itself acquires predetermined first data from the key management server or the like. Predetermined second data may be generated, and a board authentication key may be generated from the first data and the second data.

  Next, SC 325b performs cryptographic communication with communication control IC 325a using the stored temporary authentication key. Then, the SC decrypts the update information acquired from the key management server by performing cryptographic communication with the CU control unit using the board authentication key, and inquires about the board inquiry number. If the inquiry board inquiry number matches, the SC generates a main authentication key from the update information and performs cryptographic communication with the communication control IC 325a using the generated main authentication key. The authentication key is not stored in the communication control IC 325a from the time of shipment, and is generated from the update information in the same manner as the SC 325b.

  Next, the SC notifies the CU control unit of the communication key 1 and performs communication with the CU control unit using the communication key 1 to enable business message communication with the gaming machine. Become. In addition, the SC receives a notification of the communication key 2 from the communication control IC by setting an effective key for the communication control IC, and performs subsequent communication with the communication control IC using the communication key 2. Thus, business message communication with a gaming machine becomes possible.

<Transmission / reception mode between card unit side and pachinko machine side>
Next, FIG. 6 is a schematic diagram showing main data among various data stored on the card unit 3 side and the pachinko machine 2 side, and its transmission / reception mode. With reference to FIG. 6, main ones of various data stored on the card unit 3 side (CU side) and the pachinko machine 2 side (P base side) and transmission / reception modes thereof will be described.

  In the present embodiment, the fluctuation of the number of game balls is calculated on the P stand 2 side, and the current latest game ball number is stored and managed. The current number of game balls is also calculated and stored on the CU 3 side, but the number of game balls is based on information transmitted from the P stand 2 side. On the other hand, the CU3 side manages and stores the number of possessed balls (the number of cards possessed), the number of stored balls, and the remaining card amount (remaining amount).

  FIG. 6 shows RAM storage data provided in the CU control unit 323 on the CU 3 side and RAM storage data mounted on the payout control board 17 on the P base 2 side. First, when the power supply is turned on for the first time when the P stand 2 (pachinko machine 2) and the CU 3 (card unit 3) are electrically connected for the first time after being installed in the game hall, the payout control board on the P stand 2 side. 17 has a main chip ID (main control chip ID) transmitted from the main control board 16, transmits the main chip ID to the CU3 side, and also issues a payout chip ID (payout) stored in the payout control board 17 itself. Control chip ID) is transmitted to the CU3 side.

  On the CU3 side, the transmitted main chip ID and payout chip ID are stored. Next, data of the connection time, that is, the time at which communication is started after the CU 3 side and the P base 2 side are connected is transmitted from the CU 3 side to the P base 2 side, and the transmitted connection time is transmitted on the P base 2 side. Remember.

  In this state, three pieces of information of the main chip ID, the payout chip ID, and the connection time identified on the CU3 side are stored on the CU3 side and the P stand 2 side. When the power is turned on thereafter, the three pieces of information, that is, the main chip ID, the payout chip ID, and the previous connection time data are transmitted from the P stand 2 side to the CU 3 side.

  On the CU 3 side, the transmitted data is collated with the data already stored, and it is determined whether or not the same P base 2 is connected as in the previous time. As for the connection time data, every time the power is turned on, new connection time data in which communication between the CU 3 side and the P base 2 side is started is transmitted from the CU 3 side to the P base 2 side. Time data is stored on the P table 2 side.

  Both the CU and the P platform transmit the “sequential number” added to the message. Further, both the CU and the P platform store the “serial number” received from the other party. There are three types of “serial number”: “normal serial number”, “additional serial number”, and “counting serial number”. “Normal sequence number” indicates the sequence number of the message. “Normal serial number” is transmitted by counting up (+1) the serial number received at the time of transmission on the CU3 side (primary station side) with an initial value “1”. However, the “normal serial number” is not counted up at the time of retransmission. P station 2 side (secondary station side) transmits the received serial number as it is. Note that there is no response if the serial number continuity is not established. The “additional serial number” is a serial number used when the CU 3 requests the P unit 2 to add game balls. The “counting serial number” is a serial number used when the P stand 2 requests the CU 3 to count game balls.

  Only the CU3 has the right to update the normal serial number. When the normal serial number that is the same as the transmitted normal serial number is returned, the CU 3 backs up and stores the normal serial number and transmits the updated normal serial number. Only the CU3 has the addition update right of the addition serial number. When the addition request is made, the CU 3 transmits an addition sequence number added to the addition sequence number that has been used for communication until then to the P unit 2. The P platform 2 returns the same addition serial number when accepting the request. When rejecting the request, the previously received addition sequence number (the addition sequence number received this time-1) is returned. Only the P-unit 2 has the counting update number addition update right. When making a request for counting, the P platform 2 transmits to the CU 3 a counting sequence number that is +1 to the counting sequence number that has been used for communication. When CU3 accepts the request, it returns the same counting sequence number. When rejecting the request, the received counting sequence number (counting sequence number-1 received this time) is returned.

  In the following, with regard to “normal serial number”, a configuration will be described in which the serial number received by the CU 3 at the time of transmission is counted up (+1) and transmitted. However, the present invention is not limited to this configuration. Each of the P base 2 and the CU 3 or the serial number received by the P base 2 at the time of transmission is counted up (+1), and the other is the received serial number. May be transmitted as it is.

  The “addition serial number” and “counting serial number” are special serial numbers that are counted up in the addition request processing and the count request processing, respectively. Hereinafter, a description will be given of a configuration in which “normal serial number” is also counted up when the “additional serial number” and “counting serial number” are counted up. However, the present invention is not limited to this configuration, and may be configured to stop the “normal sequence number” from being counted up when the “additional sequence number” and the “counting sequence number” are counted up. In the following, “normal serial number” is simply referred to as “serial number”. The “additional sequence number” and “counting sequence number” are also collectively referred to as “request sequence number”.

  The latest game machine information (game machine information being counted) is transmitted from the P machine 2 side to the CU 3 side. This latest game table information is stored in the latest game table information storage area of the RAM of the payout control unit 171 (see FIG. 2) on the P table 2 side. Specifically, information on the added ball number counter, information on the subtracted ball number counter, and information on the counted ball number counter are included. The number of game balls is not included in the latest game table information, and is transmitted from the P table 2 side to the CU 3 side as the count value of the game ball number counter as will be described later. However, instead of this, or in addition to the game ball counter, the number of game balls may be included in the latest game table information.

  Information on these counters is collectively transmitted to the CU side as a response. The added ball number counter is a counter that counts the added ball number. The added ball is the sum of “the number of winning balls × the number of winning balls” and “the number of back balls”. The back ball is a foul ball. That is, the addition ball indicates the number that the addition ball counter should add to the game ball. The subtraction ball number counter is a counter that counts the number of subtraction balls. The subtraction ball is the “number of fired balls”. That is, the number of balls detected by the output change from on to off of the ball raising switch (upper) 41a. Note that the “number of balls to be subtracted” does not include the “number of balls to be counted”. The counting ball counter is a counter that counts the counting balls. The counting ball is “the number of balls converted from game balls to holding balls by the counting operation”. Here, the “prize ball” is a ball that is paid out when a ball wins a winning opening, and is a safe ball. The “fired ball” is a ball fired by the gaming machine. When there is a back ball, the number of balls obtained by subtracting the back ball is the number of fired balls. The “back ball” is a ball in which the fired ball returns without jumping onto the board surface. The “out mouth passing ball” is a ball that has passed through the out mouth 154, and the total number of balls of the out ball and the safe ball means the number of balls passing through the out mouth.

  For example, when a pachinko ball that has been placed in the game area 27 wins and the winning information is transmitted from the main control board 16 to the payout control board 17, an additional ball to which a gaming ball is added based on the winning information. The added ball number counter counts the number, and the value of the added ball number counter (added ball number) is transmitted from the P stand 2 side to the CU 3 side. Also, the subtraction ball counter counts the number of shot balls as the number of subtraction balls based on the output change from on to off of the ball raising switch (upper) 41a due to the pachinko ball being shot in the game area 27, The value of the subtraction ball number counter (subtraction ball number) is transmitted from the P stand 2 side to the CU3 side.

  Alternatively, the payout control unit 171 counts the number of gaming balls as the number of counting balls by pressing the counting button 28, and transmits the value of the counting ball number counter (counting number of balls) from the P stand 2 side to the CU3 side.

  On the P-unit 2 side, each time the values of the addition ball counter, the subtraction ball counter, and the counting ball counter are transmitted to the CU 3 side, the count values are stored in the previous gaming machine information storage area (the RAM of the payout control unit 171). Etc.) are stored (rewritten) as backup data, and the values of the added ball counter, subtracted ball counter, and counted ball counter as the latest game table information are cleared to 0 (excluding the game ball counter). In the present embodiment, “clear” has the same meaning as “initialization”.

  As a result, the game table information transmitted to the CU 3 side immediately before is added to the storage area of the previous game table information (game table information transmitted immediately before). Stored as data. When the latest game machine information is not transmitted from the P machine 2 side to the CU 3 side, the backup data includes not only the value of each counter at the time of the next transmission but also the value of each counter of the previous time that was not transmitted. It is intended to enable transmission. You may make it memorize | store by adding the number of game balls transmitted immediately before to this last game machine information.

  Further, the payout control board 17 updates the value of the game ball counter in response to the occurrence of a prize, the firing of a ball, the occurrence of a back ball, and the occurrence of a counting ball (conversion from a game ball to a holding ball), The updated value of the game ball counter is transmitted to the CU 3 side as the number of game balls.

  On the CU3 side, the number of game balls, the number of cards held (simply referred to as the number of balls), the number of balls stored, the remaining amount, the total number of added balls (total number of added balls), total subtraction are stored in the cumulative data storage area in the RAM. The number of balls (the total number of subtracted balls) and the number of balls at the time of card insertion are stored. The number of cards possessed is the number of balls obtained by subtracting the number of possessed balls paid out (the number of balls converted from the number of cards possessed to the number of game balls) from the number of balls possessed when the card is inserted, and adding the counted number of balls. That is, the card possession number is the number of possession possessed by the player at the present time.

  The total number of added balls is added based on the value (number of added balls) of the added ball counter transmitted from the P stand 2 side to update the number of balls. Further, the number of balls is updated by subtracting the total number of subtraction balls based on the value of the subtraction ball counter (the number of subtraction balls) transmitted from the P stand 2 side. Further, based on the value of the counting ball number counter transmitted from the P stand 2, the number of card holding balls is added and updated. In this way, the CU 3 can manage the latest information by updating the total added ball number, the total subtracted ball number, and the card holding ball number with the latest game table information transmitted from the P table 2 one by one. It becomes possible.

  As shown in the figure, the CU 3 has an area for storing game balls, and also receives a count value of a game ball number counter (also referred to as game ball number or game ball total number information) from the P stand 2 side. CU3 updates the area for storing game balls in the following procedure. That is, the CU 3 stores the value based on the value of the added ball number counter (added ball number), the value of the subtracted ball number counter (subtracted ball number), and the value of the counted ball number counter transmitted from the P side. The number of game balls being updated is updated, and it is determined whether or not the count value of the game ball counter transmitted from the P platform side at the same timing matches the updated number of game balls. If they match, the game is allowed to continue, but if they do not match, control to shift to an error state is performed.

  As a result, for example, an error notification lamp or indicator 312 is used to notify an error, or an error notification signal indicating that an error has occurred is transmitted to the hall management computer or hall server 801 (in this case, hall management). An error notification may be performed by a computer or hall server 801). As a result, a predetermined notification that prompts an artificial response by a staff member is performed.

  Instead of shifting to an error state and stopping the game, the number of game balls stored on the CU 3 side may be replaced with the count value of the game ball counter transmitted from the P unit 2 side. Good. Alternatively, it may be corrected to an average value of the number of game balls managed on the CU 3 side and the number of game balls stored on the P stand 2 side.

  As described above, in this embodiment, the number of game balls is also stored on the CU 3 side, but it is determined whether or not the number of game balls matches the number of game balls managed and stored on the P-unit 2 side. (CU3 side function). Therefore, even if a situation occurs in which the number of game balls stored on the P stand 2 side does not match the number of game balls stored on the CU 3 side due to fraud or other circumstances, it can be checked. Here, the determination function is provided on the CU3 side. For example, the number of game balls stored on the CU3 side and the Pball 2 side are stored by the hall server 801 or the hall management computer connected to the CU3. The number of game balls being played may be received, and it may be determined whether or not the two match.

  As shown in FIG. 6, the CU 3 stores a storage area for storing the number of cards held and the number of stored balls, a storage area for storing the remaining card amount of the received (inserted) card, and the total number of added balls (the number of added balls). (Cumulative total), the total number of subtracted balls (total number of subtracted balls), and a storage area for storing balls when the card is inserted. The CU control unit 323 (see FIG. 2) stores a stored ball in response to an input requesting the use of the stored ball (for example, a press input of the replay button 319 provided in the CU 3 (when there is no holding ball)). Subtract a certain number of balls from the area.

  The CU control unit 323 (see FIG. 2) is an input requesting the use of the holding ball (for example, pressing input of the replay button 319 provided on the CU 3 when the holding ball is present (however, when the holding ball is present)) Accordingly, a predetermined number of balls are subtracted from the storage area for storing balls. Further, the CU control unit 323 (see FIG. 2) subtracts a predetermined value from the storage area for storing the card remaining amount in response to an input requesting use of the card remaining amount (for example, pressing input of the ball lending button 321).

  When a player performs an operation to deduct the value from the player's own gaming value (for example, the prepaid balance, the number of balls, or the number of balls) and use it for the game, the number of balls that are deducted is the number of balls The number of balls to be added to the counter is transmitted from the CU 3 side to the P stand 2 side. In response to this, the P stand 2 side adds and updates the game ball counter.

  In the gaming system according to the present embodiment, on the other hand, it is possible to accept a so-called wagon service order in which the gaming value owned by the player is withdrawn and exchanged for a drink or the like. However, access to wagon services with game balls is restricted, and wagon services can only be received with holding balls. This is an image in which, in a conventional encapsulated pachinko machine in which each counter is provided, it is prohibited to grab a ball before counting remaining on a plate by hand and use it for a wagon service.

  For this reason, in this embodiment, when the operation for performing the wagon service is executed, if the number of balls is less than the number corresponding to the desired menu of the wagon service, the player is prompted to perform the counting operation. Has been. When the player performs a counting operation at that time, the number of counting balls based on the operation is transmitted from the P stand 2 side to the CU 3 side. In response to this, the CU3 side subtracts the number of game balls and adds and updates the number of card possessions.

<Frame configuration used in communication (between CU control unit and SC)>
Next, communication between the CU control unit 323 and the SC 325b according to the present embodiment will be described in detail. The message used in the communication is composed of a frame having a predetermined format. Transmission data (message) is always transmitted in units of one frame. That is, the divided transmission of the message is not performed. Moreover, when transmitting a message | telegram continuously, the space | interval of 1 millisecond or more is opened.

  In the message frame exchanged between the CU control unit 323 and the SC 325b, the data length of the transmission data, the serial number, the command code indicating the message type, the data part storing the business message data, and the MAC (Message Authentication Code) And CRC (Cyclic Redundancy Check). MAC is a message authentication code, and its target range is a data part. MAC is added only at the time of encryption.

<Commands and responses sent and received between the CU control unit and the SC>
Next, an outline of commands and responses transmitted / received between the CU control unit 323 and the SC 325b will be described. When the CU control unit 323 transmits a message to the SC 325b, the SC 325b transmits a message that responds to the message. For this reason, the message transmitted from the CU control unit 323 to the SC 325b is a command, and the message in the reverse direction is a response. Both the command and response messages contain serial number and message name data. The serial number is a sequence number and is a value from 1 to 255 (cyclic). The SC 325b counts up (+1) and transmits the serial number received at the time of transmission. However, the serial number is not counted up at the time of retransmission.

<< 1. 1. Board connection request Substrate connection response >>
A command named board connection request is transmitted from the CU control unit 323 to the SC 325b. This board connection request command is for requesting connection to the gaming machine (P 2) to SC 325b (notifying card unit information and requesting connection). Specific data of this board connection request includes a serial number, a command, a unified store code, a machine number, and current time data. A response named “substrate connection response” is transmitted from the SC 325 b to the CU control unit 323. This response to the board connection response is for notifying the CU control unit 323 of a response to the board connection request (notifying the connection result). The timeout of the board connection response is 3 seconds.

<< 3. 3. Substrate shipping key request Board shipment key response >>
A board shipment key request command is transmitted from the CU control unit 323 to the SC 325b. This board shipment key request command requests the board 325b for the security board from the SC 325b. A response of the board shipment key response is transmitted from the SC 325b to the CU control unit 323. The response of the board shipping key response is to notify the CU control unit 323 of the board shipping key, and includes a board shipping key and a board shipping MAC key.

<< 5. Substrate manufacturer code authentication request 1, 6. Board manufacturer code authentication response 1 >>
A board manufacturer code authentication request 1 command is transmitted from the CU control unit 323 to the SC 325b. The board manufacturer code is a code that identifies the manufacturer that manufactured the security board 325, and is stored in the CU control unit 323 and the SC 325b. The board manufacturer code authentication request 1 command requests the SC 325b to authenticate the board manufacturer code. A response of the board manufacturer code authentication response 1 is transmitted from the SC 325 b to the CU control unit 323. The response of the board manufacturer code authentication response 1 is a response to the board manufacturer code authentication information to the CU control unit 323 and includes a challenge code (random number on the verification side).

<< 7. Substrate manufacturer code authentication request 2,8. Substrate manufacturer code authentication response 2 >>
A board manufacturer code authentication request 2 command is transmitted from the CU control unit 323 to the SC 325b. The board manufacturer code authentication request 2 command requests the board 325 to authenticate the board manufacturer code, and includes a response code (response calculation result) and response calculation data (random number used for response calculation). .

  A response of the board manufacturer code authentication response 2 is transmitted from the SC 325 b to the CU control unit 323. The response of this board manufacturer code authentication response 2 is to notify the CU control unit 323 of the response code check result, and includes the authentication result and authentication log information (confidential information).

<< 9. Substrate serial ID authentication request 1, 10. Substrate serial ID authentication response 1 >>
A command of the board serial ID authentication request 1 is transmitted from the CU control unit 323 to the SC 325b. This command of the board serial ID authentication request 1 requests the SC 325b to authenticate the board serial ID. A response of the board serial ID authentication response 1 is transmitted from the SC 325 b to the CU control unit 323. The response of the board serial ID authentication response 1 is a response of board serial ID authentication information to the CU control unit 323, and includes a challenge code (random number value on the verification side).

<< 11. Substrate serial ID authentication request 2,12. Substrate serial ID authentication response 2 >>
A command of the board serial ID authentication request 2 is transmitted from the CU control unit 323 to the SC 325b. This board serial ID authentication request 2 command requests the board 325 ID for authentication to the SC 325b, and includes a response code (response calculation result) and response calculation data (random value used for response calculation). It is.

  A response of the board serial ID authentication response 2 is transmitted from the SC 325 b to the CU control unit 323. The response of the board serial ID authentication response 2 notifies the CU control unit 323 of the check result of the response code, and includes an authentication result and authentication log information (confidential information).

<< 13. Substrate initial key authentication request 1, 14. Substrate initial key authentication response 1 >>
The command of the board initial key authentication request 1 is transmitted from the CU control unit 323 to the SC 325b. The board initial key authentication request 1 command requests the SC 325b to authenticate the board initial key. The response of the board initial key authentication response 1 is transmitted from the SC 325b to the CU control unit 323. The response of the board initial key authentication response 1 notifies the CU control unit 323 of authentication information.

  The specific data of the board initial key authentication response 1 includes authentication information and random number data. The authentication information is a random number A. The random number is a padding character for encryption. The padding character for encryption is to add a padding character for encryption with a predetermined data length to the message (plaintext) so that the message (plaintext) to be encrypted can be encrypted with an encryption key with a data length of 16 bytes. This is to match the data length of the encryption key. MAC is a message authentication code. For example, a value obtained by calculating the generated random number A using a predetermined hash function is defined as MAC. That is, the message digest of the generated random number A becomes the MAC. In the communication of the board initial key authentication response 1, a board initial key, board authentication key, or board shipping key (hereinafter referred to as board initial key / authentication key / shipment) will be described in a first security mode (hereinafter referred to as SE1 mode) described later. A ciphertext encrypted using a key is transmitted.

<< 15. Substrate initial key authentication request 2, 16. Substrate initial key authentication response 2 >>
The command of the board initial key authentication request 2 is transmitted from the CU control unit 323 to the SC 325b. The command of the board initial key authentication request 2 requests the SC 325b for the board initial key authentication result and the authentication information, and includes the authentication result, the authentication information (random number B), and the random number (encryption padding character). It is.

  A response of the board initial key authentication response 2 is transmitted from the SC 325 b to the CU control unit 323. This response of the board initial key authentication response 2 notifies the CU control unit 323 of the authentication result of the board initial key, and the authentication result, the authentication log information (confidential information), and the random number (padding character for encryption) are included. included.

<< 17. Substrate authentication key authentication request 1, 18. Board authentication key authentication response 1 >>
The command of the board authentication key authentication request 1 is transmitted from the CU control unit 323 to the SC 325b. The command of the board authentication key authentication request 1 requests the SC 325b to authenticate the board authentication key. The response of the board authentication key authentication response 1 is transmitted from the SC 325b to the CU control unit 323. The response of the board authentication key authentication response 1 notifies the CU control unit 323 of the authentication result of the board authentication key, and includes authentication information (random number A) and a random number (encryption padding character).

<< 19. Substrate authentication key authentication request 2, 20. Substrate authentication key authentication response 2 >>
The command of the board authentication key authentication request 2 is transmitted from the CU control unit 323 to the SC 325b. The command of the board authentication key authentication request 2 notifies the SC 325b of the authentication result of the board authentication key and the authentication information, and includes the authentication result, the authentication information (random number B), and a random number (encryption padding character). It is.

  A response of the board authentication key authentication response 2 is transmitted from the SC 325 b to the CU control unit 323. The response of the board authentication key authentication response 2 is to notify the CU control unit 323 of the authentication result of the board authentication key, and the authentication result, the authentication log information (confidential information), and the random number (padding character for encryption) are stored. included.

<< 21. Substrate shipping key authentication request 1, 22. Substrate shipping key authentication response 1 >>
A command of board shipment key authentication request 1 is transmitted from the CU control unit 323 to the SC 325b. This board shipment key authentication request 1 command is for requesting board shipping key authentication information to the SC 325b. The response of the board authentication key authentication response 1 is transmitted from the SC 325b to the CU control unit 323. The response of the board shipping key authentication response 1 is to notify the CU control unit 323 of board shipping key authentication information, and includes authentication information (random number A) and random numbers (encryption padding characters).
The

<< 23. Substrate shipping key authentication request 2, 24. Board shipping key authentication response 2 >>
A command of board shipment key authentication request 2 is transmitted from the CU control unit 323 to the SC 325b. The command of the board shipping key authentication request 2 is to notify the SC 325b of the board shipping key authentication result and the authentication information, and includes the authentication result, the authentication information (random number B), and the random number (encryption padding character). It is. A response of the board shipping key authentication response 2 is transmitted from the SC 325b to the CU control unit 323. The response of the board shipping key authentication response 2 is to notify the CU control unit 323 of the authentication result of the board shipping key, and the authentication result, the authentication log information (confidential information), and the random number (padding character for encryption) are included. included.

<< 25. Substrate version information notification, 26. Substrate version information response >>
A board version information notification command is transmitted from the CU control unit 323 to the SC 325b. This board version information notification command notifies the board 325b of the board authentication key version, and includes a board version (board authentication key version) and a random number (padding characters). A response of the board version information response is transmitted from the SC 325 b to the CU control unit 323. This response of the board version information response notifies the CU control unit 323 that version information has been received.

<< 27. Substrate authentication result notification, 28. Substrate authentication result response >>
A board authentication result notification command is transmitted from the CU control unit 323 to the SC 325b. This board authentication result notification command notifies the SC 325b of the authentication result between the CU control unit 323 and the SC 325b, and includes an authentication result and a random number (encryption padding character). A response of the board authentication result response is transmitted from the SC 325b to the CU control unit 323. The response of the board authentication result response is to notify the CU control unit 323 of the authentication result between the CU control unit 323 and the SC 325b. The authentication result, authentication log information (confidential information), random number (for encryption) Padding characters).

<< 29. Security board inquiry instruction notification, 30. Security board inquiry result >>
A security board inquiry instruction notification command is transmitted from the CU control unit 323 to the SC 325b. This security board inquiry instruction notification command requests the security board information inquiry data acquired from the key management server to the SC 325b, and includes a valid key (communication control IC valid key). A response of the security board inquiry result is transmitted from the SC 325b to the CU control unit 323. The response of the security board inquiry result notifies the CU control unit 323 of the inquiry data of the security board inquiry information. Substrate information type), substrate serial number, inquiry information (security substrate inquiry information), and random numbers (encryption padding characters).

  Of these, board initial key authentication request 2, board initial key authentication response 2, board authentication key authentication response 1, board authentication key authentication request 2, board authentication key authentication response 2, board shipping key authentication request 2, board shipping key authentication Response 2, board version information notification, board version information response, board authentication result notification, board authentication result response, security board inquiry instruction notification, and security board inquiry result are communicated in the SE1 mode described later.

<< 31. Security board information notification, 32. Security board information result >>
A security board information notification command is transmitted from the CU control unit 323 to the SC 325b. This security board information notification command notifies the security board information acquired from the key management server to the SC 325b, and includes an inquiry result and board information. The inquiry result indicates the inquiry result of the board information, and is one of three types: response present (board information present), response present (board information not present), and response not present (management server to CU control unit offline). . The board information is security board information. This information is valid only when the inquiry result has board information. This information is confidential information.

  A response of the security board information result is transmitted from the SC 325b to the CU control unit 323. The response of the security board information result notifies the CU control unit 323 that the security board information has been received. The reception result (OK (with key update), OK (without key update), NG), Authentication log information (confidential information) is included.

  For communication of security board information notification and security board information result, ciphertext encrypted using a communication key (session key) in a second security mode (SE2 mode) described later is transmitted. The communication key is an encryption key used for communication between the CU control unit 323 and the SC 325b.

<< 33. Counter information request, 34. Counter information response >>
A counter information request command is transmitted from the CU control unit 323 to the SC 325b. This counter information request command requests counter information from the SC 325b. Here, the counter information is a counter (initial vector) value of a second security mode (hereinafter referred to as SE2 mode) described later.

  A response of a counter information response is transmitted from the SC 325b to the CU control unit 323. This response of the counter information response notifies the CU control unit 323 of the counter information.

  The counter information response includes a processing result, a counter value, authentication log information, and a random number (encryption padding character), and is communicated in an SE1 mode to be described later. The processing result is data indicating completion of processing or processing in progress. The counter value is an initial vector value as described above. Here, as counter values, different counter values are set in the upstream direction (the direction from the SC 325b toward the CU control unit 323) and in the downstream direction (the direction from the CU control unit 323 toward the SC 325b).

  The SC 325b notifies the counter value after the authentication process with the communication control IC is completed. On the other hand, the CU control unit 323 waits until the processing result is completed. The counter value and the authentication log information are valid only when the processing result is completed.

<< 35. Communication key request, 36. Communication key response >>
A communication key request command is transmitted from the CU control unit 323 to the SC 325b. This communication key request command requests the SC 325b for a communication key. A response of the communication key response is transmitted from the SC 325b to the CU control unit 323. The response of this communication key response notifies the CU control unit 323 of the communication key, and includes a communication key and authentication log information (confidential information). The communication key response is communicated in the SE2 mode described later.

<< 37. Gaming machine chip inquiry instruction notification, 38. Game machine chip inquiry result >>
A gaming machine chip inquiry instruction notification command is transmitted from the CU control unit 323 to the SC 325b. This gaming machine chip inquiry instruction notification command requests information about gaming machine chips to be inquired of the key management server from the SC 325b. A response of the gaming machine chip inquiry result is transmitted from the SC 325b to the CU control unit 323. The response of the gaming machine chip inquiry result notifies the CU control unit 323 of information on gaming machine chips to be inquired to the key management server.

  The game machine chip inquiry result data includes serial number, acquisition result, manufacturer code, model code, inquiry type, board type, board serial number, main control chip ID, main control inquiry information, payout control chip ID, payout control inquiry information Is included.

  The acquisition result is a gaming machine chip information acquisition result, which is one of acquisition OK, acquisition NG, and acquisition processing. The manufacturer code is a main control chip manufacturer code, and the model code is a main control chip model code. The inquiry type is a gaming machine chip information inquiry type, and is any of hall server 801 no inquiry, hall server 801 inquiry present, and key management server inquiry present. Note that gaming machine chip inquiry results are communicated in SE2 mode to be described later.

<< 39. Gaming machine chip information notification, 40. Game machine chip information result >>
A gaming machine chip information notification command is transmitted from the CU control unit 323 to the SC 325b. This gaming machine chip information notification command notifies the SC 325b of the result of checking the gaming machine chip information acquired from the key management server. The game machine chip information notification data includes a serial number, a verification result, a main control verification result, and a payout control verification result. The collation result is a chip information collation result, with or without response (hall server 801 to CU control unit 323 offline). The main control verification result is gaming machine main control chip verification result information, and the payout control verification result is gaming machine payout control chip verification result information. Note that the gaming machine chip information notification is communicated in the SE2 mode described later.

  A response of the gaming machine chip information result is transmitted from the SC 325b to the CU control unit 323. The response of the gaming machine chip information result notifies the CU control unit 323 that the gaming machine chip collation result has been received. The gaming machine chip information result data includes a serial number and gaming machine chip information notification result. The gaming machine chip information result is communicated in the SE2 mode described later.

<< 41. Substrate status request, 42. Substrate status response >>
A substrate state request command is transmitted from the CU control unit 323 to the SC 325b. This board status request command requests the SC 325b for the status of the security board and the gaming machine. The substrate status request command includes a substrate status request (no additional information), a substrate status request for requesting health check (health check request), and a substrate status request for notification of operation stop (operation stop notification). There are types. Both are communicated in SE2 mode described later.

  A response of the substrate state response is transmitted from the SC 325b to the CU control unit 323. The response of the board state response is to notify the CU control unit 323 of the state of the security board and the gaming machine, the board state response (no additional information), the board state request (health check response), the alarm There are four types: a board status response for notifying information (alarm information notification) and a board status response for notifying a security board query result (security board query result). In both cases, communication is performed in the SE2 mode described later.

<Main sequence in communication between CU control unit and SC>
<< Send command and response >>
First, transmission of commands and responses between the CU control unit 323 and the SC 325b will be described. A command is transmitted from the CU control unit 323 (primary station) to the SC 325b (secondary station), and the SC 325b returns a response to the CU control unit 323 in response to the command. In other words, the transmission of the business message is a command / response system in which the CU control unit 323 is the primary station and the SC 325b is the secondary station.

  A period from transmission of a command from the CU control unit 323 to the SC 325b until transmission of the next command is controlled to 200 ms, that is, 0.2 seconds. Further, the period from the transmission of the response from the SC 325b to the CU control unit 323 until the transmission of the next response is controlled to 200 ms, that is, 0.2 seconds.

  Here, the transmission interval of the command and the response is set to 200 ms. However, the transmission interval may be longer or shorter than this, for example, the transmission interval may be the same as the emission time interval of SC325b. It is possible to make it.

  In addition, the CU control unit 323 can control to transmit inquiry information to the key management server and notify the SC 325b of the response. That is, an inquiry / notification information request is transmitted from the CU control unit 323 to the SC 325b, and a response to the inquiry / notification information from the SC 325b is received. Based on the response, the CU control unit 323 makes an inquiry to the key management server. Do. When the inquiry result is obtained, the CU control unit 323 transmits an inquiry / notification result notification to the SC 325b and receives an inquiry / notification result response as a response from the SC 325b.

<< Communication line disconnection detection on CU control side >>
Next, processing when communication disconnection is detected on the CU control unit 323 side will be described. If the response is not received within 200 ms after the CU control unit 323 transmits a command to the SC 325b, the same command is transmitted to the SC 325b again. If no response is received within 200 ms, a second retransmission is performed in which the same command is transmitted to the SC 325b. Retransmit the same command to SC325b up to twice. If no response is received from the SC 325b even after the second retransmission, the CU control unit 323 determines that “communication is lost”. Note that the serial number at the time of retransmission is not counted up.

<< Submission of board status request >>
CU control unit 323 receives a board state response (error state) from SC 325b by sending a board state request to SC 325b when a response cannot be received during communication with P units after authentication with SC 325b is completed. The communication status of the console can be acquired. However, this is not the case when a communication disconnection or the like occurs between the CU control unit 323 and the SC 325b.

<< Encryption mode >>
In the present embodiment, a plurality of types of encryption methods having different security levels are used. One is the first security mode (SE1 mode). The SE1 mode is an encryption method in a low security mode in which encryption is always performed using a fixed key without adding and updating keys. The other is the second security mode (SE2 mode). The SE2 mode is a high security mode in which a count value (key) that is a source of data for performing an exclusive OR (exclusive OR) on plaintext is added and updated.

  The SE2 mode is, for example, an encryption method using a counter, and the counter includes an initial vector value, a message counter unit, and an encryption block counter unit. The initial vector value is notified by a counter information response message described later. The message counter unit is initialized when the initial vector value is received. The encryption block counter unit is initialized when a message frame is created, and updated after completion of the block encryption process.

  The message counter unit is composed of two counters, a transmission counter and a reception counter (up counter and down counter). In this case, the transmission counter (message counter unit) is updated (+1) at the time of message transmission, but not updated at the time of retransmission. The reception counter (message counter unit) is updated when a message is received, but is not updated when a data length NG or the like occurs when a message is received. If a MAC error occurs during message reception, the counter is updated and decrypted (counter automatic repair). When the MAC abnormality is determined, the counter is decreased by 2.

<Frame configuration used in communication (between CU-P units)>
Next, communication between the CU 3 and the P base 2 according to the present embodiment will be described in detail. The message used in the communication is composed of a frame having a predetermined format. Transmission data (message) is always transmitted in units of one frame. That is, the divided transmission of the message is not performed. Moreover, when transmitting a message | telegram continuously, the space | interval of 1 millisecond or more is opened.

  One frame of transmission data includes a data length, a normal sequence number, an addition sequence number, a counting sequence number, a command, and a data portion. “Data length” indicates the data length of the transmission data (serial number to data portion (business message range)). “Command” is a command code of the message. The “data part” is data of a message.

<Commands and responses sent and received between the CU and the P platform>
Next, an outline of commands and responses transmitted and received between the card unit (CU) 3 and the pachinko machine (P unit) 2 will be described with reference to FIG. FIG. 7 shows the transmission direction, whether the data to be transmitted is a command or a response, the name of transmission information, and its outline.

<< 1. Recovery request, 2. Recovery response >>
First, a command named recovery request is transmitted from the CU 3 to the P unit 2. This recovery request command is for requesting recovery information from the P unit 2. In response to this recovery request, a response named recovery response is transmitted from the P base 2 to the CU 3. This response of the recovery response notifies the CU 3 of the recovery information.

  The recovery request command is transmitted from the CU 3 to the P unit 2 after the CU 3 completes the authentication. The recovery request command requests recovery information from the CU 3 to the P unit 2, and the CU 3 transmits the command first after the authentication is completed. The recovery request includes “serial number”, “command”, “previous last transmission serial number”, and “previous final transmission count serial number”. “Serial number” is a sequence number (1 to 255). “Command” is a command code for requesting status information, and is represented by binary data in hexadecimal representation.

  The “last last transmission sequence number” is the sequence number of the command for requesting the state information last transmitted to the P unit 2 at the time of the previous connection. When “Previous Last Transmission Sequence Number” is “0”, this indicates a state where there is no stored sequence number. The “previous last transmission serial number” is a serial number that stores the “sequential number” as the previous final transmission serial number (serial number) when the status information response is received at the CU3 and when the status information response is received at the CU3. It is.

  “Previous last transmission count sequence number” is a count sequence number of a response to the status information request last transmitted to the P unit 2 at the previous connection. “Last transmission count sequence number” indicates that there is no stored sequence number when “0”. The “previous last transmission count sequence number” is a sequence number that stores the count sequence number as the previous last transmission count sequence number on the P unit 2 and the CU 3 side when receiving the status information response to the CU 3 when the P unit 2 transmits the status information response. .

  In the recovery process (counting ball count) of the P unit 2, the P unit 2 refers to the “previous last transmission count sequence number” notified from the CU 3, and counts if the CU 3 has not performed the count process for the count request. Assume that there was no request. In this case, the P stand 2 does not execute the game ball subtraction process corresponding to the counting request notified to the CU 3 itself. On the other hand, the P stand 2 refers to the “previous last transmission count sequence number” notified from the CU 3, and when the CU 3 determines that the counting process has been performed, the game ball is subtracted from the number of game balls before counting. Confirm.

  The response of the recovery response is a response to the recovery information held in the P base 2 with respect to the CU 3. Recovery information includes “sequential number”, “command”, “previous last transmission serial number”, “last inserted card ID”, “previous card insertion time”, “previous last transmission addition serial number”, “game information storage presence / absence”, “ “Previous Game Table Information” and “Previous Game Information” are included. “Serial number” and “command” are the same as described above, and therefore description thereof will not be repeated.

  “Previous last transmission serial number” is data of a serial number included in the response of the status information response last transmitted to the CU 3 at the previous connection, and when “0”, there is no stored serial number. “Previously inserted card ID” is data of the card ID of the card that was being inserted at the previous connection, and “0” indicates that there is no inserted card. The payout control unit 171 of the P table 2 stores and holds the card ID that was being inserted based on the information transmitted from the CU 3.

  “Previous card insertion time” is data on the insertion time of a card that was being inserted at the time of the previous connection, and when it is “0”, there is no inserted card. This data is also represented by year information as 2 digits YY, month information as 2 digits MM, day information as 2 digits DD, time information as 2 digits hh, minute information as 2 digits mm, and second information as 2 digits ss. It is. The “previous last transmission addition serial number” is an addition serial number included in the response of the status information response last transmitted to the CU 3 at the previous connection, and when “0”, there is no additional serial number. “Game information storage presence / absence” is “0x00” when game information is not stored, and “0x01” when game information is stored.

  The “previous gaming machine information” is the gaming machine information previously notified to the CU 3, and includes “the number of gaming balls”, “the number of fired balls”, “the number of balls passing through the outlet”, “the total number of winning ball balls”, “the counting ball” It includes information on “number” and “counting serial number”. The “number of game balls” is the number of game balls notified to the CU 3 last time. “Number of fired balls” is the number of fired balls previously notified to CU3. The “out mouth passing ball count” is the number of out mouth passing balls notified to the CU 3 last time. The “total prize ball number” is the total prize ball number notified to the CU 3 last time. “Counting balls” is the number of counting balls notified to CU3 last time. “Counting sequence number” is the counting sequence number notified to the CU 3 last time.

  The “previous game information” is game information previously notified to the CU 3, and includes information on “number of game information”, “type information 1” to “type information n”, “prize ball information 1” to “prize ball information n”. Is included. The “number of game information” is the number (0 to n) of game information notified to the CU 3 last time. Note that n = 0 to 22 and the length is variable. “Type information 1” is the game type information 1 notified to the CU 3 last time. “Type information n” is the game type information n notified to the CU 3 last time. “Prize ball information 1” is game prize ball information 1 notified to the CU 3 last time. “Prize ball information n” is game prize ball information n notified to the CU 3 last time.

  The “previous last transmission addition serial number” is a serial number that is stored as the last final transmission addition serial number on the CU 3 side and the P base 2 when the status information request is received at the CU 3 and when the status information request is received at the P base 2.

  The P unit 2 compares the “last previous transmission sequence number” included in the recovery request received first from the CU 3 with the previous last transmission sequence number stored in the P unit 2, and determines whether or not they match. judge. If they match, it is determined that it is not necessary to transmit recovery information. If they do not match, it is determined that recovery information needs to be transmitted. In the former case, the information in the recovery response is set to “no game information stored” and a recovery response not including recovery data (game information) is returned to the CU 3. On the other hand, in the latter case, the recovery response including the recovery data (game information) is returned to the CU 3 with the information in the recovery response as “gaming information stored”.

  When there is no recovery information for game information or when the last transmission sequence number is 0, “game information storage presence / absence” is not stored “0x00”, and “previous game machine information” and “previous game information” are set to ALL “0”. ”Is set. In addition, when the “last previous transmission serial number” process notified from the P table 2 is not performed, the CU 3 performs the recovery process using the previous game machine information. If the “last previous transmission serial number” process is being performed, the CU 3 performs the recovery process using only the previous game machine information. However, the number of balls is not recovered.

  In addition, when recovery processing cannot be performed due to a mismatch of communication partners (for example, replacement of the CU 3 or the P unit 2), it may be possible to manually correct by POS based on the display information of the P unit 2. For example, it is conceivable that the display information of the P base 2 is displayed using the liquid crystal display screen of the variable display device 278. Alternatively, it is also conceivable that a display device controlled by the payout control unit 171 is further provided on the P table 2 and information for manual correction is displayed on the display device. Note that POS refers to a free gift management system for exchanging free gifts and managing free gifts. In addition, POS is not limited to those for exchanging prizes or managing prizes, but records general sales information for each sale of merchandise at a store and uses the aggregated results as inventory management or marketing materials. It may be management (Point Of Sales system).

<< 3. Recovery request 2, 4. Recovery response 2 >>
A command named recovery request 2 is transmitted from the CU 3 to the P unit 2. The command of this recovery request 2 notifies the addition recovery information to the P unit 2. In response to this recovery request 2, a response named recovery response 2 is transmitted from the P base 2 to the CU3. This response of the recovery response 2 notifies the CU 3 of the processing result of the added recovery information.

  The command of the recovery request 2 is to notify the additional recovery information to the P unit 2 and includes data of “serial number”, “command”, “previous last transmission additional serial number”, and “additional number of balls”. Yes. “Serial number” and “command” are the same as described above, and therefore description thereof will not be repeated. The recovery request 2 is transmitted when the CU 3 determines that it is necessary to perform the additional ball recovery process in the P stand 2. The CU 3 compares the “previous last transmission addition serial number” included in the recovery response received from the P unit 2 with the “previous final transmission addition serial number” stored in the CU 3, and if they match, the additional ball recovery is performed. It is determined that processing is not necessary, and in the case of mismatch, it is determined that addition ball recovery processing is necessary. When it is determined that addition ball recovery processing is necessary, a recovery request 2 is transmitted.

  The “last last transmission addition sequence number” included in the recovery request 2 is data of the addition sequence number of the command of the status information request last transmitted to the P-unit 2 at the previous connection, and the “addition ball number” is the game ball This is data on the number of balls added.

  Next, the recovery process of the P base 2 will be described in detail. The recovery process of the P unit 2 is based on the recovery request 2 and, if the “last previous transmission serial number” process notified from the CU 3 has not been performed, This is a process of performing addition.

  The response of the recovery response 2 is for notifying the CU 3 of the processing result of the added recovery information at the P unit 2 and includes “serial number”, “command”, and “recovery result”. The “recovery result” is a recovery result OK when “0x00”, and a recovery result NG when “0x01”. In addition, when the P stand 2 is in a state where the number of additional balls cannot be received, a process NG is returned as a recovery result.

<< 5. 5. Communication start request, Communication start response >>
A communication start request command is transmitted from the CU 3 to the P unit 2. This communication start request command requests the P base 2 to start communication. In response to this communication start request, a response to the communication start response is transmitted from the P base 2 to the CU 3. This response to the communication start response is a response to the CU 3 for communication start.

  The communication start request command notifies the P unit 2 that communication has started normally. Receiving the communication start request, the P base 2 clears the recovery information stored so far. The communication start request command includes “serial number” and “command” data. “Serial number” and “command” are the same as described above, and therefore description thereof will not be repeated. The CU 3 sets the counting sequence number to “0” (initial value) after the communication start request, and the P unit 2 also sets the counting sequence number to “0” (initial value) after receiving the communication start request.

  The response to the communication start response is to notify the CU 3 that the communication has started normally, and the CU 3 clears the recovery information. The response of the communication start response includes “serial number” and “command” data. “Serial number” and “command” are the same as described above, and therefore description thereof will not be repeated.

<< 7. 7. Communication end request, Communication end response >>
A communication end request command is transmitted from the CU 3 to the P platform 2. This communication end request command requests the P unit 2 to end communication. In response to this communication end request, a response of a communication end response is transmitted from the P base 2 to the CU 3. This communication end response is a response to the end of communication to the CU3.

  The communication end request command notifies the P unit 2 that the communication has ended normally, and includes “serial number” and “command” data. “Serial number” and “command” are the same as described above, and therefore description thereof will not be repeated.

  The response of the communication end response is to notify the CU 3 that the communication has ended normally, and the CU 3 and the P stand 2 stop the communication and wait for the restart after the notification. The response of the communication end response includes “serial number” and “command” data. “Serial number” and “command” are the same as described above, and therefore description thereof will not be repeated.

<< 9. Status information request >>
A status information request command is transmitted from the CU 3 to the P platform 2. This status information request command is for requesting the status of the CU 3 to the P unit 2. The CU 3 uses this command to periodically check the status of the P base 2. The status information request command includes the number of balls to be added from the CU3 side to the P stand 2 side shown in FIG.

  Specific data of this status information request includes data of “sequential number”, “command”, “CU state”, “addition ball number”, “additional serial number”, and “counting serial number”. “Serial number” and “command” are the same as described above, and therefore description thereof will not be repeated.

  The “CU state” represents the state of the CU 3 notified to the P base 2, and indicates that a card is being inserted when Bit 0 is “1”, and no card is inserted when “0”. That is, Bit0 represents a state where a card (general card / member card) is inserted in CU3. In addition, a general card is being inserted by depositing into a stock card (general 0 yen 0 card) stocked in advance in the card stock section of CU3.

  When Bit 1 is “1”, the card unit is being opened, and when it is “0”, the card unit is being closed. That is, Bit1 notifies the P unit 2 of the card unit opening state according to the state of CU3. The timing for notifying the opening of the card unit is, for example, when the opening of the card unit is completed. The timing for notifying that the card unit is closed is, for example, when the store is closed. Note that when the same state changes from opening to closing, the P stand 2 notifies the CU 3 with a status information response as the number of all playing game balls being held.

  When Bit 2 is “1”, the card return preparation is in progress, and when “0”, the card return preparation is not in progress. The CU 3 notifies the P stand 2 of “preparing for card return” for a certain time (10 seconds) by setting this bit during each operation of card return, simple leaving, and meal break. When the operation of the counting button 28 is detected, the P table 2 has operated the counting button once or a plurality of times if it has received a status information request with the bit being prepared for card return turned on. Regardless of the operation duration, regardless of the operation duration time, all the stored game balls are notified to the CU 3 by counting the number of balls.

  When Bit 3 is “1”, a game ball addition request is shown, and when Bit 3 is “0”, no game ball addition request is shown. That is, Bit3 requests addition of game balls (the number of added balls) at the time of ball lending, holding ball payout, and stored ball payout operations.

  When Bit 4 is “1”, completion of counting ball reception is indicated, and “0” indicates that counting ball is not received. Bit4 notifies P stand 2 that the receipt has been completed when the counting ball is received. That is, it is used to confirm delivery of the response “count ball” of the state information response. Bit 5 to Bit 7 are not used.

  The “added ball number” is the added ball number of game balls, and the data of the added ball number is valid only when Bit 3 in the CU state is “1”. The “addition serial number” is an addition sequence number (0 to 255), and is notified by updating (+1) the sequence number when a game ball addition request is made. The “counting sequence number” is a counting sequence number (0 to 255), and the count sequence number received when the count is requested is notified as it is. However, if the continuity of the counting sequence number is not established, the counting is not received.

<< 10. Status information response >>
In response to the status information request, a response of the status information response is transmitted from the P base 2 to the CU 3. This response of the status information response is to notify the information / status of the P platform 2 to the CU 3. The response of the status information response includes the latest game table information and the number of game balls shown in FIG.

  The specific data of this status information request includes “sequential number”, “command”, “number of game balls”, “number of fired balls”, “number of balls passed through the outro”, “total number of ball balls”, “count request ball” Data of “number”, “counting serial number”, “launch strength”, “game table state”, “tamper detection information” and “game information” are included. “Serial number” and “command” are the same as described above, and therefore description thereof will not be repeated.

  The “number of game balls” is the current number of game balls (the number of game balls as a result of calculating addition / subtraction). The “number of game balls” calculates the number of game balls held by the CU 3 by using the “total prize ball number”, “number of fired balls”, and “count ball number” described later. Thereafter, the CU 3 checks whether the calculated number of game balls of the CU 3 matches the number of game balls of the P unit 2.

  “Number of fired balls” is the number of fired balls (summed if there are balls fired multiple times at the time of transmission). However, if there are back balls, subtract the number of back balls. That is, the “number of fired balls” (subtraction) is data to be subtracted from the number of game balls held by the CU 3. If the data is received without holding the card, CU3 does not subtract the number of game balls. CU3 does not perform subtraction when the number of game balls held by CU3 itself is 0.

  “The number of balls that have passed through the outlet” is the number of balls that have passed through the outlet 154 (when there are a plurality of balls that have passed during transmission, they are added together).

  “Total number of prize balls” is the total number of prize balls in the prize ball information 1-n. The prize ball information 1-n is the number of prize balls for each prize opening type such as a start opening, a big winning opening, a winning opening (ordinary winning opening), and the like. Note that the “total prize ball number” (addition) does not include the “addition request ball number” transmitted from the CU 3. In addition, the CU 3 adds the data of the total number of prize balls to the number of game balls held. When the data for the total number of winning balls is received without holding the card, CU3 does not add the number of gaming balls.

  The “count request ball number” is the number of game balls requested to be counted. That is, the “count ball” (subtraction) is data that is subtracted from the number of game balls held by the CU 3 and added to the number of cards held. Note that the number of counting balls is not used for the data of the number of subtraction balls transmitted from the P stand 2 to the CU 3. Further, when the data is received without holding the card, the CU 3 does not subtract the number of game balls. CU3 does not perform subtraction when the number of game balls held by CU3 itself is 0.

  However, when the card unit opening state changes from opening to closing, the game balls held by the gaming machine are counted and set as the number of counting balls. When the card unit opening state is open, the operation of the counting button 28 is performed, so that the number of game balls is counted and set as the number of counting balls. However, when the card unit opening state changes from opening to closing, the game balls are automatically counted and set as the number of counting balls without waiting for the operation of the counting button 28.

  The “counting serial number” is a counting sequence number (0 to 255), and is updated (+1) and notified when a counting is requested.

“Launch strength” is the strength for launching a game ball.
The “gaming table state” indicates the state of the P table 2 at the time when the command for requesting the status information is transmitted from the CU 3 to the P table 2. It includes information on “game table state 3” and “game table error state”.

  Bit 0 of “gaming table state 1” indicates whether the game is permitted or prohibited. When “0”, the game is permitted, and when “1”, the game is prohibited. Bit1 indicates whether or not the fan (player) is playing (balls are being fired), and is “0” when waiting (the fan is not firing a ball), and “1”. The game is in progress (a state in which the fan is firing a ball), but there is a game ball and the game is in the state in which the launch handle (hitting ball operating handle 25) is touched (touch sensor touched).

  Bit 2 indicates the presence / absence of a game ball (detection of no game ball). When “0”, there are a number of game balls, and when “1”, there is no game balls. Bit 3 indicates whether or not the whereabouts of all the fired balls are confirmed in a state where the fire of the balls is stopped. That is, it shows whether all the floating balls in the game area 27 have been collected. However, it does not include ball stoppages due to a fire stop switch (also called a single shot switch). When it is “0”, the game is incomplete (a state where all balls are unconfirmed), and when it is “1”, a game is complete (a state where all balls are confirmed). Note that if the completion of the game is not confirmed for 15 seconds or more after the ball launch is stopped, the P platform 2 times out and the game is completed.

  Bit 4 indicates whether or not a game ball is counted (whether or not a count button is pressed). When “0”, there is no request, when “1”, there is a count acceptance request at the start of counting or a counting ball payout request. It is. When the counting operation is detected, the P platform transmits a count information ON status information response to the CU and confirms whether or not the counting request has been received. When “1”, it is a count request. Bit 5 indicates the processing result of the game ball addition, which is addition OK when “0” and addition NG when “1”. Bit 6 to Bit 7 are reserved.

  Bit 0 of “gaming table state 2” represents jackpot information jackpot 1 (all jackpots), and “1” is set during all jackpots. Bit 1 represents big hit 2 of big hit information (big hit + small hit), and sets “1” during all big hits and small hits. Bit 2 represents the big hit 3 of the big hit information (big hit of the big ball), and “1” is set during the big hit where the big ball is big. Bit 3 represents big hit 4 of big hit information (big hit of small ball), and “1” is set during big hit with small ball. Bit 4 represents a big hit 5 of the big hit information (a big hit in the outgoing ball), and “1” is set during the big hit in the middle of the outgoing ball. Bit5 to Bit7 are reserved.

  Bit 0 of “gaming table state 3” represents a big hit in the gaming state information + short time, and “1” is set in the big hit and short time. Bit1 represents the probability change of the game state information, and “1” is set during the probability change. Bit 2 represents the time of the game state information, and “1” is set during the time reduction. Bit3 to Bit7 are reserved.

  The “gaming table error state” indicates an error code that is occurring in the P table 2, and each error code is expressed using Bit0 to Bit5. Note that there is no error when Bit 0 to Bit 5 are all “0”. Bit 6 is information for specifying a place where an error has occurred, and represents payout control when “0” and main control when “1”. Bit 7 indicates an error output method. When “0”, only an alert is issued, and when “1”, an alert + output to the hall server 801 is indicated.

  The “fraud detection information” is information detected by the P machine 2 at the time when the command for requesting the status information is transmitted from the CU 3 to the P machine 2, and includes “fraud detection state 1” and “fraud detection state 2” , “Illegal detection information 1” to “fraud detection information 4” and “additional serial number” are included.

  The “fraud detection state 1” is fraud detection information of the main control board 16. Bit 0 of “fraud detection state 1” indicates fraud detection information of radio wave sensor detection when “1”. Bit1 indicates that it is the positive detection information that the magnetic sensor is not detected when “1”. Bit2 represents fraud detection information for fraud detection when “1”. Bit3 to Bit7 are reserved.

  The “fraud detection state 2” is fraud detection information of the payout control board 17. Bit 0 of “fraud detection state 2” indicates fraud detection information for opening the glass plate when “1”. Bit 1 represents fraud detection information for opening the frame body when “1”. Bit 2 represents fraud detection information of radio wave sensor detection when “1”. Bit 3 represents fraud detection information of the proximity sensor abnormality when “1”. Bit 4 represents fraud detection information for detecting a prize ball goto when “1”. Here, the “goto” is an illegal act of acquiring a ball in an illegal manner in a pachinko or slot machine. Bit 5 represents fraud detection information for complex goth detection when “1”. Bit 6 represents fraud detection information for fraud addition detection when “1”. Bit 7 represents fraud detection information for door / frame opening detection (nighttime) when “1”.

  “Injustice detection information 1” is data indicating information on the detection of the winning ball sensor got (number of winning inconsistent balls). The “fraud detection information 1” is valid when Bit 4 of the “fraud detection state 2” is “1”. The “injustice detection information 2” is data indicating information of composite sensor goto detection (launch / OUT inconsistent ball number). That is, it is data indicating information when an inconsistency between the number of shot balls and the number of out balls (the number of balls passing through the outlet) is detected. The “fraud detection information 2” is valid when Bit 5 of the “fraud detection state 2” is “1”. “Falsification detection information 3” is data indicating information of fraud addition detection (number of fraud addition balls). The “fraud detection information 3” is valid when Bit 6 of the “fraud detection state 2” is “1”. The “fraud detection information 4” is data indicating information on the number of times the frame body is opened at night. The “fraud detection information 4” is valid when the Bit 7 of the “fraud detection state 2” is “1”.

  “Addition sequence number” is a sequence number for addition, and the addition sequence number received at the time of addition request is notified as it is. However, there is no response when the continuity of the added serial number is not established.

  The “game information” is information on the P device 2 at the time when the command for requesting the status information is transmitted from the CU 3 to the P device 2, and “number of game information”, “type information 1” to “type information n”. ”,“ Prize ball information 1 ”to“ Prize ball information n ”.

  The “number of game information” is the number (n) of type information / prize ball information, and n = 0 to 22 (variable length). The type information is data type information from Bit 4 to Bit 7 and indicates the data type of the game information. When it is “0”, there is no information, when it is “1”, when it is “2”, it is a big prize opening. “3” is the winning opening, and “4” is the number of symbol stops. Bit 0 to Bit 3 are data number information, which indicates the data number for each data type of game information. When “0”, there is no information, and when “1” to “15”, each data number is indicated. .

  “Type information 1” to “Type information n” indicate game type information 1 to game type information n, respectively. “Prize ball information 1” to “Prize ball information n” are game prize ball information 1 to game prize ball. Information n is shown.

  Here, the prize ball information is information on the number of prize balls from Bit0 to Bit3, and indicates the number of prize balls at the time of winning for each data type of game information. When "" to "15", the data of the number of award balls are respectively represented. Bit 4 to Bit 7 are information on the number of winnings, and indicate the number of winnings (cumulative) for each data type of game information. When “0”, there is no information, and when “1” to “15”, data on the number of winnings is displayed. Each represents.

<< 11. Card insertion notification, 12. Card insertion response >>
A card insertion notification command is transmitted from the CU 3 to the P stand 2. This card insertion notification command notifies the P unit 2 of card insertion. In response to this card insertion notification, a response of a card insertion response is transmitted from the P base 2 to the CU 3. The response of this card insertion response is a response indicating that a card insertion notification has been received for CU3.

  The card insertion notification command notifies the card ID and insertion time of the inserted card to the P base 2 when the card is inserted, and “sequential number”, “command”, “card ID”, “card insertion time”, Data of “store code” and “SC board ID” are included. “Serial number” and “command” are the same as described above, and therefore description thereof will not be repeated.

  The “card ID” is identification ID information of the IC card inserted into the CU 3 and is used for associating with a game ball held by the P stand 2. “Card insertion time” is the time when the IC card is inserted into the card insertion / eject port 309 (see FIG. 1) of CU3. The year information is two digits YY, the month information is two digits MM, and the day information is two digits. The data is DD, time information is represented by two digits hh, minute information is represented by two digits mm, and second information is represented by two digits ss. The card insertion time is used to determine whether the game ball held by the P stand 2 is the current day ball or the past ball.

  The “store code” is a store identification code in which the CU 3 is installed, and is used for associating with a game ball held by the P stand 2. It is also used to determine whether or not the CU3 has been moved to the store. The CU 3 stores a store code where the CU 3 is installed. The store code is added to the security board 325 and notified to the P units. “SC board ID” is an SC board ID for identifying CU3, and is used to determine whether or not CU3 has been replaced. The SC board ID is notified by adding information from the security board 325 to the P board 2. The payout control unit 171 of the P table 2 stores information notified by the card insertion notification command such as the card ID (C-ID) and the card insertion time.

  The response of the card insertion response notifies the CU 3 that the card insertion notification has been normally received, and includes “serial number” and “command” data. “Serial number” and “command” are the same as described above, and therefore description thereof will not be repeated.

<< 13. Card return notice, 14. Card return response >>
A card return notification command is transmitted from the CU 3 to the P stand 2. This card return notification command notifies the P unit 2 of a card return. In response to this card return notification, a response of a card return response is transmitted from the P stand 2 to the CU 3. The response of this card return response is a response to the card return to CU3.

  The card return notification command is for notifying the P unit 2 of the card return, and the CU 3 transmits the notification when the “card return” button is pressed. The card return notification includes data of “serial number” and “command”. “Serial number” and “command” are the same as described above, and therefore description thereof will not be repeated.

  The response to the card return response is to send a response to the card return notification to the CU 3 and includes data of “serial number”, “command”, “card ID”, and “card insertion time”. “Serial number”, “command”, “card ID”, and “card insertion time” are the same as described above, and therefore description thereof will not be repeated. Note that CU3 does not return the card if the card ID included in the command does not match the ID of the card currently being inserted or if there is a problem with the card insertion time included in the command. , And processing such as prohibiting the writing of the holding ball to the card.

  Here, the operation of the P stand 2 at the time of card insertion notification or card return notification will be described. At the time of card insertion notification, if the CU 3 performs a membership card insertion, a general card insertion, or a deposit to a general 0 yen 0 coin card, the P stand 2 backs up the card ID and the card insertion time. When an operation of pressing the “card return” button is performed on the CU 3 at the time of the card return notification, the P stand 2 clears the card ID and the card insertion time.

<< 15. Communication test request, 16. Communication test response >>
A communication test request command is transmitted from the CU 3 to the P platform 2. This communication test request command notifies the P unit 2 of test data. In response to this communication test request, a response of the communication test response is transmitted from the P base 2 to the CU3. The response of this card return response is a response of test data to CU3.

  The communication test request command notifies the P unit 2 of test data. Note that the test data notified to the P platform 2 is not encrypted. The communication test request command includes data of “serial number”, “command”, and “test data”. “Serial number” and “command” are the same as described above, and therefore description thereof will not be repeated. “Test data” is test data notified to the P base 2 and is arbitrary data.

  The response of the communication test response notifies the CU 3 of test data. Note that the test data notified to the CU 3 is not encrypted. The response of the communication test response includes data of “serial number”, “command”, and “test data”. “Serial number” and “command” are the same as described above, and therefore description thereof will not be repeated. “Test data” is test data notified to the CU 3 and is arbitrary data.

<Main sequence in communication between CU and P platform>
<< Send command and response >>
First, transmission of commands and responses between the CU 3 and the P base 2 will be described. A command is transmitted from CU3 (primary station) to P station 2 (secondary station), and P station 2 returns a response to CU3 in response to the command. In other words, the business message transmission is a command / response system in which the CU 3 is the primary station and the P stand 2 is the secondary station.

  The period from the transmission of the first command to the P unit 2 from the CU 3 to the transmission of the next command is controlled to 200 ms, that is, 0.2 seconds. Further, the period from the transmission of the response from the P base 2 to the CU 3 until the transmission of the next response is controlled to 200 ms, that is, 0.2 seconds.

  Thus, both a command and a response are transmitted between the CU 3 and the P base 2 at an interval of 200 ms. On the other hand, by operating the hitting operation handle 25, the P platform 2 hits 100 pachinko balls into the game area 27 per minute, so the hitting time interval is 0.6 seconds. As a result, a plurality of commands and responses are transmitted and received while firing one ball.

  Therefore, responses for notifying the amount of change in the number of game balls are sequentially transmitted from the P platform 2 to the CU 3 at intervals shorter than the ball firing time interval. As a result, the P stand 2 can finely notify the CU 3 of the amount of change in the number of game balls.

  Here, the transmission interval of the command and the response is set to 200 ms, but the transmission interval may be longer or shorter than this. For example, the transmission interval may be a firing time interval of the P platform 2. It is also possible to match with

<< Communication line disconnection detection on CU side >>
Next, processing when communication disconnection is detected on the CU3 side will be described. If the response is not received within 200 ms after the CU 3 transmits a command to the P unit 2, the same command is transmitted to the P unit 2 again. Further, if no response is received within 200 ms, a second retransmission is performed in which the same command is transmitted to the P unit 2. Resend the same command to P-unit 2 up to 14 times. If a response is not received from the P platform 2 even after the 14th retransmission, the CU 3 determines that the communication is abnormal after 3 seconds and sets “communication cut off”. This communication abnormality may be caused when the connector of the CU 3 and the connector of the P base 2 are disconnected, or when the connection wiring is disconnected or the power supply of the P base 2 is disconnected. CU3 does not increment the serial number when retransmitting the command.

<< Communication line disconnection detection on P side >>
Processing when communication disconnection is detected on the P platform 2 side will be described. A command is transmitted from the CU 3 to the P unit 2, and the P unit 2 returns a response to the CU 3 in response to the command. After that, when the state in which the command from the CU 3 is not transmitted to the P stand 2 continues for 3 seconds, the P stand 2 determines that the communication is cut off, stops the driving of the firing motor 18 and stops the game. The cause of this communication disconnection may be the disconnection of the connector of CU3 and the connector of P base 2, disconnection of connection wiring, or power supply disconnection of CU3.

  It should be noted that the command and response for detecting communication disconnection on the P platform 2 side include recovery request / recovery response, recovery request 2 / recovery response 2, communication start request / communication start response, notification end request / communication end response, and communication Does not include test request / communication test response command and response.

<< Power-on >>
Next, connection sequence processing at power-on will be described. The sequence process shown in FIG. 8 is a process that is executed when communication is resumed after the communication between the CU 3 and the P platform 2 is normally completed. More specifically, it is executed when communication is resumed after the power of the CU 3 is turned off while the card is not inserted. A typical example is a case where the power supply is turned off after one day of business at the amusement hall is finished, and the power supply is turned on at the start of business the next day.

  First, power is turned on. When the power is turned on, communication is started after the firing motor 18 is stopped on the P stand 2 to stop the game. Thereafter, an authentication sequence is started, and information including the main chip ID and the payout chip ID is transmitted from the P base 2 to the CU3. The CU 3 sends the received main chip ID and payout chip ID to the upper management server, asks whether the main chip ID and the payout chip ID are properly registered, and has the result returned. . If it is properly registered, an appropriate authentication result is obtained.

  After the authentication sequence, the CU 3 transmits a recovery request including the previous last transmission sequence number and the previous last transmission count sequence number to the P unit 2 and requests recovery information from the P unit 2. The P unit 2 refers to the previous last transmission count sequence number notified from the CU 3 and executes count recovery processing. Specifically, the P-unit 2 refers to the last transmission count sequence number last time, and if the CU 3 has not performed the counting process, it is assumed that no counting request has been made, and if the CU 3 has already performed the counting process, Subtract the number of balls from the previous number of game balls to determine the game balls.

  After executing the count recovery process, the P table 2 returns the game information recovery data backed up inside the P table 2 (specifically, the payout control board 17) to the CU 3 as a response (recovery response). The recovery information includes a previous last transmission sequence number, a previously inserted card ID, a previous card insertion time, a previous last transmission addition sequence number, a previous game machine information, and the like.

  When the CU3 that has received the recovery response has not executed the process of the last transmission addition serial number included in the recovery information, the CU3 performs the additional recovery process of the CU3 using the previous game machine information included in the recovery information. When the addition ball recovery process is performed, the CU 3 transmits a recovery request 2 to the P base 2 and transmits recovery data to the P base 2. This recovery data includes the previous last transmission serial number and the number of additional balls.

  In response to this, the P platform 2 executes an addition recovery process based on the received recovery data, and returns the result as a response to the CU 3 (recovery response 2). When the P stand 2 cannot receive the additional balls, the recovery process NG is returned as a recovery result.

  This recovery process is a process for recovering the consistency of each other's data between the CU 3 and the P stand 2 and is not only executed at power-on, but also when a trouble occurs and is recovered. Executed.

  The CU 3 counts up the serial number each time a command such as a recovery request is transmitted. However, it does not count up when retransmitting a command. When the P unit 2 receives a command having the same serial number as the previously received serial number, it determines that a communication failure has occurred and the CU 3 has retransmitted the command. The CU 3 transmits a command, and backs up the serial number when a response with the same serial number is notified from the P unit 2. When transmitting the response corresponding to the received command, the P platform 2 notifies the CU 3 of the received serial number as it is. The P unit 2 backs up the serial number when the response is transmitted.

  After the authentication sequence is completed, the CU 3 transmits a recovery request command to the P unit 2 with the serial number “1”. The P platform 2 returns the received serial number “1” as it is to the CU 3 as a response to the recovery response. Further, the CU 3 transmits the command of the recovery request 2 to the P unit 2 with the serial number “2”. The P base 2 returns the response of the recovery response 2 to the CU 3 as it is with the received serial number “2”.

  Thereafter, the CU 3 counts up the serial number to “3”, and transmits a communication start request command to the P unit 2. When the CU 3 does not transmit the recovery request 2, the serial number is “2” which is one countdown (−1). In response to this, the P unit 2 clears the recovery data. Then, the P platform 2 returns a response to the communication start response to the CU 3 with the received serial number “3”. Thereafter, a status information request command and a status information response response are transmitted and received between the CU 3 and the P platform 2.

  The CU 3 counts up the serial number to “4”, and transmits a status information request command to the P unit 2. In response to this, the P table 2 updates the game table information, the game information, and the previous last transmission serial number, and backs up the updated data every time a response of the status information response is transmitted. Then, the P platform 2 returns the response of the status information response to the CU 3 with the received serial number “4”.

  In response to this, the CU 3 updates the previous last transmission sequence number, and backs up the updated data every time a response to the status information response is received.

  Thereafter, the CU 3 counts up the serial number to “5” and transmits a status information request command to the P base 2, and the P base 2 sends the response of the status information response to the CU 3 with the received serial number “5”. Reply to

<< Card insertion >>
Processing of the CU 3 and the P stand 2 when a card is inserted will be described. The CU 3 shown in FIG. 9 transmits a command for status information request including the serial number = n and the card insertion status = OFF to the P unit 2 before the card insertion. In response to this, the P unit 2 returns a response of the status information response including the serial number = n and the game prohibition to the CU 3.

  Thereafter, in CU3, when the card is inserted, the card reader / writer outputs a command signal for taking the card into the card reader / writer, and the card reader / writer reads information (card ID, etc.) recorded in the taken-in card. A process at the time of card insertion, such as receiving the read information, is executed.

  The CU 3 is in a card information inquiry state for a predetermined period after the card is inserted. This is in the middle of verifying whether the inserted card is appropriate, whether it is a membership card registered at the amusement hall, or inquiring the hall server 801 about the holding ball, storage ball, remaining card amount, etc. This means that the process of displaying the fact on the display 312 and the display on the display 54 on the P platform 2 side is being executed.

  Since the CU 3 does not authenticate the inserted card while displaying that the inserted card is being inquired on the display 312, the status information request including the serial number = n + 1 and the card insertion state = OFF is requested. A command is transmitted to the P unit 2. In response to this, the P unit 2 returns a response of the status information response including serial number = n + 1 and game prohibition to the CU3. The display 54 on the P platform 2 side is controlled by the display control unit 350 of the CU 3 to display that the card is being inquired.

  After that, when the inserted card is authenticated, the CU 3 stores the card ID and the card insertion time of the card in the RAM of the CU control unit 323, and includes the serial number = n + 2, the card ID, and the card insertion time. An insertion notification command is transmitted to the P unit 2. Note that the card insertion notification command also includes the store code and SC board ID added by the security board 325. In response to this, the P unit 2 backs up the received card ID, card insertion time, store code, and SC board ID data in the RAM of the payout control unit 171 and a response of the card insertion response including the serial number = n + 2 Is returned to CU3. Also in CU3, the card ID of the inserted card is stored in the RAM or the like of the CU control unit 323.

  In response to this, the CU 3 sends a status information request command including a serial number = n + 3 and a card insertion state = ON to the P base 2 to notify the P base 2 of the card insertion status. The P table 2 receives the notification that the card is being inserted, permits the game, and returns a response of the status information response including the serial number = n + 3 and the game permission to the CU3, thereby indicating that the game is being permitted. To notify.

  While the card is being inserted, CU3 sends a command for status information request including serial number = n + 4 and card insertion status = ON to P unit 2, and P unit 2 returns a response of status information response including serial number = n + 4 and game permission. Reply to CU3.

<< Prepaid loan >>
Next, a process for lending a game ball from the prepaid balance of the inserted card will be described. In the sequence process shown in FIG. 10, the prepaid balance recorded on the inserted card is 500 yen, and the number of game balls is 50 balls. First, the CU 3 transmits a status information request command including a serial number = n, a game ball addition request = OFF, and an addition serial number = m to the P unit 2. In response to this, the P platform 2 returns a response of the status information response including the serial number = n, the number of game balls = 50, and the additional serial number = m to the CU3. Thus, the addition sequence number is not updated while the addition request is not generated.

  Thereafter, when the player performs a lending operation (ball lending operation) in which the “lending” button is pressed once, the CU 3 determines the rate set in step S516 or step S527 of FIG. If the rate is 4 yen per ball, the remaining 500 yen, ie, 125 balls are lent out. In the case of other rates, the number of balls corresponding to the rate is lent out. When the ball lending button (lending button) 321 is pressed, the CU 3 confirms prepaid consumption for 500 yen and backs up the data of the number of added balls = 125. In this way, the remaining amount consumption is determined by the CU 3 alone at the stage where the lending operation is performed. Thereafter, CU3 is in the display of addition. During the addition display, the display unit 54 displays that 125 balls are withdrawn from the remaining amount and added to the game balls.

  Next, the CU 3 makes a game ball addition request to the P stand 2. Therefore, the CU 3 transmits a status information request command including the serial number = n + 1, the game ball addition request = ON, the number of additional balls = 125, and the addition serial number = m + 1 to the P unit 2. The serial number is incremented to “n + 1” and the addition number of game balls is requested, so that the additional serial number is also incremented to “m + 1”. The CU 3 counts up the addition sequence number to “m + 1”, updates the previous last transmission addition sequence number to “m + 1”, and backs up the data. In response to this, P 2 updates the number of game balls to the number of game balls = 50 (current number of game balls) +125 (number of additional balls) = 175, and updates the last transmission addition serial number to “m + 1” last time. Back up the data. And since the P stand 2 notifies CU3 of the number of game balls = 175 and the game ball addition result = OK, the serial number = n + 1, the number of game balls = 175, the game ball addition result = OK and the addition serial number = m + 1. The response of the status information response including it is returned to CU3. Since it is a response to the game ball addition request, the addition serial number is not counted up and is set to “m + 1” as it is.

  Thereafter, CU3 transmits a command of status information request including serial number = n + 2, game ball addition request = OFF and addition serial number = m + 1 to P unit 2, P unit 2 has serial number = n + 5, number of game balls = 175 and A response of the status information response including the addition serial number = m + 1 is returned to CU3. When the game ball addition request is OFF, the status information request and the status information response count up the serial number, but do not count up the additional serial number.

<<< money ball payout / saving money payout (replay) >>>
Next, a process of replaying after paying out the balls and paying out the stored balls will be described. In FIG. 11, the initial number of game balls is 50 balls. First, the CU 3 transmits a status information request command including a serial number = n, a game ball addition request = OFF, and an addition serial number = m to the P unit 2. In response to this, the P platform 2 returns a response of the status information response including the serial number = n, the number of game balls = 50, and the additional serial number = m to the CU3. Thus, the addition sequence number is not updated while the addition request is not generated.

  After that, when the player presses the holding ball payout button or the replay button 319 in a state where there is a holding ball or a storage ball, the CU 3 is equivalent to the number of balls according to the rate from the holding ball or the storage ball (4 yen per ball). In the case of a rate, the consumption of 125 balls) is confirmed. That is, the rate set in step S516 or step S527 of FIG. 78 to be described later is determined, and the number of balls corresponding to the rate from the holding ball or storage ball corresponding to the determined rate (here, the rate of 4 yen per ball). Is subtracted. As described above, the consumption of the possession balls or the storage balls is determined by the CU 3 alone when the operation of depressing the possession ball payout button or the replay button 319 is performed. In addition, when both the holding ball and the storage ball exist, consumption of the holding ball is given priority.

  In place of the control to prioritize the holding ball, a storage ball replay button and a holding ball replay button are provided, and the player can select and operate either the storage ball consumption or the holding ball consumption by operating the selection. You may do it. In other words, the replay button is used to obtain a game ball (game point) from a stored ball (stored medal) and a game ball (game point) from a stored ball (stored medal) replay button. You may comprise two with a holding ball (pointing) replay button.

  CU3 notifies the addition request | requirement of the number of addition balls = 125 to the P stand 2 after confirming the consumption from a holding ball or a storage ball. Specifically, CU3 displays that a game ball addition process is in progress, and issues a status information request command including serial number = n + 1, game ball addition request = ON, number of additional balls = 125, and addition serial number = m + 1. Transmit to P-station 2. In order to make a game ball addition request, the serial number is counted up to “n + 1”, and the additional serial number is also counted up to “m + 1”. Further, the CU 3 updates the previous last transmission addition serial number to “m + 1” and backs up the data. In response to this, P 2 updates the number of game balls to the number of game balls = 50 (current number of game balls) +125 (number of additional balls) = 175, and updates the last transmission addition serial number to “m + 1” last time. Back up the data. And the P stand 2 returns a response of the state information response including the serial number = n + 1, the number of additional balls = 175, the game ball addition result = OK and the additional serial number = m + 1 to the CU3. Since this is a response to a game ball addition request, the addition serial number is not counted up and remains “m + 1”.

  Thereafter, CU3 transmits a command of status information request including serial number = n + 2, game ball addition request = OFF and addition serial number = m + 1 to P unit 2, P unit 2 has serial number = n + 2, number of additional balls = 175 and A response of the status information response including the addition serial number = m + 1 is returned to CU3.

<< Game Ball Count (Normal) >>
Next, the normal counting process of counting and subtracting a part of the game balls will be described. FIG. 12 shows a case where the counting button is pressed without detecting a card return operation. Therefore, the card return ready state bits transmitted from the CU 3 to the P stand 2 are all OFF (= 0). For this reason, description of the bits in the card return preparation state is omitted below.

  Further, in FIG. 12, the number of balls specified by the inserted recording medium (member card or visitor card) is “0” balls, and the initial number of game balls is “800” balls. Yes.

  Here, an example will be described in which counting in units of 100 points continues while the operation of the counting button is detected, and the counting operation ends when the operation of the counting button is no longer detected.

  First, the CU 3 transmits a status information request command including a serial number = n, a card return ready state = OFF, a counting serial number = m, and a counting response = OFF to the P unit 2. In response to this, the P platform 2 returns a response of the status information response including the serial number = n, the number of gaming balls = 800, the counting serial number = m, the counting ball number = 0, and the counting request = OFF to the CU3.

  In response to the serial number n transmitted from the CU 3, the serial number n + 1 is returned from the P unit 2. The same counting sequence number m is returned from the P base 2 to the counting sequence number m transmitted from the CU 3. This is because the counting sequence number is a special sequence number that is updated when a counting request is generated, and is updated when the counting is completed.

  Thereafter, the player presses the counting button 28. In FIG. 12, immediately after an operation of pressing the count button 28 once, a command for status information request including a serial number = n + 1, a card return ready state = OFF, a count serial number = m, and a count response = OFF is sent from the CU3. It has been transmitted to the P stand 2.

  When the operation of the count button 28 is detected, the P platform 2 transmits a status information response of serial number n + 1, in which the count request value is specifically set to 100, to the CU 3 as a response to the status information request command. However, at this stage, the P base 2 does not execute counting for the counting request. For this reason, in the state information response of the serial number n + 1, the number of game balls is still 800. Since this status information response is a message indicating a counting request, the counting sequence number is counted up to “m + 1”. At this time, the P unit 2 updates the previous last transmission count sequence number and backs up the updated last transmission count sequence number and the count request state ON data.

  CU3 which received the status information response of serial number n + 1 adds the number of balls equivalent to the requested number of balls and updates the display of balls to 100. That is, the CU control unit 323 transmits a count display command to the display control unit 350. The display controller 350 receives the command and controls the display 54 on the P platform 2 side. As a result, the display 54 displays an image in which the number of game balls is counted and the number of balls is decreased, while the number of balls is increased.

  In this case, it is conceivable to perform an effect display such that game balls are guided and counted by each counter one by one. Another example of the effect display may be a display in which the number of game balls is converted to the number of balls in time. For example, the data for the number of balls and the data for the number of balls are shown in a bar graph, and the number of balls in the game ball number is increased while the number of balls in the game ball is increased while the number of balls in the game ball is decreased. The display to move to the bar graph may be repeated. In addition, as another example of the effect display, the current game ball number data and the number of possession balls data are digitally displayed as they are, and the number of possession balls is increased while decreasing the number of game balls, or a part of the number of game balls It is possible to repeat the display for moving the number of balls to the number of balls, and various display effects.

  Further, the CU 3 updates the previous last transmission count sequence number to “m + 1” and backs up the data. Subsequently, the CU 3 transmits a status information request of serial number n + 2, counting serial number m + 1, and counting response = ON to the P base 2 to notify that the requested counting has been completed.

  The P table 2 that has received this status information request finally subtracts the number of game balls by the number corresponding to the number of balls counted = 100, and updates the display on the game ball number display 29 from 800 to 700. At this stage, the count request state of the P base 2 is OFF, but since the count button is continuously pressed, the P base 2 transmits a second count request to the CU 3. That is, a status information response of serial number n + 2 in which the count request value is specifically set to 100 is transmitted to CU3. However, even at this stage, the P base 2 does not perform counting for the counting request. For this reason, in the status information response of the serial number n + 2, the number of game balls = 700. Since this status information response is a message transmitted as a new count request, the count sequence number is incremented to “m + 2”, the previous last transmission count sequence number is updated, and the updated last transmission count sequence number is updated. Back up data with counting request status ON.

  The CU 3 that has received the status information response of the serial number n + 2 determines the rate set in step S516 or step S527 of FIG. 78 (described later) corresponding to the requested number of counting balls, and determines the determined rate (here, 1 The number of balls of 4 balls) is added, and the display of the balls is updated to 200. Further, the CU 3 updates the previous last transmission count sequence number to “m + 2” and backs up the data. Subsequently, the CU 3 transmits a status information request with a serial number n + 3, a count serial number m + 2, and a count response = ON to the P platform 2 to notify that the requested count has been completed.

  The P table 2 that has received this status information request subtracts the number of game balls by the number corresponding to the number of balls counted = 100, and updates the display of the game ball number display 29 from 700 to 600. However, at this stage, the player's hand is separated from the counting button, and the counting operation is completed. For this reason, the P platform 2 notifies the CU 3 of the completion of counting with a status information response of serial number n + 3. That is, with the current number of game balls = 600, a status information response of count request = OFF and count ball count = 0 is transmitted to CU3. In addition, since all the counting operations corresponding to the counting request have been completed, the counting sequence number included in this status information response remains m + 2 and is not updated.

  The CU 3 that has received this status information response determines that the counting is complete. Although not shown, the CU 3 transmits a status information response of serial number n + 4, counting serial number m + 2, card return ready state = OFF, and counting response = OFF to the P base 2.

  As described above, in this embodiment, when the information state response for notifying the number of balls to be counted is transmitted from the P cars to the CU, the game balls for the counting balls are subtracted quickly on the P cards side. In the stage where the information status response for notifying the number of balls is transmitted and the receipt confirmation is received from the CU, the P machines subtract the game balls.

<< Game Ball Count (Count NG) >>
Next, a case where the counting process is NG in the counting process of counting and subtracting a part of the game balls will be described. FIG. 13 shows a case where the counting button is pressed without detecting a card return operation. Therefore, the card return ready state bits transmitted from the CU 3 to the P stand 2 are all OFF (= 0). For this reason, description of the bits in the card return preparation state is omitted below.

  Also, in FIG. 13, the number of balls specified by the inserted recording medium (member card or visitor card) is “0” balls, and the initial number of game balls is “800” balls. Yes.

  Here, an example will be described in which counting in units of 100 points continues while the operation of the counting button is detected, and the counting operation ends when the operation of the counting button is no longer detected.

  First, the CU 3 transmits a status information request command including a serial number = n, a card return ready state = OFF, a counting serial number = m, and a counting response = OFF to the P unit 2. In response to this, the P platform 2 returns a response of the status information response including the serial number = n, the number of gaming balls = 800, the counting serial number = m, the counting ball number = 0, and the counting request = OFF to the CU3.

  In response to the serial number n transmitted from the CU 3, the serial number n + 1 is returned from the P unit 2. The same counting sequence number m is returned from the P base 2 to the counting sequence number m transmitted from the CU 3. This is because the counting sequence number is a special sequence number that is updated when a counting request is generated, and is updated when the counting is completed.

  Thereafter, the player presses the counting button 28. In FIG. 13, immediately after the operation of pressing the count button 28 once, a command for status information request including a serial number = n + 1, a card return ready state = OFF, a count serial number = m, and a count response = OFF is sent from the CU3. It has been transmitted to the P stand 2.

  When the operation of the counting button 28 is detected, the P platform 2 transmits a status information response of the serial number n + 1 in which the count request value is specifically set to 100 as a response to the command of the status information request to the CU 3. However, at this stage, the P base 2 does not execute counting for the counting request. For this reason, in the state information response of the serial number n + 1, the number of game balls is still 800. Further, since this status information response is a message transmitted in response to the counting request, the P table 2 counts up the counting sequence number to “m + 1”, updates the last transmission counting sequence number last time, and updates the previous time. Back up the data of the last transmission counting sequence number and counting request status ON.

  CU3 which received the status information response of the serial number n + 1 normally adds the number of balls equivalent to the requested number of balls and updates the display of balls to 100. However, when the CU 3 cannot receive the status information response from the P table 2 due to a communication error or the like and cannot receive the counting ball, it returns a count reception NG to the P table 2. Specifically, the CU 3 transmits a status information request of serial number n + 2, counting serial number m, and counting response = OFF to the P platform 2 to notify that the requested counting ball has not been received. Since the CU 3 has not received the requested counting ball, the CU 3 transmits a status information request with the previous last transmission counting sequence number m as the counting sequence number without updating the previous last transmitting counting sequence number.

The P-unit 2 that has received this status information request counts down (-1) one last transmission count sequence number without performing subtraction of the number of gaming balls by the number corresponding to the number of counting balls = 100, Back up your data. At this stage, since the count button continues to be pressed, the P platform 2 transmits a second count request to the CU 3. That is, a status information response of serial number n + 2 in which the count request value is specifically set to 100 is transmitted to CU3. However, even at this stage, the P base 2 does not perform counting for the counting request. For this reason, in the status information response of the serial number n + 2, the number of game balls = 800. Since this status information response is a re-count request, the count sequence number is set to the same m + 1 as the previous time, the previous last transmission count sequence number is updated, and the updated last transmission count sequence number and the count request state ON data Back up.

  In response to this, the CU 3 returns a count reception NG to the P base 2. Specifically, the CU 3 transmits a status information request with a serial number n + 3, a counting serial number m, and a counting response = OFF to the P platform 2 to notify the rejection of the request. Since the CU 3 rejects the request, the CU 3 does not update the previous last transmission count sequence number, but transmits the status information request with the previous last transmission count sequence number m as the count sequence number.

The P-unit 2 that has received this status information request counts down (-1) one last transmission count sequence number without performing subtraction of the number of gaming balls by the number corresponding to the number of counting balls = 100, Back up your data. However, at this stage, the player's hand is separated from the counting button, and the counting operation is finished. For this reason, the P platform 2 notifies the CU 3 with a status information response of the counting OFF state number n + 3. That is, a status information response of the count request = OFF and the count ball count = 0 is transmitted to the CU 3 together with the current game ball count = 800.

  As described above, in this embodiment, when the information state response for notifying the number of balls to be counted is transmitted from the P cars to the CU, the game balls for the counting balls are subtracted quickly on the P cards side. However, since the P units are subtracting the game balls at the stage of receiving the information confirmation response from the CU after transmitting the information status response notifying the number of counted balls, the counting recovery process is performed in the case of counting NG. There is no need to do it.

<< Game Ball Count (Card Return) >>
Next, the game ball counting process when returning the card will be described. FIG. 14 is a sequence diagram for explaining the counting process when the player performs a card return operation. In FIG. 14, the number of cards possessed by the inserted recording medium (member card or the like) is 0, and the initial number of gaming balls is 800. First, the CU 3 transmits a status information request command including a serial number = n, a CU opening state = ON, a card return preparation state = OFF, a counting sequence number = m, and a counting response = OFF to the P unit 2. In response to this, the P platform 2 returns a response of the state information response including the serial number = n, the number of game balls = 800, the counting serial number = m, the counting ball number = 0, and the counting request = OFF to the CU3.

  Thereafter, when the player stops the game or moves to another game table, the player presses the “card return” button. However, at the time when the player presses the “card return” button, the number of game balls in the P unit 2 is 800 balls, and the CU 3 determines that the number of game balls in the P unit 2 is not 0. In addition, since the player presses the “card return” button, the CU 3 sets the card return ready state = ON, the state information request including the serial number = n + 1, the CU opening state = ON, the counting sequence number = m, and the counting response = OFF. A command is transmitted to the P unit 2. Note that the CU 3 notifies the P stand 2 of the card return preparation state = ON notification for 10 seconds. Furthermore, since the number of game balls in the P stand 2 is 800 balls and not 0 balls, the CU 3 displays a display for prompting a counting operation on the display 54 or the like as a card return standby.

  In response to the display prompting the counting operation, the player presses the counting button 28 to perform an operation of converting the game ball into a holding ball. The P stand 2 determines that the counting operation for depressing the counting button 28 is a counting operation with the card return preparation state = ON, and processes the counting in a lump instead of counting in units of 100 balls, for example.

  In order to notify the CU 3 of the counting ball number 800 balls obtained by collectively counting the 800 ball balls, the P stand 2 has a serial number = n + 1, a game ball number = 800, and a counting serial number = The response of the status information response including m + 1, the number of counting balls = 800 and the counting request = ON is returned to the CU3. However, at this stage, the P base 2 does not execute counting for the counting request. For this reason, in the state information response of the serial number n + 1, the number of game balls is still 800. Since this status information response is a count request message, the P platform 2 counts up the count sequence number to “m + 1”, updates the previous last transmission count sequence number, and updates the previous last transmission count sequence number. Back up data with counting request status ON.

  In response to this, CU3 determines the rate set in step S516 or step S527 of FIG. 78, which will be described later, for 800 counting balls, and has the determined rate (here, the rate of 4 yen per ball). In addition to the number of balls, 800 balls counted are subtracted from 800 balls to 0 balls. Further, the CU 3 backs up the data of the updated last transmission count sequence number. Then, in order to notify receipt of the counting ball, the CU 3 sends a command of status information request including serial number = n + 2, CU opening state = ON, card return preparation state = ON, counting serial number = m + 1 and counting response = ON. Send to.

  In response to the response from the CU 3, the P stand 2 subtracts 800 counting balls from the 800 gaming balls and displays 0 gaming balls on the display 54 or the like. Further, the P stand 2 notifies the CU 3 that the number of game balls is 0 and the counting is completed, so that the sequence number = n + 2, the number of game balls = 0, the count sequence number = m + 1, the count ball number = 0, and the count request = OFF. A response of the status information response including is returned to CU3. Since the counting request is turned OFF, the counting sequence number remains m + 1 and is transmitted to CU3 without counting up.

  CU3 counts the number of game balls by pressing the count button 28 and counting the number of game balls in a lump before 10 seconds have elapsed since the player pressed the card return button 322, that is, in the card return preparation state. Card is returned to 0, so card return processing is executed. That is, the CU 3 transmits a card return notification command including the serial number = n + 3 to the P unit 2. In response to this, the P platform 2 returns a response of the card return response including the serial number = n + 3, the card ID held on the payout control board 17 and the card insertion time to the CU 3. After returning the card ID and the card insertion time to the CU 3, the card ID and the card insertion time data held on the payout control board 17 are cleared.

  In response, the CU 3 determines whether the card ID stored in the inserted card and the card ID received from the P-unit 2 match, and if they match, returns the inserted card. If they do not match, error processing is performed and reported to the hall server 801 or the like. When the card IDs match, the CU 3 stores the number of balls 800 in the card (inserted card) that has been inserted into the card insertion / discharge port 309 and returns the card to the player. Further, when the player has started the game by depositing without inserting the card into the card insertion / discharge slot 309, the card (stock card) stocked in the card stock section provided in CU3 Store the number of balls 800 and return the card to the player. When the inserted card or stock card is returned, the CU 3 transmits the card ID of the card and the data of the number of balls to the hall server 801, and the hall server 801 associates the card ID of the card with the data of the number of balls. May be stored.

  Thereafter, in order to notify the P stand 2 of the card insertion state OFF, the CU 3 requests a status information request including a serial number = n + 4, a CU opening state = ON, a card insertion state = OFF, a counting serial number = m + 1, and a counting response = OFF. A command is transmitted to the P unit 2. In response to this, the CU 3 transmits a status information request command including the serial number = n + 4, the number of gaming balls = 0, the counting serial number = m + 1, the counting ball number = 0, and the counting response = OFF to the P unit 2.

  Note that the sequence of the game ball counting process when returning the card described with reference to FIG. 14 is not limited to when the card is returned, and the same process can be applied during simple leaving and meal breaks. Here, the simple leaving means that the game is interrupted for a short time of about 5 to 10 minutes in order to allow the player to make a small use. A meal break is a meal or break that is interrupted by a game such as 30 minutes longer than a simple leave.

<< Abnormal Sequence 1 >>
Next, with reference to FIG. 15, a description will be given of the recovery processing of the number of game balls when the status information request is not reached due to the power interruption / communication line interruption. FIG. 15 particularly shows that there is a power interruption / communication line disconnection (for example, when the power supply of the P base 2 is once turned off and then turned on again), and the status information request has not arrived (from the CU 3 to the P base 2). FIG. 11 is a sequence diagram for explaining a counting process in a case where a command has not arrived) and communication partners after recovery match.

  Referring to FIG. 15, CU 3 transmits a status information request including serial number = n to P unit 2 before the power interruption occurs during the game. In response to this, in order to notify the gaming machine information CU3, the P machine 2 transmits a status information response including the serial number = n, the number of game balls = 480, the number of added balls = 3, and the number of subtracted balls = 23 to the CU3. . The P table 2 updates the previous last transmission serial number as the previous game table information to “n”.

  CU3 receives the status information response of serial number = n, updates the previous last transmission serial number to “n”, and backs up. Also, based on the information of the number of game balls = 480, the number of additional balls = 3, and the number of subtracted balls = 23, the number of game balls, the number of added balls, and the number of subtracted balls stored therein are updated.

  Then, after a power interruption occurs in the P stand 2 during the game, when a status information request including a serial number = n + 1 is transmitted from the CU 3 to the P stand 2, the P stand 2 is in a power cut off state. Status information request cannot be received. Thereafter, since the status information response from the P stand 2 is not transmitted, the CU 3 performs control to detect and stop the communication line disconnection after 3 seconds. From the time when the P table 2 transmits the response of the status information response to the CU 3 until the power interruption occurs, the game is continued in the P table 2 and the game table information is changed. The number of game balls = 450, the number of additional balls = 6. Number of balls to be subtracted = 36, which is the latest game table information. On the other hand, the game table information of the number of game balls already transmitted = 480, the number of additional balls = 3, and the number of subtraction balls = 23 is the previous game table information.

  Thereafter, the power failure of the P stand 2 is restored and the P stand 2 starts to operate. When the P table 2 starts operation, first, an authentication sequence is started between the CU 3 and the P table 2, and information including the main chip ID and the payout chip ID is transmitted from the P table 2 to the CU 3. The The CU 3 transmits the received main chip ID and payout chip ID to the upper management server (the key management server 800 via the hall server 801), and whether the main chip ID and the payout chip ID are properly registered. Ask them to check whether they have returned the results. If it is properly registered, an appropriate authentication result is obtained.

  After the authentication sequence, the CU 3 transmits a recovery request including the serial number = 1 and the last last transmission serial number = n to the P unit 2. That is, the CU 3 requests the P unit 2 to notify the recovery information. In response to this, the last final transmission sequence number = n of the received recovery request is equal to the last final transmission sequence number = n backed up inside the P base 2 (specifically, the payout control board 17). Determine whether you are doing it. If they match, it can be determined that the last status information response sent from the P-unit 2 to the CU3 before the communication interruption has reached the CU3. In this case, the status information response is included in the status information response. The game information is updated on the CU 3 side based on the game information to be played. For this reason, in this case, a recovery response (serial number = 1) is returned to the CU 3 as no gaming information storage (specifically, no previous gaming machine information). If the previous last transmission sequence number = n of the received recovery request does not match the previous last transmission sequence number = n backed up inside the P unit 2 (specifically, the payout control board 17), the communication is interrupted. Since it can be determined that the status information response last transmitted from the P stand 2 to the CU 3 before the CU 3 has not reached the CU 3, in this case, the game information is stored (specifically, the previous game stand information) A recovery response (sequence number = 1) including game information is returned to CU3.

  In FIG. 15, CU3 does not store the game information included in the recovery response, and therefore does not perform the addition recovery process. The CU control unit 323 of the CU 3 that has received the recovery response checks whether or not the number of game balls included in the gaming machine information transmitted from the P machine 2 as the recovery response is an appropriate value. The first check process is executed. This first check process will be described later with reference to FIG. Since there is no game information storage, the CU 3 transmits a communication start request including the serial number = 2 to the P unit 2 without transmitting the recovery request 2 to the P unit 2. When the CU 3 transmits a communication start request command to the P base 2, the counting sequence number is cleared to “0” (initial value). The P unit 2 receives the communication start request and transmits a communication start response including the serial number = 2 to the CU 3. Further, after receiving the communication start request, the P platform 2 clears the recovery data (game information) and also clears the counting sequence number to “0” (initial value).

  When communication with the P table 2 is started, the CU 3 transmits a status information request including a serial number = 3 to the P table 2. In response to this, the P table 2 notifies the CU 3 of unreported game table information (the number of game balls as the latest game table information = 450, the number of added balls = 6, the number of subtracted balls = 36) as a status information response. Update the last transmission serial number and back up the data. Specifically, the status information response includes transmission sequence number = 3, number of game balls = 450, number of added balls = 6, and number of subtracted balls = 36. In response to the status information response including unnotified gaming machine information, the CU 3 updates the previous last transmission serial number and backs up the data. The CU control unit 323 of the CU 3 that has received the status information response checks whether or not the number of game balls included in the gaming machine information transmitted as the status information response is an appropriate value. Execute the process. This second check process will be described later with reference to FIG.

<< Abnormal sequence 2 >>
Next, with reference to FIG. 16, a description will be given of the recovery processing of the number of game balls when the status information response has not yet reached due to power interruption / communication line interruption. In particular, FIG. 16 shows that there is a power interruption / communication line disconnection (for example, when the power of the P base 2 is once turned off and then turned on again), and the status information response has not reached (from the P base 2 to the CU 3). FIG. 11 is a sequence diagram for explaining a counting process in a case where a command has not arrived) and communication partners after recovery match.

  Referring to FIG. 16, after a power interruption occurs during a game, a status information response including serial number = n, number of game balls = 480, number of additional balls = 3 and number of subtracted balls = 23 is sent from P unit 2 to CU. When transmitted, the CU cannot receive the status information response because the CU is in a power-off state. After that, since the status information request from the CU 3 is not transmitted, the P stand 2 performs control to detect the communication line disconnection and stop the game after 3 seconds. Specifically, the payout control unit 171 transmits a stop command to the firing control board 31, and the firing control board 31 stops the rotational drive of the firing motor 18. During this 3 seconds, the game is continued in the P table 2 and the game table information is changed, and the number of game balls = 450, the number of additional balls = 6, and the number of subtraction balls = 36, which becomes the latest game table information. On the other hand, the game table information of the number of game balls already transmitted = 480, the number of additional balls = 3, and the number of subtraction balls = 23 is the previous game table information.

  On the other hand, CU3 performs control to forcibly eject the inserted card and return it to the player because the power is cut off. At this time, the number of balls currently held is stored in the card as the number of balls according to the rate set in step S516 or step S527 of FIG. If the number of possessed balls cannot be stored in the card due to a failure of the CU or the like, the hall server 801 periodically receives the number of retained balls from the CU 3 (for example, every 5 seconds) and stores it in a backup manner. The loss may be compensated for by the player based on the stored data (the number of balls). Thereafter, the power-off of the CU 3 is restored, and the CU 3 starts operating. When the CU 3 starts operating, first, an authentication sequence is started between the CU 3 and the P unit 2, and information including the main chip ID and the payout chip ID is transmitted from the P unit 2 to the CU 3. The CU 3 transmits the received main chip ID and payout chip ID to the upper management server (the key management server 800 via the hall server 801), and whether the main chip ID and the payout chip ID are properly registered. Ask them to check whether they have returned the results. If it is properly registered, an appropriate authentication result is obtained.

  After the authentication sequence, the CU 3 transmits a recovery request including the serial number = 1 to the P unit 2. That is, the CU 3 requests the P unit 2 to notify the recovery information. In response to this, in the P base 2, the previous last transmission sequence number of the received recovery request = n−1, and the last final transmission sequence number backed up in the P base 2 (specifically, the payout control board 17) = n Are compared. As a result, since they do not match, it is determined that the state information response transmitted last before the occurrence of the power interruption has not reached CU3. Therefore, the P stand 2 returns a recovery response (serial number = 1) including the game information storage presence (specifically, the previous game stand information presence) to the CU 3 as having unreported game information to the CU 3. To do. That is, the number of game balls = 480, the number of added balls = 3, and the number of subtracted balls = 23, which are the previous game table information, are included in the recovery response and transmitted to the CU3.

  The CU 3 executes the recovery process based on the game information included in the recovery response. However, since the game ball addition request is not transmitted immediately before the communication line disconnection is detected, the addition recovery process is unnecessary. For this reason, after receiving the recovery response, the communication start request is transmitted without transmitting the recovery request 2. The CU 3 executes a first check process before transmitting this communication start request. In the first check process, whether or not the number of game balls included in the game machine information transmitted from the P machine 2 as the recovery response by the CU control unit 323 of the CU 3 that has received the recovery response is an appropriate value Is checked. This first check process will be described later with reference to FIG. The CU 3 transmits a communication start request including the serial number = 2 to the P unit 2 without transmitting the recovery request 2 to the P unit 2. Note that the CU 3 processes the previous gaming machine information received from the P machine 2, updates the previous last transmission serial number, and backs up the data. When the CU 3 transmits a communication start request command to the P unit 2, the counting sequence number is cleared to “0” (initial value). The P unit 2 receives the communication start request and transmits a communication start response including the serial number = 2 to the CU 3. Further, after receiving the communication start request, the P platform 2 clears the recovery data (game information) and also clears the counting sequence number to “0” (initial value).

  When communication with the P table 2 is started, the CU 3 transmits a status information request including a serial number = 3 to the P table 2. In response to this, in the P-unit 2, the unreported game table information (the number of game balls = 450, the number of added balls = 6, the number of subtracted balls) included in the state information response that did not reach the CU 3 before the power failure occurred. = 36) is notified to the CU 3 by a status information response, and the last transmission serial number is updated last time to back up the data. Specifically, the status information response includes transmission sequence number = 3, number of game balls = 450, number of added balls = 6, and number of subtracted balls = 36. In response to the status information response including unnotified gaming machine information, the CU 3 updates the previous last transmission serial number and backs up the data. The CU control unit 323 of the CU 3 that has received the status information response checks whether or not the number of game balls included in the gaming machine information transmitted as the status information response is an appropriate value. Execute the process. This second check process will be described later with reference to FIG.

  If the card ID of the reinserted card is properly read by the card information reading process, whether the read card ID matches the card ID included in the recovery response or not Is determined by the CU control unit 323 of the CU3, and the insertion time of the card inserted at the start of the game before the power interruption occurs is stored in the RAM of the CU control unit 323, and the stored card insertion time and recovery are stored. The CU control unit 323 of the CU 3 may determine whether or not the card insertion times included in the response match. In this case, it is determined that both match, and if there is no addition recovery, the CU 3 transmits a communication start request to the P unit 2. In response to this, the P table 2 clears the recovery data (game information) and returns a communication start response to the CU 3.

  In this embodiment, a card ID and a card insertion time are used as player specifying information that can specify a player when determining the identity of the player. This card ID includes not only the card ID of the member card that identifies the individual player of the member but also the card ID of the visitor card used by the player who visited the store as a visitor. In the case of this visitor card, it is used for an unspecified player and does not specify a specific player individual. That is, in the case of this card ID, whether the player who played the game before the occurrence of the power interruption / communication line disconnection and the player who intends to play the game after the power interruption is restored are the same player. It can be specified whether or not, but it cannot be specified to which specific individual the player is. Therefore, the above “player identification information” is not limited to identifying a specific individual player, and the player who played the game before the occurrence of the power interruption / communication line interruption and the game after the power interruption recovery is performed. It is a broad concept that includes information that can be used to determine the identity of the player who is trying to correct.

<< Abnormal sequence 3 >>
Next, with reference to FIG. 17, another recovery process of the number of game balls when the status information response is unreached due to power interruption / communication line interruption will be described. In particular, FIG. 17 shows that there is a power interruption / communication line disconnection (for example, when the power supply of CU3 is once turned off and then turned on again), and the status information response has not reached (a command is sent from P unit 2 to CU3). It is a sequence diagram for explaining the counting process in the case where the communication partner after recovery is unmatched. This power OFF / ON can also be turned OFF / ON, for example, by failure of the CU3, or by manually turning the power OFF / ON, or by inserting / removing the CU3 from / from the card unit holder.

  Referring to FIG. 17, after a power interruption occurs during a game, a status information response including serial number = n, number of game balls = 480, number of additional balls = 3 and number of subtracted balls = 23 is sent from P unit 2 to CU. When transmitted, the CU cannot receive the status information response because the CU is in a power-off state. After that, since the status information request from the CU 3 is not transmitted, the P stand 2 performs control to detect the communication line disconnection and stop the game after 3 seconds. Specifically, the payout control unit 171 transmits a stop command to the firing control board 31, and the firing control board 31 stops the rotational drive of the firing motor 18. During this 3 seconds, the game is continued in the P table 2 and the game table information is changed, and the number of game balls = 450, the number of additional balls = 6, and the number of subtraction balls = 36, which becomes the latest game table information. On the other hand, the game table information of the number of game balls already transmitted = 480, the number of additional balls = 3, and the number of subtraction balls = 23 is the previous game table information.

  On the other hand, CU3 performs control to forcibly eject the inserted card and return it to the player because the power is cut off. Thereafter, the power failure of the CU 3 is restored and the power is turned on, and the CU 3 is replaced and a new CU 3 starts operating.

  In addition, when CU3 which was operating before CU replacement has stored the number of balls, the number of balls may be stored in another card (for example, a card inside the CU) and discharged. At that time, if the number of balls cannot be stored in the card due to a failure of the CU, etc., the number of balls is received regularly from the CU3 (for example, every 5 seconds) and stored in a backup. The player may be compensated for the loss based on the data stored in the server 801 (the number of holding balls).

  When the exchanged CU3 starts operating, first, an authentication sequence is started between the CU3 and the P unit 2, and information including the main chip ID and the payout chip ID is transmitted from the P unit 2 to the CU3. Is done. The CU 3 transmits the received main chip ID and payout chip ID to the upper management server (the key management server 800 via the hall server 801), and whether the main chip ID and the payout chip ID are properly registered. Ask them to check whether they have returned the results. If it is properly registered, an appropriate authentication result is obtained.

  After the authentication sequence, the CU 3 transmits a recovery request including the serial number = 1 to the P unit 2. That is, the CU 3 requests the P unit 2 to notify the recovery information. However, since CU3 has been exchanged, it does not have a previous last transmission serial number. In response to this, the P-unit 2 returns a recovery response (serial number = 1) including game information storage presence to the CU 3 as having unreported game information with respect to the CU 3. The recovery information notified to the CU 3 by this recovery response includes the previous last transmission sequence number = n, the card ID of the inserted card, the card insertion time, the previous last transmission addition sequence number = m, and the previous game machine information. . The previous game table information includes the number of game balls = 480, the number of additional balls = 3, and the number of subtraction balls = 23.

  The CU control unit 323 of the CU 3 that has received the recovery response first checks whether or not the number of game balls included in the gaming machine information transmitted from the P machine 2 as the recovery response is an appropriate value. Execute the check process. This first check process will be described later with reference to FIG. The CU 3 transmits a communication start request including the serial number = 2 to the P unit 2 without transmitting the recovery request 2 to the P unit 2. CU3 performs recovery processing (game balls = 480, cumulative ball count = + 3, subtractive ball count = + 23) using the previous game machine information received from P machine 2, and sets the last transmission serial number of the previous game. Update and back up the data, card ID, and card insertion time. When the CU 3 transmits a communication start request command to the P unit 2, the counting sequence number is cleared to “0” (initial value). The P unit 2 receives the communication start request and transmits a communication start response including the serial number = 2 to the CU 3. Further, after receiving the communication start request, the P platform 2 clears the recovery data (game information) and also clears the counting sequence number to “0” (initial value).

  When communication with the P table 2 is started, the CU 3 transmits a status information request including a serial number = 3 to the P table 2. In response to this, the P table 2 notifies the CU 3 of unreported game table information (the number of game balls = 450, the number of added balls = 6, the number of subtracted balls = 36) as a status information response. Specifically, the status information response includes transmission sequence number = 3, number of game balls = 450, number of added balls = 6, and number of subtracted balls = 36. Upon receiving a status information response including unnotified gaming machine information, the CU 3 waits for insertion of a card that was being inserted last time or waits for a store clerk remote control operation (game ball count). When a card is inserted in this state, the CU 3 reads the ID of the inserted card with a card reader / writer. Then, it is determined whether or not the read card ID matches the recovery card ID stored based on the recovery response (the card ID of the previously inserted card). If it is determined that they match, the store clerk waits for a remote control operation to resume the game. If there is a remote control operation, a card insertion notification command including the store code and the SC board ID is transmitted from the CU 3 to the P stand 2. The P unit 2 backs up the store code and SC board ID data received at the time of the previous card insertion before the communication interruption to the RAM or the like of the payout control unit 171 and is transmitted from the backed up data and the CU3. The store code and the SC board ID are compared to determine whether or not they match. If they match, the game can be resumed. Note that a card insertion notification command including a store code and an SC board ID may be transmitted from the CU 3 to the P stand 2 without waiting for a remote control operation. In the case of mismatch, error processing such as invalidating the game ball number data of the P unit 2 is performed, for example. Alternatively, an error notification may be made instead of or in addition to this. Further, it may be controlled to forcibly eject the inserted card and return it to the player.

  The CU control unit 323 of the CU 3 that has received the status information response checks whether or not the number of game balls included in the gaming machine information transmitted as the status information response is an appropriate value. Execute the process. This second check process will be described later with reference to FIG.

<< Abnormal sequence 4 >>
Next, the recovery process of the number of balls to be added when the addition request is not reached due to power-off / communication line disconnection will be described. FIG. 18 illustrates the counting process when the addition request has not yet reached (the command for the addition request from the CU 3 to the P unit 2 has not yet reached) due to power interruption or communication line disconnection, and the communication counterparts after recovery match. FIG.

  In FIG. 18, the initial number of game balls is 50 balls. First, the CU 3 transmits a status information request command including a serial number = n and an addition serial number = m to the P unit 2. In response to this, the P platform 2 returns a response of the status information response including the serial number = n, the number of game balls = 50, and the additional serial number = m to the CU3. Since the count request included in the response of the status information response is OFF (not shown), the count serial number remains m and is transmitted to the CU 3 without counting up.

  Thereafter, the player presses the replay button. Therefore, CU3 confirms the consumption of the stored ball, and sends a command for status information request including serial number = n + 1, game ball addition request = ON, number of additional balls = 125 balls, and addition serial number = m + 1 to P unit 2, Notify the information that converted the stored ball into a game ball. At this time, the CU 3 confirms the consumption of the stored balls, sets the number of balls to be added = 125, and backs up the data of the previous last transmission addition serial number and the addition request state ON.

  However, after the player presses the replay button and before receiving the command for requesting the state information, the P stand 2 is turned off and stops operating. Therefore, the P base 2 cannot receive the status information request command from the CU 3.

  CU3 cannot retransmit the response for 200 milliseconds after the command transmission because P-station 2 is stopped, and therefore retransmits the command up to 14 times. The CU 3 detects a communication line disconnection by not receiving a response even if the command is retransmitted.

  Thereafter, the power failure is restored at the P base 2, and the P base 2 starts operating. When the P table 2 starts operation, first, an authentication sequence is started between the CU 3 and the P table 2, and information including the main chip ID and the payout chip ID is transmitted from the P table 2 to the CU 3. The The CU 3 sends the received main chip ID and payout chip ID to the upper management server, asks whether the main chip ID and the payout chip ID are properly registered, and has the result returned. . If it is properly registered, an appropriate authentication result is obtained.

  After the authentication sequence, the CU 3 transmits a recovery request to the P unit 2. That is, the CU 3 requests the P unit 2 to notify the recovery information. In response to this, the P machine 2 returns the recovery information backed up inside the P machine 2 (specifically, the payout control board 17) to the CU 3 as a response based on the received recovery request command. Here, the last last transmission addition serial number = m is transmitted.

  Upon receiving the recovery response, the CU 3 determines whether or not the previous last transmission addition sequence number of the recovery information matches the stored previous last transmission addition sequence number. When CU3 has a larger value (newer) than the last transmission addition sequence number = m + 1 stored in CU3 being backed up compared to the final transmission addition sequence number = m of the recovery data of P unit 2 (mismatch) Then, it is determined that the previous status information request command has not been reached, and the addition recovery process is performed.

  As a specific addition recovery process, recovery of the number of added balls = 125 balls is requested to the P unit 2. Therefore, the CU 3 transmits a recovery request 2 (number of balls to be added = 125, previous last transmission addition serial number = m + 1) to the P unit 2.

  The P table 2 performs an addition process to the number of balls to be added included in the recovery request 2, updates the previous last transmission addition serial number, and backs up the data. At this timing, an addition process that has not been realized due to power-off is realized, and the number of game balls matches on the CU3 side and the P stand 2 side. Further, the P platform 2 returns a response 2 indicating that the addition processing is OK to the CU 3 (recovery response 2 (processing result = processing OK)). CU3 which received it clears the addition request state. The CU control unit 323 of the CU 2 that has received the recovery response 2 determines whether or not the number of game balls included in the gaming machine information transmitted from the P machine 2 as the above-described recovery response is an appropriate value. The third check process for checking is executed. This third check process will be described later with reference to FIG.

  Further, the CU 3 transmits a communication start request to the P unit 2. In response to this, the P table 2 clears the recovery data (game information) and returns a communication start response to the CU 3. Further, the CU 3 transmits a status information request to the P unit 2. In response to this, the P table 2 notifies the CU 3 of unreported game table information (number of game balls = 175) as a status information response. The CU control unit 323 of the CU 3 that has received the status information response performs a second check process for checking whether or not the number of game balls included in the gaming machine information transmitted as the status information response is an appropriate value. Execute. This second check process will be described later with reference to FIG.

  Here, a case where a replay button for starting a game by paying out a stored ball has been described has been described, but the same operation is performed when a ball paying button for starting a game by paying out a ball is pressed.

<< Abnormal sequence 5 >>
Next, the recovery process of the number of balls to be added when the addition response is not reached due to power interruption / communication line interruption will be described. FIG. 19 particularly illustrates the counting process when the addition response has not reached (the response to the addition response from the P base 2 to the CU 3 has not reached) due to power interruption or communication line disconnection, and the communication counterparts after recovery match. FIG.

  In FIG. 19, the initial number of game balls is 50 balls. First, the CU 3 transmits a status information request command including a serial number = n and an addition serial number = m to the P unit 2. In response to this, the P platform 2 returns a response of the status information response including the serial number = n, the number of game balls = 50, and the additional serial number = m to the CU3. Since the count request included in the response of the status information response is OFF (not shown), the count serial number remains m and is transmitted to the CU 3 without counting up.

  Thereafter, the player presses the replay button. Therefore, CU3 confirms the consumption of the stored ball, and sends a command for status information request including serial number = n + 1, game ball addition request = ON, number of additional balls = 125 balls, and addition serial number = m + 1 to P unit 2, Notify the information that converted the stored ball into a game ball. At this time, the CU 3 confirms the consumption of the stored balls, sets the number of balls to be added = 125, and backs up the data of the previous last transmission addition serial number and the addition request state ON.

  Thereafter, a power failure occurs at CU3, and the operation of CU3 stops. However, the P stand 2 cannot detect that the operation of the CU 3 is stopped immediately after the power failure occurs in the CU 3. In order for the P unit 2 to detect a communication line disconnection, a period in which the next command cannot be received from the CU 3 for one second or longer is required.

  For this reason, the P unit 2 does not know that the operation of the CU3 is stopped, receives the command for requesting the status information of the CU3, the serial number = n + 1, the number of game balls = 175, the game ball addition result = OK and the addition serial number. Response of the status information response including = m + 1 is returned to CU3. However, the response of the status information response sent back to CU3 does not reach CU3 because the operation of CU3 is stopped. The P machine 2 returns a response of the status information response to the CU 3, updates the last transmission addition serial number last time, and backs up the updated data and the number of game balls = 175.

  Thereafter, the power failure is restored at CU3, and CU3 starts operating. When the CU 3 starts operating, first, an authentication sequence is started between the CU 3 and the P unit 2, and information including the main chip ID and the payout chip ID is transmitted from the P unit 2 to the CU 3. The CU 3 sends the received main chip ID and payout chip ID to the upper management server, asks whether the main chip ID and the payout chip ID are properly registered, and has the result returned. . If it is properly registered, an appropriate authentication result is obtained.

  After the authentication sequence, the CU 3 transmits a recovery request including the last final transmission sequence number = n + 1 to the P unit 2. That is, the CU 3 requests the P unit 2 to notify the recovery information. In response to this, the P base 2 returns the recovery information backed up in the P base 2 (specifically, the payout control board 17) to the CU 3 as a response based on the received recovery request command (recovery response). (Previous last transmission sequence number = n + 1, Previous last transmission addition sequence number = m + 1)). The recovery information includes the last last transmission sequence number = n + 1, the card ID, the card insertion time, and the last last transmission addition sequence number = m + 1.

  Upon receiving the recovery response, the CU 3 determines whether or not the card ID and card insertion time of the recovery information match the stored card ID and card insertion time. If the card ID and the card insertion time match and CU3 matches the previous last transmission addition sequence number = m + 1 of the recovery data of P unit 2 and the last final transmission addition sequence number = m + 1 stored in CU3, the addition recovery Clear the addition request state without requesting processing. In addition, the CU control unit 323 of the CU 3 that has received the recovery response checks whether or not the number of game balls included in the gaming machine information transmitted from the P machine 2 as a recovery response is an appropriate value. The first check process is executed. This first check process will be described later with reference to FIG.

  Further, the CU 3 transmits a communication start request to the P unit 2. In response to this, the P base 2 returns a communication start response to the CU 3.

  Here, a case where a replay button for starting a game by paying out a stored ball has been described has been described, but the same operation is performed when a ball paying button for starting a game by paying out a ball is pressed.

<< Abnormal Sequence 6 >>
Next, another recovery process of the number of balls to be added when the addition response is not reached due to power interruption / communication line interruption will be described. FIG. 20 particularly illustrates the counting process when the addition response has not reached (the response to the addition response from the P base 2 to the CU 3 has not reached) due to power interruption or communication line disconnection, and the communication counterparts after recovery match. FIG.

  In FIG. 20, the initial number of game balls is 50 balls. First, the CU 3 transmits a status information request command including a serial number = n and an addition serial number = m to the P unit 2. In response to this, the P platform 2 returns a response of the status information response including the serial number = n, the number of game balls = 50, and the additional serial number = m to the CU3. Since the count request included in the response of the status information response is OFF (not shown), the count serial number remains m and is transmitted to the CU 3 without counting up.

  Thereafter, the player presses the replay button. Therefore, CU3 confirms the consumption of the stored ball, and sends a command for status information request including serial number = n + 1, game ball addition request = ON, number of additional balls = 125 balls, and addition serial number = m + 1 to P unit 2, Notify the information that converted the stored ball into a game ball. At this time, the CU 3 confirms the consumption of the stored balls, sets the number of balls to be added = 125, and backs up the data of the previous last transmission addition serial number and the addition request state ON.

  Thereafter, a power failure occurs at CU3, and the operation of CU3 stops. However, the P stand 2 cannot detect that the operation of the CU 3 is stopped immediately after the power failure occurs in the CU 3. In order for the P unit 2 to detect a communication line disconnection, a period in which the next command cannot be received from the CU 3 for one second or longer is required.

  For this reason, the P unit 2 receives the command for requesting the status information of the CU3 and processes the addition request without knowing that the operation of the CU3 is stopped. However, for some reason (for example, the number of game balls has reached the upper limit), a situation in which game balls cannot be added occurs. In this case, the P stand 2 returns a response of the state information response including the serial number = n + 1, the number of game balls = 50, the game ball addition result = NG and the addition serial number = m to the CU 3. However, the response of the status information response sent back to CU3 does not reach CU3 because the operation of CU3 is stopped. In addition, since the game ball addition abnormality has occurred in the P unit 2, the addition ball from the CU 3 cannot be processed, and the previous last transmission addition serial number = m is not updated.

  Thereafter, the power failure is restored at CU3, and CU3 starts operating. In addition, in P stand 2, it is in the state of game ball addition abnormality. When the CU 3 starts operating, first, an authentication sequence is started between the CU 3 and the P unit 2, and information including the main chip ID and the payout chip ID is transmitted from the P unit 2 to the CU 3. The CU 3 sends the received main chip ID and payout chip ID to the upper management server, asks whether the main chip ID and the payout chip ID are properly registered, and has the result returned. . If it is properly registered, an appropriate authentication result is obtained.

  After the authentication sequence, the CU 3 transmits a recovery request including the last final transmission sequence number = n + 1 to the P unit 2. That is, the CU 3 requests the P unit 2 to notify the recovery information. In response to this, the P base 2 returns the recovery information backed up in the P base 2 (specifically, the payout control board 17) to the CU 3 as a response based on the received recovery request command (recovery response). (Previous last transmission sequence number = n + 1, Previous last transmission addition sequence number = m)). The recovery information includes the last last transmission sequence number = n + 1, the card ID, the card insertion time, and the last last transmission addition sequence number = m.

  Upon receiving the recovery response, the CU 3 determines whether or not the card ID and card insertion time of the recovery information match the stored card ID and card insertion time. If the card ID and the card insertion time match and CU3 does not match the last transmission addition sequence number = m of the recovery data of P unit 2 and the last transmission addition sequence number = m + 1 stored in CU3, the addition recovery Request processing. For this reason, the CU 3 transmits the recovery request 2 including the last final transmission addition serial number = m + 1 and the number of additional balls = 125 to the P unit 2.

  In response to this, the P stand 2 notifies the recovery response 2 that the game ball addition is not processed (game ball addition NG) due to the game ball addition abnormality. The recovery response 2 includes recovery result = processing NG.

  CU3 which received it performs the 3rd check mentioned later. Further, the CU 3 transmits a communication start request to the P unit 2. In response to this, the P base 2 returns a communication start response to the CU 3.

  Further, the CU 3 transmits a status information request including the game ball addition request = ON, the number of addition balls = 125, and the addition serial number = m + 1 to the P unit 2 in order to notify the P unit 2 of the addition request again. Receiving this, the P stand 2 is in an addition abnormal state, and transmits a state information response including the number of game balls = 50, a game ball addition result = NG, and an addition sequence number = m to the CU 3. The CU control unit 323 of the CU 3 that has received the status information response performs a second check process for checking whether or not the number of game balls included in the gaming machine information transmitted as the status information response is an appropriate value. Execute. This second check process will be described later with reference to FIG.

  Here, a case where a replay button for starting a game by paying out a stored ball has been described has been described, but the same operation is performed when a ball paying button for starting a game by paying out a ball is pressed.

<< Abnormal sequence 7 >>
Next, another recovery process of the number of balls to be added when the addition request has not been reached due to power interruption / communication line interruption will be described. FIG. 21 explains the counting process when the addition request has not yet reached due to power interruption or communication line disconnection (addition request command from CU3 to P stand 2 has not been reached) and the communication partners after restoration do not match. FIG.

  In FIG. 21, the initial number of game balls is 50 balls. First, the CU 3 transmits a status information request command including a serial number = n and an addition serial number = m to the P unit 2. In response to this, the P platform 2 returns a response of the status information response including the serial number = n, the number of game balls = 50, and the additional serial number = m to the CU3. Since the count request included in the response of the status information response is OFF (not shown), the count serial number remains m and is transmitted to the CU 3 without counting up.

  Thereafter, the player presses the replay button. Therefore, CU3 confirms the consumption of the stored ball, and sends a command for status information request including serial number = n + 1, game ball addition request = ON, number of additional balls = 125 balls, and addition serial number = m + 1 to P unit 2, Notify the information that converted the stored ball into a game ball. At this time, the CU 3 confirms the consumption of the stored balls, sets the number of balls to be added = 125, and backs up the data of the previous last transmission addition serial number and the addition request state ON.

  However, after the player presses the replay button and before receiving the command for requesting the state information, the P stand 2 is turned off and stops operating. Therefore, the P base 2 cannot receive the status information request command from the CU 3.

  CU3 cannot retransmit the response for 200 milliseconds after the command transmission because P-station 2 is stopped, and therefore retransmits the command up to 14 times. The CU 3 detects a communication line disconnection by not receiving a response even if the command is retransmitted.

  Thereafter, the power failure is restored at the P base 2, and the P base 2 is further replaced and the new P base 2 starts operating. When the P table 2 starts operation, first, an authentication sequence is started between the CU 3 and the P table 2, and information including the main chip ID and the payout chip ID is transmitted from the P table 2 to the CU 3. The The CU 3 sends the received main chip ID and payout chip ID to the upper management server, asks whether the main chip ID and the payout chip ID are properly registered, and has the result returned. . If it is properly registered, an appropriate authentication result is obtained. Note that the CU 3 performs addition recovery even when the P stand 2 is replaced.

  After the authentication sequence, the CU 3 transmits a recovery request to the P unit 2. That is, the CU 3 requests the P unit 2 to notify the recovery information. In response to this, the P machine 2 returns the recovery information backed up inside the P machine 2 (specifically, the payout control board 17) to the CU 3 as a response based on the received recovery request command. However, since the P base 2 is newly exchanged, the previous last transmission addition serial number is not backed up, and the initial value “0” is transmitted to the CU 3.

  Upon receiving the recovery response, the CU 3 determines whether or not the previous last transmission addition sequence number of the recovery information matches the stored previous last transmission addition sequence number. If the last transmission addition sequence number = 0 of the recovery data of P unit 2 and the previous last transmission addition sequence number = m + 1 stored in the CU3 being backed up do not match, CU3 has not issued a previous status information request command. It is determined that it has been reached, and addition recovery processing is performed. As a specific addition recovery process, recovery of the number of added balls = 125 balls is requested to the P unit 2. Therefore, the CU 3 transmits a recovery request 2 (number of balls to be added = 125, previous last transmission addition serial number = m + 1) to the P unit 2.

  The P table 2 performs an addition process to the number of balls to be added included in the recovery request 2, updates the previous last transmission addition serial number, and backs up the data. Further, the P platform 2 returns a response 2 indicating that the addition processing is OK to the CU 3 (recovery response 2 (processing result = processing OK)). CU3 which received it clears the addition request state. The CU control unit 323 of the CU 2 that has received the recovery response 2 determines whether or not the number of game balls included in the gaming machine information transmitted from the P machine 2 as the above-described recovery response is an appropriate value. The third check process for checking is executed. This third check process will be described later with reference to FIG.

  Further, the CU 3 transmits a communication start request to the P unit 2. In response to this, the P table 2 clears the recovery data (game information) and returns a communication start response to the CU 3. Further, the CU 3 transmits a status information request to the P unit 2. In response to this, the P table 2 notifies the CU 3 of unreported game table information (number of game balls = 175) as a status information response. The CU control unit 323 of the CU 3 that has received the status information response performs a second check process for checking whether or not the number of game balls included in the gaming machine information transmitted as the status information response is an appropriate value. Execute. This second check process will be described later with reference to FIG.

  Here, a case where a replay button for starting a game by paying out a stored ball has been described has been described, but the same operation is performed when a ball paying button for starting a game by paying out a ball is pressed.

<< Abnormal sequence 8 >>
Next, the recovery process of the number of balls when the count response is not reached due to power-off / communication line disconnection will be described. FIG. 22 particularly illustrates the counting process when the counting response is not reached (the counting response command from the CU 3 to the P unit 2 has not reached) due to power interruption or communication line disconnection, and the communication counterparts after recovery match. FIG.

  In FIG. 22, the initial number of possessed balls is 0 and the number of game balls is 500. First, the CU 3 transmits a status information request command including a sequence number = n, a count sequence number = m, and a count response = OFF to the P unit 2. Thereafter, in the P platform 2, the count button 28 is pressed, and a count request is transmitted to the CU3. Specifically, the P stand 2 returns a response of the status information response including the serial number = n, the number of game balls = 500, the counting serial number m + 1, the counting ball number = 100, and the counting request = ON to the CU3. In addition, the P-unit 2 notifies the CU 3 of the number of gaming balls = 500, the number of counting balls = 100, and the counted counting sequence number = m + 1, updates the previous last transmission counting sequence number, and updates the updated data and counting request state ON. Back up your data.

  In response, CU3 determines the rate set in step S516 or step S527 of FIG. 78, which will be described later, and adds the counted number of balls to the determined number of balls (the rate of 4 yen per ball here). Add the number of balls to be equal to 100, update the last transmission count sequence number last time, and back up the updated data. However, after the P table 2 receives the status information request command, the power supply is cut off and the operation stops. For this reason, the P base 2 cannot receive a status information request command including the serial number = n + 1, the count serial number = m + 1, and the count response = ON from the CU 3. That is, in the P base 2, the count response from the CU 3 is not reached.

  CU3 cannot retransmit the response for 200 milliseconds after the command transmission because P-station 2 is stopped, and therefore retransmits the command up to 14 times. The CU 3 detects a communication line disconnection by not receiving a response even if the command is retransmitted.

  Thereafter, the power failure is restored at the P base 2, and the P base 2 starts operating. When the P table 2 starts operation, first, an authentication sequence is started between the CU 3 and the P table 2, and information including the main chip ID and the payout chip ID is transmitted from the P table 2 to the CU 3. The The CU 3 sends the received main chip ID and payout chip ID to the upper management server, asks whether the main chip ID and the payout chip ID are properly registered, and has the result returned. . If it is properly registered, an appropriate authentication result is obtained.

  After the authentication sequence, the CU 3 transmits a recovery request to the P unit 2. That is, the CU 3 requests the P unit 2 to notify the recovery information. In response to this, the P base 2 returns the recovery information backed up in the P base 2 (specifically, the payout control board 17) as a response to the CU 3 based on the received recovery request command. Since the stored last last transmission count sequence number = m + 1 and the last last transmission count sequence number = m + 1 received from the CU 3 match, the P unit 2 performs a process of subtracting the counted number of balls from the number of game balls. Execute and turn off the counting request state. That is, the P stand 2 is updated from the number of game balls = 500 to the number of game balls = 400 at this time.

  The CU control unit 323 of the CU 3 that has received the recovery response first checks whether or not the number of game balls included in the gaming machine information transmitted from the P machine 2 as the recovery response is an appropriate value. Execute the check process. This first check process will be described later with reference to FIG. Since CU3 does not perform addition recovery processing, CU3 transmits a communication start request including serial number = 2 to P unit 2 without transmitting recovery request 2 to P unit 2. Note that the CU 3 processes the previous gaming machine information received from the P machine 2, updates the previous last transmission serial number, and backs up the data. When the CU 3 transmits a communication start request command to the P unit 2, the counting sequence number is cleared to “0” (initial value). The P unit 2 receives the communication start request and transmits a communication start response including the serial number = 2 to the CU 3. Further, after receiving the communication start request, the P platform 2 clears the recovery data (game information) and also clears the counting sequence number to “0” (initial value).

  When communication with the P table 2 is started, the CU 3 transmits a status information request including a serial number = 3 to the P table 2. In response to this, the P table 2 notifies the CU 3 of unreported game table information (number of game balls = 400) as a status information response. Specifically, the status information response includes transmission sequence number = 3 and number of game balls = 400. The CU control unit 323 of the CU 3 that has received the status information response performs a second check process for checking whether or not the number of game balls included in the gaming machine information transmitted as the status information response is an appropriate value. Execute. This second check process will be described later with reference to FIG.

<< Abnormal system 9 >>
Next, a recovery process for the number of counting balls when the count request is not reached due to power-off / communication line disconnection will be described. FIG. 23 particularly illustrates the counting process when the counting request is not reached (the counting request command from the P unit 2 to the CU 3 is not reached) due to power interruption or communication line disconnection, and the communication counterparts after recovery match. FIG.

  In FIG. 23, the initial number of possessed balls is 0 and the number of game balls is 500. First, the CU 3 transmits a status information request command including a sequence number = n, a count sequence number = m, and a count response = OFF to the P unit 2. Thereafter, in the P platform 2, the count button 28 is pressed, and a count request is transmitted to the CU3. Specifically, the P stand 2 returns a response of the status information response including the serial number = n, the number of game balls = 500, the counting serial number m + 1, the counting ball number = 100, and the counting request = ON to the CU3. In addition, the P-unit 2 notifies the CU 3 of the number of gaming balls = 500, the number of counting balls = 100, and the counted counting sequence number = m + 1, updates the previous last transmission counting sequence number, and updates the updated data and counting request state ON. Back up your data.

  However, before the CU 3 receives the status information response command, the power is cut off and the operation stops. That is, CU2 has not yet reached the count request from P table 2. Thereafter, since the status information request from the CU 3 is not transmitted, the P stand 2 performs control to detect the communication line disconnection and stop the game after 3 seconds. Specifically, the payout control unit 171 transmits a stop command to the firing control board 31, and the firing control board 31 stops the rotational drive of the firing motor 18.

  Thereafter, the power failure is restored at CU3, and CU3 starts operating. When the CU 3 starts operating, first, an authentication sequence is started between the CU 3 and the P unit 2, and information including the main chip ID and the payout chip ID is transmitted from the P unit 2 to the CU 3. The CU 3 sends the received main chip ID and payout chip ID to the upper management server, asks whether the main chip ID and the payout chip ID are properly registered, and has the result returned. . If it is properly registered, an appropriate authentication result is obtained.

  After the authentication sequence, the CU 3 transmits a recovery request to the P unit 2. That is, the CU 3 requests the P unit 2 to notify the recovery information. In response to this, the P machine 2 returns the recovery information backed up inside the P machine 2 (specifically, the payout control board 17) to the CU 3 as a response based on the received recovery request command. The P-unit 2 does not execute the process of subtracting the counted number of balls from the number of gaming balls because the stored last last transmission number sequence number = m + 1 and the last last transmission number sequence number = m received from the CU 3 do not match. The count request state is turned OFF. That is, the P table 2 cancels the count request transmitted immediately before the occurrence of the power interruption, and maintains the number of game balls = 500 at this time.

  The CU control unit 323 of the CU 3 that has received the recovery response first checks whether or not the number of game balls included in the gaming machine information transmitted from the P machine 2 as the recovery response is an appropriate value. Execute the check process. This first check process will be described later with reference to FIG. Since CU3 does not perform addition recovery processing, CU3 transmits a communication start request including serial number = 2 to P table 2 without transmitting recovery request 2 to P table 2. Note that the CU 3 processes the previous gaming machine information received from the P machine 2, updates the previous last transmission serial number, and backs up the data. When the CU 3 transmits a communication start request command to the P unit 2, the counting sequence number is cleared to “0” (initial value). The P unit 2 receives the communication start request and transmits a communication start response including the serial number = 2 to the CU 3. Further, after receiving the communication start request, the P platform 2 clears the recovery data (game information) and also clears the counting sequence number to “0” (initial value).

  When communication with the P table 2 is started, the CU 3 transmits a status information request including a serial number = 3 to the P table 2. Receiving it, the P table 2 notifies the CU 3 of unreported game table information (number of game balls = 500) by a status information response. Specifically, the status information response includes a transmission sequence number = 3 and the number of game balls = 500. The CU control unit 323 of the CU 3 that has received the status information response performs a second check process for checking whether or not the number of game balls included in the gaming machine information transmitted as the status information response is an appropriate value. Execute. This second check process will be described later with reference to FIG.

<< Abnormal Sequence 10 >>
Next, another recovery process of the number of counting balls when the counting response is not reached due to the power interruption / communication line interruption will be described. FIG. 24 particularly illustrates the counting process when the counting response is not reached (the counting response command from the CU 3 to the P unit 2 has not reached) due to power interruption or communication line disconnection, and the communication counterparts after recovery match. FIG.

  In FIG. 24, the initial number of balls is 0 and the number of game balls is 500. First, the CU 3 transmits a status information request command including a sequence number = n, a count sequence number = m, and a count response = OFF to the P unit 2. Thereafter, in the P platform 2, the count button 28 is pressed, and a count request is transmitted to the CU3. Specifically, the P stand 2 returns a response of the status information response including the serial number = n, the number of game balls = 500, the counting serial number m + 1, the counting ball number = 100, the counting serial number m + 1, and the counting request = ON to the CU3. . In addition, the P-unit 2 notifies the CU 3 of the number of gaming balls = 500, the number of counting balls = 100, and the counted counting sequence number = m + 1, updates the previous last transmission counting sequence number, and updates the updated data and counting request state ON. Back up your data.

  In response to this, the CU 3 executes a process of adding the number of balls to the number of balls, but some abnormality occurs and the addition process cannot be performed. For this reason, the CU 3 transmits a status information request command including a counting sequence number = m and a counting response = OFF (because of an abnormal counting state). However, after receiving the command for requesting the status information, the P base 2 has been powered off and has stopped operating. Therefore, the P base 2 cannot receive the status information request command from the CU 3. That is, in the P base 2, the count response from the CU 3 is not reached.

  CU3 cannot retransmit the response for 200 milliseconds after the command transmission because P-station 2 is stopped, and therefore retransmits the command up to 14 times. The CU 3 detects a communication line disconnection by not receiving a response even if the command is retransmitted.

  Thereafter, the power failure is restored at the P base 2, and the P base 2 starts operating. When the P table 2 starts operation, first, an authentication sequence is started between the CU 3 and the P table 2, and information including the main chip ID and the payout chip ID is transmitted from the P table 2 to the CU 3. The The CU 3 sends the received main chip ID and payout chip ID to the upper management server, asks whether the main chip ID and the payout chip ID are properly registered, and has the result returned. . If it is properly registered, an appropriate authentication result is obtained.

  After the authentication sequence, the CU 3 transmits a recovery request to the P unit 2. That is, the CU 3 requests the P unit 2 to notify the recovery information. In response to this, the P machine 2 returns the recovery information backed up inside the P machine 2 (specifically, the payout control board 17) to the CU 3 as a response based on the received recovery request command. In the P unit 2, the stored last last transmission count sequence number = m + 1 and the last last transmission count sequence number received from the CU 3 are not equal to each other (m is not updated because of a count error). The process of subtracting the counted number of balls from the number of gaming balls is not executed, the counting request state is turned off, and the last last transmission counting number is decreased by 1 (−1). At this time, the P stand 2 cancels the count request before the occurrence of the power interruption and maintains the number of game balls = 500.

  The CU control unit 323 of the CU 3 that has received the recovery response first checks whether or not the number of game balls included in the gaming machine information transmitted from the P machine 2 as the recovery response is an appropriate value. Execute the check process. This first check process will be described later with reference to FIG. Since CU3 does not perform addition recovery processing, CU3 transmits a communication start request including serial number = 2 to P table 2 without transmitting recovery request 2 to P table 2. Note that the CU 3 processes the previous gaming machine information received from the P machine 2, updates the previous last transmission serial number, and backs up the data. When the CU 3 transmits a communication start request command to the P unit 2, the counting sequence number is cleared to “0” (initial value). The P unit 2 receives the communication start request and transmits a communication start response including the serial number = 2 to the CU 3. Further, after receiving the communication start request, the P platform 2 clears the recovery data (game information) and also clears the counting sequence number to “0” (initial value).

  When communication with the P table 2 is started, the CU 3 transmits a status information request including a serial number = 3 to the P table 2. Receiving it, the P table 2 notifies the CU 3 of unreported game table information (number of game balls = 500) by a status information response. Specifically, the status information response includes a transmission sequence number = 3 and the number of game balls = 500. The CU control unit 323 of the CU 3 that has received the status information response performs a second check process for checking whether or not the number of game balls included in the gaming machine information transmitted as the status information response is an appropriate value. Execute. This second check process will be described later with reference to FIG.

<< Addition request error >>
Next, processing for abnormal addition request will be described. FIG. 25 is a sequence diagram for explaining the processing in particular when the result of adding game balls at the time of ball lending, holding ball payout, and saving ball payout is abnormal.

  In FIG. 25, the initial number of game balls is 50. First, the CU 3 transmits a status information request command including a serial number = n, a game ball addition request = OFF, and an addition serial number = m to the P unit 2. In response to this, the P platform 2 returns a response of the status information response including the serial number = n, the number of game balls = 50, and the additional serial number = m to the CU3. Since the count request included in the response of the status information response is OFF (not shown), the count serial number remains m and is transmitted to the CU 3 without counting up.

  Thereafter, the player presses the possession payout button. Therefore, CU3 confirms the consumption of holding balls / storing balls, and sends a command for status information request including serial number = n + 1, game ball addition request = ON, number of additional balls = 125 balls, and addition serial number = m + 1 to P unit 2. Then, the rate set in step S516 or step S527 of FIG. 78 to be described later is determined, and information (in this case, 4 yen per ball) converted into a game ball in accordance with the determined rate. Notification is made of the number of added balls obtained by converting rate holding balls / storing balls into game balls = 125 balls). At this time, the CU 3 backs up the data of the number of game balls = 50 (number of game balls before update) +125 (number of add balls) = 175, the updated last transmission addition serial number and the addition request state ON.

  Thereafter, an abnormality occurs in the process of adding game balls on the P platform 2. Therefore, upon receiving the CU3 status information request command, the P stand 2 sets the serial number = n + 1, the number of game balls = 50 (the number of game balls before game ball addition), the game ball addition result = NG, and the addition serial number = m + 1. The response of the status information response including it is returned to CU3. The P stand 2 notifies the CU 3 of the game ball addition result = NG and the last transmission addition serial number information.

  The CU3 that has received the response of the status information response including the game ball addition result = NG receives the command of the status information request including the serial number = n + 2, the game ball addition request = ON, the number of additional balls = 125 balls, and the addition serial number = m + 1. Resend to table 2. Although CU3 is a retransmission of the status information request command, the serial number is updated and counted up from n + 1 to n + 2, and the additional serial number remains m + 1 and the status information request command is retransmitted.

  However, the P stand 2 remains in a state where an abnormality has occurred in the process of adding game balls. Therefore, upon receiving the retransmitted status information request command of CU3, the P platform 2 receives a serial number = n + 2, the number of game balls = 50 (the number of game balls before game ball addition), a game ball addition result = NG and an addition sequence number = A response of the status information response including m is returned to CU3.

  Further, the CU3 that has received the response of the state information response including the game ball addition result = NG again receives the status information request including the serial number = n + 3, the game ball addition request = ON, the number of additional balls = 125 balls, and the addition serial number = m + 1. The command is retransmitted to P stand 2 for the second time. Note that CU3 retransmits the status information request command, but the serial number is updated and counted up from n + 2 to n + 3, and the status information request command is retransmitted while the addition sequence number remains m + 1.

  P stand 2 is still in a state where an abnormality has occurred in the process of adding game balls. Therefore, upon receiving the retransmitted status information request command from CU3, the P stand 2 receives a serial number = n + 3, the number of game balls = 50 (the number of game balls before game ball addition), a game ball addition result = NG and an addition serial number = A response of the status information response including m is returned to CU3.

  Processing for adding a game ball in the P table 2 when the CU 3 receives a response of a response of the status information response including the game ball addition result = NG from the P table 2 even if the command for requesting the state information is retransmitted twice As a result, it becomes a state of waiting for addition abnormality recovery.

  After the addition abnormality is restored in the P unit 2, the CU 3 retransmits to the P unit 2 a status information request command including a serial number = n + X, a game ball addition request = ON, the number of additional balls = 125 balls, and an addition serial number = m + 1. . In the P 2, since the addition abnormality has been recovered, the addition processing to the game balls is performed and the number of game balls = 50 (number of game balls before game ball addition) +125 (number of added balls) = 175 The last transmission addition serial number is updated and the data is backed up.

  After performing the addition processing to the game balls, the P stand 2 transmits a state information response including the serial number = n + X, the number of game balls = 175, the addition serial number = m + 1, and the game ball addition result = OK to the CU 3. In response to this, the CU 3 turns off the addition request state.

<Operation related to addition serial number>
FIG. 26 is a conceptual diagram for explaining the operations of the P base 2 and the CU 3 regarding the addition serial number. When a game ball addition request is not generated, a message including a normal serial number and an additional serial number as shown in (1) to (4) of FIG. 26 is transmitted and received between the CU 3 and the P stand 2.

  In (1), a message including a normal serial number n and an additional serial number m is transmitted from the CU 3 to the P platform 2. The P table 2 that has received the message (1) returns a message (2) that includes the same normal serial number n and the additional serial number m as the received message, as in (2).

  The CU 3 that has received the message (2) transmits the message (3) (ordinary sequence number n + 1, addition sequence number m) with one updated normal sequence number. The P table 2 that has received the message (3) returns the message (4) including the same normal serial number n and the additional serial number m as the received message.

  As described above, every time the CU 3 receives a message from the P platform 2, the CU 3 updates one normal serial number and transmits the next message. On the other hand, the P platform 2 does not update the normal serial number. Further, unless an addition request is generated, the addition sequence number is not updated.

  Next, when an addition request (due to a ball lending operation or a withdrawal operation for a stored ball) occurs, a request message of (5) in which one addition serial number is updated is transmitted from the CU 3 to the P stand 2 (normal serial number n + 2). , Addition serial number m + 1). This request message includes data in which the addition request bit is turned ON. At this stage, the CU 3 has already confirmed the processing for the addition request (card balance withdrawal or savings withdrawal).

  The P platform 2 receives the request message (5) and recognizes the addition request based on the fact that one addition serial number has been updated from the previous time. Then, it is determined whether or not to accept the current addition request. This determination is performed by, for example, the payout control unit 171 of the P stand 2. The payout control unit 171 determines whether or not processing for adding game balls is possible on the P platform 2 side. The case where the game ball addition process is not possible is, for example, a case where the game ball has already reached a predetermined upper limit value.

  When the request is accepted, an acceptance message of the two messages (6) is transmitted, and when the request is rejected, a rejection message of the two messages (6) is transmitted. In the acceptance message, the addition sequence number is the addition sequence number m + 1 included in the request message of (5). On the other hand, in the rejection message, the addition sequence number is set to the addition sequence number m included in the message transmitted / received immediately before (6). The normal serial number is n + 2 included in the request message in (5) for both the acceptance message and the rejection message.

  The CU 3 includes an area for backup storage of the addition sequence number included in the immediately preceding transmission message, and an area for backup storage of the normal sequence number included in the reception message. These areas are provided, for example, in the microcomputer of the CU control unit 323 of the CU3. The CU control unit 323 of the CU 3 that has received the message (6) compares and determines the addition sequence number stored in the backup and the addition sequence number included in the message (6). As a result, if the stored addition sequence number is the same as the addition sequence number included in the transmitted message (m + 1 in this example), it is determined that the request has been accepted. On the other hand, when the transmitted addition serial number is delayed by one (m in this example), it is determined that the request has been rejected.

  (5) 'of FIG. 26 shows a case where the request message does not reach the P table 2 due to noise or other factors. In this case, since the P base 2 waits for a message from the CU 3, no message is transmitted from the P base 2 to the CU 3. The CU 3 waits for a predetermined period (200 ms) after transmitting the request message (5) ′, and retransmits the same request message (5) ″ because there is no response from the P-unit 2.

<Operation related to counting serial number>
FIG. 27 is a conceptual diagram for explaining the operations of the P platform 2 and the CU 3 regarding the counting sequence number. When no counting request is generated, a message including a normal serial number and a counting serial number as shown in (1) to (3) of FIG. 27 is transmitted and received between the CU 3 and the P stand 2.

  In (1), a message including a normal serial number n and a counting serial number m is transmitted from the CU 3 to the P platform 2. The P table 2 that has received the electronic message (1) returns the electronic message (2) including the same normal serial number n and the counting serial number m as the received electronic message, as shown in (2).

  The CU 3 that has received the message (2) transmits the message (3) (ordinary sequence number n + 1, counting sequence number m) with one updated normal sequence number. As described above, every time the CU 3 receives a message from the P platform 2, the CU 3 updates one normal serial number and transmits the next message. On the other hand, the P platform 2 does not update the normal serial number. Further, the counting sequence number is not updated unless a counting request is generated.

  Next, when a counting request (detection of counting operation) is generated, the request message (4) in which one counting sequence number is updated is transmitted from the P base 2 to the CU 3 (normal sequence number n + 1, counting sequence number m + 1). ). This request message includes data in which the count request bit is turned ON. Note that the P platform 2 does not execute the counting process at this stage.

  The P table 2 receives the request message (4) and recognizes the counting request based on the fact that the counting sequence number has been updated by one from the previous time. Then, it is determined whether or not to accept the current counting request. This determination is made, for example, by the CU control unit 323 of the CU3. The CU control unit 323 determines whether or not the counting process (the adding process of the holding balls) is possible. The case where the counting process is not possible is, for example, a case where the process using a holding ball (such as a wagon service) is in progress.

  When the request is accepted, an acceptance message of the two messages (5) is transmitted, and when the request is rejected, a rejection message of the two messages (5) is transmitted. In the acceptance message, the counting sequence number is set to the counting sequence number m + 1 included in the request message of (4). On the other hand, in the rejection message, the counting sequence number is set to the counting sequence number m included in the message transmitted / received immediately before (4). The normal serial number is updated from the request message in (5) for both the acceptance message and the rejection message, and is n + 2.

  The P table 2 includes an area for backup storage of the counting sequence number and the normal sequence number included in the immediately preceding transmission message. Such an area is provided, for example, in the microcomputer of the payout control unit 171 of the P table 2. The payout control unit 171 of the P table 2 that has received the message (5) compares and determines the count sequence number stored in the backup and the count sequence number included in the message (5). As a result, if the stored counting sequence number is the same as the counting sequence number included in the transmitted message (m + 1 in this example), it is determined that the request has been accepted. On the other hand, if the transmitted counting sequence number is delayed by one (m in this example), it is determined that the request has been rejected.

  (4) 'of FIG. 27 shows a case where the request message does not reach the P table 2 due to noise or other factors. In this case, the CU 3 waits for a predetermined period (200 ms) after transmitting the message (3), and retransmits the same message (3) because there is no response from the P platform 2. The P-station 2 that has received the retransmitted message (3) has the normal sequence number included in the message n + 1, and the normal sequence number is transmitted even though the request message (4) ′ has been transmitted first. Therefore, it is determined that the request message (4) ′ has not arrived. Then, the P platform 2 retransmits the same request message (4) ″ as (4) ′.

  As described above, in the present embodiment, a request sequence number (additional sequence number, counting sequence number) different from the normal sequence number is included in the message and transmitted. These request serial numbers are added and updated when an operation such as an addition request or a count request is requested to the communication partner, and otherwise, the addition and update are not performed even if a message is transmitted / received.

  On the other hand, the normal serial number is updated every time a message is transmitted from the CU 3 regardless of whether there is a request to the communication partner (the normal serial number is updated by both the CU 3 and the P unit 2). You may act.)

  For this reason, in the case of a normal serial number, whether or not the transmitted request message has arrived at the other party can be determined using the serial number included in the received message from the other party, but is the received message an acknowledgment message indicating request acceptance? It cannot be specified whether the message is a rejection message indicating a request rejection.

  However, as described above, a request message with an updated request sequence number is transmitted using a request sequence number such as an addition sequence number or a counting sequence number as in this embodiment, and the request sequence number included in the request message as a response to this request message If a message containing the same request serial number is received, depending on the value of the serial number, not only whether the transmitted request message has arrived at the other party, but whether the message returned from the other party is an acceptance message. Can be specified. Of course, as in the present embodiment, since the request message includes data with the request bit (addition request bit or count request bit) turned ON, the received message is an acceptance message even by determining this data. It is possible to identify whether the message is a rejection message. However, if the request sequence number is used, such request bits can be deleted from the message. As a result, the amount of message data can be reduced, and the processing for determining the request bit of the message data can be made unnecessary.

  In this embodiment, the update value for the request sequence number when a request is generated is +1. However, this is an example, and other update values such as +2, +3, -1, and -2 are adopted. May be.

<First to third check processing>
Next, the first check process, the second check process, and the third check process executed by the CU control unit 323 will be described based on FIGS. 28 (a), 28 (b), and 29. FIG.

  First, the first check process will be described with reference to FIG. In step S (hereinafter simply referred to as S) 300, it is determined whether or not game table information is stored. This is to determine whether or not the game table information is included in the recovery response transmitted from the P table 2. In the case of FIGS. 16 and 17, the game table information (specifically, Is included in the previous game table information), YES is determined in S300. If it is determined that the game table information is not included, the first check process ends.

  If it is determined that there is storage of gaming machine information, the control proceeds to S301, and the added ball number included in the received gaming machine information (specifically, previous gaming machine information) is a predetermined threshold value. A determination is made whether N1 or greater. This threshold value N1 is the maximum number of game balls to be added during a period (200 ms) between the state information request and the state information response between the CU 3 and the P stand 2 (for example, the maximum addition ball at the time of big hit) It is set to a value (for example, 125) that is slightly larger than (Equation 120). Therefore, in the normal case, the received number of added balls should be smaller than the threshold value N1. However, the number of added balls larger than the threshold N1 means that the game table information including the number of added balls and the number of game balls illegally increased due to fraud etc. being performed on the P table 2 while offline is a recovery response. May be transmitted to CU3. In that case, the control advances to S304, and control for notifying the occurrence of an error by the abnormality notification lamp or the display 312 is performed, and control for transmitting an error notification signal indicating that an error has occurred to the hall server 801 is performed. (In this case, error notification may be performed by the hall server 801). Instead of or in addition to the hall server 801, it may be controlled to transmit an error notification signal to the hall management computer.

  Next, the control advances to S305, and the CU control unit 323 enters a reset waiting state. After entering the reset waiting state, the CU control unit 323 stops the control until a reset release signal is input to the IR photosensitive unit 320 by a remote control operation by an attendant at the game hall, and when the reset signal is input, the CU The control unit 323 is reset and returns to the same state as when the power is turned on (see FIG. 8).

  Even if an abnormality is determined as a result of the check processing in S301 and S303, the information stored on the CU3 side is that the cause is that the CU3 or the P stand 2 is replaced with a new one after communication disconnection, and then the communication is restored. And the information transmitted from the P base 2 during the recovery process may be completely different. Even though it is not such a fraudulent act, it may be determined that there is an abnormality, and for this reason, it is possible to cancel the reset waiting state by operating the remote control by the game hall staff, and intervene by human judgment by the game hall staff. So that they can respond normally.

  On the other hand, if NO is determined in S301, the control proceeds to S302, and the number of added balls received from the P units is added to the number of game balls stored in the CU control unit 323, and the number of subtracted balls is set. An operation for subtracting and calculating R1 as the calculation result is performed. That is, when it is determined that the number of added balls included in the game table information received from the P table 2 is appropriate, the latest number of game balls R1 is calculated using the added ball number and the subtracted ball number. It is calculated. Next, in S303, the calculated R1−the absolute value of the received game balls, that is, the difference between R1 and the received game balls is calculated, and whether or not the difference is equal to or greater than a predetermined threshold N2. Judgment is made. Originally, R1 and the number of received game balls are the same value, and the difference between them should be zero. However, an error ball may occur between the CU side and the P base side during the game as the control proceeds. The error balls (for example, 5) are set as the threshold value N2. Therefore, when the difference between R1 and the received number of game balls is equal to or greater than the threshold value N2, there is a possibility that an illegal act will occur as described above, and control proceeds to S304 and thereafter as described above.

  On the other hand, if the difference between R1 and the received number of game balls is less than the threshold N2, it is determined that the received number of game balls is an appropriate value, and the received number of game balls is determined as the new number of game balls. Is stored in the RAM of the CU control unit 323.

  Next, the second check process will be described with reference to FIG. The number of balls to be added in the game table information (specifically, the current game table information) included in the status information response from the P table 2 returned in response to the status information request immediately after the communication start response is determined in advance. A determination is made in S310 as to whether or not it is equal to or greater than the threshold value N3. The number of added balls received is from the time when the P unit transmits a status information response to the CU3 until the power supply is interrupted to the P unit or until the game stops when the P unit detects a communication line disconnection. The number of added balls that fluctuated in (5) is such that the amount of change in the number of added balls within a relatively short limited period of time is not so large, but within a certain upper limit. Therefore, a value (for example, 125) slightly larger than the upper limit (for example, 120) is determined as the threshold value N3. If the number of added balls received is equal to or greater than the threshold value N3, the control proceeds to S314, and control is performed to notify the occurrence of an error by the abnormality notification lamp or the display 312 and an error occurs in the hall server 801. Control is performed to transmit an error notification signal to the effect (in this case, error notification by the hall server 801 may be performed). Instead of or in addition to the hall server 801, it may be controlled to transmit an error notification signal to the hall management computer.

  Next, the control advances to S315, and the CU control unit 323 enters a reset waiting state. After entering the reset waiting state, the CU control unit 323 stops the control until a reset release signal is input to the IR photosensitive unit 320 by a remote control operation by an attendant at the game hall, and when the reset signal is input, the CU The control unit 323 is reset and returns to the same state as when the power is turned on (see FIG. 8).

  On the other hand, if NO is determined in S310, the control advances to S311 to add the received addition ball number to the number of game balls stored in the CU control unit 323 and subtract the received subtraction ball number. Thus, an operation for calculating R2 is performed. The “stored number of game balls” referred to here is the number of game balls received from the P-unit 2 when NO is determined in S303 as described above. Then, in S312, it is determined whether or not the difference between the R2 and the number of game balls received from the P stand 2 is equal to or greater than a predetermined threshold value N4. Originally, R2 and the received number of game balls are the same value, and the difference between them should be zero. However, an error ball may occur between the CU side and the P base side during the game as the control proceeds. The error balls (for example, 5) are set as the threshold value N4. Therefore, when the difference between R1 and the received number of game balls is equal to or greater than the threshold value N4, there is a possibility of fraudulent behavior as described above, and control proceeds to S314 and subsequent steps as described above.

  If NO is determined in S <b> 312, the control proceeds to S <b> 313, and the CU control unit 323 stores the number of game balls received from the P stand 2 as the initial number of game balls, and then performs the second check process. Control ends.

  After the processing of S313 is performed, normal status information requests and status information responses are transmitted and received between the CU 3 and the P base 2. At this time, the CU control unit 323 receives the initial value by S313. Using the number of game balls stored as the number of game balls as an initial value, the current number of game balls is calculated based on the number of added balls and the number of subtracted balls, and transmitted from the P unit 2 based on the current number of game balls. It is determined whether or not the difference from the number of incoming game balls exceeds a predetermined error ball number (for example, 5), and if it exceeds, an abnormality is determined and the above-described S304, S305, S314, and S315 The same control is performed.

  Next, the control of the third check process will be described based on FIG. The CU control unit 323 executes the third check process immediately after receiving the recovery response 2 from the P base 2 (see FIGS. 18, 20, and 21).

  As described above, the recovery request 2 and the recovery response 2 are the game balls in which the P stand 2 complies with the game ball addition request even though the CU 3 outputs a request for adding the number of game balls to the P stand 2. This is for performing recovery of the number of game balls when the addition process is not performed. Then, a processing result indicating whether or not the addition recovery processing has been normally performed is notified by the recovery response 2 sent from the P base 2 to the CU 3. In S320, the CU control unit 323 determines whether or not the recovery result is processing NG. If processing NG, that is, addition recovery is not performed normally, the control proceeds to S324, where control is performed to notify the occurrence of an error by the abnormality notification lamp or the indicator 312 and an error has occurred in the hall server 801. Control is performed to transmit an error notification signal to that effect (in this case, error notification by the hall server 801 may be performed). Instead of or in addition to the hall server 801, control may be performed so as to transmit an error notification signal to the hall management computer.

  Next, the control advances to S325, and the CU control unit 323 enters a reset waiting state. After entering the reset waiting state, the CU control unit 323 stops the control until a reset release signal is input to the IR photosensitive unit 320 by a remote control operation by an attendant at the game hall, and when the reset signal is input, the CU The control unit 323 is reset and returns to the same state as when the power is turned on (see FIG. 8).

  On the other hand, if the recovery result is processing OK, the control advances to S321, and the CU control unit 323 performs processing for adding the number of added balls transmitted to the P unit 2 to the number of game balls currently stored. . This is because the addition recovery for the number of balls in the game ball addition request output by the CU 3 is normally performed in the P unit 2, so that the number of balls to be added is added to the number of game balls and the current normal game ball is This is a process for calculating the number.

  Next, the control advances to S322, and an operation is performed to calculate R3 by adding the number of added balls transmitted from the P unit 2 to the number of game balls after the addition and subtracting the number of subtracted balls. The number of added balls and the number of subtracted balls are game machine information (specifically, previous game machine information) transmitted from the P machine 2 as a recovery response, and the previous game machine information is included in the recovery response. When there is no ball, the number of added balls and the number of subtracted balls are both zero, and as a result, the number of game balls after addition = R3 is calculated.

  Next, in S323, it is determined whether or not the difference between the calculated R3 and the number of game balls received by CU3 is greater than or equal to a predetermined threshold value N2. Originally, R1 and the number of received game balls are the same value, and the difference between them should be zero. However, an error ball may occur between the CU side and the P base side during the game as the control proceeds. The error balls (for example, 5) are set as the threshold value N2. Therefore, when the difference between R1 and the received number of game balls is equal to or greater than the threshold value N2, there is a possibility that an illegal act will occur as described above, and control proceeds to S324 and subsequent steps as described above.

  On the other hand, if the difference between R1 and the received number of game balls is less than the threshold N2, it is determined that the received number of game balls is an appropriate value, and the received number of game balls is determined as the new number of game balls. Is stored in the CU control unit 323.

  As described above, the previous gaming machine information is transmitted first as gaming machine information from the P machine 2 to the CU 3, and then the gaming machine information is transmitted this time so that both gaming machine information can be distinguished on the CU 3 side. Since it is transmitted, the CU control unit 323 can determine the suitability of both pieces of game machine information. As a result, for example, the number of game balls in the previous game table information sent from the P table 2 should not be significantly different from the number of game balls stored in the CU control unit 323 at the present time, For example, the game ball number data in the current game table data sent thereafter is not so different from the game ball number data in the previous game table information received by the CU 3. If there is a large gap in the difference between these data, it can be determined that the game ball number data is illegally inflated.

  If the total data obtained by adding up the previous game machine data and the current game data is collectively transmitted from the P machine 2 to the CU 3, compared with the case where the previous game machine data and the current game machine data are individually determined. Therefore, it is only possible to roughly discriminate, and accordingly it is difficult to discriminate fraud. In order to prevent such inconvenience, the game table data is transmitted in two stages so that the CU control unit 323 can distinguish between the two types of data, making it possible to perform detailed abnormality determination for each game table data. It is easy to distinguish.

  In the first check process to the third check process described above, after determining whether or not the number of balls to be added is appropriate, the current number of game balls is calculated based on the number of balls to be added when it is appropriate. The number of game balls is compared with the number of game balls transmitted from the P unit 2 to determine whether or not the number of game balls transmitted is appropriate, but it is simply transmitted from the P unit 2. The number of game balls may be compared with the number of game balls stored in the CU 3, and the suitability may be determined.

  Further, the CU 3 stores the final number of game balls stored before the recovery process (hereinafter referred to as “CU game ball number”) and the number of game balls in the previous game table information received from the P table 2 (hereinafter referred to as “P The number of game balls in the latest game table received from the P table 2 (hereinafter referred to as “P latest game ball number”) is determined by comparison between the three parties. You may make it perform determination. As a specific example of comparison between the three players, the number of CU gaming balls and the number of previous P balls are compared and determined. If correct, the previous number of P balls and the number of latest P balls are compared and determined. To do. Alternatively, the number of CU game balls and the number of previous P game balls are compared and determined, and if they are correct, the number of CU game balls and the latest number of P game balls are compared and determined. Furthermore, the P number of the previous game balls and the P number of the latest game balls are compared and determined first, and if they are correct, the CU game ball number and the P number of previous game balls are compared and determined. The latest number of game balls is compared and determined.

  The first check process to the third check process are preferably executed when the CU 3 and the P stand 2 are not exchanged (replaced). When exchange (replacement) is performed at the time of communication disconnection, the number of game balls on the CU side and the P stand side is generally greatly different in the recovery process. This is because an error is determined as a result of the check process to the third check process. Therefore, when the CU 3 or the P stand 2 is exchanged after the communication is disconnected, the first check process to the third check process may be controlled not to be performed in the recovery process when the communication is restored. Specifically, when the difference between the last last transmission sequence number transmitted from the P unit 2 as a recovery response and the last latest transmission sequence number stored in the CU control unit 323 is 2 or more, the CU 3 or the P unit 2 The CU control unit 323 determines that it has been replaced, and controls so that the CU control unit 323 does not perform the first check process to the third check process.

  Further, regardless of whether or not the CU 3 or the P stand 2 is exchanged, it may be controlled so that the previous game table data and the current game table data are not checked on the CU 3 side at the time of recovery. By doing so, it is possible to prevent the troublesomeness that the check abnormality determination due to the replacement of the CU 3 or the P stand 2 occurs.

<Main sequence in communication between SC and IC>
Next, a main sequence in communication between the SC 325b and the communication control IC 325a will be described. First, FIG. 30 is a diagram illustrating a business message transmission process between the SC 325b and the communication control IC 325a. With reference to FIG. 30, the process performed for transmitting the business message between the SC 325b and the communication control IC 325a will be described.

  First, the SC 325b transmits a status confirmation request (TYPE = “1”) to the communication control IC 325a. When the status confirmation request (TYPE = '1') is transmitted from the SC 325b, the communication control IC 325a transmits a status confirmation response (RDY = '1') to the SC 325b. When the status confirmation response (RDY = '1') is transmitted from the communication control IC 325a, the SC 325b determines that communication between the SC 325b and the communication control IC 325a is possible, and sends a business message transmission request to the communication control IC 325a. To send.

  Further, the SC 325b transmits a state confirmation request (TYPE = '1') to the communication control IC 325a, and the communication control IC 325a transmits a state confirmation response (RDY = '1) to the state confirmation request (TYPE =' 1 '). ') Is sent to SC325b. Thereafter, the communication control IC 325a transmits a business message response to the business message transmission request to the SC 325b.

  That is, when a business message is transmitted between the SC 325b and the communication control IC 325a, a status confirmation request (TYPE = '1') and a status confirmation response (RDY = ') each time a business message transmission request and a business message response are transmitted. 1 ′) is transmitted to check whether communication between the SC 325b and the communication control IC 325a is possible.

  Next, FIG. 31 is a diagram for explaining a process for detecting a communication abnormality between the SC 325b and the communication control IC 325a. With reference to FIG. 31, the process performed to detect whether or not a communication abnormality has occurred between the SC 325b and the communication control IC 325a will be described.

  First, the SC 325b transmits a status confirmation request (TYPE = “1”) to the communication control IC 325a. When the status confirmation request (TYPE = '1') is transmitted from the SC 325b, the communication control IC 325a transmits a status confirmation response (RDY = '1') to the SC 325b. When the status confirmation response (RDY = '1') is transmitted from the communication control IC 325a, the SC 325b determines that communication between the SC 325b and the communication control IC 325a is possible, and transmits a business message to the communication control IC 325a. To do.

  Further, the SC 325b transmits a state confirmation request (TYPE = '1') to the communication control IC 325a, and the communication control IC 325a transmits a state confirmation response (RDY = '1) to the state confirmation request (TYPE =' 1 '). ') Is sent to SC325b. Thereafter, the communication control IC 325a transmits a business message response to the business message transmission request to the SC 325b. However, a communication error occurs between the SC 325b and the communication control IC 325a, and the business message response transmitted from the communication control IC 325a to the SC 325b becomes a business message no response (data length = '0').

  When the business message no response (data length = '0') is transmitted from the communication control IC 325a, the SC 325b transmits the business message transmission request again. Before the SC 325b transmits the business message transmission request to the communication control IC 325a again, a status confirmation request (TYPE = '1') and a status confirmation response (RDY = '1') are transmitted between the SC 325b and the communication control IC 325a. ).

  Further, the SC 325b transmits a state confirmation request (TYPE = '1') to the communication control IC 325a, and the communication control IC 325a transmits a state confirmation response (RDY = '1) to the state confirmation request (TYPE =' 1 '). ') Is sent to SC325b. Thereafter, the communication control IC 325a transmits a business message response to the business message transmission request (retransmission) to the SC 325b. However, since the communication abnormality continues between the SC 325b and the communication control IC 325a, the business message response transmitted from the communication control IC 325a to the SC 325b remains the business message no response (data length = '0').

  Furthermore, when the business message no response (data length = '0') is transmitted from the communication control IC 325a, the SC 325b transmits the business message transmission request again, but the communication abnormality continues between the SC 325b and the communication control IC 325a. Therefore, the business message response transmitted from the communication control IC 325a to the SC 325b remains the business message no response (data length = '0').

  The SC 325b detects that a communication error has occurred between the SC 325b and the communication control IC 325a because the business message no response (data length = '0') has been transmitted three times from the communication control IC 325a.

  Next, FIG. 32 is a diagram for explaining communication line disconnection detection processing between the SC 325b and the communication control IC 325a. Referring to FIG. 32, the communication line is disconnected between SC 325b and communication control IC 325a (at least one of the lines connecting serial communication between SC 325b and communication control IC 325a is disconnected). Processing that is performed to detect whether or not it has occurred will be described.

  First, the SC 325b transmits a status confirmation request to the communication control IC 325a. When the state confirmation request is transmitted from the SC 325b, the communication control IC 325a transmits a state confirmation response ('0x20', '0xDF') to the SC 325b. The status confirmation response “0x20” and “0xDF” is one of the data sets transmitted from the communication control IC 325a to the SC 325b, and the second byte information “0xDF” of the data set is 1 byte of the data set. It is the inversion information of the eye information “0x20”.

  However, when a disconnection occurs between the SC 325b and the communication control IC 325a, the SC 325b transmits a status confirmation request to the communication control IC 325a. However, the communication control IC 325a transmits a status confirmation response ('0x20', '0x20'). ) To the SC 325b. Since a disconnection occurs between the SC 325b and the communication control IC 325a, the information “0x20” of the second byte of the status confirmation response is not the inversion information of the information “0x20” of the first byte of the data set.

  Even if a disconnection occurs between the SC 325b and the communication control IC 325a, in FIG. 32, the SC 325b transmits a status check request to the communication control IC 325a, and the communication control IC 325a receives the status check response. Is shown to be transmitted to SC325b. However, when a disconnection occurs between the SC 325b and the communication control IC 325a, the status confirmation request and the status confirmation response are not actually transmitted between the SC 325b and the communication control IC 325a. In FIG. 32, since the master SC 325b reads the state of the second data line at the timing of the serial clock, a state confirmation request and a state confirmation response are transmitted between the SC 325b and the communication control IC 325a. As shown.

  For example, when the clock line provided between the SC 325b and the communication control IC 325a is disconnected, the serial clock is not transmitted from the SC 325b to the communication control IC 325a, and therefore a teleconfirmation response message is not transmitted from the communication control IC 325a. However, the SC 325b reads the state of the second data line at the timing of the serial clock, but since the telegram of the status confirmation response has not been transmitted, the telegram to be read is the first byte information and the second byte information. The message is not reversed.

  In addition, when the first data line provided between the SC 325b and the communication control IC 325a is disconnected, data is not transmitted from the SC 325b to the communication control IC 325a, and therefore a message of a status confirmation response is not transmitted from the communication control IC 325a. For this reason, the SC 325b is a non-response message in which the information of the first byte and the information of the second byte are not inverted even when the state of the second data line is read at the timing of the serial clock.

  Furthermore, when the second data line provided between the SC 325b and the communication control IC 325a is disconnected, a response from the communication control IC 325a to the SC 325b cannot be transmitted, and thus a message for status confirmation response is not transmitted from the communication control IC 325a. Since the second data line is disconnected, the potential is fixed at the H level or the L level, and even if the state of the second data line is read, the first byte information and the second byte information are inverted. Not a telegram.

  After that, the SC 325b reads the status confirmation response message at the serial clock timing. However, since the disconnection occurs between the SC 325b and the communication control IC 325a, the status confirmation response to be read is the second byte. The information “0x20” is not the inverted information of the information “0x20” in the first byte of the data set.

  When such a state continues until the SC-communication control IC disconnection detection time elapses (a predetermined setting condition is satisfied), the SC 325b determines that a disconnection has occurred between the SC 325b and the communication control IC 325a. The SC-communication control IC disconnection detection time is from the first detection of data in which the second byte information is not the inversion information of the first byte to the determination of the SC-communication control IC disconnection. Time, which is a predetermined time (for example, 30 seconds). Further, the predetermined setting condition is not limited to the SC-communication control IC disconnection detection time, but may be other conditions such as the number of communication between the SC and the communication control IC, or a plurality of conditions may be combined. Further, the disconnection between the SC 325b and the communication control IC 325a is a state in which at least one of the clock line, the first data line, and the second data line is disconnected.

  Next, FIG. 33 is a diagram for explaining the business message sequence process between the SC 325b and the communication control IC 325a. Referring to FIG. 33, the processing of SC 325b and communication control IC 325a after powering on CU 3 will be described.

  First, when the power of the CU3 is turned on, the SC 325b and the communication control IC 325a are activated. When activated, the SC 325b performs authentication with the CU control unit 323, and when activated, the communication control IC 325a performs authentication with a gaming machine (for example, P 2).

  Thereafter, the SC 325b and the communication control IC 325a perform a communication control IC authentication sequence using the authentication key as the encryption key. This communication control IC authentication sequence is performed in the SE1 mode. The authentication key includes a temporary authentication key stored in advance from the manufacturing stage of the SC 325b and the communication control IC 325a and a main authentication key generated by the SC 325b and the communication control IC 325a based on predetermined data sent from the key management server. is there. The temporary authentication key is an encryption key used for communication between the SC 325b and the communication control IC 325a until the main authentication key is generated. In the operation of the gaming machine under the authentication using the temporary authentication key, a timed operation process that is allowed only for a certain limited period (for example, 2 days) is performed, and the timed operation period has passed. A notification is sent to the host device (key management server 800 of the key management center), and the host device is in a standby state (waiting for reset) until the reset processing starts. Details of the communication control IC authentication sequence will be described later.

  Thereafter, the SC 325b and the communication control IC 325a perform the security information update sequence using the main authentication key or the temporary authentication key as the encryption key. This security information update sequence is performed in the SE2 mode. This security information update sequence is a process in which the SC 325b sets the valid key acquired from the higher-level device (specifically, the hall server 801) to the communication control IC 325a. The valid key is data for the communication control IC 325a to activate communication with the gaming machine. Without this valid key, the communication control IC 325a cannot communicate with the gaming machine. Further, the SC 325b and the communication control IC 325a perform a gaming machine chip information authentication sequence. This gaming machine chip information authentication sequence is performed in the SE2 mode. The communication control IC 325a receives the chip ID (main control chip ID) of the main control chip and the chip ID (payout control chip ID) of the payout control chip mounted on the gaming machine (for example, P stand 2), and these main controls. This is a process for verifying the authenticity of the chip ID and the payout control chip ID.

  This gaming machine chip information authentication sequence may take time because the key management server 800 first makes an inquiry about the main control chip ID and the payout control chip ID. The operation process after the communication key request is executed without waiting for an inquiry from the key management server 800.

  Thereafter, the SC 325b transmits a communication key request command for requesting a communication key to the communication control IC 325a. The communication key request command is encrypted using the authentication key or the temporary authentication key as the encryption key.

  Upon receiving the communication key request command, the communication control IC 325a generates a communication key (session key) for communicating the business message with the gaming machine, and notifies the generated communication key to the SC 325b in response to the communication key response. The communication key request and communication key response are performed in the SE2 mode. Note that the response of the communication key response to be returned is encrypted using the authentication key or the temporary authentication key as the encryption key. Specifically, the communication key (session key) is generated using a random number and current time data. The current time data may be generated by the communication control IC 325a itself or received from another device. The method for generating the communication key (session key) is not limited to the random number and the current time data, and any data may be used as long as it is variable data other than the key used for the above-described mutual authentication. Further, the control may be performed such that the SC 325b, not the communication control IC 325a, generates and notifies the communication control IC 325a.

  Thereafter, the communication key (session key) is shared between the SC 325b and the communication control IC 325a, and encrypted communication of the business message is performed between the two, and the business message communication between the communication control IC 325a and the gaming machine (P machine 2). Also, encrypted communication is performed using this communication key (session key).

  In this way, the communication key (session key) is updated each time the power is turned on, thereby ensuring security. Further, the communication key (session key) update is executed every update cycle (periodically) in addition to when the power is turned on. That is, the SC 325b performs control to update the communication key (session key) when detecting the communication key update cycle. Specifically, a key update command is transmitted from the hall server 801 (or key management server 800) to the CU 3 at each update cycle, and the SC 325b of the CU 3 that receives it transmits a communication key request to the communication control IC 325a. Similarly, control for updating the communication key (session key) is performed. Since the key update is also generated by using the random number and the data of the current time for each update cycle, the key is updated to a key different from the communication key (session key) updated when the power is turned on, and the security is further improved.

  Next, FIG. 34 is a diagram for explaining the processing of the authentication sequence of the communication control IC 325a. Referring to FIG. 34, the first authentication sequence is executed between SC 325b and communication control IC 325a. The first authentication sequence is performed in the SE1 mode. For example, the first authentication sequence authenticates the serial ID of SC 325b, that is, the SID of SC 325b stored in the EEPROM (not shown). Next, the second authentication sequence is executed between the SC 325b and the communication control IC 325a. The second authentication sequence is performed in the SE1 mode. For example, the second authentication sequence authenticates the serial ID of the communication control IC 325a, that is, the SID of the communication control IC 325a stored in the EEPROM (not shown).

  Thereafter, a version management information sequence is executed between the SC 325b and the communication control IC 325a. The version management information sequence is performed in the SE1 mode. The SC 325b transmits a command for requesting version management information to the communication control IC 325a in order to check the key version. Note that the version management information request command is encrypted using an authentication key (specifically, this authentication key or a temporary authentication key) as an encryption key.

  Upon receiving the version management information request command, the communication control IC 325a transmits a response of a version management information response in order to notify the latest key version to the SC 325b. Note that the response of the version management information response is encrypted using an authentication key (specifically, this authentication key or temporary authentication key) as an encryption key.

  Thereafter, an IC authentication result sequence is executed between the SC 325b and the communication control IC 325a. The IC authentication result sequence is performed in the SE1 mode. The SC 325b transmits an IC authentication result notification command to the communication control IC 325a. By this IC authentication result notification command, the authentication results from the first authentication sequence to the version management information response are collectively notified to the communication control IC 325a. Note that the IC authentication result notification command is encrypted using an authentication key (specifically, this authentication key or a temporary authentication key) as an encryption key.

  The communication control IC 325a that has received the IC authentication result notification command transmits an IC authentication result response to the SC 325b. Here, the authentication results from the first authentication sequence to the version management information response are collectively notified to the SC 325b by the response of the IC authentication result response. Note that the response of the IC authentication result response is encrypted using an authentication key (specifically, this authentication key or a temporary authentication key) as an encryption key.

  Thereafter, a counter information sequence is executed between the SC 325b and the communication control IC 325a. The counter information sequence is performed in the SE1 mode. The SC 325b transmits a counter information request command to the communication control IC 325a. Information on the current time is notified to the communication control IC 325a by this counter information request command. Note that the counter information request command is encrypted using an authentication key (specifically, a real authentication key or a temporary authentication key) as an encryption key.

  Receiving the counter information request command, the communication control IC 325a transmits a counter information response response to the SC 325b. Here, an initial vector value of a counter used for encryption is generated by a response of the counter information response, and is notified to the SC 325b. Note that the response of the counter information response is encrypted using an authentication key (specifically, this authentication key or a temporary authentication key) as an encryption key.

  Next, an example of the control content of the first authentication sequence will be described with reference to FIG. This first authentication sequence is performed in the SE1 mode. First, the authentication key random number is notified from the SC 325b to the communication control IC 325a. This authentication key random number is data for generating an authentication key (specifically, this authentication key). The communication control IC 325a that has received it returns an authentication key random number notification response indicating that the authentication key random number has been received to the SC 325b. Next, the SC 325b and the communication control IC 325a generate an authentication key (specifically, this authentication key) using the mutual authentication key random number. The sequence from the notification of the authentication key random number to the generation of the authentication key (specifically, the authentication key) is executed only when the temporary authentication key is used, that is, only when the authentication key has not yet been generated. The When the authentication key is already generated and used, the sequence from the SC serial ID authentication request 1 is executed without executing the sequence from the notification of the authentication key random number to the generation of the authentication key (specifically, the authentication key). Execute.

  Next, SC serial ID authentication request 1 and SC serial ID authentication response 1 are exchanged between SC 325b and communication control IC 325a, and SC serial ID authentication request 2 and SC serial ID authentication response 2 are exchanged. Thus, authentication of the SC serial ID in the SE1 mode is performed.

  FIG. 36 is a diagram for explaining processing of the communication control IC authentication abnormality sequence. The communication control IC authentication abnormality sequence is performed in the SE1 mode. Referring to FIG. 36, the first authentication sequence to the version management information response described in FIG. 34 are executed. The first authentication sequence to the version management information response are encrypted using an authentication key (specifically, this authentication key or a temporary authentication key) as an encryption key. The SC 325b and the communication control IC 325a both store the SC serial ID and the communication control IC serial ID, and any one of the first authentication sequence to the version management information response is a challenge / response method. This is a sequence for authenticating the serial ID of the SC, and any one of the first authentication sequence to the version management information response is a sequence for authenticating the serial ID of the communication control IC using the challenge / response method. . The serial ID of the SC, the serial ID of the communication control IC, and the above-mentioned board serial ID are configured with different IDs.

  After these authentication sequences are completed, an IC authentication result sequence is then executed between the SC 325b and the communication control IC 325a. An IC authentication result notification is transmitted from the SC 325b to the communication control IC 325a. By this IC authentication result notification, the authentication results from the first authentication sequence to the version management information response are collectively notified. On the other hand, an IC authentication result response is transmitted from the communication control IC 325a to the SC 325b. The authentication result from the first authentication sequence to the version management information response is collectively notified by the IC authentication result response. When the IC authentication result notification and / or the IC authentication result response is inappropriate (NG), the following control is performed.

  When the authentication from the first authentication sequence to the version management information response has been performed using the temporary authentication key, the above-described processing from the first authentication sequence to the version management information response is retried. If the number of retries is limited to two, and the IC authentication result notification and / or IC authentication result response is inappropriate even after the two retries, SC325b is ranked “communication control IC authentication error”. It notifies the device (key management server 800 of the key management center) and waits until reset processing of the host device starts (waiting for reset).

  If the IC authentication result notification and / or IC authentication result response is inappropriate even after multiple (here, twice) retries, return by reset processing (for example, operation of reset button (not shown) or power-on) To do. However, the present invention is not limited to this, and the reset may be performed on the condition that the SC 325b has been authenticated with the key management server 800 or the hall server 801 as the host device when waiting for reset.

  Next, authentication from the first authentication sequence to the version management information response is performed using the authentication key immediately after the update, that is, the authentication key generated as a result of the first authentication sequence in FIG. 35 (specifically, the authentication key). If the generated authentication key (specifically, the authentication key) is abnormal, an alarm indicating that the authentication key update is abnormal is notified to the key management server 800 of the key management center. This is executed using a temporary authentication key from the authentication sequence. If these authentication results are appropriate, as described above, a timed operation process that is allowed only for a certain limited period (for example, two days) is performed, and business message communication with the gaming machine is performed only during that period. Is possible. When the timed operation period has passed, the host device (key management server 800 of the key management center) is notified, and the host device is in a standby state (waiting for reset) until reset processing starts. In the timed operation, the control content (game content) or the like may be limited instead of or in addition to the time limit. For example, it is conceivable that an upper limit is set for the number of game balls, and the continuation of the game is not allowed unless it is once converted (counted) into the number of possessed balls when the upper limit is added.

<About encryption mode>
Next, details of the SE2 mode encryption communication will be described with reference to FIGS. This encrypted communication in SE2 mode is performed between the communication control IC 325a and the SC 325b, but in addition, between the CU control unit 323 and the SC 325b, between the security board 325 and the payout control unit 171 of the pachinko machine 2, Between the payout control unit 171 and the main control board 16 of the pachinko machine 2, between the main control board 16 and the key management server 803, between the CU control unit 323, the hall server 801, and the key management server 800, etc. You may do it. Furthermore, it may be performed among various devices installed in the game hall, for example, the hall management computer 1, a jet counter, a card issuing device, a payment device, a gift exchange device (POS terminal), and the like.

  First, the SE2 mode encryption mechanism will be described with reference to FIG. FIG. 37 (a) shows a downlink counter used for SE2 mode encryption and decryption used in communication from the SC 325b to the communication control IC 325a. This down counter is composed of 16 bytes, and is composed of an initial vector portion R1 consisting of 8 bytes, a telegram counter portion N consisting of 7 bytes, and a cipher block counter portion I consisting of 1 byte.

  The value (initial vector value) R1 of the initial vector portion is transmitted from the communication control IC 325a to the SC 325b by a counter information response. As a result, the value of the initial vector value R1 is shared between the SC 325b and the communication control IC 325a. The cipher block counter unit I and the message counter unit N are added and updated as will be described later, but the value R1 of the initial vector unit is not added and updated.

  The initial values of the message counter unit N and the cipher block counter unit I are 0. As described above, such a down counter is shared between devices (for example, the SC 325b and the communication control IC 325a) that perform cryptographic communication with each other. Each time plaintext divided into blocks (16 bytes) is encrypted one block at a time, the encryption block counter I is counted up. When all the blocks of a message transmitted with one command or response are encrypted, the encrypted message is transmitted, the message counter unit N is incremented by “1”, and the encrypted block counter unit I is set to “ 0 ". Such a count-up operation is repeated.

  FIG. 37 (b) shows an upstream counter used for SE2 mode encryption and decryption used for communication from the communication control IC 325a to the SC 325b. This up counter uses the value R2 of the initial vector portion instead of the value R1 of the initial vector portion described above. Since the initial vector portion value R2 and the up counter configuration are the same as the initial vector portion value R1 and the down counter configuration, description thereof will not be repeated.

  With reference to (c) of FIG. 37, the structure of the block cipher by SE2 mode is demonstrated. FIG. 37 (c) shows an example of communication from the SC 325b to the communication control IC 325a, and an example in which a message transmitted with one command or response is composed of three blocks of plain texts 1-3. Indicates. First, the plaintext data to be transmitted (see FIG. 8 ×) is divided into 16-byte blocks of plaintext (plaintext 1, plaintext 2,...). Then, the current downstream counter values R1, N, 0 are encrypted using the key K. The key K is a board initial key, an authentication key, or a communication key (session key). Then, an exclusive OR (exclusive OR) operation is performed on the encrypted value (16 bytes) and the plaintext 1 block (16 bytes). The calculation result is ciphertext 1 (16 bytes). Although the encryption method using exclusive OR (exclusive OR) has been described here, the encryption may be performed using other logical operations.

  When the next plaintext 2 is encrypted, the downstream counter is updated by adding “1”. As a result, the value of the down counter is R1, N, 1. This value is encrypted with the key K in the same manner as described above, and an exclusive OR (exclusive OR) operation is performed on the encrypted result data and the plaintext 2 to generate a ciphertext 2.

  When the next plaintext 3 is encrypted, the value of the down counter is further updated by adding “1”, and the values become R1, N, and 2. This value is encrypted with the key K, and an exclusive OR (exclusive OR) operation is performed on the value of the encryption result and the plaintext 3 to generate the ciphertext 3. The above three blocks of plaintexts 1 to 3 constitute all frames of a message transmitted by a single command or response. By encrypting these plaintexts 1 to 3, the ciphertext is transmitted. The message counter unit N is incremented by “1”, and the cipher block counter unit I becomes “0”.

  Therefore, when the plaintext 1 of the command or response to be transmitted next is encrypted, the value of the counter becomes {R1, N + 1, I = 0 ”. An exclusive OR (exclusive OR) operation is performed on the value obtained by encrypting the value with the key K and the plaintext 1 to generate a ciphertext 4.

Thereafter, encryption is performed while adding and updating the values of the plaintext 2, plaintext 3,.
Although the encryption mechanism has been described using the down counter, the mechanism is the same in the up counter, and the description thereof will not be repeated.

  Next, the decoding process will be described with reference to FIG. When the received ciphertext 1 (16 bytes) is decrypted, the ciphertext receiving side first encrypts the value (R1, N, 0) of the down counter with the key K, and encrypts it. A plaintext 1 is obtained by calculating an exclusive OR (exclusive OR) between the obtained value and the ciphertext 1.

  As a characteristic of exclusive-or (exclusive OR) operation, an exclusive-or operation is performed on binary data (binary data) with a certain binary value (referred to as A), and the result data is calculated. If the exclusive OR operation is further performed with the same binary value (A), the original binary data before the first exclusive OR operation is restored. The SE2 mode encryption / decryption processing is performed using such exclusive OR characteristics.

  When decrypting the ciphertext 2 (16 bytes) of the second block, the counter value is updated by adding “1”. As a result, the value of the counter becomes R1, N, 1, and the R1, N, 1 is encrypted with the key K, the exclusive value is calculated with the resulting value and the ciphertext 2 and decrypted, and the plaintext 2 Is generated.

  Similarly, when the ciphertext 3 is decrypted, the counter value is updated by “1”. As with the case of encryption, the counter update method at the time of decryption also counts “1” by the encryption block counter I every time each block of a message transmitted with one command or response is decrypted. When the decryption of all the blocks of the message transmitted by one command or response is completed, the message counter unit N is updated by adding “1” and the value of I is cleared to zero.

  The case of the up counter used for SE2 mode encryption and decryption used for communication from communication control IC 325a to SC 325b is similar to the down counter and will not be described repeatedly.

  As described above, in the SE1 mode, the plaintext M is encrypted by performing an exclusive OR operation with the same data length key, and the ciphertext is subjected to the exclusive OR operation with the same data length key. Since the data (key) for performing the exclusive OR operation on the plaintext M is constant and does not change because it is only decrypted in line, high security cannot be expected. However, in the SE2 mode, data for performing an exclusive OR operation on the plaintext M (a key as a counter value) is updated and changed, so that high security can be expected.

  Next, based on FIGS. 39 to 43, the operation of the actual encrypted communication between the command and response between the SC 325b and the communication control IC 325a will be described. FIG. 39 shows the cipher communication in the steady state when the receiving side that has received the cipher communication text is properly decrypted. FIG. 40 shows processing at the time of abnormality when the response from the communication control IC 325a to the SC 325b has not arrived. FIG. 41 shows a process at the time of abnormality when a command from the SC 325b to the communication control IC 325a has not arrived. FIG. 42 shows a process of a modified example at the time of an abnormality that has not reached the response shown in FIG. FIG. 43 shows a modified example of the abnormal process for not reaching the command shown in FIG.

  In the following, the encryption processing of FIGS. 39 to 43 will be described. When performing encrypted communication from the SC 325b to the communication control IC 325a, the down counter for the value R1 of the initial vector portion is used, and from the communication control IC 325a to the SC 325b. When the encrypted communication is performed, the upstream counter of the value R2 of the initial vector portion is used.

  First, normal processing will be described with reference to FIG. An operation instruction and response between the SC 325b and the communication control IC 325a will be described by taking a 96-byte data length as an example of a multiple of 48 bytes.

  Referring to FIG. 39, SC325b divides a 96-byte plaintext into six blocks of 16 bytes, and encrypts plaintexts 1 to 6 of each block one by one. The first block, plaintext 1, has downstream counter values R1, N, 0. The counter value is encrypted as described above, and the encrypted value and plaintext 1 are used for exclusive OR. The ciphertext 1 is generated by performing the above operation. Similarly, when the ciphertext 2 is generated, the downstream counter values R1, N, 1 are used, and when the ciphertext 2 is generated, the downstream counter values R1, N, 2 are used to generate the ciphertext 4. At this time, the values of the down counters R1, N, and 3 are used, when the ciphertext 5 is generated, the values of the down counters R1, N, and 4 are used, and when the ciphertext 6 is generated, the values of R1, N, and 5 The value of the down counter is used.

  The communication control IC 325a that has received the ciphertexts 1 to 6 consisting of these six blocks generates plaintext by decrypting the ciphertext at any time while updating the counter value as described in FIG. The value of the down counter at the start of decryption, that is, the value of the counter used for decrypting the first ciphertext 1 is R1, N, 0, and the encrypted value and ciphertext 1 are encrypted. Is calculated and decrypted, and plaintext 1 is generated. Similarly, the ciphertext 2, the ciphertext 3, the ciphertext 4, the ciphertext 5, and the ciphertext 6 are also updated by incrementing the value of the cipher block counter unit by “1” at any time. Specifically, for ciphertext 2, the downstream counter values R1, N, 1 are used, for ciphertext 3, the downstream counter values R1, N, 2 are used, and for ciphertext 4, R1, N, 3 downstream counter values, ciphertext 5 uses R1, N, 4 downstream counter values, and ciphertext 6 uses R1, N, 5 downstream counter values. Decoding is performed using the counter value.

  Next, the communication control IC 325a encrypts the response and transmits it to the SC 325b. At this time, since the communication control IC 325a uses an upstream counter, the counter value “R2, N, 0” is used first. The counter value of the upstream counter is encrypted, and an exclusive OR operation is performed on the encrypted value and the first plaintext 1 of the response to generate a ciphertext 1. Next, the communication control IC 325a updates the cipher block counter unit by adding “1” and generates the ciphertext 2 using the values of R2, N + 1, and 1. Similarly, ciphertext 3, ciphertext 4, ciphertext 5, and ciphertext 6 are generated while incrementing and updating the cipher block counter unit by “1”, and a response including these ciphertexts is transmitted to SC 325b.

  The SC 325b that receives the cipher texts 1 to 6 including the six blocks generates plain text by decrypting the cipher text at any time while updating the counter value as described with reference to FIG. The value of the upstream counter at the start of decryption, that is, the value of the counter used to decrypt the first ciphertext 1 is R2, N, 0, and the encrypted value and the ciphertext 1 are encrypted. Is calculated and decrypted, and plaintext 1 is generated. As described above, the ciphertext 2, the ciphertext 3, the ciphertext 4, the ciphertext 5, and the ciphertext 6 are decrypted at any time while the cipher block counter is added and updated as needed, and the plaintext 2, plaintext 3, plaintext 4, Plaintext 5 and plaintext 6 are generated.

  From the next time on, the communication control IC 325a updates “N” added to the value “N” of the message counter unit used for decrypting the ciphertext received last time, and uses the counter values of R1, N + 1, 0 as a response. The first ciphertext 1 is decrypted. As described above, the ciphertext 2, the ciphertext 3, the ciphertext 4, the ciphertext 5, and the ciphertext 6 are decrypted at any time while the cipher block counter is added and updated as needed, and the plaintext 2, plaintext 3, plaintext 4, Plaintext 5 and plaintext 6 are generated.

  In SC325b, “1” is added and updated to the value “N” of the message counter unit used for decrypting the ciphertext received last time, and the first cipher of the response is used by using the counter values of R2, N + 1, 0. Decrypt sentence 1. As described above, the ciphertext 2, the ciphertext 3, the ciphertext 4, the ciphertext 5, and the ciphertext 6 are decrypted at any time while the cipher block counter is added and updated as needed, and the plaintext 2, plaintext 3, plaintext 4, Plaintext 5 and plaintext 6 are generated.

  By such a method, transmission data encryption and reception data decryption processing are performed between the SC 325b and the communication control IC 325a using the down counter and the up counter, respectively.

  Next, with reference to FIG. 40, a description will be given of processing in the event of an abnormality when the response from the communication control IC 325a to the SC 325b has not reached. First, a command composed of 6 blocks of ciphertexts 1 to 6 is transmitted from the SC 325b to the communication control IC 325a. The counter value of the down counter used for each block is initially R1, N, 0, and the encryption block counter unit is incremented by “1”, and the final value is R1, N, 5. . The communication control IC 325a that has received the ciphertext first decrypts the ciphertext 1 using the counter values R1, N, 0 at the start of ciphering to generate plaintext 1. Next, the ciphertext 2, the ciphertext 3, the ciphertext 4, the ciphertext 5, and the ciphertext 6 are decrypted by adding and updating the cipher block counter unit as needed to obtain plaintext 2, plaintext 3, plaintext 4, plaintext 5, and plaintext 6. Generate.

  Then, the communication control IC 325a generates the ciphertext 1 by encrypting the plaintext 1 of the first block of the response using the value “R2, N, 0” that is the counter value of the up counter. Next, the value of the cipher block counter unit is incremented by “1” to generate ciphertext 2, ciphertext 3, ciphertext 4, ciphertext 5, and ciphertext 6 and transmit them to SC 325b. When the response composed of the ciphertexts 1 to 6 does not reach the SC 325b, the SC 325b retransmits the same command data as the previously transmitted command to the communication control IC 325a. When the communication control IC 325a decrypts the retransmitted ciphertext, since the value of the message counter unit used for decrypting the ciphertext previously received by the communication control IC 325a is N, “R1, N + 1, 0” is used as the counter value of the down counter to be used.

  In the communication control IC 325a, the ciphertext 1 is first decrypted using the counter values R1, N + 1, 0 to generate plaintext 1. Next, the ciphertext 2, the ciphertext 3, the ciphertext 4, the ciphertext 5, and the ciphertext 6 are decrypted by adding and updating the cipher block counter unit as needed to obtain plaintext 2, plaintext 3, plaintext 4, plaintext 5, and plaintext 6. Generate.

  Next, the communication control IC 325a adds and updates “1” to the value “N” of the message counter unit used for the previous ciphertext generation, and uses the counter values of R2, N + 1, 0 to start the first response. The ciphertext 1 is generated by encrypting the plaintext 1 of the block. Next, the value of the cipher block counter unit is incremented by “1” to generate ciphertext 2, ciphertext 3, ciphertext 4, ciphertext 5, and ciphertext 6 and transmit them to SC 325b.

  In SC325b, since the response from the previous communication control IC 325a has not been received, an attempt is made to decode using the counter value “R2, N, 0” for decoding the previous response. However, the ciphertext 1 is data encrypted using the counter value “R2, N + 1, 0”, and the counter value for starting restoration of SC325b is “R2, N, 0”. Even if decryption is attempted using the value, decryption fails because the plaintext cannot be decrypted correctly.

  The determination as to whether or not decryption into correct plaintext has been made is based on a general check by the MAC. Briefly, in SC325b, the first counter value R2, N, 0 is encrypted with the key, and the exclusive OR between the value and the first ciphertext 1 is calculated. Such decryption processing is sequentially executed for ciphertext 2, ciphertext 3, ciphertext 4, ciphertext 5 and ciphertext 6 while updating the counter value by “1”, and is included in the data of the processing result. MAC check is performed using the data of the existing MAC. Specifically, the MAC is generated from the data of the decoding processing result according to the MAC algorithm, and the generated MAC is compared with the MAC data included in the transmission data from the communication control IC 325a to determine whether or not they match. To check. If they are decoded correctly, they match, but in this case, the value of the counter used for decoding is out of order. It is determined that the MAC is abnormal, that is, decoding has failed.

  When it is determined that such a MAC abnormality, that is, a decoding failure, the SC 325b executes a repair process for repairing the incorrect counter value to a correct counter value. In SC325b, the value of the message counter unit N is incremented by “1” for “R2, N, 0” that is the counter value at the start of decryption that was first used for decryption of the ciphertext determined to be decryption failure. While subtracting and updating, the ciphertext is sequentially decrypted using the subtracted counter value and the above-described MAC check is performed to determine whether or not the decryption has been correctly performed. If it is determined that the MAC is abnormal as a result of the MAC check even if the counter value is subtracted a predetermined number of times, the SC 325b then applies the counter value “R2, N, 0” at the start of decoding to that value. The message counter unit N is incremented and updated by “1”, and the decryption process is sequentially performed using the added counter value to perform the MAC check. If the MAC check determines that the decryption is successful and the decryption is successful, the plaintext successfully decrypted is fetched as a proper command. Then, the counter value of the message counter used when it is determined that the decryption is successful is used to encrypt the first plaintext 1 of the next response data.

  In the case of FIG. 40, decryption is performed by using the counter value “R2, N + 1, 0” obtained by adding and updating the message counter unit N once from “R2, N, 0” which is the counter value at the start of decryption. Therefore, it is determined that the MAC is normal and that decoding is successful.

  Using the counter values R1, N + 2, 0 obtained by adding and updating the value of the message counter part of the counter value R2, N + 1, 0 of the value N of the message counter part used when it was determined that the decryption was successful. Next, ciphertext 1 is generated by encrypting the first plaintext 1 of the response to be transmitted. Next, ciphertext 2, ciphertext 3, ciphertext 4, ciphertext 5 and ciphertext 6 are sequentially generated while adding and updating the cipher block counter unit by “1” and transmitted to the communication control IC 325a.

  In response to this, the communication control IC 325a uses the counter value “R1, N + 2, 0” to decrypt the first ciphertext 1 of the received ciphertext. Since the first ciphertext 1 is encrypted using the counter value “R1, N + 2, 0”, it can be properly decrypted using the same counter value. Then, the communication control IC 325a sequentially decrypts the ciphertext 2, the ciphertext 3, the ciphertext 4, the ciphertext 5, and the ciphertext 6 while adding and updating the cipher block counter unit by “1”.

  The number of subtractions to the counter value in the counter repair process described above matches the number of retries that the SC 325b retransmits (retrys) the operation command when no response has been reached. In the case of the present embodiment, the number of retries is limited to two, and it is not necessary to perform subtraction update of the telegram counter unit N beyond the counter value error caused by the two retries. Therefore, the counter value is subtracted or updated up to twice.

  Next, based on FIG. 41, the process at the time of abnormality when the command from the SC 325b to the communication control IC 325a has not reached will be described. First, the SC 325b generates 6 blocks of ciphertext 1 to 6 using the counter values R1, N, 0 to R1, N, and 5 and transmits them to the communication control IC 325a. However, when the ciphertext does not reach the communication control IC 325a, the SC 325b attempts to retry by encrypting the same command again and retransmitting it to the communication control IC 325a. As the message counter unit used for encryption at the time of retransmission, N + 1 obtained by adding “1” to the value N of the message counter unit used for encryption at the time of transmission of the previous command is used. Therefore, using the counter value “R1, N + 1, 0”, SC 325b encrypts the first plaintext 1 block of the command to be retransmitted to generate ciphertext 1. Next, the SC 325b sequentially generates the ciphertext 2, ciphertext 3, ciphertext 4, ciphertext 5 and ciphertext 6 while adding and updating the cipher block counter unit by “1” and retransmits it to the communication control IC 325a. To do.

  However, if the retransmitted ciphertext does not reach the communication control IC 325a, the SC 325b attempts a second retry of encrypting a command having the same content and retransmitting it to the communication control IC 325a. The command transmitted in the second retry reaches the communication control IC 325a, and the communication control IC 325a attempts to decrypt the ciphertext.

  The communication control IC 325a decrypts the first block of the ciphertext by using “R1, N, 0” that is a value obtained by adding “1” to the last counter value used for decrypting the command previously received by the SC 325b. The ciphertext counter 2, ciphertext 3, ciphertext 4, ciphertext 5 and ciphertext are sequentially added to the counter value “R1, N, 0” while updating the cipher block counter by “1”. Attempt 6 decoding.

  However, as a result of the retry of SC325b twice, the counter value on the SC325b side and the counter value on the communication control IC 325a side are out of order. As a result, the MAC becomes abnormal and it is determined that decoding has failed.

  Then, the communication control IC 325a performs a repair process for the mad counter, as described above. The ciphertext that has been retransmitted sequentially while subtracting and updating the message counter unit N by “1” with respect to “R1, N, 0”, which is the count value that was first used for the ciphertext determined to be decryption failure Attempt to decrypt the sentence and perform MAC check. As described above, the number of subtraction updates is limited to two, which is the number of retries. If the decryption is not successful even when the counter value is subtracted and updated twice, the communication control IC 325a determines the counter value “R1, N, 0” for the message counter unit. Attempts to sequentially decrypt the ciphertext while incrementing and updating “1”. The number of attempts for this addition update coincides with the number of retries for performing retransmission by the SC 325b when the command has not been reached. In the present embodiment, the retry is performed twice. As a result, the counter value is added and updated up to two times that is the number of retries.

  As a result of the second addition update, the counter value becomes “R1, N + 2, 0”, and the ciphertext 1 is decrypted using this counter value, and the ciphertext 2 and the ciphertext are sequentially updated while performing the addition update of the cipher block counter unit. By decrypting the sentence 3, the ciphertext 4, the ciphertext 5, and the ciphertext 6, it can be decrypted into an appropriate plain text, and as a result of the MAC check, it is determined to be appropriate and it is determined that the decryption is successful. The communication control IC 325a captures a plaintext command that is determined to be successful. Then, the response data corresponding thereto is encrypted and transmitted to the SC 325b. At the time of the encryption, unlike the value “N + 2” of the message counter unit used for the decryption process determined to be successful, the value “N” of “R2, N, 0” which is the count value used first. Is used. Therefore, ciphertext 1 is generated by encrypting the first block using “R2, N, 0”. Next, the ciphertext 2, ciphertext 3, ciphertext 4, ciphertext 5 and ciphertext 6 are sequentially generated while incrementing and updating the count value of the cipher block counter unit by “1” and transmitted to the SC 325b. The SC 325b performs the process of decrypting the first block of the ciphertext using “R2, N, 0”, and adds and updates the cipher block counter unit by “1” to the counter value “R2, N, 0”. While trying to decrypt the ciphertext 2, the ciphertext 3, the ciphertext 4, the ciphertext 5 and the ciphertext 6 in sequence.

  Next, a modified example of the process at the time of abnormality when the response has not reached will be described based on FIG. FIG. 42 is a modification example of FIG. 40 described above, and here, mainly the differences will be described. When the response from the communication control IC 325a to the SC 325b has not yet reached, the SC 325b executes a retry to retransmit the same command as the previous time. When the command (encrypted text) retransmitted by the retry reaches the communication control IC 325a, the counter values between the SC 325b and the communication control IC 325a are different from each other as in FIG. As a result, when the communication control IC 325a attempts to decrypt the ciphertext, the MAC check results in a MAC error and it is determined that the decryption has failed. In this modification, when the decoding fails, it is determined that decoding is impossible, and a decoding error command is transmitted to the communication control IC 325a. At that time, the SC 325b encrypts the response of the decryption error using the key K in the SE1 mode, and transmits the ciphertext to the communication control IC 325a. The communication control IC 325a receives this and decrypts the ciphertext using the key K, which is a common key, and determines that a decryption error has occurred. Then, a new random number is generated to initialize the counter value, and the random number value is transmitted to the SC 325b as the initial vector portion value R2. At that time, using the key K, the value of the initial vector portion R2 is encrypted in the SE1 mode, and the ciphertext is transmitted to the security chip 325B. In SC325b, the received ciphertext is decrypted in the SE1 mode using the key K, and the value R2 of the initial vector portion is acquired. As a result, the counter value “R2, 0, 0” that is initialized is shared between the SC 325b and the communication control IC 325a.

  Next, the SC 325b encrypts a response to the effect that the update of the value R2 of the initial vector portion is completed in the SE1 mode using the key K, and transmits it to the communication control IC 325a.

  In response to this, the communication control IC 325a encrypts the same data as the previously retransmitted command in the SE2 mode and transmits it to the SC 325b. At that time, the initial block is encrypted using the counter value initialized, that is, “R2, 0, 0”. Then, ciphertext 2, ciphertext 3, ciphertext 4, ciphertext 5, and ciphertext 6 are sequentially generated and added to the cipher block counter unit by “1” and transmitted to SC 325b.

  In SC325b, the first block of the ciphertext is decrypted using the initialized counter value, that is, “R2, 0, 0”. Next, the ciphertext 2, ciphertext 3, ciphertext 4, ciphertext 5 and ciphertext 6 are sequentially decrypted while adding and updating the cipher block counter unit by “1” to generate plain text.

  Next, based on FIG. 43, a modified example of the process when the command has not reached an abnormality will be described. FIG. 43 is a modified example of the process when the command has not yet reached in FIG. 41, and here, the difference will be mainly described. When the command reaches the communication control IC 325a by the second retry by the SC 325b, the counter values between the SC 325b and the communication control IC 325a are different. As a result, when the communication control IC 325a attempts to decrypt the ciphertext, the MAC check results in a MAC error and it is determined that the decryption has failed. In this modification, it is determined that decoding is impossible when the decoding fails, and a response to the decoding error is transmitted to the SC 325b.

  At that time, the communication control IC 325a encrypts the response of the decryption error using the key K in the SE1 mode, and transmits the ciphertext to the SC 325b. In SC325b, it is received and the ciphertext is decrypted using the common key K, and it is determined that a decryption error has occurred. Then, a new random number is generated to initialize the counter value, and the random number value is transmitted to the communication control IC 325a as the initial vector portion value R1. At this time, the value R1 of the initial vector portion is encrypted by the SE1 mode using the key K, and the ciphertext is transmitted to the communication control IC 325a. The communication control IC 325a decrypts the received ciphertext using the key K in the SE1 mode, and acquires the value R1 of the initial vector portion. As a result, the counter value “R1, 0, 0” that is initialized is shared between the SC 325b and the communication control IC 325a. As described above, as the initialization (resetting) of the counter value performed when the ciphertext cannot be restored, the initial vector of the counter that cannot be decrypted (a wrinkle has occurred between the SC 325b and the communication control IC 325a). However, both the initial vector portion R1 of the down counter and the initial vector portion R2 of the up counter may be reset.

  Next, the communication control IC 325a encrypts the response indicating that the update of the value R1 of the initial vector portion is completed in the SE1 mode using the key K, and transmits it to the SC 325b.

  Upon receiving this, the SC 325b encrypts the same data as the previously retransmitted command in the SE2 mode and transmits it to the communication control IC 325a. At that time, the initial block is encrypted using the counter value initialized, that is, “R1, 0, 0”. Then, ciphertext 2, ciphertext 3, ciphertext 4, ciphertext 5 and ciphertext 6 are sequentially generated and added to the cipher block counter unit by “1” and transmitted to the communication control IC 325a.

  The communication control IC 325a decrypts the first block of the ciphertext using the initialized counter value, that is, “R1, 0, 0”. Next, the ciphertext 2, ciphertext 3, ciphertext 4, ciphertext 5 and ciphertext 6 are decrypted in order while adding and updating the cipher block counter unit by “1” to generate plain text.

  Next, encryption processing and decryption processing in the SE2 mode will be described based on FIGS. 44 (a) and 44 (b). First, an encryption key is issued in S100 of FIG. This encryption key is a board initial key, an authentication key, or a communication key (session key), and is simply referred to as “key” hereinafter. The key is shared between the SC 325b and the communication control IC 325a.

  In step S101, initial vector values R1 and R2 corresponding to the down counter and the up counter are issued. The initial vector portion values R1 and R2 are respectively generated by the communication control IC 325a. In step S102, the message counter unit N and the cipher block counter unit I of the counter are reset to “0”. Next, in S103, the values R1 and R2 of the initial vector part are encrypted in the SE1 mode with the key issued in S100, and the value R1 of the initial vector part for down and the value R2 of the initial vector part for upstream are obtained from the communication control IC 325a. Sent to SC325b. Here, the initial vector portions R1 and R2 have been described as being generated by the communication control IC 325a, but the initial vector portion value R1 is generated by the SC 325b and transmitted to the communication control IC 325a, and the communication control IC 325a receives this transmission. Based on the algorithm that generated the initial vector portion value R1, the initial vector portion value R2 is generated and transmitted to the SC 325b. Alternatively, the initial vector portion values R1 and R2 may be generated by the SC 325b, and the initial vector portion R1 and R2 may be transmitted to the communication control IC 325a. Further, the same algorithm may be used for generating the initial vector portion values R1 and R2, or the other initial vector portion may be used by using the algorithm in which the initial vector portion value transmitted from one is generated. The value of can also be generated.

  In the communication control IC 325a, as shown in S130 of FIG. 44 (b), the transmitted encrypted R1 and R2 are decrypted in the SE1 mode using a key to generate plaintext R1 and R2, respectively. In S131, R1 and R2 are stored as the initial vector portion value, and the message counter portion N and the cipher block counter portion I are reset to a value of “0”.

  On the ciphertext transmission side, a message (plaintext) to be transmitted is generated in S104 of FIG. The generated plaintext is divided into 16-bit blocks, and encrypted using the current value of the counter for each block to generate a ciphertext (S105). Then, when the encryption of one block is completed, the control proceeds to S106, and it is determined whether or not the encryption of all the frames of the plaintext message generated in S104, that is, all the blocks has been completed. If it has not been completed yet, the control proceeds to S107, and the encryption block counter I is updated by adding “1”, and then the process proceeds to S105. The ciphertext is generated by encrypting the next block in S105.

  When the encryption of all frames of the message is completed by cycling through the loop of S105 → S106 → S107 → S105, the control proceeds to S108, and the message counter unit N is updated by adding “1”. In step S109, the encryption block counter I is cleared to “0”.

  Next, the control advances to S110, and processing for transmitting the ciphertext to the other party is performed. Next, in S111, it is determined whether or not a decoding error has been received. This decryption error is transmitted in S162 or S170, which will be described later, when decryption fails on the ciphertext receiving side, and if it is received, error processing is performed in S112. This error process is, for example, a process of displaying an error on the display device or notifying the host server that an error has occurred and stopping the subsequent operation control.

  After the ciphertext transmitted in S110 is received in S132 in FIG. 44B, decryption processing is performed in S133. As described above, this decoding process is a process of decoding for each block using the current counter value of the counter. After all the frames are decoded, the MAC check is performed as described above to determine whether the decoding is successful. If the decryption fails, the counter repair process in S135 is executed.

  FIG. 45 is a flowchart showing specific control contents of the counter repair process shown in S135 described above. FIG. 45 (a) shows the counter repair process shown in FIGS. 40 and 41, and FIG. 45 (b) shows the repair process of the modification shown in FIGS.

  First, the counter repair process 1 will be described with reference to FIG. First, in S150, the message counter unit N is updated by subtracting “1” from the counter value used for the decryption process of the first block of the ciphertext that failed to be decrypted. Next, in S151, a decoding process is executed for each block using the counter value updated by subtraction, and a MAC check is performed to determine whether the decoding is successful. If the decoding is not successful, the value of the repair counter SK is updated by adding “1” in S154. The repair counter SK is a counter for counting how many times repair is attempted. Next, in S155, it is determined whether or not the repair counter SK has reached a predetermined value. As described above, the predetermined value is the value of the number of retries 2 on the ciphertext transmission side.

  If the predetermined value has not yet been reached, control returns to S150, and the control of S150 to S155 is repeatedly executed. If the decoding is successful during the repeated execution, a determination of YES is made in S152, the control advances to S153, and a process of resetting the repair counter SK to “0” is performed.

  On the other hand, when the process of S150 to S155 is repeatedly executed and the value of the repair counter SK reaches a predetermined value, a determination of YES is made in S155 and the control proceeds to S156, and the current message counter N is repaired. The value of the counter SK is added. As a result, the value of the message counter unit N becomes the value of the message counter unit N of the last counter value used when decryption failed. Then, in S157, “1” is added and updated for the message counter unit N, and decryption processing using the counter value is performed in S158. Next, in S159, a MAC check is performed to determine whether or not the decoding is successful. If the decoding is not successful, the repair counter SK is updated by subtracting “1” in S160 and the value of the repair counter SK is updated in S161. It is determined whether or not “0” has been reached. If not, the control returns to S157, and the control of S157 to S161 is repeatedly executed.

  If it is determined in S159 that decoding has succeeded while this repeated execution is being performed, the control advances to S153, and a process of resetting the repair counter SK is performed. The plaintext determined as successful decryption is the correct plaintext.

  On the other hand, when the value of the repair counter SK becomes “0” by repeatedly executing the processes of S157 to S161, the counter is repaired a predetermined number of times. In this case, the control proceeds to S162. Then, a process of encrypting information indicating a decryption error using the key K in the SE1 mode and transmitting the ciphertext is performed.

  This decoding error information is received in S112 of FIG. 44A described above, and a determination of YES is made.

  Next, a modified counter repair process 2 will be described with reference to FIG. In S170, information indicating a decryption error is encrypted in the SE1 mode using the key K, and the encrypted information is transmitted to the other party. If this decryption error is received, a determination of YES is made in S112 of FIG. 44A, and in the case of this modification, if a determination of YES is made in S112, control proceeds to S101. Then, after a new random number is generated in S101 and the message counter unit N and the cipher block counter unit I are reset in S102, the random number is encrypted in S103, and values R1 and R2 of the initial vector unit are obtained. Processing to transmit to is performed. The transmitted value of the encrypted initial vector portion is received in S171 of FIG. 45 (b). Next, in S172, information indicating that the update of the value R1 or R2 of the initial vector portion is completed is encrypted in the SE1 mode using the key K, and the ciphertext is transmitted to the other party, and then the control is performed. Shifts to S130 in FIG.

  In S130, a process of decrypting the ciphertext of the initial vector portion values R1 and R2 received in S171 described above in the SE1 mode using the key K is performed. Then, the plaintext initial vector portion values R1 and R2 generated as a result of decryption are stored, and the telegram counter portion N and the cipher block counter portion I are reset to “0” (S131). ).

  Then, using the values R1, 0, 0 or R2, 0, 0, the process of decrypting the ciphertext received in S132 is performed in S133.

  If the data length of the received data is abnormal or if a CRC error occurs as a result of the CRC check, the receiving side performs processing to discard the received message without updating the counter value. . Then, processing for returning a request for retransmission is performed. On the receiving side, a process is performed in which the value of the telegram counter unit N in the current count value of the counter is decremented by “1”, and the same telegram is decrypted and retransmitted.

  Next, the counter operation of the decoding process in the SE2 mode will be described based on FIG. In the above-described embodiment, two types of counters, a down counter and an up counter, are shown (see FIG. 37). The two types of cases are shown in FIG. On the other hand, FIG. 46A shows a counter using a common counter for downlink and uplink. First, an example using a common counter will be described with reference to FIG.

  In the case of the common counter, there is a disadvantage that a counter value difference between the SC 325b and the communication control IC 325a occurs when cross transmission occurs. In normal transmission, for example, after a response from the communication control IC 325a is transmitted to the SC 325b, the SC 325b transmits the next request (command) to the communication control IC 325a. On the other hand, in the cross transmission, the output of the response (response) from the communication control IC 325a and the output of the next request (command) from the SC 325b are made almost simultaneously, and the output of the next request (command) from the SC 325b is performed. After being made, the response (response) from the communication control IC 325a is received by the SC 325b, and after the response (response) is output from the communication control IC 325a, the next request (command) from the SC 325b is received by the communication control IC 325a. .

  In the case of the common counter, when the above-described cross transmission occurs, the counter value is set to 1 by transmitting the next request (command) before receiving a response from the communication control IC 325a on the SC 325b side, for example. In order to decrypt the response (response) encrypted with the counter value (= 2) with the updated counter value (= 3). In addition, the counter values on the SC 325b side and the communication control IC 325a side are in a state of being different from each other, and there is a disadvantage that the decoding cannot be performed properly.

  Therefore, on the other hand, when two types of counters, that is, a down counter and an up counter are used, when the above-described cross transmission occurs, referring to FIG. 46B, for example, the communication control IC 325a on the SC 325b side. Even if one down counter value is updated (down counter value = 2) by transmitting the next information before receiving the response from the counter, the updated counter value is not updated from SC 325b. Since only the down counter value used for generating the ciphertext to be transmitted to the communication control IC 325a is updated and the up counter value is not updated (up counter value = 1), the up counter value (= 1) The response (response) from the communication control IC 325a encrypted with the same counter value (= 1) for the upstream side is appropriate on the SC 325b side. It is possible to decode.

  As described above, the first key (downstream counter) used for generating ciphertext to be transmitted from the first control means (SC 325b, etc.) to the second control means (communication control IC 325a, etc.), and the second control means (communication control) Since the second key (uplink counter) used for generating the ciphertext to be transmitted from the IC 325a to the first control means (SC325b etc.) is independently updated, the first control means (SC325b etc.) and the second key It is possible to prevent inconvenience that a key conflict occurs between the two control means when cross transmission occurs between the two control means (communication control IC 325a and the like). After the response from the second control means (communication control IC 325a etc.) is transmitted to the first control means (SC325b etc.), the first control means (SC325b etc.) sends the next information to the second control means (communication control IC 325a etc.). ) Is a normal transmission, whereas a cross transmission is an output of a response from the second control means (communication control IC 325a etc.) and an output of the next information from the first control means (SC 325b etc.) The first control means (SC325b etc.) receives a response from the second control means (communication control IC 325a etc.) after the next information is output from the first control means (SC325b etc.). After the response is output from the second control means (communication control IC 325a etc.), the next information from the first control means (SC 325b etc.) is the second control means (communication control IC 325a etc.). The reception state received say (e.g. FIG. 46 (a) (b) refer). For example, from the first control means (SC325b, etc.), the key used to generate the ciphertext to be transmitted between the first control means (SC325b, etc.) and the second control means (communication control IC 325a, etc.) is one type of key. Each time the transmission to the second control means (communication control IC 325a, etc.) and the transmission from the second control means (communication control IC 325a, etc.) to the first control means (SC 325b, etc.), the one kind of key is updated. In such a case, when the above-mentioned cross transmission occurs, for example, the first control means (SC 325b etc.) side transmits the next information before receiving a response from the second control means (communication control IC 325a etc.). As a result, one key has been updated, and the response information transmitted from the second control means (communication control IC 325a, etc.) is updated by the one updated key. To issue, first control means (SC325b etc.) side and a state in which the key is staggered in the second control unit (such as a communication control IC325a) side, is caused inconvenience can not be properly decoded.

  Therefore, from the first key (down counter) used to generate ciphertext to be transmitted from the first control means (SC 325b etc.) to the second control means (communication control IC 325a etc.) and from the second control means (communication control IC 325a etc.). It was decided to use two types of keys, a second key (upstream counter) used for generating ciphertext to be transmitted to the first control means (SC325b etc.). As a result, when the above-described cross transmission occurs, for example, by transmitting the following information before receiving a response from the second control means (communication control IC 325a etc.) on the first control means (SC325b etc.) side Even if one key is updated, the updated key is used to generate ciphertext to be transmitted from the first control means (SC 325b, etc.) to the second control means (communication control IC 325a, etc.). Since only one key (downstream counter) is updated and the second key (upstream counter) is not updated, the second control means (communication control IC 325a etc.) encrypted by the second key (upstream counter) Can be properly decrypted on the first control means (SC325b, etc.) side using the same second key (uplink counter).

  Next, with reference to FIGS. 47 and 48, a sequence of automatic counter restoration in the SE2 mode will be described. FIG. 47 is a sequence of automatic counter restoration in the SE2 mode on the SC 325b side. FIG. 48 is a sequence of automatic counter restoration in the SE2 mode on the communication control IC 325a side. In both figures, a business message request indicates some command, and a business message response indicates some response.

  First, referring to FIG. 47, the counter automatic restoration sequence in the SE2 mode on the SC 325b side will be described. The SC 325b transmits the business message request 1 with the downstream counter = 0, and the communication control IC 325a receiving it transmits the business message response 1 with the upstream counter = 0 to the SC 325b.

  Then, the SC 325b transmits the business message request 2 with the downstream counter = 1, and the communication control IC 325a receiving it transmits the business message response 2 with the upstream counter = 1 to the SC 325b. In the middle of such an exchange, when the business message response 3 of the upstream counter = 2 transmitted from the communication control IC 325a has not reached SC 325b, the SC 325b retransmits the business message request 3. At this time, the downlink counter is not updated and transmitted with downlink counter = 2.

  The communication control IC 325a retransmits the business message response 3 because the already received business message request 3 has been retransmitted. However, if this response has not arrived again, the second telegram re-transmission by SC 325b is executed in the same manner as before, and the second re-transmission still receives the response from communication control IC 325a to SC 325b. Otherwise, the SC 325b transmits a board state request to the communication control IC 325a. This board state request is a request for the state of the security board and the gaming machine to the communication control IC 325a. In addition, the downstream counter at this time is set to 3, which is obtained by adding 1 to the counter value that has been retransmitted.

  The communication control IC 325a that has received the board status request decodes it with the downlink counter value (= 3) obtained by adding 1 to the downlink counter (= 2) of the business message request 3 that has already been received, and succeeds in the decoding. . Then, the communication control IC 325a returns a substrate state response (up counter = 3) to the SC 325b. However, the SC 325b has not received the business message response 3 (upstream counter = 2), and the most recently received message has an upstream counter of 1. For this reason, when the received board state response is decoded with a value obtained by adding 1 to the upstream counter (= 2), a decoding abnormality is detected. Therefore, as shown in S156 of FIG. 45, the board state response is decoded with 3 which is a value obtained by adding +1 to the upstream counter (= 2), and the decoding is successful.

  Next, with reference to FIG. 48, the counter automatic restoration sequence in the SE2 mode on the communication control IC 325a side will be described. The SC 325b transmits the business message request 1 with the downstream counter = 0, and the communication control IC 325a receiving it transmits the business message response 1 with the upstream counter = 0 to the SC 325b.

  Then, the SC 325b transmits the business message request 2 with the downstream counter = 1, and the communication control IC 325a receiving it transmits the business message response 2 with the upstream counter = 1 to the SC 325b. In the middle of such an exchange, when the response to the business message request 3 with the downstream counter = 2 transmitted from the SC 325b is not returned from the communication control IC 325a, the SC 325b retransmits the business message request 3. At this time, the downlink counter is not updated and transmitted with downlink counter = 2.

  However, if the response to the business message request 3 is not returned again, the second message retransmission by the SC 325b is executed in the same manner as the previous one, and the response from the communication control IC 325a to the SC 325b is still in the second retransmission. If the message does not arrive, the SC 325b transmits a board status request to the communication control IC 325a. This board state request is a request for the state of the security board and the gaming machine to the communication control IC 325a. In addition, the downstream counter at this time is set to 3, which is obtained by adding 1 to the counter value that has been retransmitted.

  However, the communication control IC 325a cannot receive the business message request 3 (downstream counter = 2), and the most recently received message has a downstream counter of 1. For this reason, when the received board status request is decoded with a value obtained by adding 1 to the downstream counter (= 2), a decoding abnormality is detected. Therefore, as shown in S156 of FIG. 45, the board state request is decoded with 3 which is a value obtained by adding 1 to the down counter, and the decoding is successful. On the other hand, the SC 325b that has received the board state response (upstream counter = 2) has already received the business message response 2 (upstream counter = 1), and therefore decrypts it with the value obtained by adding 1 to the upstream counter (= 2). And decryption is successful.

  47 and FIG. 48 show an example in which decoding is retried and succeeded with a value incremented by +1 when a decoding error occurs, but in the case of failure, for example, FIG. 45 ( The process shown in a) is applied. That is, as shown in FIG. 45 (a), +1 is tried first, and if decoding is unsuccessful, +1 is further tried, and such trial is repeated a plurality of times. Returning to the original counter value, −1 is tried from that value, and if decoding is unsuccessful, −1 is further tried. The update value of the counter is not limited to 1, and values such as 2 and 3 may be used as the update value.

<Main sequence in communication between CU control unit and SC>
Next, a process executed by the CPU in the CU control unit 323 and a process executed by the security chip (SC) 325b will be described based on FIGS.

  First, with reference to FIG. 49, a process for starting up the CU control unit 323 when the power is turned on and the hall is installed will be described. FIG. 49 shows a sequence when the power supply is first turned on after the CU 3 is installed in the amusement hall. In particular, a startup sequence at the time of hall installation using the board initial key will be described.

  First, when the power of the CU3 is turned on, the CU control unit 323 and the SC325b are activated. When the CU 3 is installed in the amusement hall and the power is first turned on, the CU control unit 323 receives the board initial key A, the board initial key A MAC key from the host device (specifically, from the hall server 801), Obtain an effective key (for commercial / P shipment). Here, the board initial key A is an encryption key that is downloaded from the hall server 801 and stored in the CU control unit 323 when first communicating with the host device after being delivered to the amusement hall, and is installed in the key management center. The encryption key is used for communication between the CU control unit 323 and the SC 325b until the board information (board serial ID and board authentication key) stored in the key management server is acquired. The board initial key A is decrypted using the board manufacturer code, while the MAC key of the board initial key A is similarly decrypted using the board manufacturer code. Such decryption is performed by a decryption method conforming to the AES (Advanced Encryption Standard) encryption method.

  Thereafter, the CU control unit 323 and the SC 325b execute a board manufacturer code authentication sequence, a board initial key authentication sequence, and a security board information inquiry sequence. Both the board initial key authentication sequence and the security board information inquiry sequence are performed in the SE1 mode.

  The board manufacturer code authentication sequence authenticates the board manufacturer code between the CU control unit 323 and the SC 325b using a challenge / response method. After processing the board manufacturer code authentication sequence, the CU control unit 323 and the SC 325b perform the board initial key authentication sequence using the board initial key acquired from the hall server 801 as the encryption key, and authenticate when the board initial key authentication is completed. It becomes OK. Detailed processing of the board initial key authentication sequence will be described later.

  Thereafter, the CU control unit 323 and the SC 325b use the board initial key acquired from the hall server 801 as the encryption key, perform a security board information inquiry sequence, and acquire OK when the security board information can be acquired. The security board information is acquired from the key management server of the key management center, and includes a board serial ID, a board authentication key, and the like. Details of the security board information inquiry sequence will be described later. The board authentication key is an encryption key that is downloaded from a key management server installed in the key management center and used for communication between the CU control unit 323 and the SC 325b. The key management server stores the board authentication key in association with the board serial number or the like.

  When the security board information can be acquired by the security board information inquiry sequence, the SC 325b performs authentication with the communication control IC 325a.

  Thereafter, the CU control unit 323 and the SC 325b use the board initial key acquired from the hall server 801 as an encryption key, perform a communication key exchange sequence, and exchange communication keys for business message communication. The communication key exchange sequence is performed in the SE1 mode.

  The CU control unit 323 and the SC 325b use a substrate initial key as an encryption key, perform a communication key exchange sequence, and generate a communication key. In the communication key exchange sequence, the substrate authentication key is used as the encryption key when the substrate information can be acquired in the substrate information acquisition sequence. However, when the substrate information cannot be acquired, the substrate initial key is used as the encryption key for a limited time. Specifically, the communication key is generated using a random number and current time data. The method for generating this communication key (session key) is not limited to random number and current time data, but any variable data other than the key used for mutual authentication between encrypted communication devices can be used. Also good. Note that the communication key exchange sequence is for exchanging a key (communication key) used for encryption communication with a gaming machine in order to enable gaming by the gaming machine, and detailed processing will be described later.

  When the communication key can be generated by the communication key exchange sequence, the SC 325b acquires the gaming machine chip information from the communication control IC 325a.

  Thereafter, the CU control unit 323 and the SC 325b use the communication key acquired from the communication key exchange sequence as the encryption key, perform a gaming machine chip information inquiry sequence, and inquire / notify gaming machine chip information. The gaming machine chip information inquiry sequence is performed in the SE2 mode. The gaming machine chip information includes a main control chip ID and a payout control chip ID. Detailed processing of the gaming machine chip information authentication sequence will be described later.

  By performing the above processing, the CU control unit 323 and the SC 325b can perform business message communication with the gaming machine. By performing business telegram communication with this gaming machine, gaming can be performed on the gaming machine. The business message communication with the gaming machine is operated using a communication key (session key). The communication at this time is time-limited communication as described above, and is allowed only for a certain period (for example, 2 days). The communication mode performed through the above processing is the restricted communication mode (substrate initial key mode (substrate initial key operation)). If a certain period of time (for example, 2 days) is exceeded with this timed operation, the temporary operation is stopped and the overage is notified from the SC 325b to the key management server via the CU control unit 323 and the hall server 801. Is done.

  Thereafter, the CU 3 makes a recovery request to the P unit 2, and the P unit 2 sends a response (recovery response) of the recovery response including the previous last transmission serial number, the previously inserted card ID, and the previous card insertion time to the CU 3. Send back.

  Next, with reference to FIG. 50, the power-on / normal startup process of the CU control unit 323 will be described. FIG. 50 shows a sequence when the power is normally turned on after the CU 3 is installed in the amusement hall. In particular, a startup sequence using the board authentication key will be described.

  First, when the power of the CU3 is turned on, the CU control unit 323 and the SC325b are activated. When the power supply is first turned on after the CU3 is installed in the amusement hall, the CU control unit 323 receives a board serial ID key from the host device (specifically, from the key management server via the hall server 801), The board authentication key version, the board authentication key A, and the MAC key of the board authentication key A are acquired. The board serial ID key is decrypted using the board initial key, the board initial key A is decrypted using the board serial ID, and the MAC key of the board initial key A is similarly decrypted using the board serial ID. Is done. Such decryption is performed by a decryption method according to the AES encryption method.

  Thereafter, the CU control unit 323 and the SC 325b execute a board manufacturer code authentication sequence, a board authentication key authentication sequence, and a security board information inquiry sequence. Both the board authentication key authentication sequence and the security board information inquiry sequence are performed in the SE1 mode.

  The board manufacturer code authentication sequence authenticates the board manufacturer code between the CU control unit 323 and the SC 325b using a challenge / response method. After processing the board manufacturer code authentication sequence, the CU control unit 323 and the SC 325b perform the board authentication key authentication sequence using the board authentication key acquired from the key management server as the encryption key. Detailed processing of the board authentication key authentication sequence will be described later.

  Thereafter, the CU control unit 323 and the SC 325b perform the security board information inquiry sequence using the board authentication key acquired from the key management server as the encryption key only when the key is updated.

  The SC 325b executes authentication with the communication control IC 325a when the board authentication key can be authenticated by the board authentication key authentication sequence and there is no key update, or when there is a key update and authentication can be performed by the security board information inquiry sequence. .

  Thereafter, the CU control unit 323 and the SC 325b use the board authentication key as the encryption key, perform a communication key exchange sequence, and generate a communication key. The communication key exchange sequence is performed in the SE1 mode. Specifically, the communication key is generated using a random number and current time data. The method for generating this communication key (session key) is not limited to random number and current time data, but any variable data other than the key used for mutual authentication between encrypted communication devices can be used. Also good. Note that the communication key exchange sequence is for exchanging a key (communication key) used for encryption communication with a gaming machine in order to enable gaming by the gaming machine, and detailed processing will be described later.

  When the communication key can be generated by the communication key exchange sequence, the SC 325b further acquires gaming machine chip information from the communication control IC 325a.

  Thereafter, the CU control unit 323 and the SC 325b use the communication key acquired from the communication key exchange sequence as the encryption key, perform a gaming machine chip information inquiry sequence, and inquire / notify gaming machine chip information. The gaming machine chip information inquiry sequence is performed in the SE2 mode. The gaming machine chip information includes a main control chip ID and a payout control chip ID. Detailed processing of the gaming machine chip information authentication sequence will be described later.

  By performing the above processing, the CU control unit 323 and the SC 325b can perform business message communication with the gaming machine. By performing business telegram communication with this gaming machine, gaming can be performed on the gaming machine. A communication key (session key) is used for business message communication with this gaming machine. Communication at this time is a normal communication mode (board authentication key mode (board authentication key operation)) without restriction as in the restricted communication mode.

  Next, with reference to FIG. 51, processing for turning on the power of the CU control unit 323 and starting at the time of factory shipment will be described. FIG. 51 shows a sequence at the time of factory shipment before the CU 3 is shipped to the amusement hall, and in particular, a factory shipment start-up sequence using a board shipment key will be described. This sequence is a process in the CU control unit 323 and the SC 325b that is not connected to the host device at the time of factory shipment.

  First, when the power of the CU3 is turned on, the CU control unit 323 and the SC325b are activated. The CU control unit 323 and the SC 325b execute a board manufacturer code authentication sequence and a board initial key authentication sequence.

  The board manufacturer code authentication sequence authenticates the board manufacturer code between the CU control unit 323 and the SC 325b using a challenge / response method. After processing the board manufacturer code authentication sequence, the CU control unit 323 and the SC 325b perform the board initial key authentication sequence using the board initial key as the encryption key. The board initial key authentication sequence is performed in the SE1 mode. However, since the CU 3 is not yet installed in the game arcade at the factory shipment stage, the CU control unit 323 cannot acquire the base initial key from the hall server 801 in the game arcade, and as a result, the board initial key authentication The result is NG.

  After that, since the board initial key authentication sequence is authentication NG, the CU control section 323 sends a board shipment key request command to the SC 325b to request the board shipment key used for testing the security board 325. Send to. After receiving the board shipment key request command from the CU control unit 323, the SC 325b transmits a board shipment key response response including the board shipment key to the CU control unit 323.

  Thereafter, the CU control unit 323 and the SC 325b perform a board shipping key authentication sequence using the board shipping key acquired from the SC 325b as the encryption key. The board shipping key authentication sequence is performed in the SE1 mode. Detailed processing of the board shipping key authentication sequence will be described later.

  If the board shipping key can be authenticated by the board shipping key authentication sequence, the SC 325b performs authentication with the communication control IC 325a.

  Thereafter, the CU control unit 323 and the SC 325b use the board shipment key as the encryption key, perform a communication key exchange sequence, and generate a communication key. The communication key exchange sequence is performed in the SE1 mode. Specifically, the communication key is generated using a random number and current time data. The method for generating this communication key (session key) is not limited to random number and current time data, but any variable data other than the key used for mutual authentication between encrypted communication devices can be used. Also good. Note that the communication key exchange sequence is for exchanging a key (communication key) used for encryption communication with a gaming machine in order to enable gaming by the gaming machine, and detailed processing will be described later.

  When the communication key can be generated by the communication key exchange sequence, the SC 325b acquires the gaming machine chip information from the communication control IC 325a.

  Thereafter, the CU control unit 323 and the SC 325b use the communication key acquired from the communication key exchange sequence as the encryption key, perform a gaming machine chip information inquiry sequence, and inquire / notify gaming machine chip information. The gaming machine chip information inquiry sequence is performed in the SE2 mode. The gaming machine chip information includes a main control chip ID and a payout control chip ID. Detailed processing of the gaming machine chip information authentication sequence will be described later.

  Thereafter, the CU 3 makes a communication test request to the P unit 2, and the P unit 2 transmits a communication test response to the CU 3.

  By performing the above processing, the CU control unit 323 and the SC 325b can communicate with the gaming machine only by the communication test message. By performing communication of this communication test message, a communication test at the time of factory shipment is performed. CU3 that has passed the factory communication test is delivered to the amusement hall, and the first power-on sequence is the hall installation sequence described with reference to FIG. 49, and is executed after obtaining the board authentication key. The sequence is the normal startup sequence described with reference to FIG.

Next, with reference to FIG. 52, processing of the board manufacturer code authentication sequence will be described.
First, the CU control unit 323 transmits a board manufacturer code authentication request 1 command for requesting board manufacturer code authentication to the SC 325b. Since the board manufacturer code authentication is performed using the challenge / response method, the CU control unit 323 requests the challenge code from the SC 325b.

  Upon receiving the board manufacturer code authentication request 1 command, the SC 325b generates a challenge code based on the board manufacturer code, and notifies the CU control unit 323 of the generated challenge code as a response of the board manufacturer code authentication response 1.

  Upon receiving the board manufacturer code authentication response 1 command, the CU control unit 323 generates a response code based on the challenge code, and notifies the generated response code to the SC 325b using the board manufacturer code authentication request 2 command. Specifically, the response code is generated by encrypting the challenge code received using the board manufacturer code as a key.

  The SC 325b that has received the board manufacturer code authentication request 2 command checks the response code (specifically, if the challenge code is extracted by decrypting the response code using the board manufacturer code as a key), the challenge code matches. Assume that the check result is OK. Then, the check result is notified to the CU control unit 323 as a response of the board manufacturer code authentication response 2. At this time, the CU control unit 323 acquires authentication log information such as a board manufacturer code authentication result from the SC 325b.

  On the other hand, if the challenge codes do not match, the check result is NG (inappropriate). In this case, the authentication is repeated n times, and SC 325b becomes a no-response state (HALT) in the case of NG for n times continuously, and the board authentication key and the main authentication key are cleared (see FIG. 65). After entering the no-response state (HALT), the SC 325b does not authenticate with the communication control IC 325a, and repairs are performed at the factory.

  The CU control unit 323 notifies the SC 325b of the CU control unit specific information (unified store code, unit number, current time), and transmits a board connection request command for requesting connection with the gaming machine.

  After receiving the board connection request command from the CU control unit 323, the SC 325b retains the information on the unified store code, the bedtime, and the current time, and when the previous unified store code matches, the CU control unit 323 A response of the board connection response notifying that the connection request has been accepted (OK) is returned.

  On the other hand, when it does not coincide with the previous unified store code, a response of the substrate connection response notifying that the connection request is not accepted (NG) is returned to the CU control unit 323, and the substrate stored in the RAM In addition to clearing the authentication key, a transition is made to a substrate initial key mode (see FIG. 49), which is a mode in which processing proceeds with the substrate initial key as an encryption key. At this time, the CU control unit 323 acquires authentication log information such as a board connection request result from the SC 325b.

  Next, with reference to FIG. 53, processing of the authentication sequence of the board initial key or board shipping key will be described. This sequence is performed in SE1 mode.

  First, as shown in FIG. 53, in the state of the board initial key mode, which is a mode for proceeding with the board initial key as an encryption key, authentication using the basic initial key is performed in FIG. In the case of the substrate shipping key mode, which is a mode for proceeding with processing using the key as the encryption key, authentication using the base shipping key is performed in FIG. Therefore, “/” in FIG. 53 is a symbol representing either one. The CU control unit 323 sends a board initial key / board shipment key authentication request 1 command for requesting authentication information to the SC 325b. The command of the board initial key / board shipping key authentication request 1 is not encrypted, but may be encrypted using the board initial key / board shipping key as the encryption key.

  The SC 325b that has received the command of the board initial key / board shipping key authentication request 1 encrypts the random number A of the authentication information with the board initial key or the board shipping key and sends the H-MAC with the MAC key to the CU control unit 323. It calculates and returns with the response of the board initial key / board shipment key authentication response 1.

  The CU control unit 323 that has received the board initial key / board shipping key authentication response 1 command decrypts the random number A of the authentication information and checks the MAC in order to verify the board initial key or board shipping key.

  Thereafter, the CU control unit 323 encrypts the random number B of the authentication information with the board initial key or the board shipping key, calculates the H-MAC with the MAC key, and requests the board initial key / board shipping key authentication request to the SC 325b. Send with command 2. The command of the board initial key / board shipping key authentication request 2 is encrypted using the board initial key or the board shipping key as the encryption key.

  The SC 325b that has received the command of the board initial key / board shipping key authentication request 2 decrypts the random number B of the authentication information and checks the MAC in order to verify the board initial key or board shipping key to the CU control unit 323. To do. The SC 325b returns an authentication result to the CU control unit 323 as a response of the board initial key / board shipment key authentication response 2. At this time, the CU control unit 323 acquires authentication log information such as a board initial key authentication result and a board shipping key authentication result from the SC 325b.

  Next, with reference to FIG. 54, processing of the authentication sequence of the board serial ID and the board authentication key will be described. This sequence is performed in SE1 mode.

  First, the communication between the CU control unit 323 and the SC 325b is performed in the state of the board authentication key mode, which is a mode in which processing is performed using the board authentication key as an encryption key. The command of the board serial ID authentication request 1 for requesting is sent. Since the board serial ID authentication is performed using a challenge / response method, the CU control unit 323 requests a challenge code from the SC 325b.

  The SC 325b that has received the command of the board serial ID authentication request 1 generates a challenge code based on the board serial ID, and notifies the CU control unit 323 of the generated challenge code as a response of the board serial ID authentication response 1.

  The CU control unit 323 that has received the command of the board serial ID authentication response 1 generates a response code based on the challenge code (specifically, generates a response code by encrypting the challenge code using the board serial ID as a key), The generated response code is notified to the SC 325b by the command of the board serial ID authentication request 2.

  Upon receiving the board serial ID authentication request 2 command, the SC 325b checks the response code (specifically, decrypts the response code using the board serial ID as a key and extracts the challenge code), and the challenge code matches. If the check result is OK. Then, the check result is notified to the CU control unit 323 by the response of the board serial ID authentication response 2. If the check result is NG, the SC 325b notifies the CU control unit 323 that the check result is included in the authentication result in the board authentication result notification and the board authentication result response, and notifies the NG. At this time, the CU control unit 323 acquires authentication log information such as a board serial ID authentication result from the SC 325b.

  Thereafter, the CU control unit 323 transmits a version information notification command to the SC 325b in order to notify the version information of the board authentication key. Note that the version information notification command is encrypted using the board authentication key as the encryption key.

  Upon receiving the version information notification command, the SC 325b returns a response of the version information response to notify the CU control unit 323 that the version information of the board authentication key has been received. Note that the response of the version information response is not encrypted, but may be encrypted using a board authentication key as an encryption key.

  Thereafter, the CU control unit 323 transmits a command of the board authentication key authentication request 1 for requesting authentication information to the SC 325b. The command of the board authentication key authentication request 1 is not encrypted, but may be encrypted using the board authentication key as the encryption key.

  The SC 325b that has received the command of the board authentication key authentication request 1 encrypts the random number A of the authentication information with the board authentication key and calculates the H-MAC with the MAC key to the CU control unit 323, and the board authentication key authentication. Reply with response 1 response.

  Upon receiving the board authentication key authentication response 1 command, the CU control unit 323 decrypts the random number A of the authentication information and checks the MAC in order to verify the board authentication key.

  Thereafter, the CU control unit 323 encrypts the random number B of the authentication information with the board authentication key, calculates the H-MAC with the MAC key, and transmits it to the SC 325b with the command of the board authentication key authentication request 2. The command of the board authentication key authentication request 2 is encrypted using the board authentication key as the encryption key.

  Upon receiving the board authentication key authentication request 2 command, the SC 325b decrypts the random number B of the authentication information and checks the MAC in order to verify the board authentication key to the CU control unit 323. Then, the SC 325b returns an authentication result as a response of the board authentication key authentication response 2 to the CU control unit 323.

  Thereafter, the CU control unit 323 transmits a board authentication result notification command to the SC 325b in order to notify the board authentication result. The board authentication result notification command is encrypted using the board authentication key as the encryption key. The board authentication result notification command notifies the SC 325b of the board serial ID authentication and the board authentication key authentication result.

  The SC 325b that has received the board authentication result notification command transmits a board authentication result response command to the CU control unit 323 in order to notify the board serial ID authentication and the board authentication key authentication result. The board authentication result response command is encrypted using the board authentication key as the encryption key. At this time, the CU control unit 323 acquires authentication log information such as a board authentication result from the SC 325b.

  Next, FIG. 55 is a diagram for explaining processing in the case of inquiring about security board information. This sequence is performed in SE1 mode. Referring to FIG. 55, first, the CU control unit 323 transmits a security board inquiry instruction notification command to the SC 325b in order to request information for inquiring of the host device. Note that the security board inquiry instruction notification command to be transmitted is encrypted using the board initial key or the board authentication key as the encryption key.

  The SC 325b that has received the security board inquiry instruction notification command notifies the CU control unit 323 of information (board serial number and inquiry information) for inquiring of the host device (specifically, the key management server via the hall server 801). The response of the security board inquiry result is returned to the CU control unit 323. Note that the response of the security board inquiry instruction notification to be returned is encrypted by using the board serial number as the encryption key and the board initial key or the board authentication key, and the CU control unit 323 and the hall server 801 cannot decrypt the key ( Inquiry information is encrypted using the “secret key”. As a result, the inquiry information can be decrypted and decrypted only by the key management server.

  Upon receiving the response of the security board inquiry result, the CU control unit 323 sends the information (board serial number) of the security board 325 to the host device (specifically, the key management server via the hall server 801) based on the board serial number and the inquiry information. And inquiry information), and waits for a response from the host device. While inquiring about security board information, the CU control unit 323 and the SC 325b do not wait for a response from the host device, and process the next step (for example, communication control IC authentication processing, gaming machine chip information authentication processing, gaming machine Business message processing, etc.), and necessary processing is performed when security board information is received.

  Thereafter, when receiving the inquiry result of the security board information (board serial ID and board authentication key) from the host device, the CU control unit 323 notifies the security board information to the SC 325b. Specifically, the CU control unit 323 transmits a security board information notification command including the board serial ID and the board authentication key, which is the inquiry result, to the SC 325b. Note that the security board information notification command to be transmitted is encrypted using the board initial key or the board authentication key as the encryption key.

  After receiving the security board information notification command, the SC 325b confirms the inquiry number and sends a response of the security board information result to notify the CU control unit 323 that the security board information notification command has been normally received. Send back. The key update information is used at the next reset. The response of the security board information result to be returned does not need to be encrypted. However, in the case of encryption, a board initial key or a board authentication key is used as the encryption key.

  Thereafter, if the reception result is OK, the CU control unit 323 stores the board serial ID key and the board authentication key A and uses them as authentication key information at the next reset. In addition, the CU control unit 323 acquires authentication log information for board information inquiry and board information notification.

  Next, the processing of the gaming machine chip information inquiry sequence will be described with reference to FIG. This sequence is performed in SE2 mode.

  First, the CU control unit 323 transmits a gaming machine chip inquiry instruction notification command for inquiring gaming machine chip information to the SC 325b. Note that the gaming machine chip inquiry instruction notification command to be transmitted does not have to be encrypted, but when encrypted, a communication key is used as the encryption key.

  On the other hand, the SC 325b acquires gaming machine chip information from the communication control IC. Thereafter, the SC 325b that has received the gaming machine chip inquiry instruction notification command has completed the acquisition of the gaming machine chip information, so the response of the gaming machine chip inquiry result including the information of gaming machine chip inquiry result = OK is CU controlled. Reply to part 323. The gaming machine chip information includes a main control chip ID, a payout control chip ID, and the like. Note that the response of the returned gaming machine chip inquiry result is that the main control chip ID and the payout control chip ID are encrypted with the secret key, and other information is encrypted using the communication key as the encryption key.

  After that, when receiving the response of the returned gaming machine chip inquiry result, the CU control unit 323 sends the main control chip ID and the payout control chip ID to the higher-level device (key management server or hall server 801: see FIG. 5). Inquiries about the gaming machine chip information included, and waits for a response from the host device. During the gaming machine chip information inquiry, the CU control unit 323 and the SC 325b execute the processing of the next step (business message processing with the gaming machine) without receiving a response from the host device. Since it takes time (for example, about 2 hours) to inquire about gaming machine chip information, the operation of the gaming machine cannot be stopped during that time, so the next step processing is not performed without a response from the host device. (Business message processing with game machine) is executed. It should be noted that during the gaming machine chip information inquiry, even if a reset operation (for example, operation of a reset button (not shown) or power-on, etc.) is performed, the gaming machine chip inquiry instruction notification request is not issued again.

  After that, when receiving the matching result of the gaming machine chip information from the host device, the CU control unit 323 notifies the SC 325b of the matching result. Specifically, the CU control unit 323 transmits a gaming machine chip information notification command including a matching result to the SC 325b. Note that the gaming machine chip verification result notification command to be transmitted is encrypted using the communication key as the encryption key.

  After receiving the gaming machine chip information notification command, the SC 325b returns a response of the gaming machine chip information result to notify the CU control unit 323 of the gaming machine manufacturer code and model code when the collation result is OK. Note that the response of the gaming machine chip information result to be returned is encrypted using the communication key as the encryption key.

  At the same time, the CU control unit 323 obtains an authentication log such as a gaming machine chip information inquiry and a gaming machine chip information collation result included in the gaming machine chip information result from the SC 325b.

  Next, the communication key exchange sequence process will be described with reference to FIG. The CU control unit 323 transmits, to the SC 325b, a counter information request for requesting the values of the initial vector portion of the counter used in the SE2 mode (the value of the upstream initial vector portion and the value of the downstream initial vector portion). The CU control unit 323 waits until the authentication process between the SC 325b and the communication control IC 325a is completed. The SC 325b generates initial vector values (upstream initial vector value and downstream initial vector value) used in the SE2 mode, and notifies the CU control unit 323 of the counter information response. The response is encrypted in SE1 mode using the board initial key or board authentication key as the encryption key.

  The CU control unit 323 acquires authentication log information. This includes the authentication result of the communication control IC 325a. Subsequently, the CU control unit 323 transmits a communication key request to the SC 325b. Then, the SC 325b generates a communication key (session key) and notifies the CU control unit 323 of this with a communication key response. This communication is performed in SE2 mode. Note that the method for generating a communication key (session key) is specifically a case where a communication key (session key) is generated from the substrate initial key and a random number when the substrate initial key is used, and an authentication key is used. Generates a communication key (session key) from the authentication key and a random number. The current time data may be used instead of the random number.

  The CU control unit 323 acquires authentication log information. This includes the valid key setting result and the authentication key setting result (only the result). Thereafter, communication using a communication key (session key) is performed.

  Next, with reference to FIG. 58, the processing of the sequence of the board authentication key authentication abnormality will be described. First, when the power of the CU3 is turned on, the CU control unit 323 and the SC325b are activated. Thereafter, the CU control unit 323 and the SC 325b execute a board manufacturer code authentication sequence and a board authentication key authentication sequence.

  The board manufacturer code authentication sequence authenticates the board manufacturer code between the CU control unit 323 and the SC 325b using a challenge / response method. After processing the board manufacturer code authentication sequence, the CU control unit 323 and the SC 325b perform the board authentication key authentication sequence using the board authentication key acquired from the key management server as the encryption key. The board authentication key authentication sequence is performed in the SE1 mode. If the board authentication key authentication is authentication NG, the SC 325b clears the board authentication key information as an authentication error.

  Thereafter, the CU control unit 323 and the SC 325b execute a board initial key authentication sequence. The board initial key authentication sequence is performed in the SE1 mode. At this time, the communication of the board initial key authentication sequence is encrypted using the board initial key as the encryption key.

  When the authentication of the board initial key authentication sequence is authentication OK, the security board information inquiry sequence, the communication key exchange sequence, and the gaming machine chip information inquiry are performed in the same manner as the hall installation start-up sequence shown in FIG. Processing such as a sequence is performed, and business message communication with the gaming machine becomes possible. The subsequent communication is encrypted using the communication key as the encryption key.

  Note that the SC 325b notifies the key management server 801 of an alarm (error information) of “abnormal board authentication key update” indicating that the authentication of the board authentication key sequence is authentication NG.

  Next, FIG. 59 is a diagram for explaining processing of an inquiry timeout sequence for security board information.

  First, the CU control unit 323 transmits a security board inquiry instruction notification command to the SC 325b in order to request information for inquiring of the host device. Note that the security board inquiry instruction notification command to be transmitted is encrypted using the board initial key or the board authentication key as the encryption key.

  The SC 325b that has received the security board inquiry instruction notification command notifies the CU control unit 323 of information (board serial number and inquiry information) for inquiring of the host device (specifically, the key management server via the hall server 801). The response of the security board inquiry result is returned to the CU control unit 323. This sequence is performed in SE1 mode. The response of the security board inquiry instruction notification to be returned is encrypted using the board serial number as the encryption key and the board initial key or the board authentication key, and the inquiry information is encrypted with the secret key. As a result, the inquiry information can be decrypted and decrypted only by the key management server.

  Upon receiving the response of the security board inquiry result, the CU control unit 323 sends the information (board serial number) of the security board 325 to the host device (specifically, the key management server via the hall server 801) based on the board serial number and the inquiry information. And inquiry information), and waits for a response from the host device. While inquiring about security board information, the CU control unit 323 and the SC 325b do not wait for a response from the host device, and process the next step (for example, communication control IC authentication processing, gaming machine chip information authentication processing, gaming machine Business message processing etc.).

  After that, the CU control unit 323, when receiving the security board information inquiry result (board serial ID and board authentication key) from the host device, times out the waiting time for the security board information inquiry, the CU 3 2 transmits a status information request command for requesting information on the second status. The status information request command is encrypted using a communication key as an encryption key. The SC 325b that has received the status information request command acquires the gaming machine chip information of the P unit 2 via the communication control IC 325a.

  Then, the SC 325b returns a response of the status information response to the CU 3. At this time, the SC 325b returns a status information response including “board inquiry present” indicating that the security board information is requested to the key management center. The status information request / response sequence is performed in the SE2 mode.

  In response to the above-described security board inquiry, the CU control unit 323 transmits a security board inquiry instruction notification command to the SC 325b in order to request information to make an inquiry to the host device. Note that the security board inquiry instruction notification command to be transmitted is encrypted using the board initial key or the board authentication key as the encryption key.

  The SC 325b that has received the security board inquiry instruction notification command notifies the CU control unit 323 of information (board serial number and inquiry information) for inquiring of the host device (specifically, the key management server via the hall server 801). The response of the security board inquiry result is sent back to the CU control unit 323 again. The security board inquiry instruction notification / security board inquiry result sequence is performed in the SE2 mode. The response of the security board inquiry instruction notification to be returned is encrypted using the board serial number as the encryption key and the board initial key or the board authentication key, and the inquiry information is encrypted with the secret key. As a result, the inquiry information can be decrypted and decrypted only by the key management server.

  Upon receiving the response of the security board inquiry result, the CU control unit 323 sends the information (board serial number) of the security board 325 to the host device (specifically, the key management server via the hall server 801) based on the board serial number and the inquiry information. And inquiry information), and waits for a response from the host device.

  Next, FIG. 60 is a diagram for explaining processing of a gaming machine chip information inquiry (collation) timeout sequence. This sequence is performed in SE2 mode.

  First, the CU control unit 323 transmits a gaming machine chip inquiry instruction notification command to request information (specifically, gaming machine chip information) for inquiring of the host device to the SC 325b. Note that the gaming machine chip inquiry instruction notification command to be transmitted is encrypted using a communication key as an encryption key.

  On the other hand, the SC 325b obtains the gaming machine chip information from the communication control IC, and then receives the gaming machine chip inquiry instruction notification command, and then the SC 325b communicates with the host device (specifically, the key management server via the hall server 801). In order to notify the CU control unit 323 of information to be inquired (main control chip information and payout control chip information), a response of the gaming machine chip inquiry result (authentication OK) is returned to the CU control unit 323. Note that the response of the game machine chip inquiry instruction notification to be returned is encrypted with the main control chip ID and the payout control chip ID using a secret key, and the other information is encrypted using a communication key as an encryption key.

  The CU control unit 323 that has received the response of the gaming machine chip inquiry result sends the gaming machine chip information (specifically, the key management server via the hall server 801) to the gaming machine chip information (based on the main control chip information and the payout control chip information). Main control chip information and payout control chip information) and wait for a response from the host device. While inquiring about the gaming machine chip information, the CU control unit 323 and the SC 325b do not wait for a response from the host device, and process the next step (for example, authentication processing of the communication control IC, authentication processing of the security board information, gaming machine Business message processing, etc.) and the processing necessary when the gaming machine chip information is received.

  However, after that, the CU control unit 323 determines that the waiting time for the gaming machine chip information inquiry has timed out before receiving the gaming machine chip information inquiry result (main control chip information and payout control chip information) from the host device. The CU 3 transmits a status information request command for requesting information on the status of the P platform 2. The status information request command is encrypted using a communication key as an encryption key. The SC 325b that has received the status information request command acquires the gaming machine chip information of the P unit 2 via the communication control IC 325a.

  Then, the SC 325b returns a response of the status information response to the CU 3. At this time, the SC 325b returns a status information response including “chip information inquiry present” indicating that an inquiry to the key management center for gaming machine chip information is requested.

  In response to the above gaming machine chip information inquiry, the CU control unit 323 transmits a gaming machine chip inquiry instruction notification command to the SC 325b in order to request information for inquiring of the host device. Note that the gaming machine chip inquiry instruction notification command to be transmitted is encrypted using a communication key as an encryption key.

  Upon receiving the gaming machine chip inquiry instruction notification command, the SC 325b sends information (main control chip information and payout control chip information) for inquiring of the host device (specifically, the key management server via the hall server 801) to the CU control unit 323. In order to notify, the response of the gaming machine chip inquiry result is sent back to the CU control unit 323 again. Note that the response of the game machine chip inquiry instruction notification to be returned is encrypted with the main control chip ID and the payout control chip ID using a secret key, and the other information is encrypted using a communication key as an encryption key.

  The CU control unit 323 that has received the response of the gaming machine chip inquiry result sends the gaming machine chip information (specifically, the key management server via the hall server 801) to the gaming machine chip information (based on the main control chip information and the payout control chip information). Main control chip information and payout control chip information) and continue to wait for a response from the host device.

  Characteristic parts of the sequence between the CU control unit 323 and the SC 325b described with reference to FIGS. 49 to 60 will be described below.

  As a sequence executed after the CU 3 is received and installed in the amusement hall, there is a “board initial key authentication sequence” (see FIG. 49). This “board initial key authentication sequence” is obtained by downloading and obtaining a board initial key from the host device (hall server 801) at the first power-on time when it is brought into the game hall and installed. The sequence to be authenticated. On the condition that the authentication result of this board initial key authentication sequence is OK, the “security board information inquiry sequence” is executed using this board initial key (see FIG. 49). The board authentication key is downloaded and stored from the host device (key management server) by this security board information inquiry sequence, and thereafter, various authentication sequences, communication key exchange sequences, etc. are executed using this board authentication key, and the communication key is obtained. Using this, business message communication with the gaming machine is executed (see FIG. 50).

  On the other hand, as a result of executing the security board information inquiry sequence (see FIG. 49) using the board initial key, the board authentication key may not be acquired. The board authentication key is sent to the key management server by the CU manufacturer when the CU manufacturer ships CU3 to the game hall, and stored in the key management server. The board authentication key stored in advance in the key management server is downloaded and stored, but the transmission of the board authentication key from the CU manufacturer to the key management server may be delayed for some reason. In addition, when the CU3 installed in the amusement hall attempts to download the board authentication key by executing the security board information inquiry sequence, an unexpected situation occurs between the key management server and the CU3 and communication is impossible. May be offline. In such a case, the board authentication key cannot be downloaded.

  If the board authentication key cannot be downloaded and the actual operation such as business message communication with the gaming machine after that cannot be performed at all, operational problems such as a decrease in the operating rate at the amusement hall occur. Therefore, when such an unforeseen situation occurs, control is performed so that the temporary operation of the actual operation can be performed using the board initial key which is a temporary authentication key. Specifically, the communication key exchange sequence is executed using the board initial key acquired from the host device (specifically, the hall server 801), and the communication key (session key) is obtained using the random number and the time data. The communication key (session key) is generated and shared between the CU control unit 323 and the SC 325b, and business message communication is performed using the communication key (session key), thereby performing actual operation control. The actual operation control using the communication key exchanged using the board initial key is allowed only for a certain period because the board initial key is a temporary key and the board authentication key cannot be obtained. Temporary operation is controlled. Specifically, actual operation control using this board initial key is allowed for only two days, and when the board authentication key cannot be obtained even at the time of power-up on the third day, the subsequent control is stopped, Control is performed to notify that the abnormality has occurred and to notify the hall server 801 and the hall management computer that the abnormality has occurred. The temporary operation time limit control that is allowed for a certain period (for example, two days) with the board initial key is that the board initial key is stored in the hall server 801, so that at least the CU control unit 323 has the hall. Allowed to be connected to the server 801 is permitted.

  Further, the above-mentioned “substrate initial key / shipping key authentication sequence” is executed at the time of factory shipment shown in FIG. When the board initial key authentication sequence is executed at this stage, since the board initial key has not yet been acquired, the result of execution of this board initial key authentication sequence using the board initial key is derived as the NG authentication result. The Then, each sequence after the board shipment key request and the board shipment key response shown in FIG. 53 is executed, and communication between the gaming machine and the communication test message is executed. That is, it is determined by the “substrate initial key / shipping key authentication sequence” whether the substrate initial key has been acquired or not at the time of factory shipment. The key authentication sequence is also effectively used to determine whether the board initial key has been acquired or not at the time of factory shipment.

  Further, the control operations of the sequence between the CU control unit 323 and the SC 325b and the sequence between the SC 325b and the communication control IC 325a described above are collectively described below.

  The communication control IC 325a stores communication control IC 325a identification information for identifying the communication control IC 325a and SC 325b identification information (stores ID information and the like), and the SC 325b stores SC 325b identification information (board serial number). ID) and communication control IC 325a identification information (ID information, etc.) are stored. Then, a challenge code is generated between the SC 325b and the communication control IC 325a using the SC 325b identification information stored in the SC 325b and transmitted to the communication control IC 325a, and the SC 325b identification information stored in the communication control IC 325a is transmitted. Is used to generate a response code from the received challenge code and return it to the SC 325b. The SC 325b uses the stored SC 325b identification information to determine the suitability of the received response code (see FIG. 34 and a communication control IC 325a identification information stored in the communication control IC 325a, a challenge code is generated and transmitted to the SC 325b, and the communication control IC 325a stored in the SC 325b is stored. Using another information, a response code is generated from the received challenge code and returned to the communication control IC 325a, and the communication control IC 325a determines the suitability of the received response code using the stored communication control IC 325a identification information. A third challenge response authentication process (second authentication sequence in FIG. 34) is performed.

  According to such operation control, the challenge code is transmitted from one control means to the other control means between the SC 325b and the communication control IC 325a and received using the identification information stored in the other control means. Even if a challenge code or response code sent / received between control means is leaked due to challenge-response authentication, a response code is generated from the challenge code and sent back to one control means. It is difficult to specify the identification information that is being performed, and it is possible to prevent fraudulent acts on the control means due to leakage of the identification information as much as possible.

  In addition, a gaming system or gaming device (CU3, P stand 2, jet counter, POS terminal, etc.) having an SC 325b and a communication control IC 325a that perform cryptographic communication with each other, an authentication method between the SC 325b and the communication control IC 325a. Mutual authentication processing means (first authentication sequence to version management information response in FIG. 36) for performing different types of mutual authentication processing, and each mutual authentication alone in the multiple types of mutual authentication processing performed by the mutual authentication processing means. If the authentication result is incorrect, the individual authentication result is not notified to the authentication partner's control means, but the abnormalities of the results of executing all of the multiple types of mutual authentication are summarized and notified to the authentication partner's control means. General notification means (FIG. 36: general notification of the authentication sequence from the first authentication sequence to the version management information response) And Nde. Then, the mutual authentication processing means collectively reports the abnormality by the general notification means, and then executes a re-authentication process in which a plurality of types of mutual authentication processes are performed again between the control means having the abnormality (FIG. 36: No. 36). The authentication sequence from 1 authentication sequence to version management information response is retried at most twice).

  According to such operation control, a plurality of types of mutual authentication processes with different authentication methods are performed between the first control unit and the second control unit and between the communication control IC 325a and the communication control IC 325a. Even if the security of mutual authentication by one authentication method is broken, the security of mutual authentication can be maintained by mutual authentication by another different authentication method.

  In addition, for example, when the authentication result of each type of mutual authentication of each of the multiple types of mutual authentication is inappropriate, the type of mutual authentication is notified when the authentication result is notified to the control means of the authentication partner. However, it is not desirable for security because it is known that the authentication result is incorrect. In order to sum up the abnormalities of the results of executing all of the multiple types of mutual authentication and not to notify the control method of the other party of authentication, it is not possible to see which type of mutual authentication has occurred , Can improve security.

  Furthermore, since the re-authentication process is performed again between the control means in which the abnormality occurred after the general notification of the abnormality, it is possible to check again whether the mutual authentication is really abnormal, and the reliability of mutual authentication Can be improved.

  Further, the gaming system or the gaming machine stops the subsequent processing between the inappropriate control means on the condition that the result of the re-authentication processing by the mutual authentication processing means is inappropriate (FIG. 36: Further waiting for reset).

  According to such operation control, since the subsequent processing is stopped between the inappropriate control means on the condition that the result of the re-authentication process is not reliable and the reliability is inappropriate, it is not inappropriate. Nevertheless, the inconvenience of stopping the subsequent processing can be reduced as much as possible.

  In addition, the gaming system or gaming device performs an abnormality notification for executing processing for notifying the management server of the occurrence of an abnormality on the condition that the result of the re-authentication processing by the mutual authentication processing means is inappropriate. It further includes processing means (FIG. 36: “authentication result abnormality” is notified to the host device).

  According to such operation control, since the notification of the occurrence of an abnormality is sent to the management server on the condition that the result of the re-authentication process is not reliable and the reliability is inappropriate, it is not inappropriate. Nevertheless, the inconvenience of notifying the management server of the occurrence of an abnormality can be reduced as much as possible.

  The mutual authentication processing means in the above gaming system or gaming device generates a challenge code in the communication control IC 325a and transmits it to the SC 325b, and receives a response code from the challenge code received using the identification information stored in the SC 325b. A first challenge response authentication process (first authentication sequence in FIG. 34) for determining whether the response code received using the identification information stored in the communication control IC 325a is generated and returned to the communication control IC 325a; In SC325b, a challenge code is generated and transmitted to the communication control IC 325a. A response code is generated from the challenge code received using the identification information stored in the communication control IC 325a and returned to the SC325b. In SC325b, Storage to have performed a second challenge response authentication process of determining the appropriateness of the response code received by using the identification information (second authentication sequence of FIG. 34).

  According to such operation control, the challenge code received by the SC 325b and the communication control IC 325a using the identification information transmitted from one control means to the other control means and stored in the other control means. Even if a challenge code or response code transmitted / received between both gaming means is leaked, it is stored because the response code is generated and sent back to one control means. It is difficult to specify the identification information being played, and illegal acts on the gaming means due to leakage of the identification information can be prevented as much as possible.

  FIG. 61 is a flowchart for explaining specific control of “authentication using a board authentication key”. Referring to FIG. 61, a series of processing described below is performed between CU control unit 323 and SC 325b.

  In step S201, an authentication process (unit authentication) using a board serial ID is performed using a challenge response method (see board serial ID authentication request / responses 1 and 2 in FIG. 54).

  When the single authentication in step S201 is completed, the key version is checked in the next step S202 (see version information notification / response in FIG. 54).

  When the key version check in step S202 is completed, authentication using the board authentication key is performed in the next step S203 (see board authentication key authentication request / responses 1 and 2 in FIG. 54).

  When the authentication process in step S203 is completed, the authentication results in steps S201 to S203 are mutually notified in the next step S204, and the process proceeds to the next step S205 (see board authentication result notification / response in FIG. 54). ).

  In step S205, it is determined whether or not the notified authentication result is normal. If the authentication result is normal, the process proceeds to step S206. If the authentication result is not normal, the process proceeds to step S207.

  In step S206, it is further determined whether or not the CU control unit 323 has the security board information acquired from the SC 325b. If the CU control unit 323 has the security board information to be acquired, the process proceeds to step S209 to acquire the security board information. If the security board information is not included, the process proceeds to step S210.

  In step S209, the board authentication key authentication process between the CU control units 323 and SC325b further shifts to a security board information inquiry process, and the process ends. On the other hand, in step S210, the authentication in the board authentication key mode ends normally, and the process ends. In this case, the game machine chip information is collated between the CU control units 323 and SC325b.

  On the other hand, if the authentication result is not normal in step S205, the process proceeds to step S206. In step S206, it is determined whether or not the number of retries is the third time. If the number of retries is not the third time (the number of retries is the first or second time), the process returns to step S201, and the authentication process is performed again. Done.

  If it is determined in S207 that the number of retries is the third time, the process proceeds to S2071, and it is determined whether there is an authentication record with the current board authentication key. In other words, the board authentication key whose authentication result is determined to be abnormal has been successfully authenticated in the previous authentication, or the board authentication key is the key that has been authenticated for the first time immediately after the update and is authenticated. It is determined whether the key has no record.

  If it is determined that there is an authentication record, the process proceeds to S2072, where it is determined that the key storage area is defective. This is because a key with an authentication record has been determined to be abnormal in this authentication, as a result of an abnormality occurring in the area that stores the key, the key is different from the previous one. It is possible. On the other hand, if it is determined that there is no authentication record, the process proceeds to S2073, where it is determined that the board authentication key update is abnormal. This is because it is considered that an abnormality has occurred in the key update process because it is a key with no authentication record and a key immediately after the update.

  Thereafter, the process proceeds to S2074, and an authentication result including error information corresponding to each determination result of S2072 and S2073 is transmitted to the key management server 801 (see FIG. 4). Thereafter, the process proceeds to S208. Here, the error information is a “board authentication key authentication error” indicating that the authentication of the board authentication key sequence is authentication NG together with the cause (defective key storage area, board authentication key update error).

  For example, when the determination of S205, S207, S2071 to S2073 is performed by the SC 325b, the SC 325b transmits error information in the authentication result in S2074. On the other hand, when these determinations are made by the CU control unit 323, the CU control unit 323 transmits error information in the authentication result in S2074. In that case, the error information may include data that can specify whether the error is determined in either the SC 325b or the CU control unit 323. In this embodiment, the processing of S2071 to S2074 is executed by both the CU control unit 323 and the SC 325b, but the function for executing such processing may be provided only in the SC 325b, or the CU You may provide only in the control part 323. FIG.

  Further, the error information may be transmitted to the payout control unit 171 of the P unit 2 via the communication control IC 325a, for example, instead of the key management server 801 or in addition to the key management server 801. In this case, the payout control unit 171 that has received the error information may stop the firing motor 18 via the firing control board 31 to make the game impossible state. Note that error information may be displayed on the display 54 of the P platform 2 instead of or in addition to the inoperable state.

  Furthermore, when it is determined that the authentication result is abnormal on the SC 325b side, the SC 325b notifies the CU control unit 323 of the authentication result (failure) and sends the error information to the payout control unit of the P unit 2 via the communication control IC 325a. When the authentication result is determined to be abnormal on the CU control unit 323 side, the CU control unit 323 notifies the authentication result (failure) SC 325b and transmits the error information to the key management server 801. You may make it do.

  In step S208, the authentication abnormality is set to a standby state until a reset operation (for example, operation of a reset button (not shown) or power-on). After the reset operation, it is activated again in a mode for performing an authentication process using the board initial key as an encryption key (board initial key mode), each authentication process is performed, and the process ends. In this case, the business of that day is operated in this board initial key mode throughout the day, and when the power is turned on the next day, a security board information acquisition request is issued again to the key management server to try to acquire the security board information (see FIG. 59). Further, as shown in step S208a, the inquiry process for the security board information may be executed again at this time without waiting for the power-up of the next day. In this case, while the game is progressing by the operation in the board initial key mode, the inquiry process of the security board information is also advanced in parallel.

  FIG. 62A is an example of a flowchart for explaining the communication mode switching process between the CU control unit and the SC. Referring to FIG. 62A, in step S211, the CU control unit 323 requests a board authentication key from the key management server, and the process proceeds to the next step S212.

  In step S212, the CU control unit 323 obtains a board authentication key from the security board information sent from the key management server, and transmits update information in the security board information to the SC 325b, and next step S213. The process proceeds.

  In step S213, the CU control unit 323 determines whether or not the gaming machine is in a non-operating state. When the mode switching process in the next step S214 is performed, the number of balls added / subtracted cannot be communicated with the gaming machine that is executing the switching process, so that the gaming machine is not in operation before the mode switching process in step S214. It is determined whether or not. Whether or not the gaming machine is in a non-operating state is determined based on whether or not a player's card is inserted in the CU. When no card is inserted, the gaming machine is determined to be in an inoperative state, while when a card is inserted, the gaming machine is determined to be in an operating state. If the gaming machine corresponding to the CU control unit 323 is in a non-operating state, the process proceeds to step S214. If the gaming machine corresponding to the CU control unit 323 is not in a non-operating state, the gaming machine is in a non-operating state. Step S213 is performed until.

  In step S214, based on the board authentication key acquired in step S212, the CU control unit 323 advances the process using the board authentication key as the encryption key from the mode in which the board initial key is used as the encryption key (board initial key mode). The communication mode is switched to the mode (board authentication key mode), and the process ends.

  FIG. 62B is an example of a flowchart for explaining the communication mode switching process between the SC and the communication control IC. With reference to FIG. 62B, in step S216, the SC 325b acquires update information from the CU control unit 323. As described above, the CU control unit 323 transmits update information to the SC 325b in step S212. Receiving it, the SC 325b acquires the update information. Next, in step S217, the SC 325b generates this authentication key from the acquired update information. Next, similarly to step S213 described above, in step S218, the SC 325b determines whether or not the gaming machine is in a non-operating state, and executes the process of step S219 on the condition that it is in a non-operating state. In step S219, the SC 325b uses the authentication key as the encryption key from the mode (provisional authentication key mode) in which the temporary authentication key is used as the encryption key for the communication mode between the SC 325b and the communication control IC 325a based on the generated authentication key. Switch to the mode to proceed with the process (this authentication key mode).

  According to such an embodiment, before the authenticity of the CU is authenticated by the board authentication key registered in the key management server, a normal communication mode is entered and the game on the P cards using the remaining card amount is performed. It can be prevented from becoming possible. Furthermore, even when the board authentication key registered in the key management server cannot be received, the restricted communication mode is set and a game on the P units is allowed, so that flexible operation is possible. In addition, in this case, since the game is allowed under a predetermined restriction compared to the normal communication mode, the operation can be performed without requiring authentication with the board authentication key stored in the key management server. It can prevent being continued.

  63 (a) and 63 (b) are other examples of a flowchart for explaining the communication mode switching process. Referring to FIG. 63A showing the communication mode switching process between the CU control unit and the SC, in step S221, the CU control unit 323 requests security board information from the key management server, and the next step S222 is performed. The process proceeds.

  In step S222, the hall server 801 acquires the security board information requested by the CU control unit 323 from the key management server from the key management server, and the hall server 801 acquires the board authentication key from the security board information. Next, in step S223, the hall server 801 determines whether or not the gaming machine corresponding to the CU control unit 323 that has requested the security board information is in a non-operating state for the same purpose as in step S213 described above. When the gaming machine becomes non-operational, the hall server 801 transmits the acquired board authentication key to the CU control unit 323 in step S224, and the CU control unit 323 that receives it sends the update information in the security board information. Send to SC325b. Next, in step S225, based on the board authentication key acquired in step S2224, the CU control unit 323 performs processing using the board authentication key as the encryption key from the mode in which processing is performed using the board initial key as the encryption key (board initial key mode). The communication mode is switched to the mode (board authentication key mode) to advance the process, and the process ends.

  Next, referring to FIG. 63 (b) showing the communication mode switching process between the SC and the communication control IC, the SC 325b acquires update information from the CU control unit 323 in step S226. As described above, the CU control unit 323 transmits update information to the SC 325b in step S224. Receiving it, the SC 325b acquires the update information. Next, in step S227, the SC 325b generates this authentication key from the acquired update information. Next, in step S228, the SC 325b obtains the authentication key from the mode (provisional authentication key mode) in which the temporary authentication key is used as the encryption key for the communication mode between the SC 325b and the communication control IC 325a based on the generated authentication key. Switch to a mode in which processing is performed as an encryption key (this authentication key mode).

  According to such an embodiment, even when the hall server 801 receives the board authentication key from the key management server in the restricted communication mode, the board authentication key is immediately transmitted to the CU when the P units are operating. In the restricted communication mode, the board authentication key is transmitted from the hall server 801 to the CU and switched to the normal communication mode on the condition that the gaming machine is not in operation. It is possible to prevent the player from being disadvantaged by affecting the provided game in some way.

<Authentication operation between SC 325b and CU control unit 323>
Next, the unified store code check and the board manufacturer code authentication will be described in more detail.

  First, with reference to FIG. 64, the unified store code check process by SC325b will be described. This process is an authentication operation in which the SC 325b checks the unified store code notified at the time of the board connection request and the unified store code notified last time, and determines that the installed store has changed when there is a mismatch. The SC 325b determines whether or not the stored previous unified store code is a dummy code (step S1101). For example, all data of the dummy code of the unified store code is “0xFF”. This dummy code is used in place of the normal unified store code at the time of shipment before the CU 3 is installed in the amusement hall (store), and is already stored in the SC 325b at the time of shipment. Then, at the time of shipment, a dummy code is input to the SC 325b via the CU control unit 323, and the SC 325b determines that the input dummy code matches the stored dummy code and authenticates it. Further, the dummy code is stored as a default in the hall server 801 of the game hall as a temporary store code when a unified store code has not yet been acquired for a newly opened game hall (hall). Then, the dummy code is downloaded from the hall server 801 to the CU 3 installed in the game hall of the newly opened store, and the SC 325b determines that the downloaded dummy code matches the stored dummy code, and authenticates. Allows games by.

  The hall server 801 that has acquired the regular unified store code transmits the unified store code to the CU control unit 323. Upon receiving the request, the CU control unit 323 transmits the unified store code to the SC 325b when the board connection is requested at the next power-on. The SC 325b that has received it determines that the previous unified store code stored is a dummy code (step S1101: YES), and updates the storage to the unified store code notified from the hall server 801 at the time of board connection request. However, it does not initialize the board authentication key and the main authentication key information and operates by taking over the previous authentication modes. Thereafter, the SC 325b stores the authentication log information (step S1106). The initialization of the board authentication key and the main authentication key information is a process required when the CU 3 installed in a certain game arcade is moved to another game arcade, but is a dummy code stored in the SC 325b. Is updated to the unified store code, the amusement hall of the newly opened store obtains the unified store code and downloads the unified store code to the CU3. It is not necessary to initialize the key and the authentication key information. Conversely, if the board authentication key and this authentication key information are initialized in such a case, a request for obtaining the board authentication key is required again, increasing the number of board initial key operations (timed operation) in one business day, and timed operation. There is a disadvantage that the grace period is reduced. In order to avoid such inconvenience, control is performed so that the board authentication key and the main authentication key information are not initialized.

  On the other hand, when the SC 325b determines that the previous unified store code stored is not a dummy code (step S1101: NO), the unified store code notified from the hall server 801 at the time of board connection request and the stored previous time It is determined whether or not the unified store code matches (step S1102).

  When SC325b determines that the unified store code notified from the hall server 801 at the time of board connection request matches the previous unified store code stored (YES in step S1102), the authentication process is performed on the board initial stage. Transition to a key authentication sequence or transition to a board authentication key authentication sequence (step S1103). Note that the SC 325b transitions to the board authentication key authentication sequence when the previous authentication mode is the board authentication key mode, and shifts to the board initial key authentication sequence when the previous authentication mode is any other authentication mode.

  On the other hand, when the SC 325b determines that the unified store code notified from the hall server 801 at the time of board connection request and the stored previous unified store code do not match (step S1102: NO), the board authentication key The information and the authentication key information are initialized (cleared) (step S1104). Such a mismatch in the unified store code occurs when the CU 3 installed in a certain game hall is moved to another game hall. Since CU3 has been moved to another amusement hall, the board authentication key information and the main authentication key information used in the previous amusement hall are initialized (cleared) to ensure security. When the unified store code notified from the CU control unit 323 is changed, the SC 325b sets initialization (clear) of the authentication key in the communication control IC 325a and starts authentication with the temporary authentication key. Note that when the SC 325b initializes (clears) the authentication key information, the communication control IC 325a may also control to initialize (clear) the authentication key information, and particularly performs such control. Instead, the SC 325b may return to authentication with the temporary authentication key because the authentication key does not exist at the next authentication with the communication control IC 325a.

  Further, the SC 325b initializes (clears) the board authentication key information and the main authentication key information in step S1104, and then transitions the authentication process to the board initial key authentication sequence and the temporary authentication key sequence (step S1105).

  In step S1103, the SC 325b transitions the authentication process to the board initial key authentication sequence, or transitions to the board authentication key authentication sequence. In step S1104, the SC 325b stores the authentication log information after transitioning to the board initial key authentication sequence. (Step S1106).

  FIG. 65 is a flowchart for explaining the board manufacturer code authentication operation. The board manufacturer code authentication is an authentication operation in which the SC 325b and the CU control unit 323 perform authentication using the board manufacturer code stored as initial information. Referring to FIG. 65, first, SC 325b and CU control unit 323 perform unit authentication by a challenge / response method using the stored board manufacturer code. (Step S1201). The response code generated at the time of single unit authentication is generated, for example, by performing block encryption of the challenge code using the stored board manufacturer code as a key and then hashing with a hash function.

  The SC 325b determines whether the authentication result obtained by checking the response code generated by the CU control unit 323 with respect to the generated challenge code is normal (step S1202). If the SC 325b determines that the authentication result is normal (step S1202: YES), the SC 325b determines whether it has already been authenticated with the board authentication key (step S1203). On the other hand, when the SC 325b determines that the authentication result is not normal (abnormal) (step S1202: NO), the SC 325b determines whether it is abnormal continuously (eg, three times) n times (step S1204).

  If the SC 325b determines that the board authentication key has already been authenticated (step S1203: YES), the process proceeds to the board authentication key authentication process and maintains the board authentication key authentication sequence (step S1205). On the other hand, if the SC 325b determines that the board authentication key has not been authenticated (step S1203: NO), the process proceeds to the board initial key authentication process (step S1206).

  SC325b returns a process to step S1201, when it is judged that it is not abnormal continuously n times (step S1204: NO). On the other hand, when the SC 325b determines that the abnormality is continuous n times (step S1204: YES), the board authentication key information and the main authentication key information are initialized (cleared) to ensure security (step S1207). . Thereby, the inconvenience that the board authentication key information and the main authentication key information are stolen can be prevented. Thereafter, the SC 325b makes a transition to a board initial key authentication process (step S1208).

  In step S1205, the SC 325b maintains the board authentication key authentication sequence, or transitions to the board initial key authentication process in steps S1206 and S1208, and then saves the authentication log information (step S1209).

  FIG. 66 is a flowchart for explaining the reception interval monitoring process. The reception interval monitoring process is a process executed by the SC 325b. First, the SC 325b determines whether or not a message has been received (S10).

  The CU control unit 323 includes a timer (time measuring means) for measuring a specified time and a communication unit (communication means) connected to the SC 325b for transmitting a telegram, and a specified time interval (for example, 200 ms) with respect to the SC 325b. ) Send a message every time. For this reason, the CU control unit 323 waits for reception of a response message for the specified message for a specified time after transmitting a certain message, receives the response message, and transmits the next message. In addition, the CU control unit 323 waits for reception of a response message for a specified time after transmitting a certain message, and retransmits a message having the same content if a response message cannot be received. If a response message cannot be received in response to the second retransmission of the message, it is determined that communication has been interrupted.

  On the other hand, the SC 325b receives various request messages from the CU control unit 323 at regular time intervals (for example, 200 ms), and returns response messages corresponding to the request messages. If NO in S10, the process ends. If YES in S10, it is determined whether the reception is before a specified time interval (S11).

  In S11, when it is determined that the message is received before the specified time interval from the previous message reception, the number of times of receiving the message before the specified time interval reaches the n1th (where n1> 1) times in succession. It is determined whether or not (S12). As described above, a situation in which messages that should be received at regular time intervals are continuously transmitted one after another before the regular time intervals cannot normally occur. Such a situation may occur, for example, when various messages are transmitted from the outside one after another in a short time for the purpose of illegally analyzing the operation of the SC 325b. Therefore, if NO in S12, the process ends. If YES, error information is transmitted (S13).

  This error information is transmitted to the payout control unit 171 of the P table 2 via the communication control IC 325a, for example. Upon receiving the error information, the payout control unit 171 stops the firing motor 18 via the firing control board 31 and puts the game into an unplayable state. Note that error information may be displayed on the display 54 of the P platform 2 instead of or in addition to the inoperable state. Alternatively, in S13, error information may be transmitted to the CU control unit 323.

  After the process of S13, transmission of a response message for the message received in S10 is prohibited (S14). Further, the function of receiving a message from the CU control unit 323 is stopped (S15). As a result of S14 and S15, fraudulent attempts to obtain a response message for analysis purposes can be prevented.

  In this flow chart, the number of times of receiving the message before the specified time interval has reached the n1th time continuously. However, if the message before the specified time interval is received even once, NO is returned in S12. It may be determined.

  Further, only one or two processes of S13 to S15 may be executed. Furthermore, instead of the processing of S14 and S15, the timing of responding to the received electronic message may be delayed from the normal time. For example, normally, the response message is transmitted so that the response message reaches the partner in 200 ms after the partner (CU control unit 323) transmits the message, but the interval is increased (for example, three times the normal). You may do it. As a result, even if a fraudulent act of sending a message at a shorter time interval than usual is performed, the response to the fraud will be slow, so that the efficiency of fraud analysis will be extremely poor, and it will be difficult to revise the fraud Can do.

  Furthermore, the process of slowing down the transmission of the response message and the process of prohibiting the transmission of the response message (S14) may be combined. For example, when it is determined YES in S12, a process of slowing response message transmission is executed, and then a response message in S14 is detected when a predetermined number of message receptions within a specified time interval from the response message transmission is detected. A process for prohibiting the transmission of a message may be executed.

  Also, the reception interval monitoring process as shown in FIG. 66 may be performed not only by SC 325b but also by any device that receives a message from the other party. For example, the CU control unit 323 may execute a reception interval monitoring process for a message transmitted from a higher-level server (for example, a key management server). In addition, the communication control IC 325a may execute a reception interval monitoring process on a message transmitted from the SC 325b. Alternatively, the payout control unit 171 may execute a reception interval monitoring process on a message transmitted from the communication control IC 325a. In this case, the reception interval monitoring process is executed between the CU 3 and the gaming machine (for example, P 2). In addition, this processing may be applied in transmission / reception processing between a plurality of gaming machines such as the CU3, the P platform 2, the jet counter, and the POS terminal.

  FIG. 67 is a flowchart for explaining the abnormal message monitoring process. The abnormal message monitoring process is a process executed by the SC 325b. First, the SC 325b determines whether or not a message has been received (S20). If NO in S20, the process ends. If YES in S20, it is determined whether the received message is a command abnormal message (S21), and if it is not a command abnormal message, it is determined whether the received message is a communication error message (S26). .

Here, a communication error message is a message that is originally transmitted as a normal message, such as a message in which an error is detected by CRC (Cyclic Redundancy Check), or a message in which the data length is detected to be different from a predetermined length, or the like. A message that arrived after being garbled from the original message due to the occurrence of an error in the message generation process or noise on the communication line even though it was scheduled to be transmitted.

  On the other hand, the command abnormal message is a message that has a correct data length and does not detect an error in CRC, but is different from a command code included in the message. Therefore, the command abnormal message may be an illegal message for the purpose of causing an illegal operation.

  If it is determined in S26 that the message is not a communication error message, a normal message has been received, and the error message monitoring process is terminated. On the other hand, when it is determined as a communication abnormal message in S26, it is determined whether or not the number of continuous reception of such a communication abnormal message has reached n3 times (S27). Here, n3 is “3”, for example. If n3 times has not been reached, the CU control unit 323 is requested to resend a message (S25). That is, when a communication abnormal message is received, two retransmissions are allowed.

  If all of the messages received for a total of n3 times including the reception of the first message are communication abnormal messages, YES is determined in S27 and it is determined that the communication error between the CU and SC is present (S28). In this case, CU-SC communication abnormality information is transmitted (S29).

  The CU-SC communication abnormality information is transmitted to the payout control unit 171 of the P unit 2 via the communication control IC 325a, for example. Upon receiving the CU-SC command abnormality information, the payout control unit 171 stops the firing motor 18 via the firing control board 31 and puts it into a game impossible state. It should be noted that the CU-SC command abnormality information may be displayed on the display device 54 of the P table 2 instead of or in addition to the inoperable state. Alternatively, in S29, the CU-SC communication abnormality information may be transmitted to the CU control unit 323.

  On the other hand, if it is determined in S21 that the received message is a command abnormal message, it is determined whether or not the number of consecutive receptions of such a command abnormal message has reached n2 times (S22). Here, n2 is “4”, for example, which is one greater than the threshold n3 related to the communication error message set to “3”.

  If it is determined NO in S22, the CU control unit 323 is requested to retransmit the message. That is, when a command abnormal message is received, four retransmissions are allowed.

  If all of the messages received only n2 times in total including the reception of the first message are command abnormal messages, YES is determined in S22, and it is determined that the CU-SC command is abnormal (illegal) (S23). ). In this case, CU-SC command abnormality information is transmitted (S24).

  The CU-SC command abnormality information is transmitted to the payout control unit 171 of the P unit 2 via the communication control IC 325a, for example. Upon receiving the CU-SC command abnormality information, the payout control unit 171 stops the firing motor 18 via the firing control board 31 and puts it into a game impossible state. It should be noted that the CU-SC command abnormality information may be displayed on the display device 54 of the P table 2 instead of or in addition to the inoperable state. Alternatively, in S29, the CU-SC communication abnormality information may be transmitted to the CU control unit 323.

  In this way, by making the threshold relating to the command abnormal message different from the threshold relating to the communication abnormal message, it is possible to distinguish between the retransmission of the message due to mere garbled data and the possibility that an illegal command is transmitted. In particular, the command code that is abnormal even if the normal data retransmission limit (n3 is included) is exceeded by making the threshold for the command abnormal message larger than the threshold for the message retransmission due to garbled data. It is possible to confirm that a message including the message has been repeatedly transmitted, so that it is possible to determine a situation where the possibility of fraud is high and to notify that there is a possibility of fraud based on the determination.

  FIG. 68 is a flowchart for explaining gaming machine chip inquiry processing. The gaming machine chip inquiry process is a process executed by the CU control unit 323. An example of this processing is shown in FIG. 56 (game machine chip information inquiry sequence) and FIG. 60 (game machine chip information inquiry timeout sequence).

  First, the CU control unit 323 transmits a gaming machine chip inquiry instruction notification (S30). As a result, the gaming machine chip information to be inquired of the key management server is requested to the SC 325b. Upon receiving this gaming machine chip inquiry instruction notification, the SC 325b requests gaming machine chip information from the P table 2 via the communication control IC 325a.

  Next, the inquiry waiting timer is reset (S31). The inquiry waiting timer is a timer for measuring a response waiting time for the gaming machine chip inquiry instruction notification, and is reset every time the gaming machine chip inquiry instruction notification is transmitted, and a new timing is started.

  Next, it is determined whether or not the gaming machine chip inquiry result is received from the SC 325b (S32). The gaming machine chip inquiry result includes an acquisition result indicating whether or not chip information has been acquired, a manufacturer code, a board serial number, a main chip ID, a payout chip ID, and the like. If the gaming machine chip inquiry result has not been received, it is determined whether or not the inquiry timer has timed out (S33). If a time-out occurs, a time-out process is executed (S38). In the time-out process, a status information request is transmitted as shown in FIG. 60, and a status information response (with chip information inquiry) is waited.

  If the inquiry timer has not timed out in S33, it is determined whether or not a health check whose operation designation is a gaming machine chip information inquiry request has been received from the key management server (S34). That is, it is determined whether or not an inquiry request for gaming machine chip information has been received from the key management server. When an inquiry request for gaming machine chip information is received from the key management server, a gaming machine chip inquiry instruction notification is transmitted to the SC 325b (S35), and the inquiry waiting timer is reset (S36). As a result, time counting by the inquiry wait timer is started from the beginning. Thereafter, the process proceeds to S32.

  In other words, even if a gaming machine chip inquiry instruction notification has already been transmitted and a response request for gaming machine chip information is newly received separately from the key management server, even when waiting for a response thereto Then, a game machine chip inquiry instruction notification is transmitted again.

  By processing in this way, it becomes possible to quickly return a response to a request from a key management server connected to many halls (CUs in the hall) existing throughout the country. That is, since the “gaming machine chip information inquiry request” by the health check request is a compulsory instruction from the key management server, the SC 325b reliably manages the key even in the gaming machine chip information inquiry mode in response to the request from the CU control unit 323. The CU control unit 323 executes an inquiry about gaming machine chip information until the information reaches the server.

  In S34, when the health check (operation designation = game machine chip information inquiry request) has not been received from the key management server, the process returns to S32 and proceeds to a step of determining whether or not a game machine chip inquiry result has been received.

  Eventually, when the gaming machine chip inquiry result is received in S32, the result is transmitted to the host server (key management server) (S37), and the process is terminated.

  Here, the case of the health check (operation designation = game machine chip information inquiry request) has been described as an example, but the CU control unit 323 performs the health check (operation designation = security board information inquiry request) in the above processing. ) Is received in the same manner.

  55 and 59, CU control unit 323 transmits a security board inquiry instruction notification to SC 325b and waits for a response from SC 325b until a security board information inquiry timeout. However, if a health check (operation designation = security board information inquiry request) is received from the host server (key management server) before the timeout occurs, the CU control unit 323 sends a security board inquiry instruction notification to the SC 325b without waiting for the timeout. Resend to.

<About encryption mode>
Next, based on FIG. 69 to FIG. 73, the operation of the actual cryptographic communication between the command and the response between the CU control unit 323 and the SC 325b will be described. FIG. 69 shows the cipher communication in the steady state when the receiving side that has received the cipher communication text is properly decrypted. FIG. 70 shows processing at the time of abnormality when the response from the SC 325b to the CU control unit 323 has not arrived. FIG. 71 shows processing at the time of abnormality when a command from the CU control unit 323 to the SC 325b has not arrived. FIG. 72 shows processing of a modified example when the response has not reached reach shown in FIG. FIG. 73 shows a modification of the abnormal process in which the command has not reached shown in FIG.

  69 to 73 will be described below. When encrypted communication is performed from the CU control unit 323 to the SC 325b, the downstream counter of the value R1 of the initial vector unit is used, and from the SC 325b to the CU control unit. When performing encrypted communication to H.323, an up counter for the value R2 of the initial vector portion is used.

  First, normal processing will be described with reference to FIG. As an operation instruction and a response between the CU control unit 323 and the SC 325b, a 96-byte example in which the data length is a multiple of 48 bytes will be described.

  Referring to FIG. 69, CU control unit 323 divides 96-byte plaintext into six blocks of every 16 bytes, and encrypts plaintexts 1 to 6 of each block one by one. The first block, plaintext 1, has downstream counter values R1, N, 0. The counter value is encrypted as described above, and the encrypted value and plaintext 1 are used for exclusive OR. The ciphertext 1 is generated by performing the above operation. Similarly, when the ciphertext 2 is generated, the downstream counter values R1, N, 1 are used, and when the ciphertext 2 is generated, the downstream counter values R1, N, 2 are used to generate the ciphertext 4. At this time, the values of the down counters R1, N, and 3 are used, when the ciphertext 5 is generated, the values of the down counters R1, N, and 4 are used, and when the ciphertext 6 is generated, the values of R1, N, and 5 The value of the down counter is used.

  The SC 325b that receives the cipher texts 1 to 6 including the six blocks generates plain text by decrypting the cipher text at any time while updating the counter value as described with reference to FIG. The value of the down counter at the start of decryption, that is, the value of the counter used for decrypting the first ciphertext 1 is R1, N, 0, and the encrypted value and ciphertext 1 are encrypted. Is calculated and decrypted, and plaintext 1 is generated. Similarly, the ciphertext 2, the ciphertext 3, the ciphertext 4, the ciphertext 5, and the ciphertext 6 are also updated by incrementing the value of the cipher block counter unit by “1” at any time. Specifically, for ciphertext 2, the downstream counter values R1, N, 1 are used, for ciphertext 3, the downstream counter values R1, N, 2 are used, and for ciphertext 4, R1, N, 3 downstream counter values, ciphertext 5 uses R1, N, 4 downstream counter values, and ciphertext 6 uses R1, N, 5 downstream counter values. Decoding is performed using the counter value.

  Next, the SC 325 b encrypts the response and transmits it to the CU control unit 323. At this time, since the SC 325b uses an upstream counter, the counter value “R2, N, 0” is used first. The counter value of the upstream counter is encrypted, and an exclusive OR operation is performed on the encrypted value and the first plaintext 1 of the response to generate a ciphertext 1. Next, the SC 325 b updates the cipher block counter unit by adding “1” and generates the ciphertext 2 using the values of R2, N + 1, and 1. Similarly, ciphertext 3, ciphertext 4, ciphertext 5, and ciphertext 6 are generated while incrementing and updating the cipher block counter unit by “1”, and a response including these ciphertexts is transmitted to the CU control unit 323. .

  The CU control unit 323 that has received the ciphertexts 1 to 6 including the six blocks generates plaintext by decrypting the ciphertext as needed while updating the counter value as described in FIG. The value of the upstream counter at the start of decryption, that is, the value of the counter used to decrypt the first ciphertext 1 is R2, N, 0, and the encrypted value and the ciphertext 1 are encrypted. Is calculated and decrypted, and plaintext 1 is generated. As described above, the ciphertext 2, the ciphertext 3, the ciphertext 4, the ciphertext 5, and the ciphertext 6 are decrypted at any time while the cipher block counter is added and updated as needed, and the plaintext 2, plaintext 3, plaintext 4, Plaintext 5 and plaintext 6 are generated.

  From the next time on, SC 325b updates “N” added to the value “N” of the message counter used for decrypting the ciphertext received last time, and uses the counter values R1, N + 1, 0 to start the response. Is decrypted. As described above, the ciphertext 2, the ciphertext 3, the ciphertext 4, the ciphertext 5, and the ciphertext 6 are decrypted at any time while the cipher block counter is added and updated as needed, and the plaintext 2, plaintext 3, plaintext 4, Plaintext 5 and plaintext 6 are generated.

  In addition, the CU control unit 323 adds “1” to the value “N” of the message counter unit used for decrypting the ciphertext received last time, and updates the response using the counter values of R2, N + 1, 0. The first ciphertext 1 is decrypted. As described above, the ciphertext 2, the ciphertext 3, the ciphertext 4, the ciphertext 5, and the ciphertext 6 are decrypted at any time while the cipher block counter is added and updated as needed, and the plaintext 2, plaintext 3, plaintext 4, Plaintext 5 and plaintext 6 are generated.

  By such a method, the transmission data is encrypted and the reception data is decrypted between the CU control unit 323 and the SC 325b using the downlink counter and the uplink counter, respectively.

  Next, with reference to FIG. 70, a description will be given of processing in the event of an abnormality when the response from the SC 325b to the CU control unit 323 has not reached. First, a command including 6 blocks of ciphertexts 1 to 6 is transmitted from the CU control unit 323 to the SC 325b. The counter value of the down counter used for each block is initially R1, N, 0, and the encryption block counter unit is incremented by “1”, and the final value is R1, N, 5. . The SC 325b that receives the ciphertext first decrypts the ciphertext 1 using the counter values R1, N, 0 at the start of ciphering to generate plaintext 1. Next, the ciphertext 2, the ciphertext 3, the ciphertext 4, the ciphertext 5, and the ciphertext 6 are decrypted by adding and updating the cipher block counter unit as needed to obtain plaintext 2, plaintext 3, plaintext 4, plaintext 5, and plaintext 6. Generate.

  Then, the SC 325b encrypts the plaintext 1 of the first block of the response using the value “R2, N, 0” that is the counter value of the upstream counter, and generates the ciphertext 1. Next, the value of the cipher block counter unit is incremented by “1” to generate ciphertext 2, ciphertext 3, ciphertext 4, ciphertext 5, and ciphertext 6, and transmit them to the CU control unit 323. When the response consisting of the ciphertexts 1 to 6 does not reach the CU control unit 323, the CU control unit 323 retransmits the same command data as the previously transmitted command to the SC 325b. When the SC 325b decrypts the retransmitted ciphertext, the value of the message counter unit used for decrypting the ciphertext previously received by the SC 325b is N. Therefore, when the decryption is performed this time, the downlink counter used first As a counter value, “R1, N + 1, 0” is used.

  In SC325b, the ciphertext 1 is first decrypted using the counter values R1, N + 1, 0 to generate plaintext 1. Next, the ciphertext 2, the ciphertext 3, the ciphertext 4, the ciphertext 5, and the ciphertext 6 are decrypted by adding and updating the cipher block counter unit as needed to obtain plaintext 2, plaintext 3, plaintext 4, plaintext 5, and plaintext 6. Generate.

  Next, the SC 325b updates "N" added to the value "N" of the message counter unit used for the previous ciphertext generation, and uses the counter values of R2, N + 1, 0 to determine the first block of the response. Ciphertext 1 is generated by encrypting plaintext 1. Next, the value of the cipher block counter unit is incremented by “1” to generate ciphertext 2, ciphertext 3, ciphertext 4, ciphertext 5, and ciphertext 6, and transmit them to the CU control unit 323.

  Since the CU control unit 323 has not received a response from the previous SC 325b, the CU control unit 323 attempts to decode using the counter value “R2, N, 0” for decoding the previous response. However, the ciphertext 1 is data encrypted using the counter value “R2, N + 1, 0”, and the restoration start counter value of the CU control unit 323 is “R2, N, 0”. Even if decryption is attempted using this counter value, decryption fails because the plaintext cannot be decrypted correctly.

  The determination as to whether or not decryption into correct plaintext has been made is based on a general check by the MAC. Briefly, the CU control unit 323 encrypts R2, N, 0, which is the first counter value, with a key, and calculates the exclusive OR between the value and the first ciphertext 1. Such decryption processing is sequentially executed for ciphertext 2, ciphertext 3, ciphertext 4, ciphertext 5 and ciphertext 6 while updating the counter value by “1”, and is included in the data of the processing result. MAC check is performed using the data of the existing MAC. Specifically, a MAC is generated from the data of the decoding processing result according to the MAC algorithm, and the generated MAC is compared with the MAC data included in the transmission data from the SC 325b to check whether or not they match. . If they are decoded correctly, they match, but in this case, the value of the counter used for decoding is out of order. It is determined that the MAC is abnormal, that is, decoding has failed.

  When it is determined that such a MAC abnormality, that is, a decoding failure, the CU control unit 323 executes a repair process for repairing the incorrect counter value to a correct counter value. The CU control unit 323 sets the value of the message counter unit N to “R2, N, 0” that is the counter value at the start of decryption that was first used for decryption of the ciphertext determined to be decryption failure. While subtracting and updating by “1”, the decrypted ciphertext is sequentially performed using the subtracted counter value to perform the above-described MAC check to determine whether the decryption has been correctly performed. If it is determined that the MAC is abnormal as a result of the MAC check even if the counter value is subtracted a predetermined number of times, the CU control unit 323 next sets “R2, N, 0” as the counter value at the start of decoding. On the other hand, the message counter unit N is incremented and updated by “1”, and the decryption process using the added counter value is sequentially performed to perform the MAC check. If the MAC check determines that the decryption is successful and the decryption is successful, the plaintext successfully decrypted is fetched as a proper command. Then, the counter value of the message counter used when it is determined that the decryption is successful is used to encrypt the first plaintext 1 of the next response data.

  In the case of FIG. 70, decryption is performed using the counter value “R2, N + 1, 0” obtained by adding and updating the telegram counter unit N once from “R2, N, 0” which is the counter value at the start of decryption. Therefore, it is determined that the MAC is normal and that decoding is successful.

  Using the counter values R1, N + 2, 0 obtained by adding and updating the value of the message counter part of the counter value R2, N + 1, 0 of the value N of the message counter part used when it was determined that the decryption was successful. Next, ciphertext 1 is generated by encrypting the first plaintext 1 of the response to be transmitted. Next, ciphertext 2, ciphertext 3, ciphertext 4, ciphertext 5, and ciphertext 6 are sequentially generated by adding and updating the cipher block counter unit by “1” and transmitted to SC 325b.

  Upon receiving this, the SC 325b decrypts the first ciphertext 1 of the received ciphertext using the counter value “R1, N + 2, 0”. Since the first ciphertext 1 is encrypted using the counter value “R1, N + 2, 0”, it can be properly decrypted using the same counter value. Then, the SC 325b sequentially decrypts the ciphertext 2, the ciphertext 3, the ciphertext 4, the ciphertext 5 and the ciphertext 6 while adding and updating the cipher block counter unit by “1”.

  The number of subtractions to the counter value in the counter repair process described above matches the number of retries that the CU control unit 323 retransmits (retrys) the operation command when no response has been reached. In the case of the present embodiment, the number of retries is limited to two, and it is not necessary to perform subtraction update of the telegram counter unit N beyond the counter value error caused by the two retries. Therefore, the counter value is subtracted or updated up to twice.

  Next, based on FIG. 71, the process at the time of abnormality when the command from the CU control unit 323 to the SC 325b has not reached will be described. First, the CU control unit 323 generates 6 blocks of ciphertexts 1 to 6 using the counter values R1, N, 0 to R1, N, and 5 and transmits them to the SC 325b. However, if the ciphertext does not reach the SC 325b, the CU control unit 323 tries to re-encrypt the command having the same content and retransmit it to the SC 325b. As the message counter unit used for encryption at the time of retransmission, N + 1 obtained by adding “1” to the value N of the message counter unit used for encryption at the time of transmission of the previous command is used. Therefore, using the counter value “R1, N + 1, 0”, the CU control unit 323 generates the ciphertext 1 by encrypting the first plaintext 1 block of the command to be retransmitted. Next, the CU control unit 323 sequentially generates the ciphertext 2, ciphertext 3, ciphertext 4, ciphertext 5, and ciphertext 6 while adding and updating the cipher block counter unit by “1”, and re-sends it to the SC 325b. Send.

  However, if the retransmitted ciphertext does not reach SC 325b, the CU control unit 323 tries the second retry of encrypting the command having the same content and retransmitting it to SC 325b. The command transmitted in the second retry reaches SC 325b, and SC 325b attempts to decrypt the ciphertext.

  The SC 325b uses “R1, N, 0”, which is a value obtained by adding and updating “1” to the last counter value used to decrypt the command previously received by the CU control unit 323. The decryption process is performed, and the ciphertext counter 2, ciphertext 3, ciphertext 4, ciphertext 5, ciphertext 5 and ciphertext are sequentially added to the counter value “R1, N, 0” while updating the cipher block counter by “1”. Attempt to decrypt sentence 6.

  However, as a result of retrying twice by the CU control unit 323, the counter value on the CU control unit 323 side and the counter value on the SC 325b side are out of order, so it cannot be decrypted into an appropriate plaintext, As a result of the MAC check described above, the MAC is abnormal and it is determined that decoding has failed.

  Then, the SC 325b performs a repair process for the crazy counter, as described above. The ciphertext that has been retransmitted sequentially while subtracting and updating the message counter unit N by “1” with respect to “R1, N, 0”, which is the count value that was first used for the ciphertext determined to be decryption failure Attempt to decrypt the sentence and perform MAC check. As described above, the number of subtraction updates is limited to two, which is the number of retries. If the decryption is not successful even when the counter value is subtracted and updated twice, the SC 325b sets “1” to the message counter unit with the counter value “R1, N, 0”. Attempts to decrypt the ciphertext sequentially while adding and updating. The number of attempts for this addition update is equal to the number of retries for performing retransmission by the CU control unit 323 when the command has not been reached. In the present embodiment, the retry is performed twice. As a result, the counter value is added and updated up to two times that is the number of retries.

  As a result of the second addition update, the counter value becomes “R1, N + 2, 0”, and the ciphertext 1 is decrypted using this counter value, and the ciphertext 2 and the ciphertext are sequentially updated while performing the addition update of the cipher block counter unit. By decrypting the sentence 3, the ciphertext 4, the ciphertext 5, and the ciphertext 6, it can be decrypted into an appropriate plain text, and as a result of the MAC check, it is determined to be appropriate and it is determined that the decryption is successful. The SC 325b captures the plaintext command that is determined to be successful. Then, the response data corresponding thereto is encrypted and transmitted to the CU control unit 323. At the time of the encryption, unlike the value “N + 2” of the message counter unit used for the decryption process determined to be successful, the value “N” of “R2, N, 0” which is the count value used first. Is used. Therefore, ciphertext 1 is generated by encrypting the first block using “R2, N, 0”. Next, the ciphertext 2, ciphertext 3, ciphertext 4, ciphertext 5, and ciphertext 6 are sequentially generated while the count value of the cipher block counter unit is incremented by “1” and transmitted to the CU control unit 323. . The CU control unit 323 performs processing for decrypting the first block of the ciphertext using “R2, N, 0”, and sets the cipher block counter unit to “1” for the counter value “R2, N, 0”. The ciphertext 2, the ciphertext 3, the ciphertext 4, the ciphertext 5, and the ciphertext 6 are tried to be decrypted sequentially while adding and updating each one.

  Next, based on FIG. 72, the modification of the process at the time of the abnormality at the time of a response unreachable is demonstrated. FIG. 72 is a modification of FIG. 70 described above, and here, mainly the differences will be described. When the response from the SC 325b to the CU control unit 323 has not yet reached, the CU control unit 323 executes a retry to retransmit the same command as the previous time. When the command (encrypted text) retransmitted by the retry reaches SC 325b, the counter values between CU control unit 323 and SC 325b are different as in FIG. As a result, when the decryption of the ciphertext is attempted in SC325b, the MAC check results in a MAC error, and it is determined that the decryption has failed. In this modification, when the decoding fails, it is determined that decoding is impossible, and a decoding error command is transmitted to the SC 325b. At that time, the CU control unit 323 encrypts the response of the decryption error using the key K in the SE1 mode, and transmits the ciphertext to the SC 325b. In SC325b, it is received and the ciphertext is decrypted using the common key K, and it is determined that a decryption error has occurred. Then, a new random number is generated to initialize the counter value, and the random number value is transmitted to the CU control unit 323 as the initial vector unit value R2. At that time, using the key K, the value of the initial vector portion R2 is encrypted in the SE1 mode, and the ciphertext is transmitted to the security chip 325B. The CU control unit 323 decrypts the received ciphertext using the key K in the SE1 mode, and acquires the value R2 of the initial vector unit. As a result, the counter value “R2, 0, 0” that is initialized is shared between the CU control unit 323 and the SC 325b.

  Next, the CU control unit 323 encrypts a response indicating that the update of the value R2 of the initial vector unit is completed using the key K in the SE1 mode, and transmits the encrypted response to the SC 325b.

  In response to this, the SC 325b encrypts the same data as the previously retransmitted command in the SE2 mode and transmits it to the CU control unit 323. At that time, the initial block is encrypted using the counter value initialized, that is, “R2, 0, 0”. Then, ciphertext 2, ciphertext 3, ciphertext 4, ciphertext 5, and ciphertext 6 are sequentially generated and added to the cipher block counter unit by “1” and transmitted to the CU control unit 323.

  The CU control unit 323 decrypts the first block of the ciphertext using the initialized counter value, that is, “R2, 0, 0”. Next, the ciphertext 2, ciphertext 3, ciphertext 4, ciphertext 5 and ciphertext 6 are decrypted in order while adding and updating the cipher block counter unit by “1” to generate plain text.

  Next, based on FIG. 73, a modified example of the process when the command has not reached will be described. FIG. 73 is a modification of the above-described processing when the command has not yet reached in FIG. 71, and here, mainly the differences will be described. When the command reaches SC 325b by the second retry by CU control unit 323, the counter values between CU control unit 323 and SC 325b are different. As a result, when the decryption of the ciphertext is attempted in SC325b, the MAC check results in a MAC error, and it is determined that the decryption has failed. In this modification, it is determined that decoding is impossible when the decoding fails, and a response to the decoding error is transmitted to the CU control unit 323.

  At that time, the SC 325b encrypts the response of the decryption error using the key K in the SE1 mode, and transmits the ciphertext to the CU control unit 323. The CU control unit 323 receives this and decrypts the ciphertext using the key K, which is a common key, and determines that a decryption error has occurred. Then, a new random number is generated to initialize the counter value, and the random number value is transmitted to the SC 325b as the initial vector portion value R1. At that time, the value R1 of the initial vector portion is encrypted in the SE1 mode using the key K, and the ciphertext is transmitted to the SC 325b. In SC325b, the received ciphertext is decrypted in the SE1 mode using the key K, and the value R1 of the initial vector portion is acquired. As a result, the counter value “R1, 0, 0” that is initialized is shared between the CU control unit 323 and the SC 325b. As described above, as the initialization (resetting) of the counter value performed when the ciphertext cannot be restored, the initial value of the counter that cannot be decrypted (a wrinkle has occurred between the CU control unit 323 and the SC 325b). Only the vector part may be reset, but both the initial vector part R1 of the down counter and the initial vector part R2 of the up counter may be reset.

  Next, the SC 325b encrypts the response indicating that the update of the value R1 of the initial vector portion is completed in the SE1 mode using the key K and transmits the response to the CU control unit 323.

  In response to this, the CU control unit 323 encrypts the same data as the previously retransmitted command in the SE2 mode and transmits it to the SC 325b. At that time, the initial block is encrypted using the counter value initialized, that is, “R1, 0, 0”. Then, ciphertext 2, ciphertext 3, ciphertext 4, ciphertext 5, and ciphertext 6 are sequentially generated and added to the cipher block counter unit by “1” and transmitted to SC 325b.

  In SC325b, the first block of the ciphertext is decrypted using the initialized counter value, that is, “R1, 0, 0”. Next, the ciphertext 2, ciphertext 3, ciphertext 4, ciphertext 5 and ciphertext 6 are decrypted in order while adding and updating the cipher block counter unit by “1” to generate plain text.

  Next, based on FIG. 74, the counter operation of the decoding process in the SE2 mode will be described. In the above-described embodiment, two types of counters, a down counter and an up counter, are shown (see FIG. 37). The two types of cases are shown in FIG. On the other hand, FIG. 74A shows a counter using a common counter for downlink and uplink. First, an example using a common counter will be described with reference to FIG.

  In the case of the common counter, there is a disadvantage that a counter value difference between the CU control unit 323 and the SC 325b occurs when cross transmission occurs. In normal transmission, for example, after a response (response) from the SC 325b is transmitted to the CU control unit 323, the CU control unit 323 transmits the next request (command) to the SC 325b. On the other hand, in the cross transmission, the response (response) output from the SC 325b and the output of the next request (command) from the CU control unit 323 are made almost simultaneously, and the next request (command) from the CU control unit 323 is made. ) Is received by the CU control unit 323, and after the response (response) is output from the SC 325b, the next request (command) from the CU control unit 323 is SC 325b. Received.

  In the case of the common counter, when the above-described cross transmission occurs, the counter value is obtained by transmitting the next request (command) before receiving the response (response) from the SC 325b on the CU control unit 323 side, for example. One updated state (counter value = 3), and the response (response) encrypted with the counter value (= 2) is decrypted with the updated counter value (= 3). For this reason, the counter values on the CU control unit 323 side and the SC 325b side are in a state of being different from each other, and there is a problem in that decoding cannot be performed properly.

  On the other hand, when two types of counters, that is, a down counter and an up counter are used, when the above-described cross transmission occurs, referring to FIG. 74 (b), for example, on the CU control unit 323 side. Even if the downstream counter value is updated by one by transmitting the following information before receiving the response from the SC 325b (downstream counter value = 2), the updated counter value is CU Since only the down counter value used for generating the ciphertext to be transmitted from the control unit 323 to the SC 325b is updated and the up counter value is not updated (up counter value = 1), the up counter value ( = 1), the response from SC 325b encrypted (response) is appropriately decrypted on the CU control unit 323 side using the same counter value for upstream (= 1). It is possible.

  As described above, the first key (down counter) used to generate the ciphertext to be transmitted from the first control means (CU control unit 323, etc.) to the second control means (SC325b, etc.), and the second control means (SC325b). Etc.) to the first control means (CU control unit 323 etc.) and the second key (upstream counter) used for generating the ciphertext to be transmitted is independently updated, so that the first control means (CU control unit) 323, etc.) and the second control means (SC325b, etc.), it is possible to prevent inconvenience that a key mismatch occurs between the two control means when a cross transmission occurs. After the response from the second control means (SC 325b etc.) is transmitted to the first control means (CU control part 323 etc.), the first control means (CU control part 323 etc.) sends the second information to the second control means (CU control part 323 etc.). The normal transmission is transmitted to the SC 325b etc., whereas the cross transmission refers to the output of the response from the second control means (SC 325b etc.) and the next from the first control means (CU control unit 323 etc.) Information is output almost simultaneously, and after the next information is output from the first control means (CU control unit 323, etc.), a response from the second control means (SC325b, etc.) is sent to the first control means (CU Control unit 323 etc.) receives and outputs a response from the second control means (SC325b etc.), the next information from the first control means (CU control unit 323 etc.) is the second control means (SC325b etc.) ) Received and received status Say (for example, FIG. 74 (a) (b) reference). For example, the first control unit (CU control unit) uses a key used for generating ciphertext to be transmitted between the first control unit (CU control unit 323, etc.) and the second control unit (SC 325b, etc.) as one type of key. 323, etc.) to the second control means (SC325b, etc.) and each time transmission from the second control means (SC325b, etc.) to the first control means (CU control unit 323, etc.) When the above-mentioned cross transmission occurs when updating each other, for example, the first control unit (CU control unit 323, etc.) side receives the next response before receiving a response from the second control unit (SC325b, etc.). In order to decrypt the response information transmitted from the second control means (SC 325b etc.) with the updated key, the key is updated by transmitting the information. First control It becomes stage (CU control unit 323, etc.) side and a state in which the key is staggered in the second control means (SC325b etc.) side, is caused inconvenience can not be properly decoded.

  Therefore, the first key (down counter) used for generating the ciphertext to be transmitted from the first control means (CU control unit 323, etc.) to the second control means (SC325b, etc.) and the second control means (SC325b, etc.) Two types of keys, that is, a second key (upstream counter) used for generating ciphertext to be transmitted to one control means (CU control unit 323, etc.) are used. As a result, when the above-mentioned cross transmission occurs, for example, the first control means (CU control unit 323 etc.) side transmits the next information before receiving a response from the second control means (SC 325b etc.). Even if one key is updated by the above, the updated key is used to generate ciphertext to be transmitted from the first control means (CU control unit 323, etc.) to the second control means (SC325b, etc.). The second key (upstream counter) is not updated, only the first key (downstream counter) to be updated is updated, so that the second control means (SC325b etc.) encrypted by the second key (upstream counter) Can be properly decrypted on the first control means (CU control unit 323, etc.) side using the same second key (up counter).

  Next, with reference to FIG. 75 and FIG. 76, a sequence of automatic counter restoration in the SE2 mode will be described. FIG. 75 is a sequence of automatic counter restoration in the SE2 mode on the CU control unit 323 side. FIG. 76 is a sequence of automatic counter restoration in the SE2 mode on the SC 325b side. In both figures, a business message request indicates some command, and a business message response indicates some response.

  First, referring to FIG. 75, the counter automatic restoration sequence in the SE2 mode on the CU control unit 323 side will be described. The CU control unit 323 transmits the business message request 1 with the downstream counter = 0, and the SC 325b receiving it transmits the business message response 1 to the CU control unit 323 with the upstream counter = 0.

  Then, the CU control unit 323 transmits the business message request 2 with the downstream counter = 1, and the SC 325b receiving it transmits the business message response 2 to the CU control unit 323 with the upstream counter = 1. In the middle of such an exchange, when the business message response 3 with the upstream counter = 2 transmitted from the SC 325b has not reached the CU control unit 323, the CU control unit 323 retransmits the business message request 3 . At this time, the downlink counter is not updated and transmitted with downlink counter = 2.

  The SC 325b resends the business message response 3 because the already received business message request 3 has been retransmitted. However, if this response has not arrived again, the second retransmission of the message by the CU control unit 323 is executed in the same manner as the previous one, and the second retransmission is still in response to the CU control unit 323 from the SC 325b. If the response is not received, the CU control unit 323 transmits a board state request to the SC 325b. This board state request is a request for the state of the security board and the gaming machine to the SC 325b. In addition, the downstream counter at this time is set to 3, which is obtained by adding 1 to the counter value that has been retransmitted.

  The SC 325b that has received the board status request decodes it with the downlink counter value (= 3) obtained by adding 1 to the downlink counter (= 2) of the business message request 3 that has already been received, and succeeds in the decoding. Then, the SC 325b returns a substrate state response (up counter = 3) to the CU control unit 323. However, the CU control unit 323 has not received the business message response 3 (upstream counter = 2), and the most recently received message has an upstream counter of 1. For this reason, when the received board state response is decoded with a value obtained by adding 1 to the upstream counter (= 2), a decoding abnormality is detected. Therefore, as shown in S156 of FIG. 45, the board state response is decoded with 3 which is a value obtained by adding +1 to the upstream counter (= 2), and the decoding is successful.

  Next, referring to FIG. 76, the counter automatic restoration sequence in the SE2 mode on the SC 325b side will be described. The CU control unit 323 transmits the business message request 1 with the downstream counter = 0, and the SC 325b receiving it transmits the business message response 1 to the CU control unit 323 with the upstream counter = 0.

  Then, the CU control unit 323 transmits the business message request 2 with the downstream counter = 1, and the SC 325b receiving it transmits the business message response 2 to the CU control unit 323 with the upstream counter = 1. In the middle of such an exchange, when the response to the business message request 3 with the downstream counter = 2 transmitted from the CU control unit 323 is not returned from the SC 325b, the CU control unit 323 retransmits the business message request 3 . At this time, the downlink counter is not updated and transmitted with downlink counter = 2.

  However, when the response to the business message request 3 is not returned again, the second retransmission of the message by the CU control unit 323 is executed in the same manner as the previous time, and the second retransmission is still in response to the CU control unit 323. If no response is received from the SC 325b, the CU control unit 323 transmits a board state request to the SC 325b. This board state request is a request for the state of the security board and the gaming machine to the SC 325b. In addition, the downstream counter at this time is set to 3, which is obtained by adding 1 to the counter value that has been retransmitted.

  However, SC 325b has not received business message request 3 (downstream counter = 2), and the most recently received message has a downstream counter of 1. For this reason, when the received board status request is decoded with a value obtained by adding 1 to the downstream counter (= 2), a decoding abnormality is detected. Therefore, as shown in S156 of FIG. 45, the board state request is decoded with 3 which is a value obtained by adding 1 to the down counter, and the decoding is successful. On the other hand, the CU control unit 323 that has received the board state response (upstream counter = 2) has already received the business message response 2 (upstream counter = 1), and therefore, a value obtained by adding 1 to the upstream counter (= 2) ) And attempts to decrypt successfully.

  75 and 76 show an example in which the decoding is retried with a value incremented by one when the decoding is abnormal, and succeeds. However, in the case of failure, for example, FIG. 45 ( The process shown in a) is applied. That is, as shown in FIG. 45 (a), +1 is tried first, and if decoding is unsuccessful, +1 is further tried, and such trial is repeated a plurality of times. Returning to the original counter value, −1 is tried from that value, and if decoding is unsuccessful, −1 is further tried. The update value of the counter is not limited to 1, and values such as 2 and 3 may be used as the update value.

<< Switching between free games and games at a specified rate >>
Next, switching between free games and games at a predetermined rate will be described. The rate refers to the unit price of the game medium when a game medium (pachinko ball, medal used in a slot machine, etc.) is lent. Examples of the rate include a pachinko ball of 4 yen, a pachinko ball of 1 yen, a medal of 20 yen, and a medal of 5 yen.

  Note that the gaming machine in the present embodiment is a sealed circulation pachinko machine and a slot machine that does not use medals as described later. For this reason, the concept of lending game media includes the concept of lending game balls in pachinko machines and lending game points in slot machines. The game balls are not real balls but virtual balls.

  FIG. 77 is an explanatory diagram of a flowchart showing the flow of the gift process and a storage table for managing the value of player possession. Referring to FIG. 77 (A), the gift process is executed by a CPU of a server in the game hall such as hall server 801.

  In the gift process, first, the CPU of the hall server 801 determines whether or not the gift condition for the free possession is satisfied (step S401). The free possession ball is a game value that is given to the player free of charge, and can be used in the game by operating the replay button 319, as in the case of a regular possession ball. However, in the present embodiment, the addition to the free possession ball according to the operation of the counting button 28 cannot be performed. In addition, you may enable it to add to the free possession ball according to operation of the count button 28. FIG.

  A free possession ball is invalidated on the condition that a predetermined invalid condition has been established (for example, straddling a day, a predetermined time has elapsed, moving to another game machine, etc.) Since it is handled in the same way as a holding ball, it is valid only on the day.)

  The conditions for gifting free possessions are, for example, the condition that the player is managed as member information in the hall server 801, the condition that it is the birthday of the player, the condition that it is a specific day (Ladies' Day), There are conditions such as a predetermined frequency or more and a visit to the place.

  When it is determined that the gift condition is satisfied (YES in step S401), the CPU of the hall server 801 associates a predetermined amount (for example, 100 balls) of free possession balls with free possession balls in association with the target card ID. It memorize | stores in the memory area to memorize | store (step S402). If it is determined that the gift condition is not satisfied (NO in step S401), and after step S402, the CPU of the hall server 801 returns the process to be executed to the caller process.

  Referring to FIG. 77 (B), the storage unit of hall server 801 stores information as shown in the member balance / holding ball / storing ball table. As shown in this table, in association with the card ID of the member card of the member, a storage area capable of storing the prepaid balance, the number of balls and the number of balls for each rate is provided, and a memory for storing free balls An area is provided.

  The rates A and B are, for example, a rate of 4 yen per pachinko ball and a rate of 1 yen per pachinko ball, respectively.

  Referring to FIG. 77 (C), the storage unit of hall server 801 stores information as shown in the visitor balance / holding ball table. As shown in this table, in association with the card ID of the visitor card, a storage area capable of storing the prepaid balance and the number of balls for each rate is provided, and a storage area for storing free balls is provided.

  By receiving such a membership card and visitor card at CU3, the card ID is transmitted from CU3 to the hall server 801, the prepaid balance corresponding to the card ID, the number of held balls and the number of balls for each rate, and free The number of holding balls is transmitted to CU3.

  In this way, membership cards and visitor cards have a value of a kind that is not given to the player free of charge (for example, a prepaid balance, a holding ball, a storage ball) and a kind of value that is given to the player free of charge (here Then, it is possible to specify free possession balls). The latter can be said to be a value that can be used for free games, and the former can be said to be a value that can be used for normal games that are not free games.

  The kind of value given to the player free of charge can be specified by the membership card and the visitor card in the same manner as the value not given free of charge to the player. More specifically, as shown in FIG. 77, the possession balls that are given to the player free of charge are the same as the possession balls that are not given to the player free of charge, that is, as possession balls, with membership cards and visitor cards. It can be specified. In addition, here, it is possible to specify the balls that are given free of charge separately from the balls that are not given free of charge, and not be specified by the membership card or visitor card. .

  In addition, the membership card and the visitor card have a value of a value that enables a game at a high rate (in this case, rate A) (for example, a prepaid balance, a rate A holding / storing ball) and a low rate ( Here, it is possible to specify the type of value (for example, prepaid balance, rate B holding / storing ball) that enables a game at rate B).

  FIG. 78 is a flowchart showing the flow of rate-related processing. Referring to FIG. 78, the rate related processing is executed by CU control unit 323 of CU3.

  In the rate-related processing, first, the CU control unit 323 determines whether it is time to accept a membership card (step S501). If it is determined that the membership card is being accepted (YES in step S501), the CU control unit 323 inquires of the hall server 801 whether a free possession ball is stored in association with the card ID of the accepted membership card. (Step S502).

  Next, the CU control unit 323 determines whether or not the hall server 801 has responded with information indicating that a free possession ball corresponding to the accepted member card is stored (step S503).

  When it is determined that the information indicating that the free possession ball is stored is answered (YES in step S503), the CU control unit 323 gives the free possession ball to the display 54 (or the display 312). The player is notified by displaying the fact that it is present (step S504).

  If it is determined that the membership card is not received (NO in step S501) and after step S504, the CU control unit 323 determines whether a rate conversion operation has been received (step S511). The rate conversion operation is an operation for converting a player's possession balls / storing balls to a certain rate, and is accepted by the touch panel of the display 54 (or the display 312). .

  If it is determined that the rate conversion operation has been accepted (YES in step S511), the CU control unit 323 determines whether the number of game balls is not 0 (step S512). If it is determined that the number of game balls is not 0 (YES in step S512), the CU control unit 323 displays on the display unit 54 (or the display unit 312) to prompt the counting operation (step S513).

  On the other hand, when it is determined that the number of game balls is 0 (NO in step S512), the CU control unit 323 determines whether or not a game operation is being performed (step S514).

  A predetermined time has passed since the number of game balls has become zero (that is, since the pachinko ball corresponding to the last game ball has been struck into the game area), and the symbol has not changed. When the game is not in a specific game state such as a state, and is not in a special game state such as a probability change state or a short-time state (these determinations may be made by the CU control unit 323 or by a gaming machine) When the game machine is used, information indicating whether or not a game operation is being performed is transmitted to the CU 3), and the CU control unit 323 determines that the game operation is not being performed. . The predetermined time is a sufficient time from when the pachinko ball is fired until it enters one of the mouths (any winning port, out port 154, etc.), for example, 30 seconds.

  If it is determined that the game operation is not being performed (NO in step S514), the CU control unit 323 executes the conversion process between the rates accepted in step S511 (step S515). The conversion process will be described later with reference to FIG.

  Next, the CU control unit 323 performs switching setting so that a game can be played at the converted rate (step S516). In the rate switching setting, the CU control unit 323 changes the stored information indicating the current rate to indicate the rate after switching.

  Next, the CU control unit 323 starts to notify the player by displaying the set rate on the display 54 (or the display 312) (step S517). In addition, you may make it display with the display apparatus (here variable display apparatus 278) of game machines, such as the pachinko machine 2, instead of the display of CU3.

  Further, the CU control unit 323 transmits information indicating the rate after switching to the corresponding gaming machine (here, the pachinko machine 2). The gaming machine stores information indicating the received rate after switching.

  In the gaming machine, a game according to the rate may be performed. For example, in the pachinko machine 2, the pachinko ball firing interval according to the rate or the variation time of the symbol on the variable display device 278 is set. (For example, when the rate is low, the firing interval and the fluctuation time are shortened). Further, in a slot machine 2S which is another example of a gaming machine to be described later, a wait time or an effect time according to the rate may be set.

  The wait time is the time from the end of one game until the start operation of the next game becomes possible. This time is, for example, 4.1 seconds. If the start operation is detected before the wait time elapses, the reel starts to rotate after the wait time elapses. In addition, the production time is, for example, a continuous production performed over a plurality of games or a single game in a single game in order to suggest the possibility that navigation stock for AT is provided or the number of navigation stocks provided. It is the time required for (a battle effect or the like executed over one game or a plurality of games using a character).

  In addition, when the CU control unit 323 acquires information indicating the rate from the gaming machine at a predetermined timing, and the rate indicated by the acquired information is different from the rate stored in the CU control unit 323, an illegal or abnormal You may make it judge. For example, if a gaming machine with a rate of 1 yen per ball is illegally connected to CU3 set at a rate of 4 yen per ball, the number of game balls per 1 ball will be 4 yen per ball. Although it may be possible to identify the card, such fraud can be prevented.

  When it is determined that the rate conversion operation is not accepted (NO in step S511), after step S513, when it is determined that a game operation is being performed (YES in step S514), and after step S518, the CU control unit 323 Advances the process to be executed to step S520.

  Next, the CU control unit 323 determines whether a rate switching operation has been accepted. The rate switching operation is an operation for switching the rate of the game medium used for the game to another rate, and is accepted by the touch panel of the display 54 (or the display 312). In the present embodiment, it is possible to switch between free, rate A, rate B...

  If it is determined that the rate switching operation has been accepted (YES in step S520), the CU control unit 323 determines whether or not the number of game balls is not 0 (step S521). When it is determined that the number of game balls is not 0 (YES in step S521), the CU control unit 323 displays on the display 54 (or the display 312) to prompt the counting operation (step S522).

  On the other hand, when it is determined that the number of game balls is 0 (NO in step S521), the CU control unit 323 determines whether or not a game operation is being performed, similarly to step S514 (step S523).

  If it is determined that the game operation is not being performed (NO in step S523), the CU control unit 323 determines whether or not switching to a free rate is performed (step S524). If it is determined that the rate is switched to a free rate (YES in step S524), the CU control unit 323 determines whether or not the free possession ball is 0 (step S525).

  When it is determined that the free possession ball is 0 (YES in step S525), the CU control unit 323 notifies the player that the free possession ball is not displayed on the display 54 (or the display 312). (Step S526).

  Next, the CU control unit 323 performs switching setting so that a game at the accepted rate is possible (step S527). In the rate switching setting, the CU control unit 323 changes the stored information indicating the current rate to indicate the rate after switching. The processes in steps S528 and S529 are the same as the processes in steps S517 and S518 described above, respectively.

  In the game, a game according to the rate may be performed. For example, when the game is switched to a free rate, it is different from the number of prize balls for winning at a non-free rate (for example, 5 (You may reduce it to one).

  Further, in the notification of a free game, it may be notified directly that it is a free game, or may be notified to suggest that it is a free game (for example, “ I ’m trying it out ”).

  If it is determined that a rate switching operation has not been accepted (NO in step S520), after step S522, if it is determined that a game operation is being performed (YES in step S523), after step S526, and after step S529 The CU control unit 323 returns the process to be executed to the process of the caller of the rate related process.

  FIG. 79 is a flowchart showing the flow of conversion processing. Referring to FIG. 79, the conversion process is called and executed by CU control unit 323 of CU3 in step S515 in FIG. 78 described above or step S554 in FIG.

  In the conversion process, first, the CU control unit 323 determines whether or not the rate conversion source is a free rate (in this embodiment, a free coin) (step S541). If it is determined that the conversion source is a free rate (YES in step S541), the CU control unit 323 displays on the display unit 54 (or display unit 312) that the conversion is not possible from the free rate. (Step S542).

  On the other hand, when it is determined that the conversion source is not a free rate (NO in step S541), the CU control unit 323 determines whether the value of the conversion source is 0 (step S543). When it is determined that the value of the conversion source is 0 (YES in step S543), the CU control unit 323 displays the fact that the value of the conversion source is 0 on the display device 54 (or the display device 312). (Step S544).

  On the other hand, when it is determined that the value of the conversion source is not 0 (NO in step S543), the CU control unit 323 determines whether or not the conversion destination is a free rate (in this embodiment, free possession balls). Judgment is made (step S545). When it is determined that the conversion destination is a free rate (YES in step S545), the CU control unit 323 displays on the display unit 54 (or the display unit 312) that it is not possible to convert to a free possession ball. (Step S546).

  On the other hand, when it is determined that the conversion destination is not a free rate (NO in step S545), the CU control unit 323 converts the conversion source possession ball or storage ball into the conversion destination rate, Or it adds to a stored ball (step S547).

  For example, if there are 100 balls with 4 yen per ball and 200 balls with 1 yen per ball, a rate conversion operation for converting a 4 yen ball into a 1 yen ball is accepted. In this case, 100 balls of 4 yen are converted to 400 balls of 1 yen, and the converted 400 balls are added to the original 200 balls of 1 yen of 1 ball. The holding ball is 600 balls.

  After step S542, after step S544, after step S546, and after step S547, the CU control unit 323 returns the process to be executed to the caller process of this conversion process.

  FIG. 80 is a flowchart showing the flow of the return possibility determination process. Referring to FIG. 80, the return permission determination process is called and executed by CU control unit 323 of CU3 immediately after the “card return” button is pressed in the process described with reference to FIG.

  In the return permission determination process, first, the CU control unit 323 determines whether or not a member card is being accepted (step S551). When it is determined that the membership card is not being accepted (NO in step S551), the CU control unit 323 determines whether or not the value obtained by summing up any possessed and stored balls at each rate is equivalent to 500 yen or more. (Step S552).

  If it is determined that any value of each rate is not equivalent to 500 yen or more (NO in step S552), it is determined whether or not the total value of any possessed and stored balls of each rate is less than 500 yen. (Step S553).

  When it is determined that any value of each rate is less than 500 yen (YES in step S553), the CU control unit 323 converts the value of the smaller rate (the holding ball and the stored ball) into the rate of the highest value. The conversion process is executed (step S554). The conversion process has been described with reference to FIG.

  After step S554, the CU control unit 323 determines whether the value of the most valuable rate is less than 500 yen (step S555). If it is determined that the value of the most valuable rate is less than the equivalent of 500 yen (YES in step S555), the CU control unit 323 displays the display 54 (or the display 312) to urge the attendant of the game hall to be called. ) To notify the player (step S556).

  Then, the CU control unit 323 determines whether or not an operation for canceling the notification by the remote controller possessed by the attendant has been performed (step S557). If it is determined that no operation has been performed (NO in step S557), CU control unit 323 repeats the process in step S557.

  If it is determined that the membership card is being received (YES in step S551), if any value of each rate is equivalent to 500 yen or more (YES in step S552), any value of each rate is 500. When it is determined that the value is not less than yen (NO in step S553), the value of the most valuable rate is not less than 500 yen (NO in step S555), and an operation for canceling the notification by the clerk's remote control Is determined (YES in step S557), CU control unit 323 returns the process to be executed to the caller process of this process.

  Since the membership card is a player-specific card, it is unlikely that it will be discarded, but it is possible that the discharged visitor card will be discarded or damaged. Since the unit price of the card is several hundred yen (for example, 500 yen), if it is discarded or damaged, it will be a damage to the game hall. For this reason, by executing the return permission determination process as described above, discharging of cards with a high possibility that the gaming value identifiable by the card is less than the unit price of the card is limited. As a result, it is possible to avoid damage to the game hall.

<Modification>
Next, a modified example of the above-described free game and game switching at a predetermined rate will be described.

  (1) In the above-described embodiment, the number of free possessions is configured to be specified separately from the value of other rates (prepaid balance, possession balls, storage balls). In the modified example, the number of free possession balls is configured so as to be specified by being added to the value of any rate.

  This will be specifically described below. FIG. 81 is an explanatory diagram of a flowchart showing a flow of a gift process as a modified example and a storage table for managing the value of player possession. FIG. 81 is a modification of the content described in FIG.

  Referring to FIG. 81 (A), the gift process is executed by a CPU of a server in the game hall such as hall server 801.

  In the gift process of the modified example, first, the CPU of the hall server 801 executes the same process as step S401 of FIG.

  When it is determined that the gift condition is satisfied (YES in step S401), the CPU of the hall server 801 associates a predetermined amount (for example, 100 balls) of free coins in association with the target card ID at a non-free rate (for example, Here, it is stored in the storage area for storing the number of possessed balls of rate A) (step S402A). At this time, you may make it memorize | store 1 ball of free possession balls as 1 ball of non-free rate, and may memorize 10 balls of free possession balls as 1 ball of non-free rate.

  If it is determined that the gift condition is not satisfied (NO in step S401), and after step S402A, the CPU of the hall server 801 returns the process to be executed to the caller process.

  Referring to FIG. 81 (B), the storage unit of hall server 801 stores information as shown by the member balance / money ball / storing ball table. As shown in this table, in association with the card ID of the member card of the member, a storage area capable of storing the prepaid balance, the number of balls and the number of balls for each rate is provided, while the number of free coins is It is added to the number of balls with rate A and stored.

  Referring to FIG. 77 (C), the storage unit of hall server 801 stores information as shown in the visitor balance / holding ball table. As shown in this table, a storage area that can store the prepaid balance and the number of balls for each rate is provided in association with the card ID of the visitor card, while the number of free balls is the rate A It is added to the number and stored.

  When such a member card and visitor card are received by CU3, the card ID is transmitted from CU3 to the hall server 801, and the prepaid balance corresponding to the card ID, the number of balls held and the number of balls stored for each rate are stored in CU3. Sent.

  In this way, membership cards and visitor cards have a value of a kind that is not given to the player free of charge (for example, a prepaid balance, a holding ball, a storage ball) and a kind of value that is given to the player free of charge (here Then, it is possible to specify the total value of “free possession balls”. The latter can be said to be a value that can be used for free games, and the former can be said to be a value that can be used for normal games that are not free games.

  (2) In the embodiment described above, the game value that can be used for a free game given to a player is a free ball. However, the present invention is not limited to this, and the game value that can be used for a free game given to a player may be a stored value or a prepaid balance (card balance). If you want to save money, shorten the validity period (for example, the current day or the next day only). In addition, when the prepaid balance is used, it is not possible to settle it and exchange it for cash.

  (3) In the above-described embodiment, as described with reference to FIG. 77 (A), a condition for giving a value (for example, a free possession ball) that is given to the player free of charge is established by the CPU of the hall server 801. When it is judged, the value is added.

  However, the present invention is not limited to this, and the value given to the player free of charge is that a two-dimensional code is posted on an advertisement in a game hall, and the player reads the two-dimensional code with a portable terminal to obtain a predetermined site ( For example, it may be granted by accessing a game site. Alternatively, it may be granted by directly accessing a predetermined site and satisfying a predetermined condition (for example, playing a game and clearing the predetermined condition).

  Further, the predetermined site is not limited to the game site, but may be a service site that provides the player's game information to a member terminal such as a smartphone or a PC and the CU 3 of the store. In this case, a value provided free of charge to the player via the game hall is given from the company providing the service.

  Further, it may be possible to set whether or not to give value to the player free of charge from a company outside the game hall. In this case, consideration for free games is paid to the game hall from a company outside the game hall.

  (4) In the embodiment described above, the value given to the player free of charge is given regardless of whether or not he is a member. However, the present invention is not limited to this, and it may be granted only to members.

  (5) In the above-described embodiment, as shown in FIG. 77, when a predetermined gift condition is satisfied, a value that is automatically given free of charge is given. However, the present invention is not limited to this, and a value given free of charge may be given by the operation of the attendant at the game hall.

  (6) Guidance on how to use the game method and value (prepaid balance, holding balls, savings) in the game when the free game is played using the value given to the player free of charge It may be. Thereby, a free game can be used as a practice mode for a novice player.

  (7) In the above-described embodiment, as shown in step S520 to step S527 in FIG. 78, when the switching operation to the free game by the player is accepted, the free game is switched. However, the present invention is not limited to this, and the CU control unit 323 of the CU3 automatically switches to the free game when it is specified that the received card has a value that can be given to the player free of charge such as free possession balls. You may do it. In addition, when the value given free of charge is given to the player, the staff in the game hall may be switched to the free game.

  (8) In the above-described embodiment, as shown in step S521 of FIG. 78, when free possession balls remain, it is not possible to switch to another rate unless after a counting operation. However, the present invention is not limited to this, and it may be possible to abandon the free possession ball and switch to another rate.

  (9) A free possession may be a gift that cannot be exchanged or a gift that can be exchanged. If the prize can be exchanged, it can be exchanged for a lower value compared to a regular holding ball, or it can be exchanged for something that is distributed free of charge. It may be possible to exchange points and coins that can be used on the mobile link site.

  (10) In the above-described embodiment, the value given to the player free of charge can be used for any game machine or any model. In addition, even when moving to another gaming machine, it can be used. However, the present invention is not limited to this, and may be used only on a specific model.

  (11) In the above-described embodiment, any game machine can be switched to any rate. However, the present invention is not limited to this, and the switchable rate may be limited for each model or each gaming machine. For example, a rate change may not be possible with a newly installed gaming machine at a high rate, and a rate change may be possible with a previously installed gaming machine.

  (12) For example, a value that is given to the player free of charge may be given when a predetermined time comes. In this case, a predetermined time to be given to the hall server 801 is set in advance, and a value is given to the card accepted by the CU 3 when the predetermined time comes. Further, it may be given only to a specific type of gaming machine, or only to a gaming machine installed at a specific position (for example, a gaming machine installed on a specific gaming machine installation island). You may do it. Moreover, you may make it give only to the member of a specific sex (for example, woman), and you may make it give only to a member. Moreover, you may make it provide with the apparatus which provides a store visit point. In addition, when a predetermined condition is satisfied in the gaming machine (for example, when the RTC time becomes a predetermined time), a signal indicating that may be transmitted to the CU 3 to give it.

  (13) In the above-described embodiment, a value that is given to the player free of charge is also given to the visitor card. However, even if the prepaid balance and the number of balls are 0, if the value given free of charge remains in the visitor card, the visitor card cannot be collected inside the CU3. In such a case, the player is inquired whether or not to eject a visitor card that can specify only the value that can be given free of charge. If the player is unnecessary, the player is given free of charge that is specified by the visitor card. You may make it erase | eliminate the given value and collect | recover the said visitor card | curd inside.

  (14) In the embodiment described above, a value that is given to the player free of charge is also given to the visitor card. However, the present invention is not limited to this, and only a member card may be given a value that is given to the player free of charge. In this case, it is possible to contribute to an increase in the number of new members by giving the value given to the players free of charge on condition that the players have become members.

  (15) In the above-described embodiment, the value that is given to the player free of charge is given by the number of balls. However, the present invention is not limited to this, and it may be given as a value that allows a game for a predetermined time (for example, 3 minutes).

  (16) In the above-described embodiment, as shown in step S523 of FIG. 78, the rate can be switched when the game operation is not being performed. However, the present invention is not limited to this, and the rate may be switched even during a game operation. Further, the rate switching operation may be accepted when the game operation is being performed, and the rate may be switched after the game operation is no longer being performed when the rate switching operation is accepted.

  (17) In the above-described embodiment, as shown in steps S521 and S522 of FIG. 78, when the number of game balls is not 0 when the rate switching operation is accepted, the counting operation is prompted. . However, the present invention is not limited to this, and if the number of game balls is not 0 when the rate switching operation is accepted, the CU and the gaming machine may automatically perform counting and switch the rate after the counting is completed. Good.

  (18) In the above-described embodiment, the rate switching operation is accepted by the CU3. However, the present invention is not limited to this, and the rate switching operation may be accepted by the gaming machine.

  (19) In the above-described embodiment, as shown in FIG. 78, the rate is not switched unless the number of game balls is zero when the rate switching operation is accepted. However, the present invention is not limited to this, and the rate of the number of game balls when a rate switching operation is accepted may be converted and used as it is for a game. For example, if there are 100 game balls with a rate of 4 yen per ball when the rate switching operation is accepted, the game balls can be converted into 400 game balls with a rate of 1 yen per ball so that the game can be continued as it is. .

  (20) In the above-described embodiment, when rate conversion is performed, if there are not enough balls, the fact may be notified. For example, if there are less than 4 balls at a rate of 1 yen per ball, a notification is given that it cannot be converted to a rate of 4 yen per ball. Alternatively, the lowest value may be set uniformly at all rates. For example, if less than 25 balls in terms of 4 yen per ball, it may be notified that the rate cannot be converted. Further, a minimum value that can be converted for each rate may be set.

  (21) In the above-described embodiment, it is possible to specify the game value for each rate with the membership card and the visitor card. However, the present invention is not limited to this, and the game value may not be specified for each rate but may be specified as the game value of the lowest rate.

  (22) In the above-described embodiment, as described in step S514 and step S523 in FIG. 78, a predetermined time has elapsed since the number of game balls became zero, and the symbols are not changing. In addition, the CU control unit 323 determines that the game operation is not being performed when the game state is not a specific game state such as a big hit state and is not in a special game state such as a probability change state or a short time state. Then, rate conversion processing and rate switching are performed when the game operation is not being performed.

  However, the present invention is not limited to this, and it may be determined whether or not a person is sitting on a chair in front of the gaming machine by a human sensor when determining whether or not a game operation is being performed. That is, when there is no person, it is not in the gaming state, but the rate conversion operation and the rate switching operation may be invalidated.

  Further, in determining whether or not a game operation is being performed, a determination is made as to whether or not the amount of operation of the handle is not zero, or whether or not the touch of the handle is detected by a touch sensor of the handle. May be. In other words, at least if the operation amount of the handle is not 0, it is not determined that the game operation is not being performed. Alternatively, at least if a touch of the hand is detected by the touch sensor, it is determined that the game operation is not being performed.

<Effect>
(A-1) A gaming machine (for example, a pachinko machine 2, a slot machine 2S) and a recording medium (for example, a prepaid balance, a holding ball, a stored ball) that can specify a value for playing a game with the gaming machine (for example, A gaming device (for example, card unit 3) that accepts a membership card (visitor card) and enables a game using the value specified by the recording medium (for example, the number of game balls and the number of game points are added). A gaming system,
The recording medium has a value A of the first kind of value that is not given to the player free of charge (for example, a prepaid balance, a holding ball, a stored ball, a value that can be used for a normal game), and a first value that is given free of charge to the player. A type 2 value (for example, a prepaid balance, a free ball, a stored ball that is given to a player free of charge; a value that can be used for free game) can be specified (for example, see FIG. 77);
The gaming device is:
Setting means (for example, step S527 in FIG. 78) is set for setting which of the values included in the first-class A value and the value included in the second-class A value is allowed.

  According to such a configuration, it is possible to play a game using a value that is given to the player free of charge by the gaming device. As a result, it is possible to provide a gaming system that allows a player to play a game free of charge.

(A-2) Recording medium (for example, membership card, visitor card) that can specify the value (for example, prepaid balance, holding ball, storage ball) for playing with a gaming machine (for example, pachinko machine 2, slot machine 2S) ) And enabling a game using the value specified by the recording medium (for example, adding the number of game balls and game points) (for example, card unit 3),
The recording medium has a value A of the first kind of value that is not given to the player free of charge (for example, a prepaid balance, a holding ball, a stored ball, a value that can be used for a normal game), and a first value that is given free of charge to the player. A type 2 value (for example, a prepaid balance, a free ball, a stored ball that is given to a player free of charge; a value that can be used for free game) can be specified (for example, see FIG. 77);
Setting means (for example, step S527 in FIG. 78) is set for setting which of the values included in the first-class A value and the value included in the second-class A value is allowed.

  According to such a configuration, it is possible to play a game using a value that is given to the player free of charge by the gaming device. As a result, it is possible to provide a gaming device that allows a player to play a game free of charge.

(A-3) In the gaming system of (A-1) or the gaming apparatus of (A-2),
The second type A value cannot be converted into the first type A value (for example, step S541 and step S542 in FIG. 79).

  According to such a configuration, it is possible to make it impossible to convert the second class A value given to the player free of charge into the first class A value that is not given to the player free of charge. As a result, it is possible to allow a player to play a game free of charge and to prevent a burden on the game arcade.

(A-4) In the gaming system of (A-1) or the gaming apparatus of (A-2),
At least a part of the second type A value can be converted into the first type A value (for example, at step S541 and step S542 in FIG. 79, conversion is impossible, but at least balls acquired with free possession balls are not converted. A part of the ball may be converted into a regular holding ball, for example, if it exceeds 10,000 balls, it may be exchanged for a value of a predetermined rate of 500 yen).

  According to such a configuration, it is possible to exchange at least a part of the type A type 2 value given free of charge to the player to the type A type 1 value that can be exchanged for a prize or the like. As a result, the player can play the game free of charge, and further, the second type A value can be converted into the first type A value and used effectively by the player.

(A-5) In any one of the gaming system and gaming device of (A-1) to (A-4) above,
The value obtained in the game in exchange for the second type A value or the first type A value cannot be converted into the second type A value (for example, steps S545 and S546 in FIG. 79). .

  According to such a configuration, it is possible to prevent an increase in the second type A value given to the player. For this reason, it is possible to prevent the game with the value of the second category A from being performed more than necessary. As a result, it is possible to prevent an unnecessary burden on the game arcade.

(A-6) In any one of the gaming system and gaming device according to (A-1) to (A-5) above,
The second type A value is invalidated on the condition that a predetermined invalid condition is established (for example, straddling a day, a predetermined time has elapsed, or moved to another gaming machine, etc.) Because it is treated in the same way as a regular holding ball, it is valid only on the day.)

  According to such a configuration, when the predetermined invalid condition is satisfied, the second type A value is invalidated. For this reason, it is possible to prevent the game with the value of the second category A from being performed more than necessary. As a result, it is possible to prevent an unnecessary burden on the game arcade.

(A-7) In any one of the gaming system and gaming device according to (A-1) to (A-6) above,
The second type A value can be specified on the recording medium in the same manner as the first type A value (see, for example, FIG. 77. The prepaid balance, the free ball, and the stored amount given to the player for free are: It is possible to specify normal prepaid balance, holding balls, and saving balls in the same way that cards can be specified.In the case of a membership card, the savings given to the player for free is the same as normal savings. The prepaid balance and coins that are given free of charge to the player of the membership card and visitor card are handled in the same manner as the ordinary prepaid balance and coins. .

  According to such a configuration, it is possible to use the A-type second-class value in the game in the same manner as the first-A first-class value (for example, the second-class A value is the same as the holding ball of the first-class A first-class value). If it is possible to specify in the form of A, the second type value can be used in the same replay operation as the first type A value, and the second type A value is the same as the prepaid balance of the first type A value. If it is possible to specify in the aspect, the second class value can be used in the ball lending operation similar to the first class value.) As a result, the player can easily use the second type A value.

(A-8) In any one of the gaming system and gaming device (A-1) to (A-7) above,
Even if the second type A value is specified by the recording medium in the same manner as the balance when cash is received by the gaming device, the balance cannot be settled (for example, The normal prepaid balance can be settled, but the prepaid balance given free of charge to the player is not settled).

  According to such a structure, even if it is a case where the 2nd A type 2 value provided free of charge is handled in the same manner as the balance, it is possible to make payment impossible. For this reason, even if the second type A value is given to the player, the player cannot settle the second type A value as it is, and the game site on the side of giving does not suffer damage. Similar value can be easily given to players. As a result, it is possible to familiarize the player with how to use the balance of the first class A value with the second class A value that can be easily given.

(A-9) In any one of the gaming system and gaming device according to (A-1) to (A-8) above,
When it is determined that the game is not being performed (for example, the number of game balls has become zero and a predetermined time has elapsed, the symbol is not changing, and the game is not in a specific game state or a special game state. In the case, the setting can be changed (for example, the rate switching setting is performed in step S527 on the condition that it is determined that the game operation is not being performed in step S523 in FIG. 78).

  According to such a configuration, when a game is played using the first-class A value or the second-class A value, the setting value cannot be changed to the other value. As a result, it is possible to prevent the first type A value and the second type A value from being mixed.

(A-10) In any one of the gaming system and the gaming apparatus of (A-1) to (A-9),
When a game is played using the second type A value, or a lottery effect is performed as to whether or not a specific game state advantageous to the player is obtained in exchange for the second type A value. In the case where the game is held, a notification means for notifying or suggesting that is further provided (for example, step S517 in FIG. 78. The notification may be made on the gaming machine side or the gaming device).

  According to such a configuration, it is possible to let the player know which of the A-type 1 value or the A-type 2 value is used to play the game.

(A-11) In any one of the gaming system and the gaming apparatus (A-1) to (A-10) above,
The gaming device further includes:
A gaming device side transmission means for transmitting information indicating the setting by the setting means to the gaming machine (for example, step S518 in FIG. 78. Whether the status information request is of the first class A value or the second class A value) May be included and transmitted).

  According to such a configuration, it is possible to cause the gaming machine to perform a response in accordance with whether the game is performed by using either the first A class value or the second A class value (for example, the first A class value and It is possible to display on the gaming machine which of the second category value is used to play the game).

(A-12) In the gaming system or gaming device of (A-11) above,
The gaming machine is
When the game result is transmitted to the gaming device, the gaming machine side transmitting unit (for example, the counting device shown in FIG. 12) counts the setting indicated by the information indicating the setting received from the gaming device side transmitting unit. When the processing is performed, the status information response includes whether it is the value of the first class A value or the second class A value.

  According to such a configuration, the gaming device can determine whether the value used for the game set by the gaming device matches the value used for the game received from the gaming machine. As a result, it is possible to find fraud and abnormalities such that the two do not match.

(A-13) A gaming machine (for example, a pachinko machine 2, a slot machine 2S) and a recording medium (for example, a prepaid balance, a holding ball, a stored ball) that can specify a value for playing a game with the gaming machine (for example, A gaming device (for example, card unit 3) that accepts a membership card (visitor card) and enables a game using the value specified by the recording medium (for example, the number of game balls and the number of game points are added). A gaming system,
The recording medium has a value A of the first kind of value that is not given to the player free of charge (for example, a prepaid balance, a holding ball, a stored ball, a value that can be used for a normal game), and a first value that is given free of charge to the player. A total value (for example, prepaid balance, free balls, and savings that can be given to a player free of charge. Value that can be used for free games) can be specified (see, for example, FIG. 81).
The gaming device is:
Which of the values included in the first-class A value and the second-class A value (this second-class value is given by a method other than the mode of recording on the card) is used to enable the game Setting means (for example, step S527 in FIG. 78).

  According to such a configuration, it is possible to play a game using a value that is given to the player free of charge by the gaming device. As a result, it is possible to provide a gaming system that allows a player to play a game free of charge.

(A-14) Recording medium (for example, membership card, visitor card) that can specify the value (for example, prepaid balance, holding ball, savings) for playing with a gaming machine (for example, pachinko machine 2, slot machine 2S) ) And enabling a game using the value specified by the recording medium (for example, adding the number of game balls and game points) (for example, card unit 3),
The recording medium has a value A of the first kind of value that is not given to the player free of charge (for example, a prepaid balance, a holding ball, a stored ball, a value that can be used for a normal game), and a first value that is given free of charge to the player. A total value (for example, prepaid balance, free balls, and savings that can be given to a player free of charge. Value that can be used for free games) can be specified (see, for example, FIG. 81).
Which of the values included in the first-class A value and the second-class A value (this second-class value is given by a method other than the mode of recording on the card) is used to enable the game Setting means (for example, step S527 in FIG. 78).

  According to such a configuration, it is possible to play a game using a value that is given to the player free of charge by the gaming device. As a result, it is possible to provide a gaming device that allows a player to play a game free of charge.

(A-15) In any one of the gaming system and gaming device according to (A-1) to (A-14) above,
The second type A value is given to the player on condition that a predetermined grant condition is satisfied (for example, step S402 in FIG. 77, step S402A in FIG. 81).

  According to such a configuration, it is possible to appropriately execute a game using the second type A value given free of charge to the player.

(B-1) A gaming machine (for example, a pachinko machine 2, a slot machine 2S) and a recording medium (for example, a prepaid balance, a holding ball, a stored ball) for specifying a value for playing a game with the gaming machine (for example, A gaming device (for example, card unit 3) that accepts a membership card (visitor card) and enables a game using the value specified by the recording medium (for example, the number of game balls and the number of game points are added). A gaming system,
The recording medium has a value of Type B (for example, a prepaid balance, 4 pachis) that enables a game at a high rate (for example, a rate of 4 yen per pachinko ball, a rate of 20 yen per coin). Type B value (for example, prepaid balance) that allows games to be played at a low rate (for example, a rate of less than 4 yen per pachinko ball, a rate of less than 20 yen per coin) , 1 pachi holding ball, 1 pachi storage ball) (for example, see FIG. 77),
The gaming device is:
Setting means (for example, step S527 in FIG. 78) for setting which of the high rate and the low rate is allowed;
Adding means for adding the value acquired in the game in accordance with the setting by the setting means to the value included in either the first type B value or the second type B value (see, for example, FIG. 12; step S516 in FIG. 78). Alternatively, the rate set in step S527 is determined, and the acquired value is added to the first-class value or the second-class value of the determined rate at the prepaid balance that can be used in both 1-patch and 4-patch. The value acquired by the game may be added to the 4-patch holding ball, or the value acquired by the gaming machine with the 4-patch storage ball may be added to the 4-patch holding ball.

  According to such a configuration, it is possible to set a plurality of rates in a fluid manner by the gaming device and enable a game. As a result, it is possible to provide a gaming system capable of fluidly supporting a plurality of rates.

(B-2) Recording medium (for example, membership card, visitor card) that can specify the value (for example, prepaid balance, holding ball, storage ball) for playing with a gaming machine (for example, pachinko machine 2, slot machine 2S) ) And enabling a game using the value specified by the recording medium (for example, adding the number of game balls and game points) (for example, card unit 3),
The recording medium has a value of Type B (for example, a prepaid balance, 4 pachis) that enables a game at a high rate (for example, a rate of 4 yen per pachinko ball, a rate of 20 yen per coin). Type B value (for example, prepaid balance) that allows games to be played at a low rate (for example, a rate of less than 4 yen per pachinko ball, a rate of less than 20 yen per coin) , 1 pachi holding ball, 1 pachi storage ball) (for example, see FIG. 77),
Setting means (for example, step S527 in FIG. 78) for setting which of the high rate and the low rate is allowed;
Adding means for adding the value acquired in the game in accordance with the setting by the setting means to the value included in either the first type B value or the second type B value (see, for example, FIG. 12; step S516 in FIG. 78). Alternatively, the rate set in step S527 is determined, and the acquired value is added to the first-class value or the second-class value of the determined rate at the prepaid balance that can be used in both 1-patch and 4-patch. The value acquired by the game may be added to the 4-patch holding ball, or the value acquired by the gaming machine with the 4-patch storage ball may be added to the 4-patch holding ball.

  According to such a configuration, it is possible to set a plurality of rates in a fluid manner by the gaming device and enable a game. As a result, it is possible to provide a gaming apparatus capable of fluidly supporting a plurality of rates.

(B-3) In the gaming system of (B-1) or the gaming apparatus of (B-2),
The gaming device further includes:
Return operation accepting means for accepting the return operation of the recording medium (for example, pressing the “card return” button in FIG. 14);
The first-class B value specified by the recording medium is less than a first threshold; and
Determination means (for example, step S553 in FIG. 80) for determining whether or not the second type B value specified by the recording medium is less than a second threshold;
When the return operation is accepted by the return operation accepting unit, the determination unit determines that the first type B value is less than the first threshold value or the second type B value is less than the second threshold value. If it is determined, return restriction means for restricting the return of the recording medium (for example, return is impossible unless an operator operates in step S556 and step S557 in FIG. 80).

  According to such a configuration, when the first type B value specified by the recording medium is less than the first threshold value or the second type B value is less than the second threshold value, the return of the recording medium is restricted. As a result, it is possible to prevent the discharge of the recording medium that can specify the first type B value or the second type B value less than the threshold value.

(B-4) In the gaming system (B-1) or the gaming device (B-2),
The gaming device further includes:
Return operation accepting means for accepting the return operation of the recording medium (for example, pressing the “card return” button in FIG. 14);
The first-class B value specified by the recording medium is less than a first threshold; and
Determination means (for example, step S553 in FIG. 80) for determining whether or not the second type B value specified by the recording medium is less than a second threshold;
When the return operation is accepted by the return operation accepting unit, the determining unit determines that the B-type first class value is less than the first threshold value and the B-second class value is less than the second threshold value. In the case where it has been done, it is provided with summing means (for example, step S554 in FIG. 80, step S547 in FIG. 79) for converting the smaller value into the larger value and adding together,
The determination means determines whether the value added by the adding means is less than the first threshold if the value is the B-type first value, and less than the second threshold if the value is the second-type B value. It is determined (for example, step S555 in FIG. 80),
The gaming device further includes:
When it is determined that the combined value is less than the first threshold value or the second threshold value by the determination unit, the return of the recording medium is restricted, and when it is determined that the value is not less than the first threshold value, the recording medium Return means (for example, step S556 in FIG. 80, step S557, processing after the return permission determination processing in FIG. 14).

  According to such a configuration, when the value obtained by adding the first type B value and the second type B value specified on the recording medium is less than the threshold value, the return of the recording medium is restricted. As a result, it is possible to prevent the discharge of the recording medium that can specify the first type B value or the second type B value less than the threshold value.

(B-5) In the gaming system (B-1) or the gaming device (B-2),
The gaming device further includes:
Return operation accepting means for accepting the return operation of the recording medium (for example, pressing the “card return” button in FIG. 14);
Whether the value of the first type B specified on the recording medium is equal to or greater than a first threshold; and
Determination means (for example, step S552 in FIG. 80) for determining whether the second type B value specified by the recording medium is equal to or greater than a second threshold;
When the return operation is accepted by the return operation accepting unit, the B-type first class value is greater than or equal to the first threshold value or the B-second class value is greater than or equal to the second threshold value by the determining unit. If it is determined, a return means for returning the recording medium (for example, a process after the return permission determination process in FIG. 14) is provided.

  According to such a configuration, the recording medium can be returned when the first type B value specified by the recording medium is equal to or greater than the first threshold value or the second type B value is equal to or greater than the second threshold value. As a result, it is possible to prevent the discharge of the recording medium that can specify the first type B value or the second type B value less than the threshold value.

(B-6) In the gaming system (B-1) or the gaming apparatus (B-2),
The gaming device further includes:
Return operation accepting means for accepting the return operation of the recording medium (for example, pressing the “card return” button in FIG. 14);
Determining means for determining whether the sum of the B-type first class value and the B-second class value specified on the recording medium is less than a threshold value (for example, in step S553 of FIG. Although it is determined whether or not it is less than the yen equivalent, it may be determined whether or not the sum of the balls of each rate is less than 500 yen.)
When the return operation is accepted by the return operation accepting unit, if the sum is determined to be less than the threshold value by the determining unit, the return of the recording medium is restricted and determined not to be less In this case, there is a return means for returning the recording medium (for example, step S556 in FIG. 80, step S557, processing after the return permission determination processing in FIG. 14).

  According to such a configuration, when the sum of the first type B value and the second type B value specified by the recording medium is less than the threshold value, the return of the recording medium is restricted. The value can be returned. As a result, it is possible to prevent the discharge of the recording medium that can specify the first type B value or the second type B value less than the threshold value.

(B-7) In any one of the gaming system and gaming device of (B-3) to (B-6) above,
When the return operation is accepted by the return operation accepting unit, the determination unit is added when there is a value that is not added to either the B-type 1 value or the B-type 2 value. A value that is not added to either the first-class B value or the second-class B value (for example, in step S553 of FIG. However, it is also possible to determine whether the sum of the number of balls of each rate and the uncounted game balls is less than 500 yen.)

  According to such a configuration, it is determined whether the first type B value and the second type B value specified by the recording medium are less than the threshold value, taking into account the value that has not yet been specified by the recording medium. Can do. As a result, a more effective determination can be made.

(B-8) In any one of the gaming system and gaming device of (B-1) to (B-7) above,
The first type B value and the second type B value can be converted to each other (for example, step S511 to step S515 in FIG. 78, step S547 in FIG. 79).

  According to such a configuration, when the value of one rate is lost, the value of the other rate can be converted into the value of one rate if the value of the other rate is available. As a result, the convenience for the player can be improved.

(B-9) In the gaming system or gaming device of (B-8) above,
The B type 1 value and the B type 2 value can be converted to each other when it is determined that a game is not being performed (for example, the number of game balls becomes 0 and a predetermined time has elapsed). In other words, the symbol is not changing and the game is not in the specific game state or the special game state (for example, when it is determined in step S514 in FIG. 78 that no game operation is being performed).

  According to such a configuration, when a game is played using the first B type value or the second B second type value, conversion to the other value is disabled. As a result, it is possible to prevent the first type B value and the second type B value from being mixed.

(B-10) In any one of the gaming system and gaming device (B-1) to (B-9) above,
When it is determined that the game is not being performed (for example, the number of game balls has become zero and a predetermined time has elapsed, the symbol is not changing, and the game is not in a specific game state or a special game state. In the case, the setting can be changed (for example, the rate switching setting is performed in step S527 on the condition that it is determined that the game operation is not being performed in step S523 in FIG. 78).

  According to such a configuration, when a game is performed using the first B type value or the second B type value, setting change to the other value is not allowed. As a result, it is possible to prevent the first type B value and the second type B value from being mixed.

(B-11) In any one of the gaming system and gaming device of (B-1) to (B-10) above,
When it is determined that a game is being performed, or when a lottery effect indicating whether or not the game is in a specific gaming state that is advantageous to the player is being performed, It is further provided with an informing means for informing or suggesting which of the two kinds of values is used for the game (for example, step S517 in FIG. 78. The informing may be made on the gaming machine side or the informing device). May be.)

  According to such a configuration, it is possible to let the player know which of the B-type 1 value or the B-type 2 value is used to play the game.

(B-12) In any one of the gaming system and gaming device of (B-1) to (B-11) above,
The gaming device further includes:
Gaming device side transmitting means for transmitting information indicating the setting by the setting means to the gaming machine (for example, step S518 in FIG. 78. Whether the status information request is the first class B value or the second class B value) May be included and transmitted).

  According to such a configuration, it is possible to cause the gaming machine to perform a response in accordance with whether the game is performed by using either the first-B class value or the second-B class value (for example, It is possible to display on the gaming machine which of the second category value is used to play the game).

(B-13) In the gaming system or gaming device of (B-12) above,
The gaming machine is
When the game result is transmitted to the gaming device, the gaming machine side transmitting unit (for example, the counting device shown in FIG. 12) counts the setting indicated by the information indicating the setting received from the gaming device side transmitting unit. When the process is performed, the status information response includes whether it is the first type B value or the second type B value and is transmitted.

  According to such a configuration, the gaming device can determine whether the value used for the game set by the gaming device matches the value used for the game received from the gaming machine. As a result, it is possible to find fraud and abnormalities such that the two do not match.

<Slot machine>
Next, a slot machine will be described as another example of the gaming machine. FIG. 82 is a perspective view showing a state in which the front door of the slot machine is opened. In the description so far, the slot machine is also abbreviated as “S” in the following, because the pachinko machine is abbreviated as “P”.

  The above gaming system using game balls and holding balls is also applied to the S units. However, in the S game, the game is played without using balls, so in the following, the game balls are game points (the number of game balls is the number of game balls, the number of game points is the number of game points), This is called a holding point.

  Referring to FIG. 82, in slot machine 2S, front door 2bS is provided so as to be openable and closable with respect to main body frame 2aS with the left side edge as a swing center. Although not shown in FIG. 82, a CU is connected to the left side of the slot machine 2S in the same manner as the P units.

  In the slot machine 2S, the number of bets is set by using game points, and the game points are added and updated in accordance with winning. For this reason, when playing a game in the slot machine 2S, a medal insertion operation is not necessary. Therefore, the slot machine 2S is not provided with a medal slot and a medal payout slot.

  Inside the casing of the slot machine 2S, reels 2L, 2C, and 2R (hereinafter also referred to as a left reel, a middle reel, and a right reel) in which a plurality of types of symbols are arranged on the outer periphery are juxtaposed in a horizontal direction. Of the symbols arranged on the reels 2L, 2C, and 2R, three consecutive symbols are arranged so that they can be seen from the see-through window provided on the front door 2bS. A plurality of types of symbols are drawn in a predetermined order on the outer peripheral portions of the reels 2L, 2C, and 2R.

  A touch panel display 510 is provided in a portion surrounding each reel 2L, 2C, 2R of the front door 2bS. The display 510 is a display corresponding to the P displays 54, and displays various types of information (game points, points, etc.) of the same type as the display 54, as well as the number of bets set in the game. Is displayed. The display unit 510 is connected to the display control unit 350 of the CU in the same manner as the display unit 54 in FIG. 2 and is controlled on the CU side. The indicator 510 is not provided in a portion surrounding each of the reels 2L, 2C, 2R, but is provided at a lower panel portion (at a position lower than the start switch 7S shown in FIG. You may provide in the panel part provided with the conventional S medal payout opening.

  Further, the front door 2bS has a single BET switch 5S that is operated when setting the number of bets using “game points = 1” corresponding to one medal, and the maximum determined according to the game state. When setting the number of bets (for example, “game point = 3” in the normal game state before BB occurrence and RT (Replay Time) where the winning probability of replay is high, “game point = 2” in the bonus) The MAXBET switch 6S is operated, the start switch 7S is operated when the game is started, and the stop switches 8L, 8C, 8R are respectively operated when the rotation of the reels 2L, 2C, 2R is stopped. Yes.

  When playing a game in the slot machine 2S, first, as with the P machines, after securing a game point using the adjacent CU, the number of bets is set using the game point. The game points can be obtained by withdrawing the remaining amount of the prepaid card inserted into the CU, points, or a stored medal (corresponding to P stored balls) deposited in the game hall. In order to use the game points, the single BET switch 5S or the MAXBET switch 6S may be operated. In the present embodiment, for example, by setting the number of bets to 1, the game points are deducted by 1, and the display of the game points on the display 510 is also subtracted and updated. When the bet number is set, the pay line determined according to the bet number and the gaming state is valid, and the operation of the start switch 7S is valid, that is, the game can be started.

  When the start switch 7S is operated while the game can be started, the reels 2L, 2C, and 2R rotate, and the symbols of the reels 2L, 2C, and 2R continuously change. When any one of the stop switches 8L, 8C, 8R is operated in this state, the rotation of the corresponding reels 2L, 2C, 2R is stopped, and the display result is derived and displayed on the fluoroscopic window.

  Then, when all the reels 2L, 2C, 2R are stopped, one game is completed, and a predetermined symbol combination (hereinafter also referred to as a role) on the activated pay line is displayed on each reel 2L, 2C, When the 2R display result is stopped, a prize is generated, a game point determined according to the prize is given to the player, and the display of the game point on the display 510 is also added and updated.

  In the case of S units, it is possible to count game points as in the case of P units. As shown in FIG. 1, the slot machine 2S is provided with a counting button 28S for counting game points and converting them into points. The ball lending button, the card return button, and the replay button are provided on the CU side (see FIG. 2). The player executes the counting operation based on an arbitrary timing or a display for prompting the counting operation on the display unit 510 in the same manner as the P units. Then, the game points are counted and the display 510 displays a state in which the points are increased while the game points are decreased. The ball lending button may be provided not on the CU side but on the P platform side and the S platform side. In that case, the operation signal of the ball lending button may be directly input to the CU 3 or may be transmitted to the CU 3 as a status information response via the P unit 2 or the S unit (slot machine) 2S. It may be.

  The types of winning combinations are determined according to the state of the game, but can be broadly divided into special roles with a shift to the big bonus (BB) and regular bonus (RB), and small roles with payout of medals. And a re-gamer (replay) that allows the next game to be started without the need to set the bet amount.

  Which of a plurality of types of winning combinations is to be won or whether any winning combination is to be excluded is determined by, for example, the main control unit (S) controlling the slot machine 2S when a start operation is detected. It corresponds to the main control unit 161 of the stand). This determination is made, for example, by drawing a random number generated from a predetermined random number generator or generated on software.

  After that, the main control unit waits for the reel stop operation by the player, draws in the symbol corresponding to the winning combination in the predetermined frame number range based on the stop operation time, otherwise draws another symbol Is controlled to stop the three symbols and determine whether or not there is a prize. If the main control base determines that a winning is made, the main control base gives the player game points according to the type of winning (adds game points).

  In other words, the game can be started by setting a predetermined number of bets for one game using the gaming value by using the S units, and a plurality of types of identification information that can be identified can be displayed in a variable manner A slot machine in which one game is completed when a display result is derived to the variable display device, and a winning can be generated according to the display result derived to the variable display device, which is displayed on the variable display device Before the result is derived, a predetermining unit that determines whether or not to allow a plurality of types of winnings to be generated, and causing the variable display device to derive a display result according to the determination result of the predetermining unit A slot machine including derivation control means for performing control and giving means for giving a game value when the winning occurs is configured.

  FIG. 83 is an explanatory diagram for explaining various data stored in each of the card unit and the slot machine and the transmission / reception mode thereof. FIG. 83 is obtained by replacing the terminology of FIG. 6 described as the configuration of the P units with that for the S units, and the mode is the same as that described with reference to FIG. The description of is omitted.

<Modifications and feature points>
Next, modifications and feature points of the present embodiment described above are listed.

(1) SC-communication control IC disconnection detection function The SC 325b transmits and receives data to and from the communication control IC 325a by SPI (Serial Peripheral Interface) communication. In this case, the SC 325b is the master side and the communication control IC 325a is the slave side. The SC 325b on the master side generates a shift clock to displace the shift register on the master side and the shift register on the slave side, and transmits / receives data. In normal SPI communication, the first byte and the second byte are always reversed when normal, but if a disconnection occurs between them, the SC325b data reception line is unstable (low or low). It will be in a high state. For this reason, in the case of a disconnection state, the relationship in which the first byte and the second byte are reversed does not hold. Using this, the SC 325b determines that the disconnection occurs when the received data does not change within a predetermined time.

  (2) In the present embodiment, the addition sequence number and the counting sequence number are defined in the message format as different data, but these may be shared as a request sequence number. In particular, the addition of game balls and the counting of game balls are the opposite processes, so it is unlikely that both processes will occur at the same time. From this point of view, it is possible to reduce the amount of message data by sharing both serial numbers. It is.

  Further, in the present embodiment, when a new request is generated until the request sequence number reaches a predetermined upper limit value, the sequence number is updated based on the previously updated value. However, instead of such control, when all the processes corresponding to one request are completed, the request sequence number may be initialized to a predetermined initial value. For example, in the example of FIG. 12, it is conceivable that the counting sequence number included in the last status information response indicating completion of counting is set to a predetermined initial value instead of m + 6.

  Request sequence numbers such as addition sequence numbers and count sequence numbers, and normal sequence numbers are not counted up one by one, but are updated (additional update, subtraction) according to a predetermined rule stored in both P unit 2 and CU3. Update, update by other arithmetic expressions). In this case, the serial number is not “sequential numbers” such as 1, 2, and 3, but data that is updated based on concepts such as A, B, and C.

  (3) When a slot machine (S units), which is an example of a gaming machine, is applied to the gaming system, for example, a game in which there are P reels and various sensor parts attached to the reels and a main control board that controls the reels. Corresponding to the board, other configurations correspond to P game frames. However, the S units do not require the various detection switches 41a, 701, 33, the launch control board 31, and the launch motor 18 of the game frame shown in FIG.

  A conventional S unit is provided with a credit function. When this function is enabled, the credit is subtracted when the number of bets is set, and the credit is added when a winning occurs. However, there is an upper limit for credits, and when a winning occurs when the number of credits reaches the upper limit value, medals are paid out from the hopper.

  On the other hand, in the S units according to the present embodiment, game points are subtracted when the bet number is set, and game points are added when a winning occurs. Further, when the game points reach a predetermined number, a display for prompting a counting operation is made, and the gaming points are converted into points by performing the counting operation. For this reason, it is not necessary to pay out medals when the credit reaches the upper limit unlike the conventional S units. As a result, it is not necessary to provide a hopper on the S platform according to the present embodiment.

  As a result, the amusement hall does not need to secure a large number of medals, reducing the economic burden. The game arcade is also freed from operations such as replenishment / collection of medals and maintenance operations to deal with clogged medals. The player is relieved from the hassle of inserting medals for each betting operation after the credit is full, and can easily concentrate on the game.

  On the other hand, if S units become medalless, a player who has won a large number of medals will not be able to act to show off his arms by stacking boxes with medals beside the seat. Inconvenience arises. However, in this embodiment, since the function of displaying the dollar box is provided as described above, it is possible to prevent such inconvenience. In addition, it is desirable for the dollar box display in the case of S units to have a large number of medals loaded instead of a large number of balls.

  When S machines are applied as a gaming machine, each type of data is expressed as follows using two types of data, “Points” and “Game Points”, and “Credit” and “Credit Excess Points”. It is also possible to configure a gaming system that is converted. Note that these four types of data are displayed on the S displays 510 or 29S.

  First, when a conversion operation (lending operation, saving medal payout operation, point payout operation) from the remaining amount of a prepaid card, a saving medal, or a point is detected, each is withdrawn and converted into a game point. The

  A game point is data corresponding to a medal in a conventional slot machine. For this reason, for example, it is desirable to display the number of game points on the display 510 or the display 29S, and to display the number of medal images corresponding to the game points. For example, when a pseudo-insertion medal operation (for example, an operation of pushing a medal) such that a player touches the medal image and inserts it into the slot machine is detected, the medal image disappears and the game points are subtracted. Instead, one bet is set. By performing such a pseudo medal insertion operation three times, the bet number is set to the maximum value of three.

  Thereafter, when a pseudo medal insertion operation is further detected, a credit is added in accordance with the detection. An upper limit value (for example, 50) is set for the credit, and when the credit exceeds the upper limit value, a credit excess point is added.

  The betting amount setting can be performed using the game points as described above, and can also be performed using credits. That is, if the one-sheet BET switch 5S is operated, 1 is added to the betting number setting value and 1 is subtracted from the credit. If the MAXBET switch 6S is operated, the bet number is set to 3, and the credit is subtracted according to the bet number setting.

  As a result of the game, when a winning occurs, a number of points corresponding to the winning is added to the credit. When a winning that exceeds the upper limit of credit occurs, the score for the excess is stored as a credit excess point. This credit excess point corresponds to a medal to be paid out when a winning occurs exceeding the upper limit of credit in the conventional slot machine. For this reason, for example, it is desirable to display the credit excess points on the display 510 or the display 29S and to display the number of medal images corresponding to the credit excess points. Further, it is desirable to change the color of this medal image so that it can be distinguished from the medal image corresponding to the game point.

  Further, it is desirable that the credit excess points be converted into game points by the player's operation. For example, when a pseudo medal conversion operation (for example, an operation of pushing a medal) is performed such that a player touches a medal image corresponding to a credit excess point to convert it to a game point, the medal image disappears and a credit excess Points are subtracted and game points are added.

  Alternatively, if the credit becomes less than the upper limit value, the credit excess point may be automatically converted into credit.

  When the player performs a counting operation, each of the game points, credits, and credit excess points is counted and converted into points. As a result, the player's points are posted as “card possession number + game points + credits + credit excess points”. The “card possession number” is the number of points before conversion (the number of possessions currently owned by the player) that has not been converted into game points.

  In the above description, the four types of data of points, game points, credits, and credit excess points may be stored on both sides by exchanging data between the CU and S units. You may memorize | store only in the S stand side only by CU side. Further, the credit excess point may be a target for dollar box display.

  Moreover, although the example using a credit excess point was demonstrated in the above description, it is not necessary to use a credit excess point. In this case, when the credit limit is exceeded, it may be added to the game points.

  (4) In the present embodiment, game points are added by consuming the card count. Alternatively, game points are added by consuming stored balls (stored medals). That is, the card frequency or the stored ball is converted into game points. On the other hand, the card power and the stored balls are not converted into points (count balls, count medals). However, the card power and the stored ball may be once converted into points.

  (5) In the present embodiment, game points are converted into points by counting operation. The conversion rate in this case is 1: 1. However, the conversion rate in the case of conversion may be other than 1: 1. For example, when 100 game points are converted, 97 points obtained by subtracting three of them may be converted into points. Or you may make it convert into the number of game balls obtained by multiplying a predetermined ratio of less than 100% with respect to a point.

  (6) The recording medium for recording the holding point in an identifiable manner may use a mobile terminal such as a smartphone. In this case, the communication unit for communicating with the mobile terminal is provided in the CU, and the CU recognizes the ID stored in the mobile terminal by holding the mobile terminal over the communication unit. The game is made possible by the procedure as described. On the other hand, at the end of the game, the portable terminal is again held over the communication unit, so that the score at the end of the game is added to the player's score through the ID.

  (7) The operation means for counting game points may be provided on the CU side. In this case, the operation means may be displayed on a touch panel, or may be constituted by a physical switch.

  (8) Referring to FIG. 12, the P platform is provided with a counting ball number counter that temporarily stores the counted counting balls (held balls), but does not include a counter that stores the cumulative value of the counting balls. . However, a counting ball cumulative storage counter that stores the cumulative value of counting balls may be provided on the P platform side. In addition, the CU side is provided with an area for storing card holding balls (counting balls). If a holding ball is recorded on the inserted card itself, this area holds the card holding ball. The current number of players' balls, including balls, is stored. For this reason, only in this area, the number of counting balls counted by the player in the current game cannot be specified. Therefore, an area for storing the number of counting balls counted by the player in this game may be further provided on the CU side. In this case, the CU adds balls to the area based on the information on the number of balls that are sent from the P cars after the game starts, and when the balls are converted into game balls, Subtract the holding ball.

  (9) When counting game balls (game points) and converting points, not only counting display but also counting sound may be output from a speaker. In addition, when counting the game points, it is conceivable to display an image in which balls are dropped one by one from the ball storage tray to the counter.

  (10) The timing for performing conversion display (display indicating that game balls are counted and the number of balls is increased) based on the counting operation and subtracting game points on the data The timing for adding the points can be varied. The calculation may be executed after the conversion display is completed. For this purpose, count data may be transmitted from the gaming machine to the CU after the conversion display is completed. It should be noted that such a modification can be similarly applied to the case where the points are converted into game points.

  (11) In the present embodiment, in the communication between the CU and the gaming machine, a command-response method is adopted in which the CU is a primary station and the gaming machine is a secondary station. The relationship between and may be reversed. Alternatively, instead of adopting such a communication system having a master-slave relationship, a system may be employed in which both send data to the other party when a request to communicate occurs.

  (12) In this embodiment, the game balls (game points) are stored on both the gaming machine side and the CU side, but the game balls (game points) are stored only on the game machine side, and the CU side Then, it may not be stored. On the other hand, the card holding balls (scoring points) are stored only on the CU side, but may also be stored on the gaming machine side. In particular, game balls (game points) are stored only on the gaming machine side, while card holding balls (points) are stored only on the CU side to clarify the division of data storage management. Good.

  (13) When a lending operation or a conversion operation (lending operation) from a holding point (holding ball) to a gaming point (game ball) is detected, the gaming points may be counted up one by one. In order to shorten the waiting time of the player, a display may be made so that a plurality of points (for example, 25 points equivalent to 100 yen) are counted up. Conversely, when a game point counting operation is executed, a display may be made so that the points are counted up by a plurality of points. Furthermore, the number of units for counting up and displaying game points or points may be set from a plurality of types. In the setting, it is conceivable to use a touch panel of P or S display devices.

  (14) At least one or all of the ball lending button, the card return button, the replay button, and the counting button may be provided on the gaming machine side, or may be provided on the CU side. Further, it is conceivable that the button is displayed on the display device on the gaming machine side or the CU side described as the touch panel type display device.

  (15) In the above-described embodiment, the number of game balls and game points are directly added by the occurrence of a win, but instead, the points are added by the occurrence of a win, and the added points are added. It may be controlled to withdraw and add the number of game balls or game points.

  (16) In the above-described embodiment, when the value is deducted within the range of the valuable value owned by the player (the prepaid balance, the possession ball, the accumulated ball) and the corresponding game points are deducted, the value deducted However, instead, for example, it may be controlled to add game points that are smaller by the amount equivalent to the consumption tax with respect to the value actually withdrawn.

  (17) In this embodiment, a key management server is installed in a key management center that is remote from the game arcade. However, the key management server may be installed in the game hall. Thereby, compared with the case where a key management server is installed outside the game hall, it is easier to speed up communication between the CU and the key management server, and the occurrence rate of communication failures can be reduced.

  (18) The CU control unit 323 receives the board security information (including the board authentication key and update information) from the key management server 800 via the hall server 801. However, instead of this, the board security information is transmitted from the key management server 800 to the CU control unit 323 without using the hall server 801 between the key management server 800 and the CU control unit 323. For example, it is conceivable that the key management server 800 and the CU are directly connected to each other, or a relay communication device different from the hall server 801 is provided between the key management server 800 and each CU.

  (19) In the present embodiment, as an example of the game information, the explanation has been given by taking the holding ball, the game ball, the remaining amount of the card, the saving ball, and the number of balls information and the game table information. However, the game information includes other information related to the game on the gaming machine. For example, when a player's favorite character selected or customized by the player can be displayed on variable display means (variable display device) such as the variable display device 278 or the display device 54, information that can specify the character Is also included in the game information. Information on the screen design including the character that matches the player's preference is transmitted to the server at the end of the game in association with the player's card ID and stored, for example, when starting a new game. You may make it download from a server to CU or P stand.

  (20) In the game ball number display 29, a display is made in which the number of balls decreases one by one in conjunction with the ball firing or counting operation. In addition, the game ball number display 29 displays such that the number of balls increases by one or a predetermined number of units according to a ball lending operation or the like. When the game ball number display 29 is constituted by an image display such as a liquid crystal display device, the number of game balls is not simply displayed digitally, but whether the change in the number of game balls is due to a ball or not is counted. Whether it is due to winning, winning a prize, due to savings, or due to a lending operation, an image according to the type is displayed along with the display update of the number of game balls You may make it do.

  (21) Check whether there is a change in the number of holding balls or game balls on the CU or P stand, and if the number of holding balls or game balls does not change for a predetermined period, notify the CU or P stand of that fact You may do it. Alternatively, a notification signal may be output to an external device (a hall computer, a calling lamp on the P platform). This makes it easier for the store clerk to grasp, for example, a table that has been abandoned while the remaining few balls are left unattended.

  The embodiment disclosed this time should be considered as illustrative in all points and not restrictive. The scope of the present invention is defined by the terms of the claims, rather than the description above, and is intended to include any modifications within the scope and meaning equivalent to the terms of the claims.

  2 Pachinko machine, 2S slot machine, 3 card unit, 16 main control board, 17 payout control board, 26 game board, 54, 312 display, 309 card insertion / discharge port, 319 replay button, 320 IR light receiving unit, 321 Lending button, 322 return button, 161 main control unit, 325 display control unit, 171 payout control unit, 323 CU control unit.

Claims (2)

A gaming system including a gaming machine and a gaming device that accepts a recording medium that can specify a value for playing a game on the gaming machine and that enables a game using the value specified on the recording medium. And
The recording medium can specify a first type value that enables games at a high rate and a second type value that enables games at a low rate as values, and the types of the recording media include: A member recording medium corresponding to a member player and a non-member recording medium corresponding to a non-member player,
The gaming device is:
Setting means for setting which game of the high rate and the low rate is allowed;
Adding means for adding the value acquired in the game according to the setting by the setting means to the value included in either the first type value or the second type value;
A return processing means for performing processing for returning the recording medium,
The return processing means
When the non-member recording medium is accepted and the return operation is accepted, if at least one of the first class value and the second class value is equal to or greater than a predetermined monetary value, the non-member Return the recording media,
When the non-member recording medium is accepted and the return operation is accepted, if each of the first class value and the second class value is less than the predetermined monetary value, the non-member record Restrict the return of media,
When the member recording medium is accepted, when the return operation is accepted, the member regardless of the size of each of the first type value and the second type value specified by the member recording medium Allow the return of recording media,
Absent of value that will be managed by the gaming machine, and, when the game machine is not controlled advantageously state, changes from one to the other of said high rate and the low rate by the setting means Is possible,
In the case of any of the cases and the gaming machine if of value that will be managed by the gaming machine is present is controlled advantageously state, from one of the high rate and the low rate by the setting means Changes to the other are prohibited ,
When there is a value managed by the gaming machine when a change operation from one of the high rate and the low rate by the setting means to the other is accepted, the value managed by the gaming machine is A gaming system that performs a promotion notification that prompts an operation to be added by the adding means as a value managed by the gaming device . A gaming device that accepts a recording medium capable of specifying a value for playing a game on a gaming machine and enables a game using the value specified by the recording medium,
The recording medium can specify a first type value that enables games at a high rate and a second type value that enables games at a low rate as values, and the types of the recording media include: A member recording medium corresponding to a member player and a non-member recording medium corresponding to a non-member player,
Setting means for setting which game of the high rate and the low rate is allowed;
Adding means for adding the value acquired in the game according to the setting by the setting means to the value included in either the first type value or the second type value;
A return processing means for performing processing for returning the recording medium,
The return processing means
When the non-member recording medium is accepted and the return operation is accepted, if at least one of the first class value and the second class value is equal to or greater than a predetermined monetary value, the non-member Return the recording media,
When the non-member recording medium is accepted and the return operation is accepted, if each of the first class value and the second class value is less than the predetermined monetary value, the non-member record Restrict the return of media,
When the member recording medium is accepted, when the return operation is accepted, the member regardless of the size of each of the first type value and the second type value specified by the member recording medium Allow the return of recording media,
Absent of value that will be managed by the gaming machine, and, when the game machine is not controlled advantageously state, changes from one to the other of said high rate and the low rate by the setting means Is possible,
In the case of any of the cases and the gaming machine if of value that will be managed by the gaming machine is present is controlled advantageously state, from one of the high rate and the low rate by the setting means Changes to the other are prohibited ,
When there is a value managed by the gaming machine when a change operation from one of the high rate and the low rate by the setting unit to the other is accepted, the value managed by the gaming machine is A gaming apparatus that performs a promotion notification that prompts an operation to be added by the adding means as a value managed by the gaming apparatus.

Images