SECURE DISTRIBUTED GAMBLING

A secure distributed gambling system and method is described. The system includes a plurality of mobile computing devices and a plurality of secure gambling microprocessors. Each of the plurality of secure gambling microprocessors is coupled with a different one of the plurality of mobile computing devices to provide a plurality of secure stand-alone gambling platforms. A gambling management system is communicatively coupled with one or more of the plurality of secure stand-alone gambling platforms to maintain gambling integrity.

BACKGROUND

Casino gaming, wagering, gambling and lottery operations are constantly changing and growing in markets around the world. Gambling operations are often carefully implemented and strictly regulated to ensure fairness of operations and to avoid fraud.

However, casino gaming and particularly lottery operations have gradually developed a static (aging) consumer base that is often sited as exploiting problem gamblers with various legislatures debating restrictions or probations being placed on casinos and lotteries. For example, “Stop Predatory Gambling”, which advocates an end to state-sponsored gambling recently stated: “State lotteries have a business model that's based on getting up to 70% to 80% of their revenue from 10% of the people that use the lottery . . . ” In Minnesota, a pending bipartisan bill would require 25% of lottery billboards to be dedicated to a warning about the odds of winning, cautions about addiction, and information on where problem gamblers can seek help.

In an attempt to diversify their base and increase sales, casinos and lotteries have come to appreciate the virtues of producing games with more entertainment value that can be sold at a premium price. For instance, ten-dollar instant lottery ticket games with higher paybacks and more ways to win now account for over $5 billion a year in United States lottery sales. But, these higher priced and high-volume games also typically add little unique entertainment value relative to lower priced instant tickets and consequently do not to attract many new consumers.

Thus, it is highly desirable to develop gaming systems methodologies that provide methods of playing new gaming opportunities, particularly more customized and interactive games. Ideally these gaming methodologies should allow for flexibility and creativity for game designers to tailor games to a wide variety of small targeted segments previously not served by existing gaming offerings, thereby appealing to a broader base of consumers.

Furthermore, it is also highly desirable to provide a gaming system that allows for secure, offline, gameplay so as to not require players to have or maintain a connection to the Internet in order to participate in gaming. Digital, interactive gaming solutions to date that are designed for personal devices such as phones, laptops and the like, require a constant connection to the Internet because all of the gaming routines reside in online servers. Gaming system providers to date have assumed that the only way to secure gaming systems in conjunction with personal computing devices is to implement all gaming software in server-based systems that include extensive physical and logical security protections.

DESCRIPTION OF EMBODIMENTS

Reference will now be made in detail to embodiments of the subject matter, examples of which are illustrated in the accompanying drawings. While the subject matter discussed herein will be described in conjunction with various embodiments, it will be understood that they are not intended to limit the subject matter to these embodiments. On the contrary, the presented embodiments are intended to cover alternatives, modifications and equivalents, which may be included within the spirit and scope of the various embodiments as defined by the appended claims. Furthermore, in the Description of Embodiments, numerous specific details are set forth in order to provide a thorough understanding of embodiments of the present subject matter. However, embodiments may be practiced without these specific details. In other instances, well known methods, procedures, components, and circuits have not been described in detail as not to unnecessarily obscure aspects of the described embodiments.

NOTATION AND NOMENCLATURE

Unless specifically stated otherwise as apparent from the following discussions, it is appreciated that throughout the present Description of Embodiments, discussions utilizing terms such as “selecting”, “outputting”, “inputting”, “providing”, “receiving”, “utilizing”, “obtaining”, “coupling”, “accessing”, “changing”, “correlating” or the like, often refer to the actions and processes of an electronic computing device/system, such as a desktop computer, notebook computer, tablet, mobile phone, and electronic personal display, among others. The electronic computing device/system manipulates and transforms data represented as physical (electronic) quantities within the circuits, electronic registers, memories, logic, and/or components and the like of the electronic computing device/system into other data similarly represented as physical quantities within the electronic computing device/system or other electronic computing devices/systems.

Overview

A distributed gaming system based on tamper resistant secure packages where remote network management of the secure package is provided to support changing gaming routines, purse management and reporting on gaming operations particular to this type of technology implementation is described.

For example, a system for gambling operations that include a central gambling management system and one or more consumer electronic devices that can serve as gambling devices for offline gaming. The consumer electronic devices are converted to gambling devices by including a tamper-resistant microprocessor having firmware with gambling code and a purse stored thereon, the tamper-resistant microprocessor running secure gaming software to govern all offline gaming-related routines and communications with the central gambling management system. Examples of computing devices include, but are not limited to, mobile phones, tablet computers, personal computers, home entertainment systems, etc. In the following discussion gambling refers to activities such as, but not limited to, Casino gaming, wagering, lottery operations and the like.

The system includes means for deploying the secure gambling microprocessor in a variety of form factors for use with the consumer electronic devices. Example secure gambling microprocessor form factors include, but are not limited to, smart cards, microSD cards, SIM cards, accessories connected via an input/output (I/O) port, and embedded microprocessors included within the devices. The system also includes means for activating a secure microprocessor, means for loading gaming routines to a secure microprocessor, means for modifying gaming routines in a secure microprocessor, means for securely linking a microprocessor to a specific consumer electronic device, means for establishing a user account in a secure microprocessor, means for loading value to a secure microprocessor, means for unloading value from a secure microprocessor, means for logging gaming results in a secure microprocessor, means for transferring gaming results from a secure microprocessor to the central gambling management system, and means for deactivating a secure microprocessor.

One embodiment involves a centrally managed gambling management system and one or more secure gaming engines deployed in a variety of form factors, and a typical consumer computing device that includes a graphic user interface (GUI) and specialized application software designed to interact with the secure gambling microprocessor and the gambling management system200(FIG. 2). The combination of secure gambling microprocessor and mobile device enables offline gaming as previously described. In one embodiment, the computing device may be a mobile device such as a laptop, tablet or phone; in another embodiment, the computing device may be a less mobile device such as desktop, tower, or the like. In one embodiment, the secure gambling microprocessor is embedded in a closed loop prepaid gift card issued by a state lottery or casino. In another embodiment, the secure gambling microprocessor is embedded in a hotel keycard that hotel guests use to gain access to their room and may also use the card for loyalty or real money gaming during a stay or after they leave a hotel property. In a preferred embodiment, the secure gambling microprocessor is embedded in a casino players' club card where prepaid funds are loaded onto the card for use with existing casino gaming systems such as slot machines and such funds can also be used to wager on games contained within the gambling microprocessor. In a preferred embodiment, the secure gambling microprocessor is embedded in an open loop prepaid debit or General Purpose Reloadable (GPR) card issued by a state lottery or casino and also branded by a payment association (e.g., Visa, MasterCard, Discover, American Express). The open loop embedded embodiment being preferred because both wagers and winnings may be paid for or loaded onto the associated card account.

With reference now toFIG. 1, a block diagram of an embodiment of a secure gambling microprocessor100is shown. One embodiment of secure gambling microprocessor100includes Power101, a Central Processing Unit (CPU)102, a Random Number Generator (RNG)103, a connection for an external Clock104, a Cryptographic Coprocessor (CPT)105, an I/O port106, Random Access Memory (RAM)107, Electrically Erasable Programmable Read Only Memory (EEPROM)108, and Read Only Memory (ROM)109. The software for gaming operations can be stored and run from ROM109or EEPROM108and would rely on the support of the RNG103and CPT105for many of the operations.

In general, secure gambling microprocessor100is a dedicated computer on a chip or microprocessor for carrying out cryptographic operations, embedded in a packaging with multiple physical security measures, which give it a degree of tamper resistance. Although a number of secure microprocessors may be used herewith. In one embodiment, SmartMX designed by NXP is a microprocessor having data encryption capabilities.

I/O port106is a communications interface for secure gambling microprocessor100such as a contact interface according to ISO/IEC 7816, contactless interface according to ISO/IEC 14443A, serial input and output (half-duplex), USB, HDMI or other interfaces.

In one embodiment RNG103uses a cryptographic hash function to approach a uniform distribution of bits from a non-uniformly random source. In another embodiment, RNG103is a pseudo-RNG (PRNG) such as a Linear Congruential Generator (LCG) or Mersenner Twister. /dev/random is one example of a file that serves as a pseudorandom number generator.

In general, CPT105is implemented on a high-security, tamper resistant, programmable PCI board. Specialized cryptographic electronics, microprocessor, memory, and random number generator housed within a tamper-responding secure gambling microprocessor100provide a highly secure subsystem in which data processing and cryptography can be performed. In one embodiment, CPT105is a high-speed 3-DES coprocessor (64-bit parallel), a high-speed AES coprocessor (128-bit parallel), a PKI (RSA, ECC) coprocessor FameXE (32-bit parallel) such as found on a SmartMX by NXP. However, it should be appreciated that although the SmartMX is disclosed herein, the technology is well suited to using other comparable technologies.

In general, CPU102is hardware within a computer that carries out the instructions of a computer program by performing the basic arithmetical, logical, and input/output operations of the system. Two components of CPU102are the arithmetic logic unit for performing arithmetic and logical operations, and the control unit for extracting instructions from memory and decoding and executing them, calling on the arithmetic logic unit when necessary. CPU102may be multiprocessor, multi-core processors, and the like.

In one embodiment, the communication protocol to the microprocessor may be either ISO-7816 contact, ISO-14443 contactless, or both. Although a number of components are shown, it should be appreciated that secure gambling microprocessor100may include more or fewer components. Moreover, in an embodiment, the components described in secure gambling microprocessor100may be substituted for other components that provide similar operational capabilities. That is, there are many other options for implementations of the secure gambling microprocessor100that could involve other types of processors (micro or otherwise), modules, computing platforms or the like.

Gambling Management System200

With reference now toFIG. 2, an embodiment of a gambling management system200is shown as part of a network accessible system that includes a human readable management interface such as a Web Browser (not shown inFIG. 2) used to set up and control gaming operations taking place in the secure gambling microprocessor100and associated mobile devices201-204.

In one embodiment,FIG. 2also includes a plurality of mobile computing devices201-204, and a plurality of secure gambling microprocessors100a-100d. In one embodiment, each of the plurality of secure gambling microprocessors100a-100dare coupled with a different one of the plurality of mobile devices201-204to provide a plurality of secure stand-alone gambling platforms. As described in detail herein, gambling management system200is communicatively coupled with one or more of the plurality of secure stand-alone gambling platforms to maintain gambling integrity.

In one embodiment, gambling management system200includes a gambling routine provider module215that contains a number of gambling games such as poker, blackjack, and the like for a number of different user platforms. Gambling management system200also includes a purse management module220used to manage a purse or monetary amount, and a gambling operation reporter module225that is used to review gaming activity for fairness of operation and to avoid fraud. In one embodiment, gambling management system200also includes standard network data communications210interfaces (e.g., TCP/IP) to support communications with secure gambling microprocessor100and mobile devices201-204.

In an alternative embodiment, gambling routine provider module215dispenses predetermined arrays of plays where the outcome (i.e., winning or losing status) of each game was determined in advance by a separate secure process. This embodiment has the advantage of utilizing external, possibly third party, gaming systems that have potentially already been approved by applicable regulator and government agencies, thereby reducing the requirements of detailed regulatory approval for network accessible system200and consequently expediting real world deployment. In a preferred embodiment, the dispensed predetermined array is compatible with lottery instant ticket shuffles and validation systems.

In one embodiment, gambling management system200will also include a dedicated security component such as a Hardware Security Module211(HSM) that is responsible for cryptographic key storage and operations in support of secure communication between the gambling management system200and the secure gambling microprocessor100and to secure the various management operations that are initiated within the gambling management system200and carried out in the secure gambling microprocessor100. In one embodiment, the secure channel communication between the secure gambling microprocessor100and the gaming management system may be over a wired or wireless network. In another embodiment, the secure channel communication may be over a mobile network, or the like.

In one embodiment set up of secure gambling microprocessor100by the gambling management system200involves in part, the identification of which secure gambling microprocessor100will be used in the gaming operation, determining which games will be playable on secure gambling microprocessor100, which game options will be supported on each, which mobile devices will be used in conjunction with each secure gambling microprocessor100, and then activating the secure gambling microprocessor100by securely transmitting all associated gambling management data thereto.

In an embodiment, the secure gambling microprocessor100includes software operating in a tamper-resistant microprocessor. The microprocessors are capable of running multiple, secure, software applications. For example, in one embodiment the secure gambling microprocessor100software is responsible for all offline gaming routines including possible storage of predetermined winning and losing status on a game by game basis as well as secure communication with the gambling management system200.

The security and integrity of the software operations in the microprocessor is maintained through cryptographic operations that take place within the tamper-resistant microprocessor. The security model for this invention relies on “end-to-end” security between the gambling management system200and secure gambling microprocessor100where the authenticity and integrity of all communication can be verified by either “end” (gambling management system200or secure gambling microprocessor100). The data channel can also be encrypted end-to-end if required. This protection helps mitigate potential fraud involving the transmission of gambling management data to a secure gambling microprocessor100that was not created by the gambling management system200and similarly protects against fraud involving the transmission of gaming data from a secure gambling microprocessor100to the gambling management system200that did not originate from a secure gambling microprocessor100. One embodiment, implements end-to-end communication security via cryptographic operations such as HSM211, which provides a secure channel.

In one embodiment, non-secure functions related to the user interface are implemented outside of the secure gambling microprocessor100. In this embodiment, mobile applications such as those that are designed for the Android or iOS operating systems201through204are used to create the user interface for gaming. The mobile applications then interact with the secure gambling microprocessor100via application programming interfaces. These application programming interfaces are also used for any communication between the mobile application and secure gambling microprocessor100as required to support communication of management data between the gambling management system200and secure gambling microprocessor100as described below.

With reference still toFIG. 2, a number of implementations between secure gambling microprocessor100and mobile devices are shown. For example, mobile device201illustrates an implementation in which secure gambling microprocessor100ainteracts with mobile device201via an ISO-14443 contactless interface and antenna. Mobile device202illustrates another implementation in which secure gambling microprocessor100bis a component in a microSD package. Mobile device203provides yet another example implementation in which secure gambling microprocessor100cutilizes an I/O port of the mobile device203. For example, the I/O port may be an audio jack, USB (Universal Serial Bus) port, HDMI (High-Definition Multimedia Interface) port, or the like which acts as the communications interface between mobile device203and secure gambling microprocessor100c. Mobile device204illustrates yet another embodiment wherein the secure gambling microprocessor100dis an embedded microprocessor such as a SIM (Subscriber Identity Module) card or chip integrated as a part of the mobile device204circuitry.

Contactless Communication Secure Gambling Microprocessor

In one embodiment, secure gambling microprocessor100ain combination with mobile device201illustrates an implementation where the secure gambling microprocessor100acommunicates via contactless with mobile device201. For example, in one embodiment secure gambling microprocessor100aincludes an integrated ISO-14443 contactless communications interface and antenna, or the like. As such, secure gambling microprocessor100ais capable of communication with a mobile device201or other device that supports ISO-14443, Near Field Communication (NFC) protocols, Bluetooth, or the like.

In operation, mobile device201is used to transmit gambling management data from the gambling management system200to secure gambling microprocessor100aby first transmitting the data to a mobile application on the mobile device201via the mobile device's Cellular or Wi-Fi radio communications interface. The mobile device201then uses its NFC communications interface to transmit the data to secure gambling microprocessor100a.

In general, the user interface for gaming is implemented as a mobile application. In this particular example, the mobile device could be a mobile phone, tablet computer, laptop computer, notebook computer, personal digital assistant, or the like. For example, mobile device201may be running an operating system that includes support for NFC. In one embodiment, gaming takes place by executing the mobile application and ensuring that the secure gambling microprocessor100ais in proximity to mobile device201to support communication between mobile device201and secure gambling microprocessor100avia the NFC to ISO-14443 interfaces. In a preferred embodiment, the secure gambling microprocessor100ais embedded in a plastic card (e.g., debit card or GPR card), proximity communicating with mobile device201via NFC.

Insertable Secure Gambling Microprocessor

In one embodiment, secure gambling microprocessor100bin combination with mobile device202illustrates an implementation where the secure gambling microprocessor100bis a tamper-resistant microprocessor in an insertable package such as, a microSD package. In one embodiment, secure gambling microprocessor100bis inserted into the mobile device's microSD slot. Once in the slot, the I/O interface of the secure gambling microprocessor100uses the contact interface of the microSD card to communicate with the mobile device.

In operation, mobile device202is used to transmit gambling management data from the gambling management system200to secure gambling microprocessor100bby first transmitting the data to a mobile application on mobile device202via the mobile device's cellular or Wi-Fi radio communications interface. Mobile device202then uses its microSD interface to transmit the data to secure gambling microprocessor100b.

In one embodiment, the user interface for gaming is implemented as a mobile application. In this example, mobile device202could be a tablet computer, mobile phone or the like running an operating system that includes support for a microSD card. Gaming takes place by executing the mobile application on mobile device202that then interacts with secure gambling microprocessor100bvia the microSD communications interface.

I/O Port Secure Gambling Microprocessor

In one embodiment, secure gambling microprocessor100cin combination with mobile device203illustrates an implementation that involves the packaging of a tamper-resistant secure gambling microprocessor100cin an accessory device that can then be inserted into a mobile device203I/O port. This accessory device includes circuitry that enables communication between secure gambling microprocessor100cI/O port and mobile device203, using the I/O interface. As described herein, the I/O port may be an audio jack, an HDMI jack, a USB jack or other communications port.

In operation, mobile device203is used to transmit gambling management data from the gambling management system200to secure gambling microprocessor100cby first transmitting the data to a mobile application on mobile device203via the mobile device's cellular or Wi-Fi radio communications interface. The mobile device then uses the mobile device's I/O port interface to transmit the data to secure gambling microprocessor100c.

In one embodiment, the user interface for gaming is implemented as a mobile application. In this particular example, mobile device203could be a tablet computer, mobile phone or the like, running an operating system that includes support for an I/O port accessory. Gaming takes place by executing the mobile application on mobile device203that then interacts with secure gambling microprocessor100cvia the I/O port.

Fixedly Integrated Secure Gambling Microprocessor

In one embodiment, secure gambling microprocessor100din combination with mobile device204illustrates yet another implementation that involves more permanent integration of secure gambling microprocessor100din mobile device204in comparison with the previous examples. Examples of this implementation include use of the tamper-resistant Subscriber Identity Module (SIM) of a mobile device to host the secure gambling microprocessor100software. Another variation of this implementation could involve hosting of the secure gambling microprocessor100software in a tamper-resistant microprocessor that is included as a part of the main circuitry of mobile device204.

In operation, mobile device204is used to transmit gambling management data from the gambling management system200to secure gambling microprocessor100dby first transmitting the data to a mobile application on mobile device204via the mobile device's cellular or Wi-Fi radio communications interface. The mobile application then uses application programming interfaces to transmit the data to secure gambling microprocessor100d.

In one embodiment, the user interface for gaming is implemented as a mobile application. In this example, mobile device204could be a tablet computer, mobile phone, laptop, or the like running an operating system where the device includes a tamper-resistant microprocessor in the form of a SIM or other embedded component. Gaming takes place by executing the mobile application on mobile device204that then interacting with secure gambling microprocessor100dvia application programming interfaces to secure gambling microprocessor100d.

Although a number of iterations of secure gambling microprocessors are described. It should be noted that secure gambling microprocessor100could be built as a standalone system in many form factors such as paper-type advertisements for a magazine, newspaper, poster, etc. Secure gambling microprocessor100could also be contained within items such as a key fob, plastic card (e.g., debit or credit), etc. In another embodiment, secure gambling microprocessor100could also be electronically integrated within larger systems such as a digital billboard system, home entertainment system, home appliance, automobile, kiosk, etc. For examples, secure gambling microprocessor100may be implemented in a fashion similar to secure gambling microprocessor100dwhere secure gambling microprocessor100is integrated within a larger system that is typically responsible for data communications and can support the data communication needs of secure gambling microprocessor100to the gambling management system200and can also provide a user interface for gaming applications.

Mobile Device

In one embodiment, the mobile device201-204utilizes mobile operating systems such as, but not limited to, Android, iOS, Windows Phone, RIM Blackberry OS, and the like. It should also be noted that the present invention is platform and device independent. Data communication between the mobile device and gambling management system200is accomplished via the integrated cellular and/or Wi-Fi radios of the mobile device.

However, communication between mobile device and secure gambling microprocessor100depends upon the type of secure gambling microprocessor package. For example, secure gambling microprocessor100awill utilize an NFC capability in the mobile device, while communication between a mobile device and secure gambling microprocessor100b-100dwould take place via an application-programming interface of the secure gambling microprocessor and application software running within the mobile device. Although NFC, Wi-Fi, and Cellular radio communication are all cited as examples, any other communications interface capable of transmitting the desired data between the subsystems may be utilized.

Gaming Setup and Management

Reference will now be made toFIG. 3, a flowchart300of a method of setting-up secure gambling microprocessor100in accordance with an embodiment.

With reference now to310ofFIG. 3andFIG. 2, one embodiment utilizes a unique identifier to identify the secure gambling microprocessor100. For example, each secure gambling microprocessor100will be identified by a unique identifier such as a serial number or the like that allows the gambling management system200to correctly and securely communicate with each secure gambling microprocessor100. In one embodiment, the unique identifier is automatically determined by secure gambling microprocessor100or gambling management system200. In another embodiment a Casino operator interacts with the management interface of the gambling management system200to provide the unique identifier of secure gambling microprocessor100.

Referring now to320ofFIG. 3andFIG. 2, one embodiment determines at least one game supported by the operating system of the mobile computing device. In one embodiment, the determination is performed by the gambling management system200. In another embodiment, the determination is performed by a user such as the Casino or Lottery operator.

With reference now to330ofFIG. 3andFIG. 2, one embodiment establishes a communication channel between secure gambling microprocessor100and the gambling management system200via the computing device. For example, the gambling management system200uses secure gambling microprocessor100identifiers and internal systems such as the hardware security module211to set up Secure Channel communication between the gambling management system200and secure gambling microprocessor100.

With reference now to340ofFIG. 3andFIG. 2, one embodiment transmits the at least one game to secure gambling microprocessor100via the secure communication channel. For example, the gambling management system200transmits all required software and settings to each secure gambling microprocessor100and sets the state of those secure gambling microprocessor100to active.

In general, there is a wide range of variations on how much or how little software and data is transmitted to the secure gambling microprocessor100. For example, in one embodiment, all gaming software could be loaded to the secure gambling microprocessor100during the data transmission. Alternatively, no gaming software is transmitted as it has been previously loaded via some other process such as during the production and distribution of the tamper-resistant microprocessors hosting the secure gambling microprocessor100software. In either of these two examples, predetermined arrays of plays where the outcome (i.e., winning or losing status) of each game was determined in advance by a separate secure process could also be loaded into the secure gambling microprocessor100. This embodiment has the advantage of utilizing external, possibly third party, gaming systems that have potentially already been approved by applicable regulator and government agencies, thereby reducing the requirements of detailed regulatory approval and consequently expediting real world deployment. In a preferred embodiment, the dispensed predetermined array is compatible with lottery instant ticket shuffles and validation systems.

Customer Account Setup

Reference will now be made toFIG. 4, a flowchart400of a method of establishing a customer account for the system inFIG. 2. In general, flowchart400may be utilized in a stand-alone format or may be used after the flowchart300described inFIG. 3.

Referring now to410ofFIG. 4andFIG. 2, one embodiment creates a customer account based on the unique identifier of secure gambling microprocessor100. In one embodiment, the customer account is automatically created by gambling management system200. In another embodiment, a Casino operator interacts with the management interface of the gambling management system200to create the customer account.

With reference now to420ofFIG. 4andFIG. 2, one embodiment establishes at least one customer gaming preference. For example, the customer gaming preference includes specifying what games (e.g., poker, blackjack, slots) and game preferences (e.g., payout table for poker, game theme) the Customer chooses, and the like. In a preferred embodiment, the gaming preference such as a theme can vary by unique batches of secure microprocessors to support marketing arrangements. For example, a state lottery may allow individual retailers to include some unique branding in the user interface application of the game as implemented in a mobile application such as an Android application. In such an embodiment, a single Android application user interface could dynamically change branding themes based on preferences set in individual gambling microprocessors during the process described in420. To illustrate this example, a state lottery may issue secure gambling microprocessors to two different retailers (retailer A and retailer B) for sale within the state. Secure gambling microprocessors for retailer A include a branded theme preference specific to retailer A. Likewise, secure gambling microprocessors for retailer B include a branded theme preference specific to retailer B. The state offers a single Android application to provide a Graphical User Interface (GUI) for interacting with the secure gambling microprocessors. When players use the Android application with secure gambling microprocessors sold by retailer A, the Android application reads the game theme preference from the secure gambling microprocessors and displays in the GUI some branding specific to retailer A. Similarly, when players use the same Android application with secure gambling microprocessors sold by retailer B, the Android application reads the game theme preference from the secure gambling microprocessors and displays in the GUI some branding specific to retailer B.

With reference now to430ofFIG. 4andFIG. 2, one embodiment determines a value of the purse. That is, how much value the Customer wishes to load to secure gambling microprocessor100for gambling, and which secure gambling microprocessor100will be used by the Customer.

With reference now to440ofFIG. 4andFIG. 2, one embodiment transmits the customer account, the at least one customer gaming preference, and the value of the purse to secure gambling microprocessor100via the secure communication channel HSM111.

In one embodiment, in order to transmit the information, a secure channel is established. In one embodiment the secure channel includes secure communications between secure gambling microprocessor100and mobile device201with which it will be used. An example of this linking process would be to use some unique identifier from the mobile device201, such as a Message Authentication Code (MAC) Address or the like, to ensure that the secure gambling microprocessor100is only used in conjunction with that specific mobile device.

Once the secure communications is established between secure gambling microprocessor100and mobile device102, gambling management system200uses secure gambling microprocessor100identifiers and internal systems such as the hardware security module211to set up secure channel communication between the gambling management system200and secure gambling microprocessor100. In one embodiment, the secure channel is automatically established by gambling management system200. In another embodiment a Casino or Lottery operator interacts with the management interface of the gambling management system200to establish the secure channel.

Once the secure channel is established, gambling management system200transmits all required account data, game settings, link information for the mobile device, optionally arrays of plays with predetermined outcomes, and value to secure gambling microprocessor100. At this point the secure gambling microprocessor100can be used with its associated mobile device and mobile application for gaming in a distributed manner. That is, secure gambling microprocessor100will allow a user to gamble on the associated mobile device until the purse is empty without requiring the user to access gambling management system200. In one embodiment, secure gambling microprocessor100does not need to contact gambling management system200again until the purse needs to be reloaded, a different game is selected by the user, or the user wishes to cash out.

Example Operation

The following is an example of an operation distributed gaming system based on tamper resistant secure packages where remote network management of the secure package is provided to support changing gaming routines, purse management and reporting on gaming operations particular to this type of technology implementation.

In other words, a person can receive a secure gambling microprocessor100with a gambling game thereon. The user can couple secure gambling microprocessor100with a computing device that includes a Graphic User Interface (GUI).

For example, a user wishes to play blackjack for real money. The user would order a blackjack secure gambling microprocessor100. When ordering the blackjack secure gambling microprocessor100, the user will have a number of choices, including, but not limited to, purchasing a blackjack secure gambling microprocessor100with a pre-loaded purse having a pre-defined monetary amount loaded thereon, selecting a free blackjack secure gambling microprocessor100with an empty purse, selecting a free blackjack secure gambling microprocessor100with a few introductory dollars in the purse, etc.

In one embodiment, if the user has ordered a blackjack secure gambling microprocessor100with a preloaded purse, once the secure gambling microprocessor100was communicatively coupled with the computing device, the user would be able to begin playing blackjack. In one embodiment, the blackjack secure gambling microprocessor100would not need to communicate with gambling management system200prior to the user using the secure gambling microprocessor100to gamble.

However, if the user selected a blackjack secure gambling microprocessor100with an empty purse, or ran out of money in the pre-loaded purse, the user would utilize the computing device to initiate secure communications between gambling management system200and the blackjack secure gambling microprocessor100. During the communications, gambling management system200would also be able to perform a number of diagnostics and evaluations, including, but not limited to, providing updates to at least a portion of the secure gambling microprocessor100; ensuring the security of the secure gambling microprocessor100; determining the monetary value of the purse; and authorizing transfer of additional funds from a user authorized account; e.g., a bank account, to the purse on the blackjack secure gambling microprocessor100.

Once the gaming management system had loaded or reloaded the purse in the blackjack secure gambling microprocessor100, the user would be able to again play blackjack. Moreover, as described above, once the purse had a value and secure gambling microprocessor100is securely communicatively coupled with the computing device, the user would be able to gamble without having to maintain any connection with gambling management system200. In one embodiment, the user could continue to gamble without communicating with gambling management system200until the user's purse was empty or the user wanted to cash out.

In an additional example, the user may be tired of playing blackjack or otherwise want to play a different game. In this case, the user will access gambling management system200via the secure channel and request gambling management system200to add poker (or the like) to the secure gambling microprocessor100. In one embodiment, gambling management system200will add the poker game to the secure gambling microprocessor100and the secure gambling microprocessor100will have both poker and blackjack. In another embodiment, gambling management system200will remove the blackjack game when the poker game is added. In yet another embodiment, gambling management system200may offer the user a set of games that can be added to the secure gambling microprocessor100, or the user may select any number of games from a list of available games.

In another embodiment, gambling management system200may contact the user with an offer to provide a new or different game to the user's secure gambling microprocessor100. In addition, periodic communication may occur between the secure gambling microprocessor and the gambling management system via the communication channel. In general, the periodic communication may include providing updates to at least a portion of the secure gambling microprocessor100, monitoring a security of the secure gambling microprocessor100; and determining a monetary value of the purse.

In general, when the games are added or changed, gambling management system200will not modify the purse value on the secure gambling microprocessor100. Thus, if a user had 100 dollars in her purse when she decided to add a poker game to secure gambling microprocessor100, she would have 100 dollars in her purse after the poker game was added, regardless of whether any other games were removed or not.

In another embodiment, secure gambling microprocessor100functions only as a game starting seed(s) generator wherein actual game play simulation and interaction is conducted by non-secure software resident on the connected computing device. In this embodiment game type selection (e.g., blackjack, poker, craps) and play is executed on the connected computing device with the starting seed(s) determining ultimately how much (if any) money is won. This embodiment has the advantage of a potentially richer gaming environment due to presumably greater memory and process capabilities resident on the connected computing device in contrast to the relatively limited resources available on the secure gambling microprocessor100while still maintaining security against fraudulent alteration of the connected computing device's software. Since the seed(s) that determine the game outcome are generated by the secure gambling microprocessor100, an auditable trial is maintained of the intended game outcome that can be verified by the gambling management system200independent of the connected computing device. Additionally, by offloading actual game play and associated functionality to the connected computing device memory is freed in the secure gambling microprocessor100for storing potentially large predetermined arrays of plays where the outcome of each game was determined in advance.

Before describing how this independence is enabled by this embodiment, it may be useful to first provide a brief description of the current state of the art of instant ticket production and validation. The concept is to ensure that a common lexicon is established of existing legacy systems prior to describing the present invention. This description of legacy instant ticket production and validation is provided in the discussion ofFIG. 4A.

FIG. 4Adepicts a representative example of the variable human readable inventory control number452and the associated barcode453on the back451of a traditional printed lottery-type instant ticket. As shown inFIG. 4A, the variable printed human readable inventory control number and the associated barcode are imaged on the ticket back451and therefore accessible (by design) to the retailer prior to purchase of the ticket. Also presented inFIG. 4Ais a taxonomy of a typical instant ticket's human readable inventory control number's452and453data: starting with a three or four decimal digit game number454identifying the game, followed by a variable length pack number455(six decimal digits as shown inFIG. 4A), a one or two digit modulo check number456, and a variable digit ticket number457(three decimal digits as shown inFIG. 4A) uniquely identifying the ticket in a pack. The taxonomy of the instant ticket's barcode453data is similar to the human readable inventory control number452with the barcode453and human readable images embodying identical inventory control data454through457; however, the barcode453can embody other data in addition to the inventory control data.

As previously stated, the instant ticket inventory control data454through457typically found on the back451of a lottery ticket is accessible via human readable inventory control number452and barcode453to the retailer and others prior to purchase and play of the ticket. This is because, as its name implies, the instant ticket inventory control data454through457embodied as human readable inventory control number452and barcode453indicia are used for tracking the individual ticket through its life cycle of production, warehouse storage, shipping, pack activation by the retailer, sale, and redemption. Therefore, for security reasons against retailer pick-out, there is no cleartext win or lose information embedded in the instant ticket human readable number452or machine-readable barcode453. However, in some embodiments, win or lose validation information is included in the machine-readable barcode453, but this information is always encoded as ciphertext and never accessible in cleartext from an unplayed ticket.

At the system level450logistical tracking, activation, and validation of lottery-type instant tickets451is accomplished by grouping tickets together in packs458. The number of tickets per pack will vary depending on the game and ticket retail value, but all tickets451in a pack458will have sequential inventory control numbers452and453. There are several reasons for arranging lottery-type instant tickets in packs, a primary reason is that instant tickets451are ordered and shipped in packs458with the pack458being the fundamental unit of reconciliation. Since instant tickets451are shipped in packs458, the pack458is also the fundamental unit of activation on the overall instant ticket system451—i.e., there is typically no individual (ticket) level of activation, the smallest quantization of activation on a typical instant ticket system450is at the pack458level. Thus, when a retailer receives a new pack of tickets458, he or she must first activate the pack458on the system450before placing the tickets on sale. Pack458level activation thereby enables instant tickets to be shipped via common carrier since un-activated or stolen packs458would be automatically flagged on the system450with any tickets451in the pack458flagged when redemption was attempted.

In addition to shipping, reconciliation and activation, some games may be structured such that there are a specified minimum number and/or types of winners within a pack458. In these embodiments, the arrangement of winning tickets is not truly random, but are randomly distributed within a defined structure to ensure that all retailers receive approximately the same number of low- and mid-tier winners per pack as well as to aid in ensuring sufficient cash is on hand for paying low- and mid-tier prizes.

A given number of packs458are then arranged on the system450as a pool459. The purpose of a pool459is to reconcile all low- and mid-tier (and possibly high-tier) prizes into a predetermined prize structure. While the size of a pool459can vary from game-to-game it is essential that a pool459be sufficiently large to inhibit tracking unsold winning tickets by the public.

All of the produced packs458for a given game are logged in a digital ship file460by the ticket manufacturer and loaded on the system450prior to the game being placed on sale. The ship file contains a listing of all the manufactured packs458identifying (typically by omission) any pack458numbers that were destroyed in the manufacturing process. As a game is placed on sale the ship file is routinely expanded with information such as: “pack ‘X’ shipped to retailer ‘Y’, “pack ‘X’ activated,” “pack ‘X’ stolen,” etc. Thus, the ship file enables logistical tracking of all manufactured packs458in an instant ticket game; however, the ship file460does not contain any win or lose information and cannot be linked (without appropriate cryptographic seeds or keys) to the validation file461.

The validation file461contains the validation codes (not shown inFIG. 4A) for all tickets within a game with the validation codes effectively providing pointers to the prize value (if any) of a ticket451on the system450. The validation code is effectively inaccessible on unplayed or unsold tickets due to it being covered by a scratch-off coating. Thus, the cleartext validation code is inaccessible on unplayed or unsold tickets451. Therefore, the security of the system450is derived from the validation file461being unassociated with the ship file460, as well as the physical unplayed tickets' inventory control information452and453.

Both the ship460file and the validation file461are generated by the instant ticket manufacturer before the tickets are shipped to the lottery. All lottery logistical and validation systems450currently require the ship file460and validation file461to be loaded on the system450prior to instant tickets being shipped to retailers and placed on sale. Once loaded onto the system450, the basic validation file461typically cannot be altered (other than possibly flagged additions—e.g., redeemed, stolen, etc.), thereby ensuring the integrity of the instant ticket game and its predetermined payout.

An embodiment475of the present invention for reliably and securely storing large numbers of predetermined winning and losing game outcomes within the secure gambling microprocessor100′ that is compatible with legacy lottery instant ticket validation systems450is provided inFIG. 4B. As shown inFIG. 4B, the secure gambling microprocessor100′ is, as before, networked with game management system200′ via its associated computing device201′. However, in this example embodiment475the secure gambling microprocessor100′ is also networked to a legacy lottery central site validation system477as well as a lottery instant ticket provider476via their communications (Comms) systems (482and481, respectively) to the management system's200′ Comms210′.

This example embodiment475has the advantage of being compatible with existing instant ticket lottery validation477and production476systems and therefore can conduct validations and redemptions on said legacy lottery systems without the need for an external banking or purse system220′. In this embodiment, instant ticket451inventory control (454through457—FIG. 4A) and validation information is loaded from the lottery instant ticket provider's476(FIG. 4B) generated inventory & validation codes478are downloaded into secure gambling microprocessor's100′ Electronically Erasable Programmable Read Only Memory (EEPROM)108′ thereby enabling secure gambling microprocessor's100′ to communicate with its associated computing device201′ such that the consumer can play a game that will ultimately culminate in the prize value (if any) pre-assigned to the loaded instant ticket451(FIG. 4A) by the instant ticket provider476(FIG. 4B) at the time of instant ticket game generation478that will validate for the same prize value on the lottery central site477.

The instant ticket451(FIG. 4A) inventory control (454through457) and validation information can be loaded into the secure gambling microprocessor's100′ (FIG. 4B) EEPROM108′ or Read Only Memory (ROM)109′ at the time of manufacture. Alternatively and preferably, instant ticket data may be loaded into the secure gambling microprocessor's100′ EEPROM108′ via the management system200′ and associated computing device201′. The preferred embodiment, having the advantages of flexible instant ticket game play as well as allowing the consumer to repeatedly purchase multiple virtual instant tickets.

As was discussed inFIG. 4A, instant tickets451are logistically grouped in packs458that are units of activation on legacy lottery instant ticket systems. Multiplicities of packs458are then grouped into pools459primarily for the purpose of prize fund balancing. In a preferred embodiment, virtual instant ticket packs458rather than virtual individual instant tickets451are loaded onto the secure gambling microprocessor's100′ (FIG. 4B) EEPROM108′ or ROM109′ at either the time of manufacturer or via the network enabled by the associated computing device201′ and the management system200′. By loading virtual packs458rather than virtual individual instant tickets451, the secure gambling microprocessor100′ may execute multiplicities of game plays and corresponding prize awards without the need for further downloads. Virtual packs458may be paid for in entirety or preferably the virtual pack represents the theoretical retail value of the plays loaded the secure gambling microprocessor100′ with the consumer purchasing and thereby unlocking each virtual instant ticket451at different times. In this embodiment, the consumer may not purchase all of the virtual instant tickets451within a virtual pack458. However, since the packs458and tickets451exist in a virtual embodiment there is for all practical matters no cost associated with downloading virtual instant tickets451that may never be played. In fact, if the secure gambling microprocessor's100′ EEPROM108′ is sufficiently large, virtual pools459comprising multiplicities of packs458and tickets451may be loaded. This embodiment has the advantages of fewer communications downloads as well as the possible consumer psychological benefit of being able to advertise that every secure gambling microprocessor100′ is carrying or embodying the top prize.

Virtual packs458or pools459being downloaded to the secure gambling microprocessor100′ does have the disadvantage of a potential security vulnerability assuming an insider gained access to the prizes awarded for a given pack or pool. The security vulnerability being realized by an insider with knowledge of the sequence of the winning and losing virtual tickets451in a pack458or pool459possibly gaining an illicit advantage by developing an exit strategy for each secure gambling microprocessor100′—i.e., determining the optimum time to stop playing when total winnings maximally exceed the total value paid for virtual tickets451purchased. While various countermeasures are typically employed with real world instant ticket validation systems477to avoid this situation, the problem remains as a theoretical security flaw. Fortunately, in a preferred embodiment, downloaded virtual packs458or pools459of virtual instant tickets451may be shuffled within the secure gambling microprocessor100′ using the internal RNG103′ such that the play sequence of the virtual tickets451within a pack458or pool459would be unknown. In this embodiment, the RNG103′ would rearrange the stack of virtual tickets451within a pack458or pool459such that the sequence of virtual tickets dispensed for play would be unknown to anyone; however, since each shuffled virtual instant ticket451would still only be played once, the total amount of prizes awarded would still be as planned.

In an alternative embodiment, the pack458or pool459of virtual tickets451downloaded to the secure gambling microprocessor100′ would only embody prize awards for any conceivable denomination (e.g., “$1, $2, $3, . . . $52, $53, $54, . . . $107, $108, $109, . . . ”) that could be won by a consumer playing a series of games where the winning or losing status was determined by the secure gambling microprocessor's100′ RNG103′. Thus, with this alternative embodiment, the instant ticket provider476would only generate instant tickets used for cashing out winnings with the legacy lottery central site477system. This embodiment having the advantages of reduced compliance with United States banking laws as well as retaining the lottery's brick and mortar retailer network with the associated political benefits of supporting local (to the lottery's jurisdiction) commerce, while at the same time enabling essentially portable slot machine type gaming.

As is apparent to one skilled in the art, the instant ticket data simply provides a game outcome that can be validated on a legacy instant ticket system and only provides an outcome prize value (if any) with not necessarily any impact on game type, game play, or number of plays. Game play interaction, graphics, and style being preferably handled by the associated computing device201′ with the secure gambling microprocessor100′ simply determining the game's outcome either by the virtual ticket451pulled off of the stack or by the internal RNG103′. The essential concept being that the gambling system remains secure from malicious hacking or manipulation with all win or lose gaming decisions performed by the secure gambling microprocessor100′ while still maintaining a highly desirable feature of enabling offline gameplay

As previously discussed inFIG. 4A, each instant ticket's451inventory control (454through457) and validation information has a corresponding entry in the ship460and validation file461that identifies the ticket's451status (e.g., activated, stolen) in the ship file460and its winning or non-winning value in the validation file461. As illustrated inFIG. 4Bthe ship460′ and validation461′ files are generated by the instant ticket provider476at the time of game generation where winning values are pseudorandomly assigned to inventory and validation codes478. Thus, downloaded virtual instant tickets451, packs458, and pools459statuses can be tracked by the lottery central site477throughout the secure gambling microprocessor's100′ lifecycle. Among enhanced security and other features, this tracking process also allows the secure gambling microprocessors100′ to be placed on sale within easy reach of the consumer (e.g., on display pegs in an aisle) since the secure gambling microprocessor100′ would be essentially worthless unless its downloaded virtual instant ticket451, pack458, or pool459has been registered as activated on the lottery central site477ship460″ and validation461″ files. With activation of the associated virtual instant ticket451, pack458, or pool459only occurring at the time of sale shoplifting of the secure gambling microprocessors100′ would offer no economic gain and indeed the secure gambling microprocessors100′ could even be given away to the consumer with the consumer only paying for virtual instant tickets451, packs458, or pools459when they are downloaded to the device.

Account Value Unload

Reference will now be made toFIG. 5, a flowchart500of a method of unloading the value or other data for the system inFIG. 2. In general, flowchart500may be utilized in a stand-alone format or may be used after one or more of flowcharts300and400described inFIGS. 3 and 4respectively. At flowchart500, a user decides to “cash out” from gaming, which entails transferring the value from the purse of secure gambling microprocessor100to the gambling management system200.

In general, flowchart500is utilized when the user wants to cash out the purse. In general, the user would utilize the computing device to initiate secure communications between gambling management system200and the blackjack secure gambling microprocessor100as described herein. Gambling management system200would determine the size of the purse and provide the funds from the purse to the user in one of a number of payment methods. For example, gambling management system200may deposit the funds back into the user's bank account; cut the user a check, or the like.

With reference now to510ofFIG. 5andFIG. 2, one embodiment determines the purse value at secure gambling microprocessor100. For example, gambling management system200may automatically identify which secure gambling microprocessor100will have its value unloaded and the amount requested by the Customer to be unloaded. In another embodiment, a Casino or Lottery operator interacts with the management interface of the gambling management system200to identify which secure gambling microprocessor100will have its value unloaded and the amount requested by the Customer to be unloaded.

With reference now to520ofFIG. 5andFIG. 2, one embodiment transmits the purse value to gambling management system200via the secure communications channel211. As described herein, in one embodiment the gambling management system200uses the secure gambling microprocessor100identifiers and internal systems such as the hardware security module to set up secure channel communication between the gambling management system200and secure gambling microprocessor100.

With reference now to523ofFIG. 5andFIG. 2, one embodiment transmits the requested value unload along with optional log data from the gaming session back to the gambling management system200. In addition, at526optional confirmation of the validity of the purse value is performed by gambling management system200.

With reference now to530ofFIG. 5andFIG. 2, one embodiment authorizes payment from gambling management system200to the user. In addition, at533, if the customer has completed gaming with secure gambling microprocessor100, and the secure gambling microprocessor100belongs to the Casino, the Customer's account may also be removed from the secure gambling microprocessor100so that a different Customer may use it. In another embodiment, if the secure gambling microprocessor100belongs to the Customer, the account will remain on the secure gambling microprocessor100for future use.

In other words, the entire mobile device may be reusable. For example, a user may be at a casino and want to play blackjack in his room, at a lunch table, pool side, or the like, but may not have a computing device. The user would go to the cashier's cage and request a mobile device, such as a tablet or the like, with a secure gambling microprocessor100coupled therewith. The secure gambling microprocessor100on the mobile device would be loaded with the blackjack game and an amount of money added to the purse.

In addition, a mobile device may have more than one player's account thereon. For example, a first user may have an account on a secure gambling microprocessor100on a mobile device that includes a number of games and a purse. In addition, a number of additional users may also have an account on the same secure gambling microprocessor100on the same mobile device. For example, a first user has his own login to his account and has a purse with a 5,000.00 dollar value. A second user also has her own login to her account on the same device with the same secure gambling microprocessor100and she has a purse with a 25,000.00 dollar value. An nthuser also has a login to an account on the same device with the same secure gambling microprocessor100and has a purse with a 2,000.00 dollar value.

In another embodiment, the games may also be different for one or more user's account on the same device with the same secure gambling microprocessor100. For example, the first user may only have a blackjack game, the second user may only have a roulette game, and the nth user may have access to a number of games.

The user would then take the mobile device to his room or other location, and play blackjack. When the user was done playing, he would return the mobile device to the cashier's cage. At that time, the blackjack secure gambling microprocessor100would communicate with the gaming management system to determine the value of the user's purse. In one embodiment, the determining would also include the gaming management system ensuring the security of the blackjack secure gambling microprocessor100and the purse contents thereon. If the user had money in the purse, the user would be paid.

In one embodiment, after the mobile device was returned and the user paid, the secure gambling microprocessor100would be returned to default and the mobile device would await the next user.

With reference now to550ofFIG. 5AandFIG. 4A, andFIG. 4B, one embodiment determines the prize value at secure gambling microprocessor100′ wherein the payout for a predetermined game occurs in conjunction with a legacy lottery central site477system. As shown inFIG. 5A, the payout process starts at the conclusion of a winning game that outcome was predetermined by a virtual instant ticket451downloaded to the secure gambling microprocessor100′ when the prize value for the winning game previously played is retrieved from EEPROM108′ memory551. Next, the secure gambling microprocessor100′ notates in its memory that the virtual instant ticket451has been successfully played with its validation code transmitted (552and553) to the associated computing device201′. The associated computing device201′ then displays the validation code554both in a human readable form and in a barcode format that is compatible with legacy lottery terminal scanners. If the associated computing device201′ is a desktop computer or some other non-portable device, the validation code may be printed with the hardcopy presented for validation.

When the validation code is presented for redemption at a legacy lottery retailer the validation code is keyed into the terminal by the retailer or preferably scanned in by decoding the validation barcode555. The validation code is transmitted to the legacy lottery central site477where the code is verified with the ship460″ and validation461″ files to ensure that it represents a legitimate winner, the winning amount, has not been previously redeemed, and that the virtual instant ticket451is from an activated pack458that has not been stolen. Assuming the validation code passes all required tests at the central site477, it is logged as paid556with a message is transmitted back to the retailer instructing him or her to pay the consumer the winnings557. Thus, even though the actual gaming portions were maintained as a virtual instant ticket embodied in the secure gambling microprocessor100′ with the game itself being a video interactive experience, the resulting winnings are paid via legacy lottery systems by an authorized lottery retailer.

As an alternative to cashing out, the consumer has the option to use his or her winnings to purchase additional plays on the gaming environment with the winnings. In this embodiment, the consumer would elect to roll over his or her winnings into new game play. The logistical tracking of the purchasing of additional plays would be maintained by either the purse management module220′ (FIG. 4B) or entirely within the EEPROM108′ of the secure gambling microprocessor100′.

With reference now to575ofFIG. 5BandFIG. 4A, andFIG. 4B, another embodiment determines the payout value at secure gambling microprocessor100′ wherein the payout may be an accumulation of multiple plays (e.g., determined by RNG103′) in conjunction with a legacy lottery central site477system. As shown inFIG. 5B, this embodiment575is virtually identical to the previous embodiment (550) with the exception of the initial step576. With embodiment575, the consumer elects to cash out576at any given time; hence the consumer's total prize winnings can be a variable between a minimum value (e.g., $1) and some theoretical maximum value (e.g., $500). Thus, to enable validations and redemptions on a legacy lottery instant ticket system477, a virtual pack458or pool459would have been downloaded to the secure gambling microprocessor100′ before the redemption process begins. This virtual pack458or pool459would embody an array of virtual instant tickets451with each ticket awarding a different prize level in the predefined range (e.g., ticket “001” pays $1, ticket “002” pays $2, ticket “003” pays $3 . . . ) such that there would be one validation code associated with a virtual pack458or pool459that would equate to the payout value at the time the consumer elected to cash out. Therefore, the lottery central site477would process one validation per pack458or pool459that would provide the proper payout value to the consumer. Of course in this embodiment575, the vast majority of virtual instant tickets451would never be validated, but since the tickets are virtual and only exist as reprogrammable bits in the secure gambling microprocessor's100′ EEPROM108′ memory there is virtually no cost associated with generating a large number of unused tickets. To allow for multiple validations and redemptions that could potentially have the same prize value more than one virtual pack458or pool459could be downloaded to the secure gambling microprocessor's100′ EEPROM108′ memory at a time. The remainder of the validation and redemption process for embodiment575is identical to embodiment550.

After the cash out value has been determined the secure gambling microprocessor100′ notates in its memory that the virtual instant ticket451has been successfully played with its validation code transmitted (577and578) to the associated computing device201′. The associated computing device201′ then displays the validation code559both in a human readable form and in a barcode format that is compatible with legacy lottery terminal scanners. If the associated computing device201′ is a desktop computer or some other non-portable device, the validation code may be printed with the hardcopy presented for validation. When the validation code is presented for redemption at a legacy lottery retailer the validation code is keyed into the terminal by the retailer or preferably scanned in by decoding the validation barcode580. The validation code is transmitted to the legacy lottery central site477where the code is verified with the ship460″ and validation461″ files to ensure that it represents a legitimate winner, the winning amount, has not been previously redeemed, and that the virtual instant ticket451is from an activated pack458that has not been stolen. Assuming the validation code passes all required tests at the central site477, it is logged as paid580with a message transmitted back to the retailer instructing him or her to pay the consumer the cash out winnings582.

In one embodiment, the Lottery Central Site477notifies the Management System200′ of all interactions involving individual secure gambling microprocessors100′ so that the Management System200′ can stay synchronized with the Lottery Central Site477and the Management System200′ can opportunistically perform additional operations with the secure gambling processor100′ by using the Computing Device201′ to relay messages to the secure gambling processing100′ from time to time. One example of such opportunistic operations would be to send a message to the secure gambling microprocessor100′ that confirms that specific winning tickets have been redeemed. This communication does not provide any additional security advantage over the processes previously described, but it does enable the Computing Device to communicate with the secure gambling microprocessor100′ and display in the Graphical User Interface of the Computing Device201′, the state of which winnings have been redeemed and to allow an update message from the Management System200′ to be received by the secure gambling microprocessor100′ indicating which specific winnings have been redeemed

The foregoing Description of Embodiments is not intended to be exhaustive or to limit the embodiments to the precise form described. Instead, example embodiments in this Description of Embodiments have been presented in order to enable persons of skill in the art to make and use embodiments of the described subject matter. Moreover, various embodiments have been described in various combinations. However, any two or more embodiments may be combined. Although some embodiments have been described in a language specific to structural features and/or methodological acts, it is to be understood that the subject matter defined in the appended claims is not necessarily limited to the specific features or acts described above. Rather, the specific features and acts described above are disclosed by way of illustration and as example forms of implementing the claims and their equivalents.