Secured method for monitoring the transfer of value units in a chip card gambling system

• US 6,851,607 B2
• Filed: 03/21/2003
• Issued: 02/08/2005
• Est. Priority Date: 04/11/1997
• Status: Expired due to Fees

• Current Assignee: Gemalto SA (Thales SA)
• Original Assignee: Gemplus (Thales SA)
• Inventors: Orus, Herve, Foglino, Jean-Jacques
• Primary Examiner(s): TREMBLAY, MARK STEPHEN
• Application Number:
  US10/396,605
• Publication Number:
  US 20040035926A1
• Time in Patent Office: 690 Days
• Field of Search: 235/380, 235/381
• US Class Current: 235/380
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/363 with the personal data of a user
• CPC Class Codes: G06Q 20/4093 Monitoring of device authentication
• CPC Class Codes: G07F 17/32 for games, toys, sports, or amusements
• CPC Class Codes: G07F 17/3251 involving media of variable value, e.g. programmable cards, programmable tokens
• CPC Class Codes: G07F 7/0866 by active credit-cards adapted therefor G07F7/1008 takes precedence
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system

Abstract

A secure system and method for the transfer of value units between a plurality of gambling cards (CJ) and a plurality of gambling machines (200, 300). Each machine has a transcriber (210, 310) to debit value units of the gambling cards. The machines are connected via a secure network (123) to a central processing unit (1). Each gambling card (CJ1) stores data (S, Op1, Op2, Opx, Id, S) unique to the card and the use of that card in gambling. The central processing unit (1, BD) stores the same data as what is in the cards. The cards'"'"' and the CPU'"'"'s data are maintained in parallel as the gambling progresses, and may include data from previous sessions. A monitor (BD) checks that the CPU (1, BD) data and the card (CJ1) data correspond. Thus the integrity of this smart card gambling is enhanced.

Claims

1. A method for monitoring transfers of value units between a plurality of gambling cards (CJ, CJ1, CJ2, CJn) and a plurality of gambling machines (200, 200′

, 200″

, 200′

″

, 300, 300′

, 300″

), each machine being connected to a transcriber (210) of data onto a gambling card (CJ2), the machines being connected in a secured network with a central processing unit (1) by link means (123), the method having the following steps, during a gambling operation;

reading data stored in a gambling card, particularly an identification number (Id) of the card (CJ1) and data (S, Op1, Op2, Opx) representing the value units debited and credited initially and during the preceding gambling operations, the method being characterized by the following steps;

electronically securing and exchanging data between the machine (200) and a database (BD) of the central processing unit (1) by means (123) linking the secured network, particularly data representing the balance (S) of the value units and the identification number (Id) of the card; and

updating data in parallel in both the card and the database of the central processing unit at least twice during each use of the card in a gambling playing session and then checking that the data stored in the gambling card (CJ1) correspond to the data in the database (BD) in order to monitor the integrity of a system constituted by such a card, such a machine, the network, and the central processing unit.

2. Method according to any one of the foregoing claims characterized in that the network also has security means (MS0), the method having the following additional step:

having the security means (MS0) of the network calculate an authentication certificate (C1) from the secret data (Kt, Kt′

) stored in the chip card memory.

3. Method according to claim 2 characterized by the following additional step:

reading an authentication certificate (C) calculated by gambling card (CJ1) from the secret data (Kt, Kt1) in the card memory.

4. Method according to claim 3 characterized by the checking step of:

checking that the authentication certificate (C) calculated by gambling card (CJ1) corresponds to the authentication certificate (C′

) calculated by the security means (MS0) of the network.

5. Method according to any one of the foregoing claims characterized in that the network also has distributed security means (MS0, MS1), the method having the following additional steps:

having the first security means (MS0) of the network calculate a first authentication certificate (C′

) from the secret data (Kt, Kt′

) in the memory of the first security means (MS0), and

having the second security means (MS1) of the network calculate a second authentication certificate from the secret data (Kt, Kt′

) in the memory of the second security means (MS0), and

checking that the first authentication certificate (C′

) calculated by the first security means (MS0) of the network corresponds to the second authentication certificate calculated by the first security means (MS0) of the network corresponds to the second authentication certificate calculated by the second security means (MS1) of the network.

6. Method according to any one of claims 2 to 5 characterized in that the data (Id, S) exchanged between machine (200) and database (BD) of central processing unit (1) are accompanied by an authentication certificate (C, C′

).

10. The method of claim 1, wherein the data in the card and in the database are updated for every change of value of the card, whereby each win and loss of a player is stored in parallel in both the card and the database.

15. The method of claim 1 or 11, wherein said data representing gambling operations are stored sequentially in parallel in the gambling card memory and in the database with successive balances of value units debited/credited with the card.

7. Secured system for monitoring transfers of value units between a plurality of gambling cards (CJ) and a plurality of gambling machines (200, 300), each machine being provided with a transcriber (210, 310) able to debit value units of a gambling card (CJ), the machines being connected in a secured network with a central processing unit (1) by link means (123), whereby a gambling card (CJ1) stores data (S, Op1, Op2, Opx) representing gambling operations conducted, particularly data identifying the card (Id) and data representing the balance (S) of the value units debited and/or credited during previous gambling operations, characterized in that the central processing unit (1) has a database (BD) that in parallel stores the data (S1, Op101, Op102, Op10x) representing gambling operations carried out, particularly card identification data (Id1, Id2, Idn) and data representing the balances (S1, S2, Sn) of the value units debited and/or credited during previous gambling operations and in that the monitoring means (BD) check that, for an identified card, the database (BD) data and the card (CJ1) data correspond, particularly that the data (S, S1) representing the value unit balance correspond, in order to verify the integrity of the system.

8. Secured system according to claim 7, characterized in that the gambling card (CJ1) calculates an authentication certificate (C) from the secret data (Kt, Kt′

) stored in the memory of card (CJ1).

9. Secured system according to claim 7 or claim 8, characterized in that in that it additionally comprises a security module (MS0, MS1), whereby the security module calculates an authentication certificate (C′

) from the secret data (Kt, Kt′

) stored in the memory of the module (MS0) and in that the monitoring means (MS0) check that the authentication certificate (C′

) calculated by the security module corresponds to the authentication certificate (C′

) calculated by the gambling card or by another security module (MS1).

11. A method for monitoring transfers of value units between a plurality of gambling cards and a plurality of gambling machines, each machine being connected to a transcriber of data onto a gambling card, the machines being connected in a secured network with a central processing unit comprising the steps of, during a gambling operation:

(a)—

reading data stored in a gambling card, particularly an identification number of the card and data representing the value units debited and credited during the preceding gambling operations,

(b)—

electronically securing and exchanging data between the machine and a database of the central processing unit by the secure network, particularly data representing the balance of the value units and the identification number of the card,

(c)—

checking that the data stored in the gambling card corresponds to the data in the database in order to monitor the integrity of a system constituted by such a card, such a machine, the network, and the central processing unit; and

(d)—

wherein said exchange and checking steps are performed for each change of value of the card.

12. The method according to claim 11, comprising storing secret data in each card, and also storing secret data for each card in said database, calculating an authentication certificate (C1) from the secret data, paid authentication artifacts accompanying said data exchanges and said checking step comprises checking that the authentication certificates caluclated by the card corresponds to the authentication certificate calculated from the database.

13. A system for players to gamble over the internet from computers which are connected to the internet and which are not owned by the system operator, and which computers are connected to transcribers for smart cards comprising:

smart cards each with a security module, memory and processor, said card being pre-loaded with gambling value units, and security module features,

a main computer with a security module, memory and a connection to connect to the internet, said memory storing in parallel with said cards the value units entered into each card, and the security features to identify each card,

said cards including means for storing in the cards each change of value units while a player gambles on the computer, and said security module having means for electronically securely arranging with an authentication card said change of value units, and then transmitting same to the internet connection and thus to the computer,

said computer module authenticating each of said transmitted change of value units, and then storing said change of value of the cards in parallel with the same data in the cards, and including means for verifying said change of value units of said cards before enabling a next play that would involve a further change of value by the gambler.

14. A method for players to gamble over the internet from computers which are connectable to the internet and which are not owned by the system operator, and which computers are connected to transcribers for smart cards comprising the shape of:

issuing to players smart cards with a security module, memory and processor, and being pre-loaded with gambling value units, and security module features,

establishing a main computer with a security module, memory and a connection to connect to the internet, storing in said memory the value units entered into each card and the security features to identify each card,

storing in the cards each change of value units while a player gambles on the computer, and authentication in said security module for each of said change of value units and then transmitting each of said authenticated change of value units to the internet connection and thus to the computer,

receiving said transmission, authenticating the validity thereof, and if validated, then storing said change of value in said computer, in parallel with the same data in the cards, and enabling a next play by the gambler only after said parallel stored data is entered and verified.