JP2001526550A - Remote auditing of computer-generated results using cryptography and other protocols - Google Patents

Abstract

57. A computer system and method for encoding a message corresponding to the outcome of a computer game, and a computer system and method for decoding that message to detect a fraudulent result. A computer device used to generate the encoded message is configured to process the encoded control code in association with a memory device including the encoded control code and the computer game player (148) An output device, such as a display device, capable of generating an encoded message including the computer game result (158) and enabling the human readable message of the encoded message (154). , Can be sent to. The computing device includes various tamper-proof or tamper-detection mechanisms. Security-protected modules, including processing units and memories, are used plugged into existing personal computers or dedicated gaming devices. The apparatus also includes a system for metering the use of computer games.

Description

Detailed Description of the Invention Remotely from computer generated results using cryptography or other protocols Audit                                Background of the invention 1. Field of the Invention   The invention generally relates to the results of computer generated games or tests (" It is called "outcome". In particular, the game or test computer (Hereinafter referred to as "game computer" or "test computer"), Each person who plays a game or receives a test has at least one Submit the results of the game or test to a central organization with a central computer. That the results were correctly reported to the central computer and were conducted fairly Systems that have been The connection generated by this computer Accreditation of results constitutes a "remote audit" of the actions performed on the gaming computer . In one example, the system generates a computer generated game tournament. Enable, where multiple players play games on the gaming computer By submitting the results of those tournament games to a central computer. Play against each other, the central computer certifies the results and Give priority. Another example is playing a computer game in a system Yers can get certified rankings and ratings without participating in the tournament. In another embodiment, a game played on a game computer in a system Against the self-certification and recognition of the result by the game computer itself , Mutual recognition and certification of results by different game computers of the system Do. Furthermore, the system uses the same method to submit test results and Enable certification.   In addition, the present invention can be used in the home video game environment to Game computer and / or the game thereof By metering the use of a game program running on a computer, Convert any game computer into a game center video game machine be able to. Players are required to You only pay for play during the regular period. Furthermore, the present invention is a player "Time-dependent inoperability" to gain game consoles for relatively low price to enable. The fee for gameplay is then daily, weekly, monthly or another It may be generated every period.         2. Description of the prior art   Tournaments are a popular form of rela- Easily cope with the situation. There are two main types of tournaments. The first one is The players are in one another or in teams, under controlled conditions, with each other (ie in close combat) It is a battle. For example, there are boxing, chess and karate. Second The game is played by players without direct or simultaneous interaction with another player. Play best games (for example, golf and bowling), Player with the shortest time to finish (eg, puzzle), or a combination of them Is the winner. The winner is not only honored for the technology but also Sometimes. Players who have finished technical games often receive an official award The ranking, the rating and / or the title are given.   Classical tournaments are usually held at specific times at specific times, and all competitors Under one set of rules that apply equally to one or more referees and / or It takes place under the supervision of the institution. A typical chess tournament has one hundred in the middle Person to two hundred players Collect They will pay the participation fee and officially Play a series of games over a specific period, with the support of Kuta. At the end of the competition The players are ranked and the top finishers are rewarded. US Che United States Chess Federation is a tournament-approved game The player is evaluated numerically against other evaluated players based on the result of Manage a national ranking system that prioritizes Evaluation progressed by the player Over time as you win or lose a game played in a tournament Change. Titles assigned to various evaluation ranges are given. For example, "Spart" chess players have a rating between 2,000 and 2,200 The sprayer has a rating of over 2,200.   However, the above mentioned tournaments have some drawbacks. That is, most to Some players are quite likely to be held in a certain place where I had to travel a distance, which could create travel, food, accommodation, etc. . Also, to schedule a given tournament at a time that is convenient for all participants Usually difficult. In addition, authorized tows can be used to operate such tournaments. The number of Naruto directors was limited. Any tournament The main objective is to ensure the integrity and certification of the results. Without the Narrator, you can not confirm the truth of the tournament results . In addition, a very small number of niche tournaments (niche tournaments) Hosting is difficult and not practical. Because, only two or three participants Otherwise not economically feasible due to fixed costs for tournament management It is because   Apart from the so-called classic tournaments mentioned above, many popular The players of the game generated by the game are entitled to the rights of the person who scored the best score. Enjoy the competition to boast. Most game center game machines are Always show a series of high scores that identify the latest top score players. The Game systems and game software such as Nintendo, SEGA, etc. The personal computer with the It displays a series of high scores identifying the player. By this, The player who gives a high enough score is the machine or software Can compare their scores with other players who played on a computer with There is no way to prevent a player from lying to others about the "assert" score Yes. Thus, the player of such a game has its central computer The central computer certifies the score and allows players to We need a system that can give ranks / ratings to other players on a scale It has been In connection with this, such a system is to the players of such game, A player can play alone or in a team on an independently placed game computer Or in a close combat format through the online connection of at least two opposing players Allows you to participate in "electronic" tournaments to play.   One method of electronic tournament is US Pat. No. 5,08 issued to Thatcher et al. No. 3,271 (referred to as "thatcher"). With Thatcher's System A plurality of game terminals are networked to a central computer. Pre He buys credits, participates in the tournament, and gets his unique ID code. This ID code is stored in the game terminal and the central computer. Then play Yah starts playing the tournament game on the gaming terminal. Player is a game When finished, the player's score is its player ID code and game ID number Together with the central computer. The central computer ends the tournament After the finish, select the overall score and decide the winner. The claim for the Thatcher patent is By using a separate personal ID code for each layer It provides a level of protection against redemption. Thus, the player's personal Anyone who plays the game has a unique end score, unless the ID code is compromised Have been identified. However, such an arrangement has drawbacks. That is, all A wide range of networks are connected between additional game terminals. Also, Tonamen Certify that the score in the game has been accurately reported and taken Can not For example In the ー system, the player Measures to prevent the creation of positive results, or remote game end of score and ID data Disturb the communication from the end to the central computer, modify them, and raise false scores No action has been taken to prevent recording.   Another known system for authenticating video game scores is for players to play games Take a picture of the video screen including the score and the game console, and then use the central It takes a primitive way of mailing to The monthly magazine Nintendo Power Power player arena (Power Players' Are na) has been published. Top score players can be prized Nintendo Powers Receive a tamp (Nintendo POWER Stamps). The picture on the video screen is It prevents the player from forging the score simply. Video screen and game By the picture of the console, the central organization is able to It appears that it can be determined whether you have used an unauthorized device for the change. However, this system also has drawbacks. First, a clear picture of the video display Taking is often difficult because of its reflective nature. Also in the photo It takes a considerable amount of time to send to the central agency, and the player Then you have to wait to publish it. Also, this system is It is good for the player who hacks software. Misuse of game software No action has been taken to determine the presence or absence of the game. Standard game console Software instructions are loaded into the read / write memory. Game that allows you to enter code that temporarily changes the play conditions when Use of known intermediate devices such as Game Genie is a picture of the entire game console By obligatory inclusion of a picture of the video screen on the screen is prevented. Only And the player plays the game using the intermediate device and records the output in VCR , Then remove the intermediate device and play the recorded game on the game console You can easily break this problem by taking pictures without the attached intermediate device can do.   Thus, the gaming computer operating independently at different times or places is the recipient Certifies the game outcome in a verifiable way to compare with another game outcome A system that can The system takes that certification, but another Computer or by a central computer It must be a thing. System during game play, game computer Complex networks between each other or between each gaming computer and central computer It should not require work connection or real time connection. Furthermore, the system , That play against other game players based on their certified score It should be possible to set the order, rating and / or title of the yer.   Regarding the above matters, during the game play, the game computer and the central computer Between complex and expensive networks or online connections, or There is no need to go to a specific place, and the official certified tournament There is no need for the Rector to attend the game play location but to validate the participant's score In order to secure the game, the player can use the game computer to There was a need for a system that could participate in the narration. Furthermore, the system Use the player ’s score against other game players based on the player ’s The layer order, rating and / or title must be configurable during the tournament You must.   Remote control and monitoring of the use of video game software As disclosed in US Pat. No. 5,497,479 issued to It is known. This patent is a rental software game from a central computer Download to a remote control module (RCM) that is operatively connected to the computer Teaches a system to be RCM rental software package Use of such software from the central computer Operate to control and confirm on the Rental software, game console It resides in the computer's insecure memory. Some of the software is "as part of the software required to run the program" Called a key module, without which the entire program is a game computer Do not run on. Key modules exist in cryptographic form and can not be decrypted by RCM It must be. After such decryption, the key module Both are loaded into the game computer's RAM for execution. The program ends The decoded instruction is erased from the RAM of the game computer. RCM is a rental Record the elapsed time between the start and stop of the program and use that information for post processing Store in memory   A key module exists in the game computer's unsecured RAM, Thus, a hacker can obtain a key module and store data on the game computer Since the key module in the device can be replaced, the horn buckle Stems also have major drawbacks. Therefore, the game program is Computer by not loading it into unsecured memory. Game without securing the encrypted portion of the Provides a system where the use of the program is metered by a cryptographic protocol Is desirable. Also, the use of the game computer itself uses a similar protocol It would be desirable to be able to provide a system that can be metered                                Summary of the invention   According to a first aspect of the present invention, in general, (1) a memory device including a coded control code; 2) generate and encode a coded message including computer game results Send a message to a human-readable output device such as a display device Configured to process the encoding control code with respect to the computer game result And a processing unit. This processing unit is a computer game You can also run the program, but The computer device comprises a second processing device for executing a computer game program. You may have. In addition, computer devices are used to prevent various unauthorized A mechanism for operation detection may be provided. In one embodiment, the processing unit and memory are Security plug-in into existing personal computers or dedicated gaming devices It consists of part of the module. Also, the present invention is a computer Running a computer game program to generate a game result , Encode computer game results to generate encoded messages And providing the user with the encoded message. The user can then use the encoded video to display the computer game results. The encoded message on a device configured to decrypt the message. It is also based on how it can be sent later. Yet another aspect of the invention is Generally, (a) encoded corresponding to the combined control code and the computer game result Display a memory device including (a) a computer game result, and Configured to process the same code to decode the encoded message to And a central or host computer device having a processing unit.                             Brief description of the drawings   FIG. 1A is a general overview of the inventive system in one embodiment.   FIG. 1B is a general overview of the inventive system in the example of self-authentication and mutual authentication It is.   FIG. 2 is a general overview of the inventive system in another embodiment.   FIG. 3 is a general overview of the inventive system in yet another embodiment.   FIG. 4A is a schematic diagram of the memory array and general components of the gaming computer. Ru.   FIG. 4B is a schematic view of a game cartridge in one embodiment.   FIG. 4C is a schematic overview of the security protected encryption / decryption module. Ru.   FIG. 4D is a schematic view of a game cartridge in another embodiment.   FIG. 4E is a schematic view of a game cartridge in yet another embodiment.   FIG. 4F is a schematic view of a game cartridge in yet another embodiment.   FIG. 4G shows that there is no security with respect to the gaming console type gaming computer. FIG. 6 is an overview of an embodiment using the surroundings and the VCR.   FIG. 4H is an overview of the secured peripheral / VCR interface. Ru.   Figure 5 shows the flow of various 'Authentiable Resulting Message' generation protocols The   FIG. 6A is an overview of an example software integrity check.   FIG. 6B is a flowchart of the software integrity check of the embodiment shown in FIG. 6A. The   FIG. 7 is an overview of an exemplary memory arrangement and hardware for a central computer. Ru.   FIG. 8A is a flowchart of an exemplary tournament entry procedure.   FIG. 8B is an overview of an example game center.   FIG. 9 is a flowchart of game play.   FIG. 10A is a flowchart of an example results submission authorization sequence.   FIG. 10B is a flowchart of an illustrative biometric authenticity check procedure .   FIG. 11 is a flowchart of the challenge / answer protocol.   FIG. 12 is an exemplary broadcast start message of an exemplary embodiment for a technical competition. It is a flow chart of cans.   FIG. 13 is a flowchart of an exemplary tournament sequence for a close combat game. The   FIG. 14 is an overview of a meter that enables pay-per-use gameplay according to the present invention FIG.   FIG. 15 shows that the meter-charged software used in the pay-per-use embodiment FIG.   FIG. 16 is a flowchart of the meter initial setting protocol.   FIG. 17 is a flowchart for adding a new program protocol for a meter.   Figure 18 is an authorization flowchart from the central computer protocol for the meter is there.   FIG. 19 is a flowchart of the meter cost information update protocol.   FIG. 20 is a flowchart of a meter clock synchronization protocol.   Figure 21 is a flowchart of the meter billing software initiation protocol for the meter It is.   FIG. 22 is a flowchart of the meter charge software execution protocol for a meter It is.   FIG. 23 is a flow chart of a usage report protocol for a meter.   FIG. 24 is a flowchart of an audit protocol for pay-per-use.   FIG. 25 is a flow chart of a result authentication protocol using a meter.   FIG. 26 is a flowchart of another result authentication protocol using a meter .   FIG. 27 is an overview of a pay-per-use embodiment that performs descrambling.   FIG. 28 is a schematic view of a meter device incorporated in the video game control device.Detailed Description of the Preferred Embodiment   With reference to the several figures of the drawings, the invention of the invention generally designated 10 is provided. Several examples of stems are shown.   In the embodiment shown in FIG. 1A, the system is mainly a central computer 12 of a central organization. And a plurality of game computers 14. With "game computer" The term is used to refer to personal computers (PCs) and personal digital With a cristant, a game center video game machine operated by coins, Connected to the game unit (for example, game consoles such as Nintendo or Sega) Television units and (for example, Game Boy (GAME BOY) or Game Gear (G AME GEAR), NOMAD etc.) portable gaming devices are intended to be included . For the purpose of description, the illustrated gaming computer mimics a standard PC. Each game Computer 14 generates a game of a type known in the art. Software and / or firmware (for convenience, here all programs The name is "software". Contains). On game computer 14 The implementation of gameplay in the game can be classified as an interpersonal action in the game . At the end of the game, the player may Time, their combinations and other play related data), as detailed below , Submitted to the central computer 12. But in many popular games, Layers may be on the same game computer 14 or on each player. Play online by connecting game computers 14 to each other be able to. In this case, the player's match result (for example, player A It is recognized that year B has been won with a score of X vs Y). Description below Then, each game computer 14 is identified generally by the reference numeral 23. It includes game software 15 resident in Mori. Memory 23 is a read Memory RAM, read only memory ROM, and program of game computer 14 Ram's non-volatile data source, eg game cartridge, hard disk, CD-R It includes an OM, a PCMCIA card or a special flash ROM chip. Main story The details of the game software 15 related to bright will be further described below. Also , Gaming computers, such as joysticks (shown) known in the art. The continuous input control device 17 may be provided. The input / output unit 17 has a plurality of players Have multiple joysticks and controls that allow them to play against each other It is also good.   Central computer 12 manages the tournament by authenticating and / or recognizing the result Do. It is generally shown as a single device in the drawings, but it is Then, it may be configured from a plurality of network connected computers. Large scale In order to promote the tournament, central computer 12 is a local computer, Need to be classified as national computer and top level international computer May I? These computers use data networks such as TYMNET and DATAPAC. Can be interconnected. all Country computer tabulates tournament data from Computers collect tournament data of national computers. Therefore, local Narments only use local computers. If a local tournament is held National computer will request the tournament information to the local computer. Will be obtained from the In the case of an international tournament, the international computer is Aggregate data from a computer Also, regularly check each other according to known principles. Several single-level computers can be deployed to verify. Con There are many ways to deploy computers, so for the purposes of The data 12 is referred to as a single unit. As described in detail below, the present invention In another embodiment, each game computer 14 is connected to a key distribution center (Key D distribution center: KDC), ie the encryption key used to authenticate the message Computer 12 acting as a database of The results from the computer 14 can be authenticated. Also, the central computer 12 , "Central scoreboard", that is, with all qualified scores for players and teams It is also possible to operate a database holding statistical information. Given player Statistics for will include information such as opponents, play times, ratings, and ranks Can. The information may be publicly available or password protected (ie Available only to those who have the correct access password or who have a certain evaluation threshold No) may be used. Information on the internet and major commercial online providers Can be downloaded to the game computer, or It may be available by talk.   In the embodiment shown in FIG. 1B, the game computer 14 is configured to "self- Authentication can be performed. Self-certification means that the game computer 14 Authenticated Outcome Message (AOM) generated It means that the results embedded in can be authenticated. For example, The layer is true when printed on paper or the score stored on a given memory medium Claiming that this score When embodied in "Sage AOM", authentication of the game computer 14 is possible. The score can be verified by authenticating the message AOM. As well , An authenticatable message is sent to any other gaming computer 14 of the system Can also be authenticated (ie, mutual authentication). The authentication protocol Details will be described below.   Referring back to the embodiment shown in FIG. 1A, at least one interactive voice response unit (Interactive Voice Response Unit: IVRU) 16 is connected to the telephone network. , Central interface via a standard interface for access from multiple phones 18 Combined with the player 12 to allow players to register and Game results may be submitted to central computer 12 for certification. Ah In the illustrated example, the player may use personal information and / or It can be registered on the central computer through story 18. In particular, the IVRU phone It responds to both voice and touch-tone signals communicated from 18. In this connection The game computer 14 generates messages compatible with the IVRU 16 In conjunction with dual tone frequency modulator (DTMF). Can be trusted. Sound to receive messages from phone 18 in the same way A voice coupler 115 can be used. The behavior of IVRU 16 and DTMF is known in the art Therefore, it will not be described in detail here. IVRU 16 to compare call load With respect to Automatic Call Distributors (ACDs) of a form known in the art. It may be linked. During peak talk time, calls to any IVRU 16 are adjacent It can be made to go through IVRU16.   In the alternative embodiment shown in FIG. Can communicate with the central computer 12. In this respect, the game console The computer is considered to be online connected to the central computer during the game I can not. Until the end of the result or technical competition for a particular game If you want to submit time, game computer 14 dial-up connection Access the central computer and upload game result information. this The points will be described in more detail below. In this regard, inside The central computer 12 is generally represented on the Internet 24 website 22 and FIG. Commercial online service providers and electronic bulletin board systems as indicated Can be accessed through an online data network, including In The process of setting up an online connection to a web site on the internet is known, I will not explain it in detail. It has a game computer 14 and a central computer 1 It is essentially similar to setting up a direct online link between the two. Furthermore In another embodiment, the gaming computer 14 is connected to the central It can communicate via TV, satellite link, etc. For example, an actual using RF In the example, the communication is in RF format between the game computer 14 and the central computer 12 It is only broadcasted between. Also, the game computer 14 keypad or Send messages to the central computer 12 directly through the Istick By inputting a command to the game computer 14 to A prompt configuration similar to RU 16 can be used. Also, the message is TV interface to game console through cable TV link Can communicate directly with   Also, communication between the game computer 14 and the central computer 12 is smart It may be implemented by a physical data memory device such as a card, diskette or the like. For example, the game computer 14 may be used to Computer that is required to be mailed to the It can be stored in a ket. The procedure is such that the player wins a considerable prize Needed if earned or cheating is suspected by tournament staff in all cases You can ask. In addition, the game computer 14 prints a copy of the result. Games that contain printers and other relevant data such as results and game statistics It is also possible to communicate with the screen, they centralize the results and subsequent recognition of such data. It can be mailed or faxed to a central organization that runs on computer 12.   Referring now to FIG. 4A, a game computer 14 in the system of the present invention is shown. Illustrative of Memory configuration and a partial overview of some hardware is shown. For convenience, The internal memory 23 of the personal computer 14 is shown. As mentioned above The memory 23 comprises a RAM and a ROM, and in a conventional manner a central processing unit ("CPU") . ) Is coupled to 27). The CPU 27 and associated hardware are typically processing units It is called. We use the term "related memory" to Mori 23 is a game cartridge, hard disk, floppy disk, PCMC Non-volatile, non-security programs such as IA cards and special flash ROM chips Used to indicate that program data sources can be defined to include I use it. Memory that is secured is the security defined below It can be placed in the surrounding area (peripheral part). The processing unit is a program The ram is loaded into RAM and the program is executed from memory in the conventional manner. Practical In the embodiment, the memory 23 is a game program 26, the encryption / decryption module 2 8, transmission error check module 30, specific game software 15 and / Or stored in a memory area 32 that uniquely identifies the game computer 14 Secret software or game computer ID (referred to as "SSCID"), time / date A game comprising biometric data in module 33 and memory area 35 Software package 15 is included. Game software 15 is that A single "program" where individual components make up separate routines It may be composed of For the purpose of the description, here with the game software 15 The term is used to refer to multiple component programs, instructions, routines, files, It is broadly defined as including databases and the like. Game software 15 relevant non-secret software serial numbers for the purpose of clarifying below It may have an SSN. Transmission error check module 30 is a manual input error. Detection of transmission data deterioration caused by communication problems such as In order to enable retransmission display or request, all input to the game computer 14 Are used to process messages. Time / Date Module 33 Message using the signal from Time stamp The biometric data stored in the memory area 35 The data is used to identify the player, as described in detail below. Dedicated game co The computer 14 has a memory associated with the tamper-proof type and / or the tamper-proof type housing. , And can accommodate all of the components including the CPU 27 and the clock 36, Each tampering of any of these components is prevented and displayed respectively. Tampering The detection type case contains a thermosetting package, and if physically trying to unseal its structure It will be revealed by inspection. The tamper-resistant structure allows players to One attempt to open the structure physically destroys the data content of the memory electronically be able to. Secured peripherals have hardware defined physical Area, which is tamper-proof and / or tamper-proof Are discussed in more detail below.   Game programs 26 are already in the industry such as chess and backgammon bridge. Knowledge, and also generate technical games of the type normally played in tournaments. Ru. Another known technical game (for example, Sonic and Knuckles (SONIC AND K NUCKLES), Vector Man (VECTORMAN), Donkey Kong Country (DONKEY KONG) COUNTRY), Mortal Kombat (MOTAL KOMBAT), Street Fighter (STREET) (E.g. FIGHTER)) on a dedicated game machine such as a game console. Game centers or other games where such gaming machines are played It is. The game program 26 may not have a result or be part of a tournament Can be configured to enable gameplay in a less Can. Such practice games may not have the full functionality of tournament games. unknown. For example, a practice golf game may have a fixed golf ball for a given hole. It can have less complex wind patterns, ie wind speed and direction. This The tournament version, on the other hand, often changes and depends on the position of the ball You may make it have a wind which can change. Also, the game program 26 Tea to educate them in the way they play the game and in a way that matches the outcome To include the chin mode It may be configured.   The game program 26 is a game that relates particularly to the player's actions during the game. Editing the statistical database 31 to store the game data Can. For example, a player in a tournament game finds X treasures and You can reach R and eliminate Z enemies. This information is stored and positive Only the player who inputs the correct code or message to the game computer 14 It is accessible by This message, as described below, It can be a start message that enables the naruto play. In yet another example Is one aspect of the game, for example, when the player makes a move or a particular opponent A single screen or a series of events if a player is defeated (in the case of a tournament) By the game start message input or by some other special command, Make it possible to call up any one of the screens or sequences that the layer will take later Can be stored and indexed in a database by a predetermined code. Can. Menus can be generated upon receipt of a start message or command. This allows the player to display the desired screen or specific sequence of game events. It can be selected and viewed.   The game program 26 can generate a technical competition. These are Includes puzzles in which the player with the shortest time at is considered the winner. Crostwa The puzzle is a classic technology competition in which players compete to solve the puzzle correctly first. It is a skill. A lap time driving game is also a winner with the shortest time until the end It is an art competition. Referring back to FIG. 4A, to time the technical competition, the game Program 26 is a computer program via a time / date module 33. Clock the signal from the clock 36 or a particular result message, or , A time message representing the time spent by the player to finish a given game Can be used to generate In this regard, clock 36 is not It may be housed in the positive operation prevention type and / or the tampering detection type seal 38. Preferred Peripherals where the real-time clock 36 'is protected, as described below. Within 300 Be placed. In another embodiment to be described later, the clock 36 'is a dedicated game cart It may be within 21.   In yet another example, game program 26 may generate a game of potential Here, the results of such a game are submitted and certified according to the present invention.   The result of the game is the score, the time to the end in case of technical competition or a combination of these It is defined as the whole result of a series of games including a match. Also, the result is the game itself All related data (ie stored in memory and the entire game is played back (Data to enable). For example, in the case of a golf game, Such data include current wind speed, selected club, placement of feet, and force to hit the ball. It can contain each shot of the player representing If these parameters Are stored on disk as the game progresses, It is possible to replay the whole game after the fact by replaying the Ru. In order to improve security, these values may be determined by the player after the game is over Store in encrypted form so that you can not change the game data representing the result It can be done.   The game computer 14 is a game software for a typical score game. Run the player's score and, optionally, the number of Additional games, such as the time spent at Bell, the number of lives lost, and the number of It is possible to obtain a result representing the link information. Also, the game is associated with it It can have many results. For example, in a chess game, each move Can be regarded as separate results. Each move must be authenticated by a central computer Can. In some games, individual scores depend on other players' scores be able to. Therefore, to validate the result of one player is the other player It is necessary to know the result of Game computing for technical competitions such as puzzles When the game software 14 is executed by the game player 14, the player The elapsed time spent and, optionally, other game related information or certain Of level Results are obtained that represent ancillary events such as termination.   Together with the encryption / decryption module 28 (a compression function, a contraction function on), message digests (message digests), fingerprints, cryptographic checksums (cry ptographic checksums), data integrity check (DIC), Manipulation detection codes (MDC) and data authentication code One-way hash function, also known as One-way hash function with encryption key (also known as MAC), digital By using various cryptographic protocols, including Can be transformed or incorporated into the result message The end time is an authenticatable timing message (Authenticatable Tim ing Message) can be transformed or incorporated into "ATM". Message integrity and machine Methods for using cryptographic protocols for security protection are known in the art and I will not explain it in detail. Note that Bruce Schneier ("Bruce Schneier"), " Applied Cryptography, Protocols, Algorithms, And, Saw Coded C (Applied Cryptography, Protocols, Algorithms, and Source Code in C) (2nd edition, John Wiley & Sons Inc., 1 996). The encryption / decryption module 28 encrypts the message Includes algorithms and keys to decipher and / or authenticate. Known dark An example of the authentication protocol is as follows.                                  encryption Preparation: Central computer 12 and game computer 14 share a secret key . 1. The game computer 14 forms an "authenticable result message AOM". To share the result message Encrypt with secret key. 2. Send "authenticable result message AOM" to the central computer 12. 3. The central computer 12 reads out the "authenticable result message AOM" Decrypt with the same key. 4. If the message can be understood, central computer 12 will true the result message. Accept as a positive thing. * Encryption is an algorithm such as DES (specified by US Government Standard, FIPS PUB 46) It may be carried out using a rhythm. Encryption is IDEA, Blowfish (Blowf use any of the algorithms known in the art such as ish), RC4, RC2, SAFER be able to. See Applied Cryptography.                           Message authentication code Preparation: Central computer 12 and gaming computer 14 share a secret key. 1. The game computer 14 forms an "authenticable result message AOM". Hash the result message with the MAC and the shared secret key. 2. Send "authenticable result message AOM" to the central computer 12. 3. Central computer 12 reads the AOM and hashes it with the shared secret key Do. 4. If the generated hash matches the received hash, the central computer 12 acknowledges the result message as authentic. * Any MAC algorithm, such as DES, CBC, etc. may apply to this example it can.                        Encryption by Public Key Cryptography Preparation: The game computer 14 has a public key / private key pair . The central computer 12 knows the public key of the gaming computer 14. 1. The game computer 14 forms an "authenticable result message AOM" In order to encrypt the resulting message with a private key. 2. Send "authenticable result message AOM" to the central computer 12. 3. Central computer 12 decrypts the AOM with the public key of game computer 14 Do. 4. If the message can be understood, central computer 12 will true the result message. Accept as a positive thing. The sample algorithm for this procedure is RSA.Signing with Public Key Cryptography Preparation: The game computer 14 has a public key / private key pair . The central computer 12 knows the public key of the gaming computer 14. 1.   The game computer 14 forms an "authenticable result message AOM". To sign the result message with a private key. 2.   Send "authenticable result message AOM" to the central computer 12. 3.   Central computer 12 verifies the signature using the result message and the public key. Ru. The mathematical calculation of the confirmation indicates whether the result message is true or not. 4.   If the message can be understood, central computer 12 will true the result message. Accept as a positive thing.   The authentication result message AOM is "fresh" (ie, used more than once There are several ways to confirm that there are. The first method is “call / answer (c The central computer 12 is known as The game computer generates a serial number (called “nonce”) Send to 14. Then, the game computer 14 can "authenticate this random number. Include in the result message AOM. The received random number is the same as the generated random number If yes, central computer 12 acknowledges that the message is fresh. That is, old messages contain different random numbers.   Alternatively, the game computer 14 may generate an "authenticable result message AOM". Include a sequence number. This serial number can be authenticated by the game computer 14 Is incremented by one each time it generates a result message AOM. Central computer 12 stores the latest serial number in the memory. The received serial number is stored If it is one greater than the sequence number, it acknowledges the current result message Ru.   In yet another example, the gaming computer 14 can “authenticate” the current time. It is included in the result message AOM. The central computer 12 then Check the time of 'Authentiable result message AOM' for the clock time Ru. If the time is within the specified frame, approve the current result message as fresh Be done.   In yet another procedure, the game computer 14 sends a message Contains random numbers. Central computer 12 is a game computer 14 Holds a database of all random numbers received from. If a new random number If it does not exist in the database, the current “authenticable result message AOM” is fresh and It is approved that there is. If temporal factors are similarly incorporated, the central To store a relatively small amount of unexpired messages. Only.   In FIGS. 4A and 4B, the encryption / decryption module 28 is game software 1. It is illustrated as a part of 5. In such an embodiment, the encryption / decryption module 28 relates to cryptographic algorithms, keys and other data, software Ru. These store data such as game cartridges, hard disks, CD-ROMs, etc. Exist in the rest of the game program of the device. The real-world process of implementing cryptographic protocols Not in the special cryptographic processor but in the CPU 27 of the game computer It happens.   Preferably, as shown generally in FIG. 4C, some or all of the encryption / decryption modules are The security 28 is located at the perimeter 300 where security is provided. Security protection The surrounding area is defined as tamper-resistant and / or tamper-detected. Hardware physical area in which to maintain security of the system Data or algorithms having non-modifiable characteristics are arranged. Security protection Motorola and AT & T provide examples of devices incorporating built-in peripherals. -Manufactured STU-III phones and iPower cars by National Semiconductor There are US military encryption devices such as The latter compares the game computer 14, for example. (For game computer 14 with PCMCIA compatibility) That can interface through the PCMCIA socket of It is a dedicated encryption / decryption device embodied in the MCIA card. In iPower card Peripherals where both key / data storage and cryptographic functions are Is located in Again referring to FIG. 4C, there is no security on the iPower card etc. The peripherals that have been selected are the ROM 304 containing the encryption algorithm and the real time clock 3 6 'and encrypted data and key information supported by the off-chip battery (310) Has a 32-bit CPU 302 including an interface with a RAM 308 that holds . Attempt to tamper with or obtain encrypted data stored in the device Many attempts also result in memory loss of the data. In addition, pin level The device's I / O pins 312 are electrically isolated to prevent Also, The chip itself contains mechanical and chemical protection, and the tip probe device B) preventing the CPU 302 from directly accessing the encrypted information. This machine The densely protected perimeter 300 is separate software as described in more detail below. Additional non-volatility to store instructions and / or additional game related other information A memory 313 may further be provided. In the following, security is protected The CPU 302 in the peripheral 300 will be referred to as the security protected CPU 302. Note that the memory in the peripheral 300 that is security protected is protected I will call it “ri”. Thus, within the iPower card, all encryption / decryption functions are Run in a secure environment, CP of the game computer 14 It is not done in U27. Security of the surrounding 300, which is protected The communication between the CPU 302 and the CPU 27 of the game computer 14 is It is known and will not be described in detail here. Around 300 of which security is secured Security-protected CPU 302 generates an “authenticable result message” , “Authenticable result message” and / or other required machine When called by the game computer 14 to perform The CPU 27 of the computer 14 of the peripheral 300 of the appropriate signal is secured CPU 30 with security protection Send to 2 Here, the entire encryption / decryption module 28 is protected. Located in the peripheral area 300. This means that all encryption keys and algorithms It is stored in the memory of peripheral 300 where security is secured, and all cryptographic functions are The processing is performed by the processing unit 302 in which the peripheral 300 whose security is protected is protected. It means that it will be done. Therefore, the cryptographic protocol is encrypted and / or Is used for authentication, the game computer CPU 27, as will be described later, Of the peripheral 300 where the data to be encrypted and / or authenticated is secured. Send it to a secure processing unit to cryptographically process that data. Request. Secured CP of the surrounding 300 that is secured U 302 generates the “authenticizable result message AOM” it has generated in the system. Authenticatable Result Message AOM from any other gaming computer 14 Similarly, it can be used for post-mortem authentication. Also, it is Timestamp the sage, clock to the end for technical competitions 3 Can also be used to track at 6 '. CPU 300 with security protection Performs some of the computational processing required to run the game software It can also be done.   In an alternative embodiment, the encryption key is secured 300 Can be stored in memory where security is protected, but cryptographic algorithms And software instructions are confidential associated with the rest of the game software 15 Unprotected memory (ie, conventional game cartridges, hard disks, Disk, CD-ROM, etc.) to execute the cryptographic protocol. The actual processing is performed by the CPU 27 of the game computer.   Devices with external security, such as the iPower card mentioned above Can function as Tokens access protected electronic resources Physical computing device used by Tokens usually have cryptographic capabilities. Can store keys and other data. Intellectual Security Token (i ntelligent security token) authenticates the result And unauthorized players as well as performing encryption / decryption functions on certification Prevent access to the game computer 14. IPower card mentioned above Is an example of a token that is included in the security protected area.   Other such tokens include Smart Disk Security (Sma There is a smart disk (SMARTDISK) manufactured by rtDiSK Security Corporation. Suma Disk has the CPU and memory used to encrypt and decrypt data doing. Thus, like the iPower card, the encryption / decryption module 28 Can be present on the boot disk (ie, all cryptographic functions are smart Run within the Smart Disk is the user's password to gain functionality Request for password input. Thus, in order to access the system, the player It is necessary to physically possess the token and remember the correct password. Smart cards are similar to tokens. They have a credit card shape Include an embedded microprocessor that performs various security functions. Ru.   Another form of token, called Touch Memory, is a Dallas Semico Manufactured by Dallas Semiconductor Corporation. This Devices are stored in a small button-shaped stainless steel case. It consists of a computer chip. The case is ring shaped and fits on the player's finger It may be something. The chip is large enough to store multiple encryption keys up to 64kb It contains RAM or EPROM. The device is placed in contact with the reader device to 16 seconds per second. Send bi-directionally at 3 kb. Each chip is lasered into chips at the time of manufacture It has a unique serial number etched. The key from the device is the user As with identity, any of the cryptographic protocols described herein for authentication and / or cryptography It can be used. DS1422 Uniqueware (UNIQUEWARE) products, for example, So that layers can get and store a limited number of start messages The device can be configured to decrease transparently with each use of the device. DS1427 configuration Is a tamper-resistant real-time clock 36 'that can be used in the different examples described here. Contains.   In yet another embodiment, the player has a unique identifier associated with it. You can get the joystick you have. The joystick identifier is It can be used as the key of the cryptographic protocol described here, and the player The game software 15 of ー makes it possible to generate a certified or tournament game Can be used to The key is held in the ROM chip in the joystick It can be done. The game software 15 is in the RAM of the game computer 14 Loading game generation instructions loads keys from the joystick into RAM Be confirmed. If it is not recognized as the correct key, game software 1 5 may be inoperable. This is conceptually similar to "dongle" ing. Also, the joystick is secured like an iPower card Accept data from the surrounding area, and also protect the data around It may have an associated input / output interface to send. Therefore, the authentication Col can be done within the joystick structure. This method has the following Further details will be given in the examples.   Rainbow Technology (Rainbow Tec as a separate security device) There is a sentinel super pro made by Hnologies. Centimeter Nell super pros have the keys needed to run software applications It is a dongle that I'm tore. Software is a computer running it Require access to the dongle and if the correct key is not found Command to stop execution. Dongle is a parallel computer for personal computers Plug in to a remote port or an ADB port and have a length of 1. 65 inches wide 2. Measure 125 inches Ru. It's 128 of read / write memory configured as 16 64-bit words Contains a byte. These words are dedicated software time counters. Can be used and they can be run to limit the operation of the demo product. It can be done. Memory cells also have customer information, serial numbers, and bus numbers. Can be programmed with the In the context of the present invention, encryption / decryption Which key and algorithm (which is used by) to form part of joule 28? In the memory of the dongle Can reside in   The dongle contains a special cryptographic processor and memory and is stored in the iPower card. It can also have the same functionality as But plug in to parallel port Configuration dongles are not compatible with iPower cards that require PCMCIA performance. Compatible with almost all Intel-based computer hardware Is excellent.   The above-mentioned security-protected devices are in particular game-related data for audit purposes. Ideal for storage devices. For example, computer golf hole in one ton Hackers who are attracted by the prize for hole-in-one It is desirable to track each swing of the player as it will try right. In order to prevent such an upturn, it is necessary to Parameters of the game (such as Love) are security protected as they are encrypted It is sent to the present CPU 302. This encrypted data is protected 3 The encrypted receipt file is stored in the non-volatile memory 313 which is protected by 00. Can be stored. Any player who has put out a hole in one If the tournament official checks the game data and it matches the bill result Send a secure device before receiving payment so that you can To be obliged to Also of the encrypted game Parameters are sent back to central computer 14 and stored on the hard drive Can be copied to a floppy disk (non-secure memory Is). When claiming the prize, the player should send the disc to the management agency. The encrypted data may be played back by the central computer 12 using a game. Deciphered and analyzed to determine if the billing score was actually terminated Set.   As an additional level of security protection, CPU 302, which has security protection, Can perform some of the game calculations normally performed at. An example example The game program is, for example, electronic arts (ELECTRONIC ARTS ) PGA Tour 96 (PGA) Make technical golf games such as TOUR 96). In this game, golf Digital images of the game are created on the game And fairways, trees, and bunkers. Human figure piled up on this background Adjusted to respond to player input from the keyboard or joystick Answer, swing the golf club. The player's club swing data is Selected club (eg 1st Iron, 2nd Iron, 3rd Wood etc) and Specific characteristics (club head orientation), foot placement, swing force, speed, direction Represents various parameters such as. Typical computer generated golf In the course of the game, these parameters generate the resulting position of the ball Applied to software instructions to calculate the ballistics of the ball. Player After swinging the club, the display shows the position of the ball relative to the hole Can be shown. Including environmental conditions such as wind speed and direction and other random variables Other elements of can be introduced to enhance reality. Security protection Calculation of the new position of the ball is excluded from the CPU 27 if there is a running CPU 302 . This is a game that will only launch on CPU 302 that is secured Program 26 "Protected Software Components (Secur e Software Component)] 710 to create these calculation parts, for example, Software instructions to calculate such parts of the game according to the described game parameters Peripherals that are secured to encrypt blocks or perform such calculations Request additional data or algorithms stored in 300 memory And can be achieved. In this way, CPs that are secured U302 calculates the new position of the ball and if it is displayed on the screen then It is sent back to the CPU 27 of the computer 14. The calculation results are as already explained , Can also be stored on the hard drive of the game computer 14. Also, Some game variables, such as wind speed, are generated by CPU 302 which is protected. Can be These variables affect the calculation of the ball's new position, The player can not play a complete game because he can not control at least one variable. Using the mechanical device to play the game will be prevented. Also, Game parameters, such as wind speed, can be used to maintain security where the ball's new position is then calculated. Protected CPU 302 can be generated and then sent to CPU 27 . This embodiment is described in more detail below in connection with a pay-per-use meter system.   In the example using a game console, as generally shown in FIGS. 4G and 4H: CPU 302 with security protection in peripheral 300 'with security protection Enables cryptographically protected recording and playback of games generated by game computer 14 To interface to the VCR unit 400 to Can. In this embodiment, the video output signal from game computer 14 is VC. The video output signal from the VCR 400 is transmitted to the R400 video input and the TV 40 2 in a conventional manner. Confidentiality protection in the surrounding 300 ' Protected CPU 302 and associated hardware are compatible with standard VCR slot 404. Configured to match. In addition to the CPU 302 that is protected, The protected perimeter 300 'has a ROM 304 containing the encryption algorithm and Clock 306 and encryption supported by the off-chip battery (310) An interface with a RAM 308 that holds data and key information is provided. Secured perimeter 300 'has VCR 400 read / write head 40 8 to confidential through analog / digital (A / D) converter 410 The interface circuit 406 for transmitting to the CPU 302 which is protected It is further equipped. Video information is typically sent to the television 402 in RF format. RF The video signal demodulates the video signal to a baseband signal as is known in the art It may be processed within VCR 400 by front end receiver circuitry 412. Through Usually, the demodulated information is recorded on a VCR tape cassette. In the example of the present invention, Subband video signal data is digitized by A / D converter 410 Converted, encrypted with private key, non-volatile such as EEPROM 414 Stored in memory. For playback, for example, decrypt the data with the corresponding public key Ruko And the CPU 302, which is protected by security, authenticates and authenticates game data. Thereafter, the generation of video signals proceeds with the processed game data. Also, there is security protection The perimeter 300 'being used is used as described below to Software instructions may be included in the ROM to generate the result message AOM. this In “Authentiable result message AOM”, a bidet that appears on the TV screen at the end of the game It can be included in the o signal.   Referring now to FIG. 4B, the game cartridge used in the system of the present invention An overview of 21 is shown. Game cartridge 21 has a built-in cartridge The ROM 23a has a housing 19 containing the game software 15. 3a, via a game computer 14 and an input / output interface 25, Interface by the method of Software serial number SSN is shown May be displayed outside the cartridge housing 19. Sega and Nintendo's Game software 15 such as typical games, tournament available to players A game that allows you to select a (regular version) game that can be played Program 26 is included. Tournament-enabled games are usually games It is used by developers when testing and can not be done with the game program 26. "Cheat Code" can be generated. Also, there are usually some known Have certain known characteristics (eg bonus positions and certain battles) ) The gameplay aspect is that the game is less predictable than the regular version You can change it in the comment version. The official version of the computer golf game The tournament version has many, while it only has a few bunkers Can be Also, in the regular version of the computer baseball game, the opponent pitcher Can throw the ball at 80 miles per hour, while the tournament version The opposing pitcher may throw the ball at 100 miles per hour. Also, The game cartridge contains game software 15 for one or a limited period of use. It is possible.   Now, referring to FIG. 4D, the game cartridge 21 is a game software 1 Volatilize 5 Sex memory 23b. Volatile memory 23b is used in the conventional manner to Interface 25 is connected. In addition, volatile memory 23b is tamper- It is connected to the power supply 27 via the switch 29. The tamper switch 29 is generally Contact the cartridge housing 19 at the interface indicated by 31 in FIG. And, as a result, the cartridge housing 19 is about to break open Any attempt causes an interruption of the power supply from the power supply 27 to the volatile memory 23b. Result in erasing all program data stored in volatile memory 23b The The tamper switch 29 has many shapes depending on the configuration of the game cartridge 21. You can take the form. In the exemplary embodiment, tamper switch 29 is The cartridge so that physical intrusion merely results in the opening of the tamper switch 29 It is used for the housing 19. In addition, the tamper switch 29 Sensitive to certain levels of light that cause an interruption in the power supply once the housing is opened It may be composed of a photocell. In any case, the volatile memory 23b Interruption of the power supply results in the erasure of all stored program data. Compi This procedure for protecting the security of computer memory devices is known in the art. Clock 3 6, any attempt to change clock 36 is stored in volatile memory 23 b Stored in the game cartridge 21 to lead to loss of program data It may be   Referring now to FIG. 4E, all game software (except encryption / decryption module 28) Data is encrypted and stored in the non-volatile memory 23C, and the encryption / decryption key is And the algorithm (encryption / decryption module 28) are stored in the volatile memory 23d. You Thus, any action responsive to the tamper switch 29 Interrupt and erase the encryption / decryption module 28 stored in the volatile memory 23d cause. If the encryption / decryption module 28 does not exist, the non-volatile memory 23 c is The encrypted data that has been torn is meaningless.   In another embodiment shown in FIG. 4F, the game software 15 is an electronic library. It resides in the programmable and programmable read only memory EEPROM 23e. Cartridge Ha When the housing 19 is opened, the tamper switch 29 is closed and the power supply 27 The erase signal causes the data stored in the EEPROM 23e to be erased. EEPROM data The implementation of data erasure is known and will not be described in detail here.   Special Security Enhanced Tournament Cartridge 21 May also be offered to players for advanced class competitions.   Referring back to FIG. 4A, when the game computer 14 is in a certain position, To edit various tournament statistics and / or to prevent gameplay As a means to obtain information on where the game is played, a game computer 1 4 communicate with the Integrated Global Positioning System (GPS) 37 Or may be provided. GPS receiver receives location information from multiple satellites I believe. GPS information gives game software 15 a position-dependent prohibition mechanism It can be used to prevent gameplay in certain places. player When trying to start a game on the game computer 14, the game software 15 asks the GPS 37, the current location of the game computer 14 is in the permitted area Check if it is This permission area is incorporated into the game software 15 be able to. If it is determined that the game computer 14 is out of the permitted area , Game software 15 is the game computer access to the game of the player Order to reject Seth. In another example, the location information may In the game, and when the player submits the It may be uploaded to the central computer 12. This point, central computer 1 2 play without requiring submission of the player's specific location (ie home address) To rank / evaluate and / or edit statistical location data Location information can be used to The central computer 12 has a game console The player moves to which state, city or town the computer 14 was Game in all regions the player was in when he played the game Upload information from a computer, or into a database containing such information Access Can be confirmed by Most GPS devices consume a significant amount of data Has the ability to A typical handheld GPS receiver for aircraft Enough information can be stored to save location data across lights . Current GPS satellites are avoided if the military's GPS signal quality is suddenly reduced The future civil system currently under development is not always You will have the ability to give within 3 feet.   Fingerprint reader, voice recognition system, retina screen to prevent players from replacing A biometric identification device such as a can May be used for absolute identification of layers. An example of such a player is Taiwan It is a FC 100 fingerprint verification device 31 manufactured by the company Startrek. FC100 is Can easily be applied to any PC via interface card 39 it can. The fingerprint verification device 31 uses an optical scan lens. Player The finger is placed on the lens, the resulting image is scanned and digitized, and the data is It is compressed and stored at the Lee position 35. Typically only 256 byte files are needed is there. Each live scan fingerprint is compared to a previously registered / stored template Be done. If the fingerprints do not match, access to the system is denied. this The procedure is to start the tournament game or to prompt from the game software 15 Response at a given or random time in the game, or the player continues Always place his or her finger on the lens during gameplay for identification purposes Is a mandatory scan lens for game computer 14 It may be carried out continuously by incorporating it into the Fingerprint data is On the central computer 12 of the player information database (see Register / store in compressed format or hash value and / or with keys as described later May be used.   A voice recognition system that uses human voiceprints is also a central control for player identification. Can be used for either or both of the computer 12 and the game computer 14 Can. For identification It is known in the art how to obtain a voiceprint of and use it afterwards. I will not explain it in detail. Those skilled in the art can speak of speech recognition / confirmation technology from Speak EG EZ, Inc. ) May be recalled. In particular, the speaker identification software is Used to take audio samples. This sample is a player information database Source computer 12 is stored. Player is central computer 1 Every time it calls 2, it prompts the player to speak its name on the phone . Speaker identification software, then, the current player on the central computer 12 Command to check the voiceprint of the voiceprint stored in the memory. If it matches, processing continues. This is discussed in more detail below. Central computer The same ratio of players on the spot before the permission of the game play without the computer 12 The voiceprints are also stored in the database of the game computer 14 for confirmation. Good. This is also described in more detail below.   Next, referring to FIG. 5, the game computer 14 may Several exemplary ways in which “AOM” can be generated are shown. game At the end, the result (e.g. score) is displayed. In one embodiment, the result is It is only embodied in the code generated by some secret algorithm. This The algorithm is not known to the player and is not easily identifiable. It is the game software 15 or the encryption / decryption module 28 and the central console It resides on a computer 12. Thus, the player, for example, If you try to register the result of 1,000,000 points, game computer 14 Is, for example, the secret algorithm of 21328585 "Authentiable result message AOM". Generate along with Central computer 12, same game computer 14 and others Game computer 14 is able to authenticate the reverse of the secret algorithm A score equal to the score of 1,000,000 points for “AOM” 21328585 or the game Applied to the algorithm, and if the results match, the result is confirmed to be true or false . Thus, the result is that the game computer 14 containing the secret algorithm actually As long as you do not play Can not guess. In the preferred embodiment, the result using SSCID as the encryption key (And any play-related data) Can be generated by the encryption / decryption module 28. Tako with SSCID Depending on the result of the game (and play related data), Authentication of the result to the video computer 14 is possible. SSCID is bound to the result May be combined, and the combination is incorporated into the message that can be authenticated by different keys Be In this respect, the result and the SSCID code are scanned by the fingerprint Use biometric data obtained from the voiceprint system described above as a key. It can be used. Thus, the identity of the player is It can be confirmed. Secret game software or computer ID, SSCID Generating a known serial number based on the secret number that is not known to the player Is possible. In this regard, the player stands the game computer 14 first. After raising it performs the registration process. SSCID is used to encrypt / decrypt module 28 Therefore, it is encrypted and displayed on the screen. Player calls central computer 12 Enter the SSCID along with its name and / or PIN (Personal Identification Number). During ~ Central computer 12 decrypts SSCID and associates it with player registration information Ru. The central computer 12 then generates a unique random number RS associated with the SSCID. Generate The player will write this number and if he needs to Is used to identify her gaming computer 14. The same procedure It is also used to generate known serial numbers for software numbers. software Is also associated with the hardware. Player plays the first game Before that, he is required to register his new software. In this regard, The microcomputer 14 displays the SSCID in an encrypted form. Player starts playing Call the central computer 12 before. SSCID player information database 4 Added to 8 and then used in the result authentication process as described here . Thus, the player can play the game computer or game software Submit your certification / accreditation results using is there. The player has other game software 15 and / or game compu If the data 14 is used, the authentication process can not be performed.   In yet another example, the result may be other data that can only be understood by central computer 12 or other data. It may be represented by a symbol, but it should not be understood by the player I do not. For example, a score of 5000 is 3 green circles and 4 tea squares and 2 purple triangles Expressed from the form. Player sent score to central computer 12 It is then mandatory to send this data as a confirmation of the result. player Means that this combination has the same score, or a high score or a low score You can not decide whether to. But central computer 12 Deciphering the symbols of, in fact, according to some secret coding protocol, It can be determined whether it represents the same result submitted for regular use. Alternatively , Players are not given real scores. The score is secret and the central Central computer 12 only after the player 12 interprets the symbol data It will be revealed to you. This is similar to the encryption or coding of the result.   In the case of a tournament, the “Authoritative result message AOM” indicates that the result is valid. Tonamen by including data representing that it is the outcome of the narration game Can prove their effectiveness. This data can be Subliminal messages can be constructed. Also , "Authentiable Results Message AOM", start tournament play for this purpose "Authenticatable Start Message (ASTM)" Or part of it.   “Authenticable result message AOM” is the editing of market research information to the accreditation body It can also contain statistical data to enable This data is for game computing It can be compressed by the processor 14 and decompressed by the central computer 12.   The game software 15 is for game play on the game computer 14 I will save to a certain point and command to restart play from that point after that Configured It is possible. At this point, the player can start from where the game was interrupted. "Open code" can be generated. The gameplay to a specific point is the whole Can be stored in non-volatile memory. This is how many players It is possible to resume play at a later time or later by interrupting after the end of the hole. Can play golf tournaments. Alternatively, the game computer 14 represents the result of the game up to this point. M can be generated. This allows the first player to continue the game You can "pass" the AOM to the next player to This configuration is the player It is similar to a relay competition where you run a distance and pass an object to the next runner. Also, Therefore, the same player has a huge amount of data representing the game play to the end point You can resume gameplay without having to store Game pro Grams typically produce games that are separated into different levels, so play This “code” is given by the player as the game progresses and proceeds from level to level. Used to instruct game software 15 to continue from the point of Can. If the player chooses "stop" or "end game", If the year wants to continue the same game later, he "AOM" is input to the game computer 14. Confirm that it is true If done, gameplay proceeds from the previous end point.   Integrity of the game software 15 (ie Digital signature protocol can be used to Ru. In this respect, digital signature algorithm using private key Used to “sign” This message is generated by the function Software hash value, software code created by compression algorithm It may be a compression value of The signed message is then Computer 12, identical game computer 14 and other game computers 14 May be verified by a public key digital signature algorithm . The secret key may reside in the encryption / decryption module 28, preferably An encryption / decryption module 28 is present in the above-mentioned security protected area 300 May be The secret key may be SSCID and / or the digitized bio It may be a hash or compressed value of metric fingerprint data or voiceprint. Public key The player is a software digitizer at each game computer 14 Central computer, as described above, so that the authenticity of the It may be included in the KDC of the controller 12.   In the exemplary embodiment, the encryption / decryption module 28 is a game software Software that creates all or part of a 15 (ie, the game program 26) Generate a hash value for the instruction. This hash value is' authenticable result message AO It is incorporated in M]. The hash value is a numeric expression of the game software 15 Generated using a working one-way hash function. An example of a one-way hash function is Secure Hash Algorithm (SHA). SHA is the United States Government standard, National Institute of Standards and  Technology) is identified in FIPS PUB 180. Another example of hash algorithm Examples include MD4, MD5, RIPE-MD, Habal, and the like. The person skilled in the art applies ・ You may refer to cryptography. As a special example, game software Each character of the word 15 is converted to an ASCII value, and then converted to a binary sequence of 1 and 0. It may be replaced. An exemplary one-way hash function works in this series as (1) exchange all 1's and 0's positions; (2) 64 digit each (3) raise each block to the fifth power and cut the result up to 64 digits; 4) Take the last complete number and square it; (5) convert this binary number to base 10; (6) Retrieve the last 24 digits as a hash value. The game software 15 The first hash value for a given copy is created before the sale or It may be stored in the computer 12 or may be published. This hash value is sold Each copy of the sold game software 15 is obtained from a different one-way hash function be able to. More favorable game outcome (ie higher score) Or tamper with software instructions to create an earlier time to termination) Game software If you try to change the hardware 15, such changes to the game software 15 Is the newly generated hash function and the most It is detected by a mismatch with the first hash function.   Software instructions may be read from the volatile read / write The game software 15 can be tampered with while it is resident in the RAM). In order to prevent unauthorized operation, the hash value of the entire game software 15 at the end of the game Can not be detected simply by generating Improper operation of the game software 15, While it is resident in RAM, one of the ways to detect and find evidence is The CPU 302 periodically protects the protected peripherals 300 from being protected. Check the blocks of the video software 15. In this regard, With reference to FIGS. 6A and 6B, the game software 15 has n blocks of instructions. May be configured by Here, each block 314 is a one-way hash Related hash value h determined by the function_lTo h_nHave. Similarly, all blocks Hash value h_lTo h_nMaster hash value h_mAlso by a one-way hash function It is determined. These values are stored in the peripheral 300 (ROM 304 which is security protected. Or store in secure memory (such as other non-volatile memory 313) can do. The security of the surrounding 300 that is protected is protected. The memory can store such values for many different games. Process At 316, the block is loaded into the RAM of game computer 14, The instruction is executed at step 318. Software Instruction Block 314 Is replaced in the RAM of the game computer 14, block 3 14 have no security for the perimeter 300 that is security protected at step 320. It is read and loaded by the RAM 308 that is being With security The (peripheral) CPU 302 uses a one-way hash function at step 322 The hash value hsp of that block 314_nCan be calculated that Hash value hsp_nThe perimeter 30 is secured at step 324. 0 security protection Known hash value h of the block 314 stored in the_nCompare with Be done. If the calculated hash value hsp_nThe expected hash value h_nMatch with If the game has not ended in step 328, only n in step 330 Next block instruction 3 to replace the previous block represented by increasing 14 is loaded into the RAM of the game computer. If the hash value calculated hsp_nThe expected hash value h_nIf they do not match at step 326, The CPU 302 that is protected can take several actions. First of all In order to make the game program 26 inoperable at step 328, The message is sent to the game computer 14. It is also protected At the end of the game in step 332, the CPU 302 confirms that “the certifiable result message A Can also generate tampering indications that can be included in the If the operation is not detected, it is determined in step 329 that You can also generate a display without tampering, as contained in the Therefore, The layer has been tampered with as indicated by the tampering display. If you intend to submit the certification results obtained from The result can be rejected. Confidential security of the surrounding 300 CPU 302 being protected is alternatively when each block 314 is examined. Individual block hash value h calculated on_lTo hsp_nMaster based on all of -Hash value hsp_mCan also be calculated. Then this master hash Value hsp_mThe expected master in the peripheral 300 ROM that has been secured It is compared with the hash value hm. If the master hash values do not match, the machine The CPU 302, which protects the peripheral 300, which is tightly protected, Generate tampering indications incorporated in the testable result message AOM ' Can. Alternatively, the master hash value hspm itself may be And may be incorporated into the message A verification of authenticity may be made at 12.   In the case of a dedicated game computer 14 (ie, a game cursor), software RAM instruction If it is more difficult to access and change it while it is If the required level of security is not high, the perimeter is protected 300 May be unnecessary. But in the form of video game intensifiers by Game Genie In the situation there is a unique problem with game consoles. Game Genie the game An intermediate device connected between the cartridge 21 and the game computer 14 is there. In the game console example, game software 15 is a dedicated game cart It exists in the ridge ROM. In the case of the intermediate device, R of the game cartridge 21 Change program instructions loaded from the OM into the RAM of the game computer 14 Allows the player to temporarily change the predetermined gameplay mechanism it can. This change is not permanent and if the game computer 14 is powered off Disappear. It is partially certified that the authenticity of the integrity of the game software 15 It is a unique challenge to the present invention that relies on The present invention relates to an authentication protocol Problems of intermediate devices by using one-way hash function and encryption It is solved.   Similar to the above example incorporating a one-way hash function, n game software Block of software instructions, each block having an associated hash Value h_lTo h_nAnd the entire series of instructions has the individual hash value h_lTo h_nThe Master hash value h calculated by applying to one-way hash function_m have. The hash value of each block is the same or different one-way hash function Determined by One of the blocks is a list of all hash values for the other block. And the master hash value h_mAnd each block hash value and the master hash It can contain a hash function that is used to calculate the value. As mentioned above Master hash value h_mMay be stored in game software instructions, The player may input to the game computer 14 at the start of the game. This Master hash value h_mThe player is it stored in the instruction The hash value h to determine if it matches one of the entered values_l To h_nBy first calculating the master hash value hnewm from Checked at the start of the game. Calculated master if an intermediate device was used to change any instruction -Hash value hnewm matches the entered master hash value at game start do not do. After the intermediate device is loaded with software instructions into RAM, Game software 15 to the CPU 27 to confirm that it does not Against the hash value hnew of each block j_j, It can be replaced in RAM When it instructs to calculate and the new hash value for block j Master hash recomputed based on the known hash values of all other blocks Value hnew_mContains. Calculated master hash value hnew_mIs The known master hash value h in the hash block after_mCompared with. The squid If a mismatch is found even when the game Computer 14 to make game software 15 inoperable, or Order to generate the tampering indication contained in the testable result message AOM ' You can order. In this regard, the hash value h_lTo h_nAnd h_m, One-way Functions and instructions to check game software instructions in this way It may reside in a ROM chip internally associated with the computer 14. Follow The protocol is essentially the same, but the "security" The hardware 15 is being executed from itself.   Another solution to the intermediate device problem is that the game software is a game computer 14 It is to use an authentication protocol so that it can be implemented within. This point The game software instructions stored in the ROM of the game cartridge are Authentication is possible if the computer 14 authenticates the instruction prior to program execution. It may be configured to This is a software instruction by the game development machine Can be executed by encrypting it with the Computer 14 uses the corresponding public key before executing the game program. It is mandatory to decrypt the encrypted game software instructions. Decoding station Execution instructions and algorithm are stored in ROM chip (not shown) of game computer 14 Exists in Game software instructions are encrypted into blocks. It is a ROM chip before each block is executed in the RAM of game computer 14 Are decrypted by the CPU 27 with the stored algorithm and key. Middle If the device is used to change game software instructions, encrypted game software The authentication process performed by decrypting the toware instruction with the public key is not understandable The game program will be changed by showing the command of. This change is RO M chip security program can be detected by the game software 15 as “inoperable result message for inoperable display and / or tampering indication” Can be used to incorporate   Equally effective in addition to encryption technology to disable game genie type devices There are other ways that can be targeted. Some technologies are not only game scores but also It is to authenticate the characteristics of some keys. For example, the game Genie is a player It may be possible for the player to be completely invulnerable to the opponent's attack. Example For example, if the game he or she was playing required to finally kill the dragon If it was, the player who strengthened with the game Genie decided to defeat the dragon quickly There will be no difficulties. Most players spend more time and results There could be more damage as possible. Central computer 12 Compares it to known information to determine if it is within the "normal" range This information (eg, elapsed seconds, damage units received) to It can be included in an authenticatable result message AOM '. If it is outside the normal range If so, the central computer 12 sends a reply message to the game computer 14. Interrogation / response protocol that includes a predetermined register value (ie, incapacitated state) in the message. You can start the Instead of detecting the presence of the game Genie directly, This protocol detects the termination effect of the game Genie. , As known in the art To effectively hide how game software 15 is running Software obfuscation techniques can also be used Can. Software that has been puzzled by reverse engineering has a considerable amount of time Requires and delays the creation of cheat code created by the game Genie. CD-ROM has to be remastered after every ten thousand presses In, you can create many different versions of game software. Therefore, Mudgeney devices do not generate cheat code for each possible software variant It must be.   Another solution was that the game computer 14 loaded the game program 26 It is to monitor the time interval between the time and the time the game actually started. If you If the musnies device is used, the player plays the game before the game starts The game should go straight to you because you have to enter the cheat code on the computer 14 Does not start on   In yet another embodiment, the entire game data is removable memory media. By storing the central agency, the game is qi by the game Genie device It can be decided after the fact whether it was created by input code. This data is here It can be "recorded" as detailed in.   The above-mentioned tampering indication is a "subliminal channel" of information (ie Information) can be incorporated into the “authenticizable result message AOM”. Above In addition to the hash value and the cryptographic authentication protocol, the game software 15 For example, perform one-way hashing of the current memory register to get the hash value It can perform its own integrity check. Then it has this hash Allow for possible hash values stored as a series of game program code Determine if it is within tolerance. If the determined hash value is within the allowable range If present, it returns the tamper indicating value to 0 (ie, the presence or intention of tampering None). If the determined hash value is out of the allowable range, it is an indication of tampering Set the value back to 1 (ie with or without tampering). This tampering display value 0 or 1 is attached to the result and is incorporated into the “authenticable result message AOM”. " When an authenticatable result message AOM '' is authenticated by the central computer 12 A tamper-indicating digit is incorporated, a copy of the game software 15 Display whether it has been changed or corrected. These messages are what hackers It will be very difficult to interpret the meaning Arranged as For example, in column 13000087457, the last digit 7 of the column The seventh digit, that is, a pointer of "8". Where this digit is An even number indicates that tampering is intended. Similarly, game software 15 Can generate a score at a specific multiple, for example 5, so that 5 or Any score that does not end in b is invalid. Furthermore, game software 1 5 differs by one digit in the score, for the self-integrity check described above Therefore, an unauthorized operation can be displayed. For example, a score of 3905 is valid If the score is 3905 + 1 = 3906, the addition of the number 1 indicates an incorrect operation. , That score is rejected.   Natural randomness of magnetic memory media making game software 15 available The change is detected and the secret or private key of the cryptographic protocol described herein Can be used as These features include coercivity, grain size, film thickness, It includes changes such as surface contours. Thus, each actual memory medium It has a unique "memory media signature" that is gender dependent. This unique memory medium station One way of detecting the name is US Patent No. 5, issued to Fernandez. 235, 166 No. 2 is disclosed. The Fernandez patent is Derived from the transducer output Detect the relative position of specific features of the after that, Known as "jitter" Teach to measure the deviation between the exact locations of peak points. jitter Depends on the medium itself and the associated data stored therein. Jitter is Digital mapping, That is, Table of all values of jitter or samples of jitter, or Is Obtained from some amount of jitter or one-way function (to create a hash value) Checksum of the amount Or Equivalent to jitter in different areas of the medium It is expressed as a large number of checksums. The first memory medium signature is Game Before selling or distributing the software 15, Memory area 80 tournament data It can be stored on the central computer 12 of the base 46 (see FIG. 7). Follow , During result registration processing described later, This information is a note such as game cartridge 21 Hardware as disclosed in Remedia to Fernandez Patent It can be read out by Results submitted to central computer 12 for accreditation Central computer 12 is the first memory medium signature when the current memory medium is As you can compare with the signature, "Identifiable result message" of this information Can be included. Alternatively Memory medium signature is used as a certification encryption key It can be used. In the former case, If the newly calculated memory medium signature is If it does not match the first memory medium signature, The game software 15 has been changed And And / or An unauthorized copy has been made. If the memory medium signature is If used as an encryption key, Regarding copying of game software 15, result You can be certified. Another unique that can be used for this cryptographic protocol Key is It is a unique ID number built into some central processing units. For example, Intel is A unique number is assigned to each of the processors. This number is Each time a testable message is generated The encryption / decryption module 28 reads It is possible. This unique number is As mentioned above With the SSCID according to its definition It can be called.   Referring now to FIG. An exemplary memory arrangement of central computer 12 is shown. ing. Again, Central computer 12 is illustrated as a single unit It may be a network of multiple computers. Central computer The 12 is In particular, Includes a memory 42 containing several relational databases Ru. They are, Game database 44, Tournament database 46, Pre Year information database 48, Result database 50, as well as, Statistical database Contains 51. Central computer memory 42 is Encryption / decryption module 52 , Transmission error check module 54, Rating / ranking module 55, Time / date Module 56, as well as, An operating system 58 is also included. Transmission error The check module 54 Retransmission order or request, On game computer 14 As mentioned above, Also, As can be done as known in the art To Detect transmission data decay due to communication problems such as input errors and noise It has a function. Operating system 58 Central of central computer 12 The processor 60 is controlled. The clock 62 is In the conventional way Provide a signal to the central processing unit 60, It was requested Used by the time / date module 56 to time stamp the input message Used. Alternatively Trusted Digital Time Stamp Service This Function Can be used for   The game database 44 is The game ID data is stored in the game memory area 64, Game Name in memory area 66, And The tournament ID data is included in the memory area 68. You   The tournament database 46 is Tona that uniquely identifies each tournament Memory ID number in the memory area 70, Corresponding tournament date or tournament Memory area 72, the effective period of the Department level for a given tournament ( The tournament is a beginner, Intermediate, Can include many levels, such as advanced people ) In memory area 74, Awards or any prizes paid for a given tournament Note the information on the fixed awards for the high score that is also for the game Region 76, SSCID and software serial number SSN are stored in memory area 78, First Memory medium signature to memory area 80, First hash value of game software 15 In the memory area 82, Participation paid or prepaid for a given tournament In the memory area 84, Start message to allow a given tournament to start Sage to memory area 86, Result message received from game computer 14 Into memory area 88, And A player participates in a future tournament Memory area 90 contains acquired qualification points to be able to .   The player is Then proceed with the registration process, name, Street address, phone number, Individuals such as age Supply human information to central computer 12, In player information database 48 Store The player is Registration card included in game software 15 Can be returned. This registration card contains player ID data and game software. The serial number SSN of the hardware 15 is included. Registration card is Holog hard to forge It may include security indicia such as a ram and / or secret ID. By this, The Software 15 is used on home PCs Case or game software 15 resident on the game console game cartridge If you do, Central agencies associate game software 15 with specific players Can be confirmed. To the player Related to the tournament Or independently Player ID used for tournament registration and result registration process Is assigned. Also, The player is From the biometric device 31 Biometric data (ie, Digitization obtained from a fingerprint scanner, compression , Or Voice obtained from hashed fingerprint data or voice verification system It may be obliged to provide Player information database 48 The player ID and / or biometric data is stored in the memory area 91, SSCID in memory area 92, Memory of player's name / address / phone number / age Around 94 Memory of team ID number of team in case of team tournament In area 96, The memory area 98 lists the tournaments the player fought. Follow , Acquired qualification points that allow players to participate in future tournaments Each of the memory areas 100 includes instructions. Furthermore, Memory area 101 is Adjust the player's outcome for a given tournament game or game software The difficulty level of the game generated by the hardware 15 is To modify by sending the game difficulty level of Store player handicap values that can be played. Handicap value is It can change according to the skill level shown for a particular game on the layer Can. For example, In golf tournaments, Han based on previous tournament results The decap value is used for post tournaments. The weak player is the final score Can have the number of strokes subtracted from Strong players are added to the score Number of strokes. Instead of adjusting the number of strokes from the score, Handicap is The Layers can be beaten and shot again "Muligan It can also take the form of the set number of Player position, Evaluation, as well as, tight Le Similar to the result database 50, It can be stored in memory area 103 Can.   The result database 50 is The tournament ID is stored in the memory area 102, Any recognition Results for a fixed or tournament game (ie Score, Listen at the end Other games Memory of the player's rating / ranking / title list corresponding to the special characteristics of In area 104, And Put the player's name or team to memory area 106 It contains.   The statistical database 51 is The game ID data is stored in the memory area 51a, player And team data to memory area 51b, And Memory area of various statistical information It can be included in 51C. Statistical database can be used by telephone or online service It is accessible through. It may be password protected or protected It does not have to be.   Referring now to FIG. 8A, Flow chart of an exemplary tournament entry procedure of the present invention A chart is shown. For the purpose of drawing, The flowchart is Player in Figure 1 Manually or by voice response hardware / software by prompt response from IVRU Describes a system for inputting messages into the phone 18 by voice) ing. But, Those skilled in the art will As shown in FIGS. 2 and 3, Direct link or online By setting in connection, The game computer 14 itself and the central computer It will be appreciated that messages can be communicated between data sources 12. Ah In the following example, All games are tournament games. Another (shown in Figure 8A) In the example of In order to play the game in the normal way, the player Once computer 14 is enabled, Game software 15 is a game computer Process the choice between joining a tournament or playing a full game Generate at 108. If the player chooses to play the full version game If The game computer generates a game in a conventional manner at step 110 Will. If the player chooses to participate in the tournament, Player Against For example, Biometry using fingerprint verification device 31 and voice print check It may be required at step 111 to proceed with the verification procedure. Game software A 15 performs the tournament version of the option at step 112. in this case, The Modify the game parameters of the game software 15 in another way You can also include an inoperable cheat code. Also, Game software There are 15 At step 114, For the game computer Given tona Ment's tournament ID, 800 toll free for players who make phone calls Command to display the number. The use of an 800 toll free number is exemplary. Ru. If it's a different tournament, Use the 900 number to charge the specified call charge May be All or part of it may be added to the tournament participation cost. 900 number In the case of A blocking system can be used to prevent children's calls. this is , Operatively connected to central computer 12 to provide a given calling telephone number or a particular PI By setting a special blocking phone number to block access from people with N Can be implemented. In the former case, The central computer 12 is Database Source calls made from a specific phone number that the source has identified as "blocked" The request for participation in a narment can be rejected (blocked). Outgoing 900 call Caller ID is Automated Number Identification Format (Automated Number Identificati) on: ANI) can be created using the system. Blocking is done by PIN in case of, The central computer 12 is Blocked PIN, In PIN blocking database By storing that list in It can be identified. With the 800 number Tournament ID is May be included in different reports with game software 15, It does not have to be displayed on the game computer 14. But, For the purpose of drawing, Less than Then, Description of a system in which the 800 number is displayed on the game computer 14 Do. The player is At step 116, dial 800 through the IVRU 16 Connection to the central computer 12. The IVRU 16 At step 118, play Prompt the player for the player ID. On the contrary, The player turns on at step 119 The player ID is input to the keypad of story 18 in the conventional manner. Player ID Is Sent to the central computer 12 Central computer 12 is a player Check the information database 48 and that player has a valid player ID In step 120, it is determined. If not, Step 12 In 2, The player is in the middle section as described above Register in the If the player ID is verified, IVRU16 Is the player's tournament ID, Game software 15 software The serial number SSN is prompted at step 124. Player is tournament ID and game software The serial number SSN is entered into the telephone 18 at step 126. Given tona Different categories (ie, Novice, May have intermediate and / or advanced level) Because Players have the option to choose the level of competition appropriate to their skill level It may be done. If the player has a choice, The IVRU 16 Step 128 In Prompt the player for a specific tournament division number. At step 130 Yes, The player is after that, The department level or number is entered on the phone 18. Alternative So If the player already has a rating stored in the results database, The department level can be determined by the central computer 12. Tournament day The database 46 is Memory area 74 keeps track of departments for a given tournament I have it. Central computer 12 should limit the number of participants in the tournament Because you can If the player is going to participate in a tournament, it is still empty You can check if there is. If there is a vacant seat, Central computer 12. Do players prepay for tournament participation? Or Prepaid toe Process 1 whether or not the participation of Naruto was included in the purchase of game software 15 Check at 32. The player has a certain cost in some predetermined way If you pay, Payment for participation in the tournament must also be made by direct debit It can be seen that The tournament participation fee is Central computer 12 notes It is stored in the area 84. If you do not pay for the participation fee and need the participation fee, The IVRU 16 At step 134, Prompt the player for a credit card number. The player is At step 136, Enter your credit card number on the phone. Credit card number validity is checked online in the conventional manner . of course, Instead of manually entering a credit card number on the phone 18, Kle The credit card's It can be used and authorized. In the alternative embodiment Is Allows you to pay for tournaments and play tournaments The start message is unnecessary. At step 138, The central computer 12 is next, Using encryption / decryption module 52 Player tournament game And "Authentiable start message ASTM" for specific game software 15 Generate "Authentiable start message ASTM" is Expected game computer and And / or when only the game software is decrypted with the required key Can be encrypted so that it can be used. At the process 140 , The 'authenticable start message ASTM' is sent to the player by phone 18, after that, By the player (eg Computer keyboard and joystick Through the game computer 14). In this regard, "Authentication is possible Start message ASTM '' is Tournaments based on random public sources Ray can be made possible. In such an example, Player can start "authenticable start" Message ASTM 'and television and radio, Available from certain public sources such as newspapers Input both functional and separate inputs. Therefore, Tournament play is player But, For example, Lottery pick "4" broadcasted at 10 o'clock news of channel Z Start when you can get the initialization code from the This random information is a game Must be input before play, Part of "Authentiable Result Message AOM" become. Therefore, This information is The game started after the event that triggered the outcome And to confirm. The game computer is At step 142, Cryptography / Use decryption module 28 to authenticate "authenticizable start message ASTM" can do. The authenticated start message is In step 144, game Signal the program 26 Enable tournament game play. Open The opening message is a valid tournament game for game software 15 Signal to Also, that is, For the game software 15, For example, Specific or random default settings for the tournament game, such as combat level It can also include instructions to generate parameters. In this regard, The start message is , To start a given tournament Or television or radio at a specific time to start the player's match in a technical competition , Or It may be broadcast by mass communication channels such as the Internet Recognize. The example is described in more detail below.   The start message is Use payment (pay-per-game: pay-per-game) game It can be used to facilitate b. For example, Player is central computer Call the data 12 A specific start fee for one or more games for a specific cost Get a sage. As a result, Game computer 14 in a home environment It can be operated like a computer. In this example Start message It can be used as Without it, Game software 15 Can not generate The game computer 14 has a clock, Preferably Assuming that it communicates with that of tamper-proof type, Start element of timing By incorporating in sage, It is "time-limited" (ie A certain place The fixed period can be effective. A variant of the concept of pay-per-use is another of the present invention. Aspects are described in more detail below.   The start message can also be used in other examples. The start message is Game Can include compressed advertising information to be decompressed and displayed by the Can.   Referring now to FIG. 8B, In a game center environment that operates with coins, play Yah, Take part in several tournaments embodied in the prepaid card 216 It can be purchased. Card 216 includes a memory medium such as a magnetic stripe It is. For example, The game computer 14 in the case of a game center machine is The Communicate with the CPU 27 of the A card reader 218 is provided. Card 216 is Exchange with central computer 12 Obtained from the tournament operator station 220 with the card encoder 222 Be The tournament operator station 220 Place a tournament operator Or It consists of an automatic device that accepts payment and tournament participation request itself be able to. Player can use tournament card with credit card or pay by cash. If payment is made by credit card, Toname The operator obtains the online permission in the conventional way, after that, Tonamen Send a request for participation to the central computer 12; If payment is made in cash, To The comment operator sends the tournament participation request to the central computer 12 Only. If you receive multiple tournaments, Central computer 12 , If the start message can be encoded on the magnetic stripe of card 216, Correspond Generate a number of 'certifiable start messages ASTM', Operator station 220 Send to Here, the term "message" is Each tournament participation order or Used to identify the code. For the corresponding number of tournaments, single It can be seen that the message can be made to contain multiple participant codes. Therefore, Multiple 'Authentiable start message ASTM' implies participation in multiple tournaments . When the player passes the card 216 through the card reader 218, About the tournament The associated "authenticizable start message ASTM" is: On game computer 14 Therefore, it is read out, As mentioned above Enable tournament play. "Authentication is possible (Eg, for example, The specific game identified by SSCID) Enables tournament play on computer 14 or game software 15 In order to 'Authenticable Start Message ASTM' may be customized it can. In another example, "Authentiable start message ASTM" is Given ' The right to submit the result represented by the proof result message AOM 'can occur only once So that The unique identification information to be included in the “Authoritative result message AOM” Can be included. Therefore, The player is Get on another game computer 14 It is not possible to steal the 'authenticable result message AOM' that represents the high score I can't. Because The central computer is From a given gaming computer 14 The “authenticable result message AOM” representing that particular score has already been used. It is because it can determine. Easy to apply the present invention to game center environment To do Game center machine (game computer 14) A to the phone Player when access is restricted To make it easier to register results "Identifiable result message It may have a printer for printing AOM. “I can verify the By printing "Sage AOM", players can call by phone at a convenient location Have access to the system, Game center machine and central computer There is no need for hardware for online connection between Next, referring to FIG. A game sequence flowchart is shown. At step 146, game The computer 14 generates the game in a conventional manner. If it is mentioned above If it is a tournament game, Game software 15 does not work cheat code Noh, Gameplay characteristics may be randomized compared to non-tournament version games You can change the game to Make game play easy or difficult Can be And / or Ann hidden battle levels compared to non-tournament version games It can be locked. At step 148, Game software 15 ends Time to, and The number of lost lives, Consumption time per level, Secret treasure found Track special play related information related to the game, such as the number of. In step 150 Leave The player ends the game Game software 15 produces a result Ru. In one embodiment, The game computer 14 is Player is step 15 Generate an option to select whether to submit the results for accreditation in 2). If the player is Submit to central computer (in case of tournament) If you want to generate a functional result, Or A certain score was finished If you want to prove it to a friend later, "Identifiable result message AOM" mentioned above (Or “authenticable timing message ATM” for technical competitions) at step 154 It is generated. Otherwise, The player plays another game at step 156 I will return to Ray. In the case of a tournament To the player Submit certification results No choice is offered.   Referring now to FIG. 10A, Qualification sequence for tournament examples A flowchart of the scan is shown. In this example The result is central computer 12 Submitted to The Scarecrow, Independent of the tournament, Simply use similar procedures to qualify the results You may In that case, The central computer 12 is Online service or telephone Updateable player scores and statistics accessible to players through Generate a database. Statistics are Past winners list, Current tournament Includes the top player list of Start the tournament game result submission process The game software 15 is As mentioned above At step 158, Game Display the 800 number on the computer 14 for the player who calls And order. The player is At step 160, Tornage by IVRU16 You will be prompted to enter Player 1 calls it at step 162 Enter at 8. The central computer 12 is At step 164, Tournament ID Followed by the tournament database 46 of the particular tournament identified by To access. The IVRU 16 after that, At step 166, To the player Player ID, Software serial number SSN, as well as, "Identifiable result message A Encourages OM. The player is At step 168, Enter the player ID, Soft Serial number SSN, as well as, Enter “Identifiable Result Message AOM” by phone 18. To force. This process is Even if it contains many 'Authentication result message AOM' input Good, A single "authenticable result message AOM" may represent several results. Yes. The central computer 12 is At step 169, For example, Fingerprint verification device 31 Biometric verification of the player's identity may be required. finger The biometric confirmation procedure using the fingerprint identification device 31 is shown in the flowchart of FIG. 10B. Show. At step 169a, The fingerprint verification device 31 reads the player's fingerprints. Scan and It is digitized at step 169b and Digitized data Is compressed or hashed by the game software 15 at step 169C. Be The compressed or hashed data is sent to the central computer 12, The central computer 12 is At step 169d, Memory area 9 for current data It compares with what was stored in the memory of the player information database 48. if, The current scan of the player's fingerprint Compressed or hashed data obtained from the Player information database If it matches it stored in The identity of the player has been confirmed become, The result submission procedure continues to step 170. Otherwise, Result submitter The continuation ends. Similar biometric verification procedures for players are: The voiceprint confirmation in the central computer 12 is performed. Central computer 12 Is At step 170, Encryption / decryption module 52 and any of the above mentioned protocols Using the Authenticate "Authentiable Result Message AOM". Authentication is specific Depending on the chosen cryptographic protocol Ensure identity and / or integrity. Outgoing Encryption of the result by the private key of the While confirming oneness, For example, Hashing the result without using a key is the result Will confirm the integrity of the (Encrypted by the sender's private key Digital signature (which is a hash) verifies both the integrity of the result and the identity of the originator Do. The central computer 12 is Timestamp the message, Or This machine A trusted second such as digital time stamping service to perform Communicate with the three parties. Digital time stamping is known in the art, The details For details, see US Patent No. 5, 136, 646, Issue number five, 136, No. 647. " The certifiable result message AOM is a memory area of the tournament database 46 It is stored in area 88. If the result is not true at step 174, then at step 176 But it is rejected. If the result is true, the central computer Proceed with. The central computer is At step 179, As mentioned above Game Check the integrity of the software, or Proceed directly to step 178. If step 1 As a result of software integrity check at 79, Illegal operation in step 180 If you find a work, The result is rejected. The result is certified game software After the integrity of 15 is confirmed, The central computer 12 is At step 178, The certified result is added to the result database 50 of the memory area 104. Illustrative embodiment Then, Accreditation results are Corresponding tournament ID of memory area 102 and memory area 1 Referenced by the name of the 06 player. Process At 181, The central computer 12 sends an “Authentication result confirmation message (Authentic ated Outcome Confirmation Message) AOCM can be generated. "Result confirmation Acknowledgment message AOCM When sent to game computer 14, Game software The wear 15 is Specific results (eg, Score) by central computer 12 In order to achieve the effect of being certified, Certified score for game computer 14 It can be used to display the board in language. Same "Result confirmation message" “AOCM” is Game software 15 is set for game computer 14 Used to command the generation of special symbols or medallions with level language skills can do. They are, During the post gameplay, Picture with player ID It can be displayed on the surface. From the competitive nature of video games, this Mechanism greatly strengthens play value game by awarding player's score It is   At step 182, The central computer 12 is Use rating / ranking module do it, Generates the current player's tournament position. Result database 50 The player's standing in state, school, Secondary order represented by age group etc Can include a rank. If the tournament is still in progress, Present to players The order of the present is given. The tournament is At step 183, Certain given End at the moment. At step 184, Central computer after the end of the tournament The timer 12 selects all the scores and determines the winner from the final rank. They are, Beginner , Intermediate, As advanced levels have different winners depending on relevance ranking and rating You may go by department level. At step 185, Awards are awarded in the conventional way Ru.   Also, Players who have achieved a certain technical level can receive an award exclusively Can. For example, "2 stars" Sonic the Hedgehog (SONIC THE HEDGE HOG) Being a layer is 50, It is required that two scores of 000 points or more be certified It is important. Players who reach this level of score Awarded, Or Broken The privilege to purchase the prize at the price of the rating Is given. Apart from the catalog for "two star" players, "3 stars" play There may be a catalog for ya. Awards for achievement of certified play levels Real Incorporating the player's name into the background graffiti of the game screen, game Rename a character, Modify gameplay or video in any other trivial way To do The new higher score player has these transformed features Until you change the sign, It may be incorporated in the game software 15. The , The player information database 48 Tournaments played and future events In order to reflect earned qualification points that can participate in The memory area 100 is updated.   Also, If the player exceeds a certain threshold level, he or she It is understood that “izes)” may be awarded (eg, Any Mortal Comba Players who scored more than a million in the game You will receive This award is For example, The player's credit in the form of $ 50 credits It may be executed on a credit card. In the embodiment of the golf game: Spy De awards are sent to the hole in one of each hole, Normal to the lowest score Complement the Naruto prize structure. Also, If tournament is game center environment If it is done at Players play speed prizes at the game center's age You can get it from These speed awards are mutually exclusive It can be awarded before the end of the comment. Will the game center be a central agency later? All or part of the prizes are redeemed. Other awards include For future tournaments Coupons for pulling or participating for free, Frequent flyer miles (fre quent flyer miles) and hotel points, And / or special Cheat code (but , It can not be used for certified games).   According to another aspect of the invention, Game software 15 Reaching a certain score and And / or a title (eg, "Master" and "Grand Master" etc.) Certificate printout including a template to generate different certificates for players who have won You can have a chin. Such a certificate is "Authentication result confirmation message AOCM" from central computer 12 When reading out Printed by game computer 14 Player is given It can indicate that the level has been achieved. "Authentication result confirmation message AOCM" Is The print command of the game software 15 is "unlocked". Player is the name And / or a password is input to the game computer 14. These certificates are , Can be customized for each game and for different levels of performance . Players who boast of their certified scores to their friends will request visual certification be able to. For example, The certificate can provide tangible evidence of hole-in-one it can. For the purpose of fraud protection, these certificates should have some form of security table, such as a hologram. An indication may be given. If a copy of an unauthorized certificate is made, Confidential The protection display is visible and displays the forgery. Also, The certificate is The score is Central Compu “Identifiable results on its surface so that you can verify by calling Message AOM and / or “Authentication Result Confirmation Message AOCM” may be included. Yes.   Also, “Authentication result confirmation message AOCM” is High score players encounter May be used to unlock certain attributes of the game. For example, Certification score Top score players who have received Any game computer 14 If read by the game software 15 by On game computer 14 , A game feature that is not usually encountered until a certain score or level is earned You can see another hidden character and the final stage. AOCM ”may be given. In this respect, "Authentication result confirmation message AOCM "Is Software that limits its use to one or more specific gaming computers Can include special game 'software id' information such as serial number SSN . Therefore, The high score players are their identity and / or The game software serial number SSN is provided to the central computer 12, Central computer The computer 12 incorporates it into the “authentication result confirmation message AOCM”. in this way do it, By "Authentication result confirmation message AOCM", Their software serial number By SSN Those game computers 14 having the game software 15 specified Only can show the hidden characters and the final stage of the game. Also , It will be appreciated that the central computer 12 may be used only for result recognition. . Therefore, The ranking of the tournament after the third party, Evaluation, In charge of prize distribution If, "Authentication result confirmation message AOCM" indicating the accreditation result is provided to them . However, For convenience All such functions are generally performed by the central computer 12 It is illustrated in the figure.   In all tournament examples, Tournament against top players Set up a final play-off protocol that takes place at a central location under the supervision of the director can do. Therefore, In the case of a large prize, This final playoff is , When a player's undetectable substitution is playing or reporting a game result It is used to confirm what happened.   Referring now to FIG. An embodiment of the invention utilizing the challenge / response protocol is It is shown. Steps 158-174 are identical to those shown in FIG. 10A and described above. Because there is Duplicate descriptions are omitted. At step 186, Central computer 12 Check the tournament database 46, The same "identifiable result message" Memory area 88 checks to see if it has previously received Ru. As a result of this, the “certifiable result message currently sent in the submission sequence” If the sage AOM is not identical to the previous "authenticable result message AOM", During ~ Central computer 12 is At step 190, The player's game computer Key 14 for the key 14_X“Authentiable challenge message (Authentica) Generate table Challenge Message) ACM. This expression is the actual key k_XBy itself Have a specific key k_XEncryption / decryption module to search for a specific command Command 28 (ie, the command encryption X is an encryption key k_XMeans the use of ). The “authenticizable challenge message ACM” is sent to the player and the process 19 In 2, the game computer 14 is input. The encryption / decryption module 28 , In step 194, authenticating the “authenticable challenge message ACM” and the result Based on the key k_XUse the Generate an Authenticable Response Message (ARM) . In step 196, the player calls up the “Authentiable Response Message ARM”. Enter in story 18. The “authenticable response message ARM”, at step 198 Transmitted to the central computer 12 and authenticated by the encryption / decryption module 52 Be The result expressed in “Authentiable response message ARM” is not true (If one player steals another player's AOM) the result is rejected. Player advance key k_XI can not guess the It can not be done. If the results are accepted, processing is as shown in FIG. 9A. Progress according to the Returning to step 188, if the central computer can If a duplicate copy of the resulting message AOM 'is detected (ie, the player (Indicating that it may be possible), in step 190 ', Key k used to interrogate proof result message AOM_XDifferent from the) key k_Y To generate an “authenticizable challenge message ACM”. "Identifiable Interrogation Message “ACM” is sent to the player at step 192 ′ to It is input to the computer 12. The encryption / decryption module 28 proceeds to step 194 '. And authenticate the “authenticizable challenge message ACM”, based on the result the key k_Y To generate an “Authentiable Response Message ARM”. Player is in the process At 196 ', an "authenticizable response message ARM" is input to the telephone 18. " The authenticatable response message ARM ′ ′ is, in step 198, the central computer 1. 2 and authenticated by the encryption / decryption module 52. The remaining processing is on Proceed as described. Whom this protocol to register false scores To use the "authenticable result message AOM" of another player, Prevent them in situations where they do not access the gaming computer 14 that generated the AOM Do.   In another embodiment, the challenge / response protocol substitutes for multiple encryption keys. Using random numbers. In this example, the "Authentiable Result Message AOM" The random number R1 generated by the issue / decryption module 28 is included. This is different Game computer 1 Each 'authenticable result message', regardless of whether there is an equal result on Unique to the A duplicate of 'Authoritative result message AOM' is detected The central computer 12 is then able to Reject the resulting message AOM '. Authenticated result message not replicated 'AOM' is processed as described above, and the player who submitted it Confirm that you own the software 15 and / or game computer 14 Do. This means that the player steals another 'authenticable result message AOM' Prevent you from claiming yourself. Central in this protocol The computer 12 generates a second random number included in the “authenticizable challenge message ACM”. Generate RA2. ACM is an encryption / decryption module 2 of the game computer 14 8 and then authenticate with the original result message and Combined with the "Authentiable response message ARM" is a central computer It is sent to the server 12 and authenticated. Thereafter, central computer 12 controls R1 and R2. Check if the are identical. If so, the player's game Result as generated by software 15 / game computer 14 The message has been confirmed.   The challenge response protocol is a central computer to streamline the score submission process. Data 12 randomly, or current score, past score, or some other It can be implemented based on game related elements. For example, 'Identifiable results Each time a message AOM is submitted to the central computer 12, it is 0 and n Generate random numbers between If the random number is less than j (which is a number between 0 and n) then Start the response / response protocol. If the random number is greater than or equal to j, then The message AOM '' is only processed as shown in FIGS. This procedure Only require the player to enter one message per result submission It will save you time. And if cheating is detected that player's In addition to denying future results accreditation, also invalidate past accreditation results as punishment It can be used.   In another protocol, the tournament participation flow described above and further illustrated in FIG. 8A. The "authenticable start message ASTM" illustrated in the chart is It contains a unique key that produces a result message AOM. Therefore, All 'authenticable' regardless of whether the layers scored identically Result message AOM '' is unique. Each player is given a different key So the same results from different players will necessarily differ Must be expressed by This will make the second player Is trying to submit a false score and the first player's certifiable It is possible to prevent the stealing of Each “authenticable start message ASTM” This is ensured because the key sent to the is different and the message authentication key is also different. Ru. Player X steals “Authenticizable result message AOM” from player Y For example, central computer 12 encrypts player X's key with player Y's key When applied to the certified “Authenticable result message AOM”, player X (Ie, the message will not be understood). "I can authenticate The result message AOM '' may include the SSCID as described above, Central computer 12 to a particular game software / game computer Messages can be authenticated.   Referring now to FIG. 12, in the technical competition tournament example, Protocols can be used. There are two types of technical competition, one is all The player starts at a designated time, and the other is for a given game Game software that timestamps or tracks the elapsed time until The player starts at different times using. When all players are specified The start message BSTM for a particular tournament, step 2 In 04, media channels such as radio, television, Internet etc. May be broadcasted. As generally illustrated in FIG. 8A above, the The tournament registration process may have already been completed as described. Start message The sage BSTM is input to the game computer 14 at step 206 and The game software 15 creates a technical competition available for play It is possible. The game is started at step 208 and utilizes the signal from clock 36. Thus, the time / date module 33 starts operating. Time / Date Mod The track 33 tracks the elapsed time during the technical competition played at step 210. time / Date module 33, such as the iPower card and touch memory device described above. To accept the signal from the secure clock present in Khun it can. When the player has finished the technical competition, in step 212, the time / date Module 33 calculates the total elapsed time. In step 214, the encryption / decryption module Displays the elapsed time (similar to AOM). To create a message atm. "Authentiable timing message ATM" is a central computer Is sent to the computer 12, which then sends an 'authenticable Authenticate ATM '. To improve security, the central computer 12 The play related data can be time stamped with the time / date module 56 Can. If the time until the end of the player is approved, then any of the above-mentioned processing The ranking, rating, and title are generated by central computer 12 by using Be In the example where the technical competition starts at various times for a given tournament The central computer 12 receives an “authenticizable timing message ATM” There is no need to time stamp at the time of communication. Start message BSTM specific tonamen Used to enable the game but does not start the competition An effective fixed period may still exist). Instead, the time / date Clock 33 (preferably in a secure perimeter) from clock 36 By using the signal of the time elapsed during the technical competition, as described above, the player Track the time from the start of the session (when convenient), and authenticate the time message AT M itself represents the time until the end.   Next, referring to FIG. 13, the player is playing in a close tournament Example It shows a low chart. There may be several ways to do this. Convenience of drawing , The first player as player "A", the second player as player "B" Identified These players have one game computer 14 Rui play a game through online connection between their respective game computers 14 . If they play on the same game computer 14, the result of the game is As mentioned above, it is only included in the "authenticizable result message AOM" . The player's respective PIN may be included for identification purposes. In the online close combat example, at step 216, player A has 80 Call the 0-number and connect with the central computer 12. IVRU 16 is process 2 At 18, give the option of a close battle tournament game. Player A At step 220, the player ID is prompted and called at step 222. Enter 18 Step 224, as described above with respect to the other embodiments, the participation fee Represents a confirmation of paid or prepaid participation fees. After payment confirmation The central computer 12 performs another player at step 226, ie, step 21. Require participation in the same close tournament by ending 6 to 224 Search for player B. Central computer 12 then proceeds to step 228. Part of the player IDs of player A and player B Generate a testable start message ASTM '. "Authentiable start message ASTM" Are sent to player A and player B in step 230, respectively. Is input to the game computer 14 of FIG. One of the players, then, work 23 Set up an online connection to the other in Computer 14 has received an appropriate “authenticable start message ASTM” Check if. At step 236, players A and B play the game in a conventional manner. Play the game. Close connection with many computer games via online connection A) is known in the art. When the game is over, the winning player In step 238, the computer 14 "Identifiable result message AO indicating the player ID of year A and player B M ”and game software maintenance information. The result submission process is essentially as described above. Is done in the same way as you do, but it contains data on the player's Allows the player to continue the competition in a further exclusion round   A single game computer for the entire tournament against a group of players May be held on the 14th. In this regard, the game software 15 You may have the ability to set up a tournament schedule for a battle match. play When the game is input to the game computer 14, the game software 15 To instruct game computer 14 to set up a tournament Purchase a machine that can read the codes or messages used. Tona Type is a “rub match” where each player plays with everyone in the group A player who has the best score, even if a limited number of matches match each other May be "Swiss-style" (ie exclusion protocol), or Other forms known in the art may be used. All players fighting in the tournament Inputs the name and the player ID into the game computer 14. Game software 15. Create a tournament schedule and record the results after each close match. Record. At the end of the tournament, the winner is announced and the tournament standings Printed on a computer display. I want to mention the tournament final result It is certified by the central computer 12 using any of the protocols. Alternative In addition, even if the central computer 12 recognizes each close game in the same way, Good.   The player rating calculation is performed by the central computer 12 rating / ranking module 55. Is done using known principles. Alternatively, the rating is the player's game computer The data may be calculated by the timer 14. These ratings are based on the ability of past players and opponents Dependent. For example, player A has 5 wins and 5 losses against relatively weak opponents. Let's say that Yar B had 3 wins and 20 losses against international opponents. From this, It is difficult to compare the ears. The Layer ratings take into account the opponent's relative skills. For example, evaluation of chess Is a good example. Statologist Arpad Erro (Dr. As developed by Arpad Elo) According to the knowledge evaluation protocol, the chess score averages 1500 from 0 to 3000 Spread. Every 200 points represents one standard deviation from the mean value. Follow Thus, the 2100 rating represents 3 standard deviations above the mean. Strong players and weak The bigger the evaluation difference with the layer, the stronger the player will win the game The rate is high. For example, a player rated 200 points higher than other players -75 out of 100 games can be expected to win, 400 points other players Players rated higher can expect 90 out of 100 games to win . After each game, points are added to the winner's rating and deducted from the loser's rating Ru. The number of points in the game depends on the evaluation difference. Therefore, the "good" player's Instead of losing the “weak” player, relatively few points will be added to the winner's rating It will be calculated. The present invention generates a player rating for a computer game. Ru. The player's new rating is calculated after the result of the close game has been recognized . An exemplary evaluation scheme can be characterized as follows. That is, the new reputation of the winner Value = old evaluation + (x · evaluation difference) + y. For example, x = 0 04 at y = 16, 2000 If the layer beats 1700 players, the 2000 player's new rating is , 2000 + (0. 04 · (−30) + 16 = 2004. The loser's rating is 1696. 1300 plays If the yer defeats 1500 players, the new rating of 1300 players is 13 00+ (0. 04 · (200) + 16 = 1324. The loser's rating is 1476. Therefore, the player If the difference between evaluations is larger, the more likely you lose, the better after the game The change in price is large. When a strong player wins, its rating increases by a relatively small value Ru. Once the new rating is calculated, the rating / rank module will The player information database 48 and / or the result database 50 make this change. Order to update to reflect.   No matter what close combat embodiment you have, the lower rated players have more lives, More Give away ammunition etc. or reduce life and ammunition etc. To use the player handicap to generate game initialization variables Therefore, the conditions of play are equalized for players having different abilities. It is possible. These initialization variables are described above for the tournament game. May be included in the start message. Alternatively, the game computer 1 4 itself or a separate handicap device 217 (ie preferably a central processing unit Handheld computer including a storage, a memory, a display, and a power supply) It may be obtained from Handicap device 217 accommodates different grade levels Various titles can be stored in that memory. Mortal computer Games classify players as one star, two stars, three stars, and so on. if , If player A is a two star player and player 13 is a four star player For example, the handicap device 217 sets each player based on the classification of these players. Calculate equivalence ratings for a layer. Two-star players have an equivalent rating of 1200 The four star player can have an equivalent rating of 1700. This By using these values, the handicap device is evaluated differential 50 Calculate 0 points (1700-1200), various handicap values and their evaluation Query the database of the game containing the For example, 1900 If the player fights with 1600 players, 300 evaluation points difference A strong 1900 player "beats his opponent (1600 weak players)" It may invalidate the ability. Amount of "kick" damage from weak players Doubling may be equivalent to 5500 evaluation point differences (eg, , A strong player has a weak player associated with the damage for each kick Handicap to allow you to double your score). Han The decap device 217 has a game program 26 with asymmetrically changed characteristics. Compatible with game software 15 instructing you to set up the game Generate and display certain machine readable code. Game program with manual input code Methods of modification are known in the art. Game Gini mentioned above The use of equipment and cheat codes is a good example. However, in the present invention, similar pros Tokoru changes the game asymmetrically according to the player's ability difference It is used in a novel application of equalizing play conditions. Handy to the game The code to cap is obtained from the print media with the game software 15 Know that you can These media have an evaluation scope, handicap and You can have a chart of its corresponding code. In addition, game software 15 operate in the same manner as the handicap device 217 It may contain a program. In this case, the player has his level or rating Is simply input to the game computer 14, and the game software 15 Automatically equalize game play conditions according to the player's handicap As such, the game computer 14 is instructed. Players of different skill levels etc Another example is to reduce the competition time. If you play 12 games, you are good Players almost always win against weak players. He tried a few It may fail, but a good player will win most. Also If the competition is limited to one game, the weak player is more likely to win .   The player is opposed to the game played against the game computer 14 with no close combat type You can also receive an evaluation. In this respect, each of the game software 15 The other party's computer is given a baseline rating. For example, with Mortal Kombat The opponent's computer in the first level battle is relatively weak. Player wins the battle If you go to a higher level, your opponent will become stronger. Evaluation is these partner compilations Can be assigned to each of the Evaluation 900 is assigned to the first level opponent The second level may be assigned 1050 and the third level 1300 may be assigned. this These assessments can be determined in several different ways. In one embodiment, the game The partner computer in the client software 15 is given an arbitrary evaluation. . A player with a known rating from a previous close competition then Play with a hand computer. As a result of these games, the game software 15 Counterparty The rating of the computer will vary according to the rating scheme described above. Many games played The more you do, the more accurate the evaluation of the other computer. Generated at the end of the game Layer's “Authenticable Result Message AOM” shows which game level is played Identify which opponent was defeated. Therefore, in consideration of play related data By entering the player's rating is accurately calculated on the central computer 12 be able to. If you use hypothetical software evaluation numbers in the above example, The player's “authenticable result message AOM” is the player's first opponent. I managed to beat a person but lost to the third and the player's new rating was the player In consideration of the previous evaluation of the game and the results for the evaluated opponent of the game software It will contain the information that it was calculated. This beat the player with a rating of 900, 1 It is the same as losing 050 players and losing to 1300 players. This hand The following can also be run against games that do not have such quantitative levels . Assessments can also be assigned to the overall measurement of difficulty. For example, donkey In Gou country, the game consists of 3 beginners, intermediate and advanced Have a level of difficulty. Player's rating at the end of the game at beginner level Player's rating when ending the game at intermediate level is added 5 points to 25 points are added to.   In any of the above-mentioned embodiments, the players are required to I can record. These teams have a memory area of the player information database 48 Identified by the team ID stored at 96. In a given tournament The qualification score for a particular team (or the time to completion for a technical competition) Group of certified scores for all team members. Team standings, ratings, order The orders are stored in the result database 50. Awards are given to winning team members It may be As with tournament participation, players are against league play You can register as a team.   Although the above mentions a tournament, the same protocol does not Are used to simply rank and / or give a rating for a particular game. Can be Similar to the tournament, the game software 15 renders the cheat code inoperable Can be predicted and built into a conventional program for a given game A series of events can be scrambled or randomized. player Call 800 numbers listed to submit specific scores For example, except when the tournament ID is just a game identifier, The sequence shown in 9 is performed. Thus, players are pre-empted for a particular tournament There is no need to register. Player, central computer 12 certified score Game identification so that you can create player standings, ratings, and rankings Give the child and 'Identifiable result message AOM'. In a simpler embodiment , Players anonymously give central computer 12 a score for a particular game As a result, central computer 12 is the top of the game. Edit the standings of the score of X people. Then the player then that game You can call to get the current top score achieved against Can.   The above protocol predicts events in Shoto, fantasy baseball and fans It can also be used for competitions such as Taji football. For example, Software 15 is all or part of a weekend or season football game Set up a schedule for The player decides the game software 15 Or the player manually inputs to the game computer 14 or an RF signal With regard to which team will win, along with the point difference received from an external source via I think. The player's expectation is changed to a hash value using a hash function, Sign with the player's private key for Can be encrypted with the central computer's public key to generate Ru. “Authenticable result message AOM” is a central computer 12 or security protection Certified by the gaming computer 14 having the clock 36 being Time stamped. Player prediction encryption enables authentication of predictions . A timestamp by the central computer means that the message is actually received at a specific time Prove that it was done. Event After it is revealed, the player gives the central computer an Is compared with the real result of the whole game. The central computer then Recalculate the expected hash value of ー and confirm its authenticity. Each player's score is Can be compared with other players in a tournament (eg The expectation for year A is 85%, and player B is 60%.   The protocol described here is a general whose outcome is unknown, such as Lotto game It may be used to select gambling elements for a game of potential. This point , The gaming computer, at least a series of lottery choices for a given lottery lottery Can be generated. The player's choice is that the With a non-operational clock, for example, with the clock on the iPower card It is incorporated into the time stamped "Authentiable Result Message AOM". this Thus, the central authority validates the player's choice and the player It is possible to confirm that the selection has been made before the lottery of the lotto. Therefore, the player There is no need to register or submit your choices before the draw.   The authentication protocol described here is Blackjack, Craps, Roule It can be easily applied to the game of possibility including slots, slots and the like. The Use a cryptographic protocol to detect unauthorized use of Prevents players from fooling the system or denying them play Do. For example, a blackjack player can play on the game computer 14 Players play with some potential hands against the central agency when going Can pay for a given cost for Blackjack software . The final result of this play is to be submitted to the central computer 12 It is incorporated into the result message AOM. Central computer 12 certifies the result For example, if the player is paid the winnings directly or there is a betting account Be deposited.   The above description applied to the game result is the same as the test computer 14 In the strike The same applies to Test results can be obtained by performing the same protocol The test computer can be authenticated as terminated. game Generating test questions on computer 14 is similar to generating a game , The test taker's answers (ie results) to those problems are similar to the game results There is. In addition, tests and questions appear randomly. Similarly, test takers are identical In a way, it is ranked and evaluated by score.   Referring again to FIG. 1B, an overview and flowchart of another embodiment of the present invention is shown. And each game computer 14 can self-certify its own results. Can. In this regard, the game computer 14 is accompanied by the word "certified". Can print out the results. What this means is game computing The 14 itself confirms that the results of the game were correctly reported and played fairly It is possible. For example, after the game is over, the game computer 14 , As mentioned above, such as the result of the game and the digital signature of the game software Generate "Authoritatively messageable result message AOM" that constitutes software tampering display Do. SSCID etc. used to generate 'Authoritative result message AOM' The private or public key uniquely associates the result with the game computer 14 I Also, as a result, the “authenticizable result message AOM” is encrypted / decrypted. Public key of the private key / public key pair associated with the reading module 28 It is authenticated using and after-the-fact authenticity verification is made. Software hash value Which tamper indicator is located, for example, outside the game cartridge If it is known (whether the hash function is a secret or not), If the message "AOM" is certified, the integrity of the game software 15 is It can be confirmed by digital signature. For example, “Identifiable For the game software 15 If it matches the known hash value, there was no unauthorized operation of the game software 15. The relevant result will be accurately reported and recognized as being fair. Ru. Therefore, players who want to prove that their score is actually certified Input 'Any possible result message AOM' to the game computer 14 According to the protocol described above for the central computer 12 It will read out and authenticate the result message AOM which can be authenticated.   The system also mutually authenticates the result from a certain game computer 14 Can be performed on other gaming computers 14. As mentioned above "Authentiable result message AOM" is generated with a secret or private key If asked, to authenticate the result on another game computer 14 Player can use the public key associated with the public key / private key pair I have to get it. In this respect, the list of public keys is the central computer 12 Alternatively, it can be stored in a database of a dedicated key distribution center. Another game The computer 14 can “authenticate the public key according to the same protocol described above. Result message AOM '' can be used to authenticate. Therefore, result authentication Those who ask for have the result expressed in their own “authenticable result message AOM”. Then, call the 800 number to get the public key for the player who claims to You just need to Secured CP of the surrounding 300 that is secured If U302 is considered to be another "computer", it is secure. The same CPU 302 is using to perform all encryption / decryption and authentication procedures Execution of result authentication of the game computer 14 will be within the definition of mutual authentication .   Referring now to FIGS. 14-28, another aspect of the present invention is a home video game. In the environment, we are making it easy to use "pay-as-you-go". This example has several advantages ing. It's a game center video for any of the gaming computers 14 It can be changed to a game machine. Player every game Or just pay for play for a specific period. It is also a specific game The computer 14 (game console) was actually leased to the player. And makes it possible. Many of the new game consoles Has a close commercial relationship, as it is relatively expensive to purchase Ru. This "time-dependent inoperable" aspect of the invention allows the player to System console 14 can be obtained relatively inexpensively. Game pre A charge may be generated daily, weekly, monthly or in other cycles. As described below, there are several embodiments of this aspect of the invention.   In the preferred embodiment, a pay-per-use meter system is used to secure cryptographic protocols. It is used to facilitate protection. The preferred method is part of the program or Uses full encryption, which allows metered software to Unauthorized use is prevented. This program (game computer 1 4) when the game computer 14 is operated It can be considered as a rating system or a particular game program 26. The Program 26 is typically a game cartridge, a CD-ROM, a hard disk Reside in a non-secure data source such as Operating system program The program 702 is stored in the ROM and / or the computer associated with the game computer 14. Resides on a non-secure data source such as hard disk. No security The data source is actively indicated by reference numeral 704.   The meter charging function has security protected surroundings with security protected Executed by the device. As mentioned above, the area around which security is protected is , Tamper-proof and / or tamper-detecting hardware defined physical domain Area. In this particular application, the metered device is Call it 02. As shown in FIG. 14, the meter 502 is the computer itself, and Computer through the fixed game program 26 or operating system To meter the use / operation of the computer 14 itself and Communicate. The form of these programs is not necessary to distinguish them Will be collectively referred to as "meter program 503" hereinafter. Smell of the system of the present invention Security of the meter program 503 from the unsecured data source 704 The part being performed is decoded by the meter 502 and executed.   As part of the internal structure of the game computer 14, the meter 502 may, for example, It can be arranged and configured on a motherboard or an expansion slot. The meter 502 , Can be incorporated into a PCMCIA card such as the iPower card described above. Also, The controller 502 communicates with the game computer 14 via a data cable. It can also consist of a housing. CPU 502 of the soot 502 and the game computer 14 The interface between can be implemented in a conventional manner. Meter 502 is security protected And the hard disk, flash ROM, etc. Volatile memory 506, ROM 508, RAM 510, real time clock chip 51 2 and a battery backup power supply 514. Meter 502 Is an I / O port for attaching a data communication cable to the game computer 14. Further includes the web 515. According to known techniques, the pins of I / O port 515 May be electrically isolated to avoid pin level probes. Same In addition, hardware components are protected by the tip probe device. Mechanical chemistry to prevent direct access to information from Protection may be provided. Non-volatile memory 506 performs the entire meter billing function Can be used to store program instructions. ROM 508 is dark No. algorithm is included. RAM 510 provides security protection for meter program 503 Contains the key and cryptographic data needed to decrypt the part being Can execute it, and it can be used for meter billing function or game result authentication. Generate an authenticatable message to be sent to the central computer 12 in a related manner It is possible. If the meter 502 is tampered with, the encryption key and Data is erased from memory.   If the meter 502 is a separate unit, it will be detailed by the player below. To allow the use of metered software / game computer Has an input controller 516 so that the code can be manually input directly to the data 502 Can be Meter 5 02 allows the display 518 to display a wide variety of information to the player. And may be configured together. Such information may be related to metered use, such as costs. Special conditions, permission period, central computer to obtain permission to run the meter program A message representing the information provided to the processor 12 and / or a telephone call as described above Computer game manually entered on the phone to send through the network It includes the “authenticable result message AOM” for the lay game. Baa Meter to allow direct communication between the controller 502 and the central computer 12 502 may itself have a modem 520. Also, the meter 502 is Communicating with the central computer 12 via the modem 20 of the You can also.   In general, each meter program 503 has a key unique to that program. Encrypted. Alternatively, encrypt a single key to a large number of meter programs 503 May be used to reduce the risk of leakage (if in some way A whole series of meter programs 503 that use it only Such an implementation increases the risk of a security breach, as it is no longer secure. Follow In most cases, each meter program 503 encrypts with a unique key. It should be understood that it should be. Therefore, the meter program 503 is executed. In order to do this, it is necessary for the meter system to obtain the key of the meter program 503 It is. This process is described in more detail below: Can be part of At the same time, in a system that carries out various costs, new It is convenient to obtain the latest cost table containing information on the meter program 503. It may be. In this way, the latest to run the meter program 503 Cost information will be available. The first without the need to interact with the central computer 12 Some examples where it is desirable to have the convenience of running the meter program 503 In this case, the meter 502 does not already have a key for the meter program 503. It must be. This means that all such meter programs 503 can be Is made easy by having them be encrypted Is incorporated into all meters 502 of the system during initialization. System security Protection (as described in more detail below) for the meter program 503 One associated with each meter program 503 using several different keys Furthermore, by making key selection based on the “software ID”, which is an arbitrary ID Be strengthened. In this way, the key is Equally shared to the ram 503, reducing the value of each such individual key.   In the system of the present invention, the meter program 503 is divided into one of the following two types: It is kind. That is, it is “immediately viable” (and thus encrypted using one of the shared keys Central computer before running it on the game computer 14 for the first time) It requires a dialogue with Twelve. In the latter case, the meter program 50 3 is encrypted with a unique key. The meter program 503 that can be run immediately , Utilizing unique cost information from the non-secure data source 704.   encryption   All messages between central computer 12 and meter 502 are encrypted Be certified. Among the various protocols, as described above for result authentication, Open key or symmetric doubling can be used. However, most symmetric encryption is It seems to give sufficient security to any protocol. Such encryption is 64 Key sizes in the range of .about.128 bits can be used. For example, DR, 3DES Or IDEA. Public key encryption usually uses RSA. After initialization, center Computer 12 and meter 502 are both encryption and authentication in a conventional cryptographic system. Share the “SK meter” that can be used by Suta 502 is an entropy Source and has limited access to the The total amount of data exchanged with the In the typical use of using “SK meter” as a key for all communication between A few hundred bytes a month provide sufficient security in this example. In this configuration, The message from the data 502, in the clear, (Identifying identifier) written in its ROM 518 during manufacture) And allow the central computer 12 to check the encryption key used The "SK meter" follows the encrypted message itself. Central computer The response from computer 12 is encrypted with “SK meter” for transmission to meter 502 Be done.   All communication between central computer 12 and meter 502 acts as a server It is started by the meter 502 using the central computer 12. Further details below As stated, players can actually initiate such communication. , It can be seen that the meter 502 is not issued the request at the same time. Me The message sent by data 502 is sent each time the message is sent in that It can include an increasing sequence number. Response message from central computer 12 The page contains the same sequence number. Because of this, both sides are protocol Detect message attack attacks to capture messages and then replay them to destroy It is possible to put out. The bucket format shown below is described above unless otherwise indicated. Encrypted header and / or account and sequence number Not included Is each packet a unique identifier value that describes the type of packet? Starting with the following data:   The following shows the data associated with the meter 502 and each meter program 503 It is a summary of   Meter key   The meter 502 performs its functions including security protection of communication with the central computer 12 Run To use multiple encryption keys. As mentioned above, these keys are generally There are the following three types. That is, to a conventional cryptographic protocol (eg, DES) With a "secret" key as used, and a public key crypto protocol (eg, RSA) The "private" key and the "public" key used for the coll.   “SK meter”: the secret key of the meter 502 and the central computer 12 It is done. This key is a non-secure communication link (a typical data network And the secret between the central computer 12 and the meter 502 and Enable certified communication. Also, this key does not allow the meter 502 to Files that are secured from non-secure non-volatile storage devices Used to create data and use this key to sign data in the file Ru. The “SK meter” is generated by the meter 502 during initialization and then It is sent to the central computer 12 and protected with "PKCC".   PRK meter: It is a private key of the scooter.   PBK meter: This is the public key of the meter.   PK CC: Public key of central computer 12 known to meter 502. This The key is between the meter 502 and the central computer 12 before the creation of the “SK meter”. It is used for the first communication and written to the ROM 508 in the manufacturing process.   SK Imm Run: A secret key of the meter program 503 that can be executed immediately. Up As mentioned, acquisition and acquisition without executing the "Add new program" protocol described later It may be desirable to support a meter program 503 that can be run immediately at the same time unknown. In this respect, the meter 502 already has the key of the meter program 503 of this type. It must have to. Therefore, such a full meter program 503 is Share the "Software ID" of the "Use of meter software" protocol The meter 502 recognizes the ID and “SK Imm Run” key as described later in The part of the meter program 503 that has security protection Used to decipher. As mentioned above, this variant is different from each other 'SK Imm Run Some of the "software ids" of the immediately executable class associated with the key Define   “ID meter”: Unique ID number for each meter 502, RO during manufacturing process Written to M508.   Billing account number: Meter program 50 enabled by meter 502 The number of the player responsible for the payment of 3. This is a central computer Identifier used by the billing service to identify the player It is.   PIN: The player's personal identification number.   Time limit: The meter 502 is authorized from the central computer 12 for additional time. The meter program 503 can not run beyond it until it receives a message A time / date value that specifies a time limit.   Software key table: A combination of "software ID" and "software key" Is a list of Each is a meter program 503 with a specific “software ID” Contains the key used to decrypt the encrypted part of   Meter variable (if meter 502 calculates cost)   Limited cost: if the meter 502 is associated with the use of the meter program 503 Calculation of the cost, which can be accumulated during the current billing period It is the cost of identifying the large billable amount, beyond which the meter program 503 , Permission message for additional credits from central computer 12 meter 5 It can not be executed until 02 is received.   Total Cost: The total charge during the current billing period.   Expense Table: The format described below.Meter variable (when central computer 12 calculates cost)   Usage count table: A list of software ID and usage count pairs, Each meter program 503 or program feature during the current billing period Record the number of times it was used. The "software ID" will be described later.   Usage time table: A list of software ID and usage time pairs, Total time each software package was used during the current billing period Record.   Software from unsecured data sources   In the illustrative embodiment shown in FIG. 15, the non-secure data source 704 is Each meter program 503 is divided into three parts. In other words, Control block 706 and "non-secure software components" 708, “Secured Software Component” 710. Ru. Software Control Block 706 allows meter 502 to calculate the billed amount. Software to identify the meter program 503 by A) contains specific information. Executable software is the remaining two. Software components that are protected '710 are classified in meter 502 Software components that are configured to execute on a To run in a non-security environment of game computer 14 It is designed.   Software Control Block 706: Used by the meter system for its execution Software information. Software control block 706 is a central control When signed with the private key of computer 12 and the software is loaded The meter 502 confirms the authenticity of the signature. Software Control Block 706 It has the following fields: Software ID: A unique number that identifies a specific meter program 503 is there. Each meter program 503 and its correction have a unique "software ID" Do. There are two general types of "software ID". That is, high order They are "programs" and "components" that can be distinguished by bits. "Professional "Gram software ID" is used for the meter program 503 which does not charge for each feature Be done. On the other hand, “component software ID” In connection with a particular feature, charging occurs on that feature basis. Component software "Tearware ID" has two fields of "main" and "secondary" ID components. It consists of “Software ID main field” identifies the meter program 503 The “Software ID Sub-field” Identify chargeable features. Software cost: this is the "basic" for this software component Expense information, in the form of an expense table (for the format of the expense table, Described below). Systems that do not support variable costs directly cost information from this table Use the information. Systems that support variable costs can be It may receive bar-ride information.   Non-secure software component 708: game computer 14 Is the majority of the meter program 503 that is executed. It is cryptographically secure Data source 704, in which case the meter 502 It is decoded before it is loaded into the RAM of the game computer 14. In this decoding process More program loading If it is unacceptably delayed, the “non-secure software component '' 708 may be stored unencrypted and with some loss of security . The memory of the game computer 14 is (by definition) non-secure and the given attacker In any case, “non-secure software components” 708 You can access the plaintext. Therefore, the form in which it is protected By storing at, the additional security added is value limited.   Secured Software Component 710: "No Security Software components' 710 are in encrypted form and without security And the rest of the meter program 503 is If it is loaded into the RAM of the timer 14, it will be loaded into the meter 502 and not decoded It does not. “Software control block” 706 of the meter program 503 It may be loaded into meter 502 at this time to facilitate charging for use. Yes. As will be described later, the meter 502 “security-protected software Component 710, the “non-secure software component” Select and not rely on larger software bodies in Essential functional actions operate. “The software components that are protected “Nint” 710 is a “non-secure software component” 708 Receive at least one input parameter from the game computer 14 when Includes routines that are secured for taking. Security is protected Runs on the meter 502 to create at least one output parameter Be done. At least one output parameter is from the meter 502 to the game computer 14 and the “non-secure software component” 708 is Executed by the post game computer 14 with at least one output parameter . For example, a game professional who instructs the game computer 14 to generate a golf game Gram 26 to calculate ball result position in response to multiple input parameters Include security-protected routines that include instructions to instruct meter 502 I Ru. The input parameters for this routine are the current poll location, selected Club type, swing force, direction, timing, and wind speed and direction. This These input parameters are sent from the CPU 27 of the game computer 14 to the meter 502a. Be sent to timely. After that, at least one routine that has been secured is Meter to create a new output parameter, in this case the new position of the ball It is executed at 502. After that, this output parameter is 7 are sent back to the “non-secure software component” 708 Are used to display the new position of the image according to the conventional method. In this way, Program 26 receives the requested output parameters from meter 502 If not, it can not operate completely on the game computer 14. In particular Importantly, instructions that create secure routines are never opaque It does not exist outside the meter 502 in the form of numbers. Make such an instruction Only the result created by executing in the data 502 is the game computer 1 It is returned to the RAM of 4. Thus, the player can control the RAM of the game computer 14 To read out the unencrypted instructions and then to disturb the meter 502 These cryptographic instructions are stored in the non-secure data source 704 It can be prevented from being used to replace Therefore, “security is Software component 710 to encrypt its internal security Running the routine on the meter 502 is the whole system security protection Is a mechanism to maintain the As a result, the attacker interferes with the system and This software component is used to run software that has been It becomes impossible to infer and replace the function of Meter 502 "limit The movement of such a meter program 503 until the time or the “limit Make it possible to   The above configuration is also used to meter the use of game computer 14 Can be When the game computer 14 is turned on, the operating system Software components that have been secured 710 is low on the meter Be deciphered. In order to start the game computer 14, a game Software on the computer 14 operating system program Component 708 is the software for which the security of the meter 502 is protected. To execute the routine that is secured by the Less important to the proper functioning of the complete operating system program Both receive one output parameter. At least one output parameter requested Game computer 14 will execute any program if it does not receive I can not At least one output parameter from the meter 502 is It can be required at a specific time during operation of the computer 14. Meter charged usage If the “time limit” or “limit cost” arrives, the meter 502 will Non-secure software component of the operating system of the computer 14 Component 708, it is necessary to have at least one output parameter Operation of the gaming computer 14 by no longer supplying it the next time it is Disable. Game computer operating system program meter Require at least one output parameter from 502 in a very short time interval To ensure that the system is designed and metered usage should cease The meter 502 and at least one required output parameter Game computer by not supplying from the meter 502 the next time it is The time delay between actually stopping the game and the game compu To stop immediately after the operation of the controller 14 has exceeded the cost or time limit. Strangely small.   In an alternative embodiment, meter 502 is substituted for non-secure data source 704. Operations that are permanently stored in their own secure memory System program or any game program 26 Security protected software component 710 is included. Follow “Secured Software Component” 710 is The year has access to such software instructions It does not need to be encrypted because it can not Security protection is tamper-proof meter configuration Given by As mentioned above, it is possible to tamper with memory that is protected Read “Secured Software Components” 710 If so, “Secured Software Components” 710 Leading to a loss of memory. Depending on the configuration of the meter 502, security is Each of which has a different meter charge game program 26 or Multiple 'protected' software packages for the rating system Components 710 can be configured to store. Or machine The memory that is tightly protected is a plurality of game programs 26 or operators. One comprehensive security-protected system that can be used for Software component 710 can be configured to be stored.   Cost table   The cost table data structure is the same as the software control block 706 Hardware costs' element is used to charge for the basic cost of the software and Non-volatile memory meter 502 for systems that support variable costs I will be The following format is a list of "cost table elements".                 Software ID                 Billing method                 Usage charge                 Hourly charge                 override                 Basic                 multiple                 Replace                 Charge value                 Classification (Per-Minute) or Use   Each cost component is associated with a specific "software ID." If it If it is "RAM" or "Software ID", the cost table element is classified or used separately. It relates to the billing of the program itself. If it is "component" If the software ID ', then the cost table is a specific feature or component of the software. (Ie, the game program execution cost corresponds to, for example, Results of gameplay, such as reaching a certain level or increasing the number of lives granted Related to certain "features" of the game played as This is typically used Apart from that, if the player voluntarily fights with a specific enemy or uses a specific weapon If certain components or features are used, special charges will be imposed Be   The charging method is one of the two identifiers "charge by use" and "charge by hour". Yes, which billing form is applied when the 'software id' is used Display   The override field is used to indicate the cost of other elements of this billing table. And how it should be combined. If it is this, this is the basic cost If it has a "base" value, which means that it is a table element, it has Usually associated with the “software control block” 706 of the unprotected data source 704 It is done. If there is no other charge table element for this "software ID" Then, the cost data of this factor is used. The other two possible values are security Computer to charge the cost value stored in the unprotected data source 704 It is used for the cost table downloaded to the timer 12. "Replacement" is this The cost table element is one of the basic costs required from the non-secure data source 704. It means to override or replace the element. "Multiple" is based on the cost value The fixed point number to be adjusted by multiplying the cost value from this cost table means.   Finally, the "charge value" is executed by the "basic and replacement override" value. Expressed in units associated with each use or separate use of the features It is done. In the case of 'multiple', 'charge' is the 'basic' cost value, as described above It is a fractional value to be multiplied by.Receipt file 712   Non-secure non-volatile memory (such as disk drive) If associated with computer 14, some of this memory may be used for billing purposes. It can be used to record detailed information about the billing activity during the interim Ru. This information is called a “receipt file” 712 and contains a series of receipt Each of which reflects billing activities. Receipt File The 712 is stored in unsecured memory but the file description is secure It is signed by the meter 502 to ensure gender and accuracy. "A Receipt '' 712 gives the player detailed information on his billing process. The player does not agree with the bill from the central computer 12 with his use It may also be used as an aid to dispute resolution when you Can.Meter 502 / game computer interface   As mentioned above, “non-secure and secure software The component "jointly executes the function of the meter program 503. Meter Most of the program 503 is a "non-security component", but "Security protected components" decrypted and executed by the meter 502 Is used to execute the meter program 503 of the game computer 14 Make it possible. The meter 502 is generally compared to the game computer 14 It is a less powerful processor. Also, it is You can not access the game computer's memory and internal data structures. Thus, the data to be exchanged between them is a message passing or subroutine call Can use the output interface. In addition, security is Software component 710 is the meter program 503 “Confidential That of the calculations performed by the software component '708 without protection Can be designed to perform essential and non-trivial parts. In general, Any event that can generate a charge for the creation of a request form Software components' 710 are required. By that part Calculation made by the attacker can use "non-secure software components" In the local code that reverse-engineers the 708 to provide equivalent functionality Replace the request to software component 710 that is secured It must be important to prevent This job is about security protection Software components that are supported by the encryption of the By monitoring the activity from the non-security side, the attacker Need to infer the purpose of However, it effectively prevented such attacks “Secured Software Component” 710 is enough It must be complicated. The meter 502 has a CD-ROM and a game computer 14. In the embodiment arranged between the meter program data Access control is simplified because it must be deciphered during flight. In the exemplary embodiment, the code is executed on a separate processor so that two parts per minute Interface is a subroutine call interface, in fact, remote control It is a call. In the preferred embodiment, “secured and classified Software components without protection operate simultaneously and are protected Software components ”,“ non-secure software Component "708 performs the calculations needed at some point in the future. Prevention The attack that must be done is to turn off the system power when the player is inappropriate And For example, if software is billed by spending time If such billing is created, at the beginning and end of the program Software component being protected '710 time of two calls With the intention of calculating the elapsed time by taking the difference Software component '710 by inserting a call to If done, billing always powers up before the program successfully It may be avoided by cutting. One way to avoid this is By incrementally recording the progress of time each time a programmed event occurs is there. Incremental charging makes this method less successful in avoiding billing Ru. Usage or feature charges are also less susceptible to this attack. Another alternative is to The check log is to record the time the player turned off before the end of the game. A game type that does not have a game end record is played to try to mislead the system Affect the yer.protocol   The meter 502 communicates with the central computer 12 at regular intervals to report usage information. , Receive permission for additional use, receive cost information communicated, and resolve problems Decide. Communication between the meter 502 and the central computer 12 is Can be automated, but most players will The system they manage may be more secure.   Several different communication protocols can be used to facilitate meter system operation. Used. Exchange between game computer meter system and central computer 12 Some of the game computer 14, the meter 502, and And the local transmission between non-secure data sources 704. these The following protocol is included.Initial setting of meter 502 (Fig. 16): This protocol is new for players It is executed when the purchased meter 502 or meter system is initialized. Me Data 502 with the central computer 12 to generate a shared encryption key. Perform your own internal initialization, including communicating. At this stage, the meter 502 Is the public key “PK CC” of the central computer 12 and its own unique ID Access the “ID meter” The meter 502 can generate random numbers Ru. Unlike other protocols, these packets are sent to central computer 12 and It is not implicitly encrypted with the key shared among the data 502. Instead, the following In each step of the example protocol, the cryptographic steps are explicitly identified.   At step 522, the meter 502 transmits data between it and the central computer. Calculate "SK meter" which is a random key to communicate.   At step 524, the meter 502 has the following format: Create the '' block.               Initialization message               ID meter               Current date and time               SK meter In step 526, the meter 502 sets the "initialization message" block to "SK". To encrypt the “SK meter” using the “PK CC”, The message is sent to the central computer 12.   At step 528, central computer 12 reads the "SK meter" and then " Restore the initialization message 'block. It is about the current date and time Check if there is one, record a new "ID meter", and it has not been used before Check that It calls "SK meter" again and its value is "ID meter" Relate to   At step 530, central computer 12 owns its meter 502. Software Create a "charge account number" for the player who is paying for   At step 532 the central computer 12 generates an "initialization response message" Create a lock in the following format:                 Initial setting response message                 Billing account number   At step 534, central computer 12 generates an "initialization response message". The lock is encrypted with “SK meter” and sent back to the meter 502.   At step 536, the meter 502 sets the "initialization response message" block. Decrypt and store the "Billing Account Number". Then it's' Billing account number The player, his record and when he opened his billing account Display to communicate with Central Computer Billing Service.   At step 538, if the meter 502 has an associated clock chip, the meter 502 implements a "clock synchronization" protocol.   Players open their accounts with central computer billing service After that, it shifts to "permission from central computer" protocol described later.   Add new program (Figure 17): This protocol is central to players, but to run Obtain a new software program that requires information from computer 12 Used when As described later, a certain program is a central computer 1 It is possible to execute without obtaining new information from 2 but other special programs It may require the acquisition of a new encryption key for Ram. Send by this protocol All messages that have been sent are protected by the above encryption and sequence number . An exemplary protocol operates as follows.   At step 540, the meter 502 controls the software control program of the new program. Lock is read from the non-secure data source 704 to Software ID Extract.   At step 542, the meter 502, in the form Create the                 New program message                 Number of programs requested                 Software ID                 Software ID                 ...   At step 544, meter 502 secretly "New Program Message" To the central computer 12.   At step 546, central computer 12 is required to decipher those programs. Find out the "Software ID" of the key being requested to determine the key you need.   At step 548, central computer 12 generates a "new program" of the form Create a 'message response' block.                 New program message response                 Number of programs requested                 Software ID, key                 Software ID, key                 ...   At step 550, the meter 502 is of the "software key table" structure. Key information is recorded for each software program.   At step 552, the meter 502, if variable cost selection is made Implement the "Cost Information Update" protocol.Authorization from central computer 12 (Fig. 18): The central computer 12 mentioned above As you did, you will reach the "time limit" for a specific period or the "limit cost" for a specific amount. The authorization data is sent to the meter 502 to enable the operation up to Normal This is done at the end of the billing period, immediately after the 'use report' protocol is run To be executed. Alternatively, this may occur after the meter 502 has expired requiring additional authentication It may be done to obtain a specific amount of credit. Also, it is the first account setup It will be done after the appointment. Here again, all messages sent in this protocol are described above As you do, it is protected by encryption and serial numbers. An example protocol is below Acts like. At step 554, the meter 502 is sent to the central computer 12 secretly. Generates an "authorization request message" of the form                 Authorization request                 Current date / time                 Time limit                 Limited cost (if meter 502 calculates cost)                 Total cost (if meter 502 calculates cost)   At step 556, central computer 12 uses the time and cost information for statistical purposes. Record. Then it is the game computer 14 and / or the software About the billing that is used to allow continued use through meter 502 Whether the current billing account has been paid (based on the billing target number) as Decide. Based on this, then it is "time limit" and "limit cost" Calculate the new value for If no additional permission is granted, the “time limit” And the value of "limit cost" is left as it is.   At step 558, central computer 12 blocks the "permission response message" block. And send it to the meter 502 in the following format.                 Authorization response                 Current date / time from previous message                 New time limit value                 New limit cost value (if meter 502 calculates cost)   At step 560, the meter 502 checks the time stamp. Therefore, this "authorization response message" is not a reply (ie, the message Fresh. ) Confirm that. Then it's a new 'time limit' and 'limit cost' Copy the value of] into the non-volatile memory.Cost information update (selective-variable cost) (Figure 19): The player is currently using The meter 502 is updated from the central computer 12 for the meter program 503 This protocol is used when requesting cost information. It is variable cost Used only when the option is selected (“Permit from central computer”) And after the end of each billing cycle (with As well as during the formal set of protocols To be executed. All messages sent in this protocol are, as mentioned above: Protected by encryption and sequence numbers. An illustrative protocol is described as follows Be done.   At step 562, the meter 502 creates a "cost update request message" It is sent to the central computer 12 in the following format.                 Cost communication request                 Software ID                 Software ID                 ...   At step 564, central computer 12 requests the requested 'software ID'. Create an "Expense Renewal Response Message" that includes the cost information of Feature-specific invoice creation Software including The cost information for each feature is also included for the This information is described above As given in the form of a 'cost table'                 Expense renewal response                 Cost table   At step 566, the meter 502 includes new "cost table" information therein. Internal data that matches the "software ID" by linking to the "cost table" of I change it.   Clock synchronization (Figure 20): This protocol is for the clock 502 of the meter 502 It runs at regular intervals to synchronize with that of the central computer 12. Normal, This is done at the end of each billing period. In this way, the permission has expired The two components are matched (if they It is expected to operate in an asynchronous data network system such as Protocol can be designed to handle transmission delays if . An exemplary protocol is as follows.   At step 568, the meter 502 later secretes the central computer 12 Create the "time update request message" of the following format to be sent.                 Time update request                 Current date / time from meter   At step 570, central computer 12 turns on a meter 50 for statistical analysis purposes. Read 2 date / time. Then it contains the current time in packet form Respond to the meter 502 with “time update message”.                 Time update                 Date / time from meter (taken from previous message)               Current date / time from central computer   At step 572, the meter 502 receives the "time update" packet and Sequence number And check the encryption, the time that this packet was received its own clock Record based on Furthermore, is it what it sent to the central computer Check the date / time on the central computer, and Return the                 Time update approval                 Current date / time from central computer   At step 574, the central computer 12 sends a "time update" packet. And compare the time between when the "time update acknowledge" packet is received. If that time is If it is within a certain accuracy period, it will be of the form "Time Update OK Message" Send                 Time update OK                 Repetition of original date / time from central computer   In step 576, when the “time update OK message” is received, the meter 50 2 shows the time in the "time update message" and two messages from the central computer 12. The elapsed time between receipts of messages is updated based on its own calculation. That Its own time reference value set is the date / time value from the central computer 12 Added the arrival time difference between "time update message" and "time update OK message" to It is a thing.   Meter charged software start (Fig. 21): This protocol is meter 50 2, game computer 14, data source 704 without security, meter Involves those interactions when the program is loaded for execution.   As mentioned above, the meter program resident in the non-secure data source 704 Ram 503 has a “software control block” 706 and two executable components Non-security software running on the game computer 14 Component 708 and the code 502 is decrypted and executed on the meter 502. Software component protected Components] 710. At least the software that is protected Software component 710 is encrypted, but the “non-secure software Component 708 and software control block 706 are similar It may be done. The protocol is “software control block” 706 Software components that have been signed and secured by 502 In the exemplary embodiment in which the '' 710 is encrypted, it operates as follows.   At step 578, the meter 502 reads from the non-secure data source 704. Read out the software control block and sign the software control block Check the authenticity and extract the "software ID" for the meter program 503.   At step 580, the meter 502 checks that the meter program 503 Required to decipher the software component being '710' Determine if the key is available. This key is a Check "Software ID" of "Software Control Block" 706 in Discovered by (or recognized by the associated "software id") It may be found from "SK Imm Run" for executable programs. If the key is not available, meter 502 will display the current software list Obtained that a new program should be added and the necessary keys Informing the player that it is necessary to communicate with the central computer 12 in order to Display the sage (and this protocol ends).   At step 582, if the requested key is found, the meter 502 is turned on. Determine if the current resource limit is sufficient to run the meter program 503 Set. If the "time limit" or "limit cost" exceeds the specified value, Interact with the central computer 12 to allow additional use of meter-charged software A message will be displayed stating that you must finish).   In step 584, if the "time limit" or "limit cost" is at a predetermined upper limit Close If so, the meter 502 will display a warning before processing Informing that he may lose permission while running the meter program 503, Requests a continuation confirmation from the player, otherwise this protocol ends.   At step 586, the meter 502 is a "software control block" 706 Read out the “software cost table” and Apply the bar-ride or adjustment, and save the result data in its internal RAM 510 Ru.   At step 588, the meter 502 and the game computer 14 Software components being implemented 710 and software without security Component 708 from each non-secure data source 704 read out. Meter 502 is a secure software component 』” 710   At step 590, the meter 502 and the game computer 14 then Transfer control to the newly loaded software component, meter 502 Run “Secured Software Components” 710 to Computer 14 is a "non-secure software component" 708 Run.   Metered software execution (Figure 22): The following explanation is the program execution Interaction between the meter 502 and the game computer 14 in connection with invoicing About.   As described above, the meter 502 and the game computer 14 respectively Software components that have been secured Execute 710 and "non-secure software components" 708 . The dependencies between the two components to enable accurate billing are: All events that can be billed are software protected Component must be designed to require active cooperation You must. This protocol is implemented when one of these events occurs. Further A non-volatile storage device is If so, the meter 502 gives this storage device a detailed breakdown of the billing activity A "receipt file" 712 can be used to maintain. "A receipt File 712 constitutes a record of the player's activity, which Because it is signed, it is used for dispute resolution. The following is an example protocol It is. In addition, the steps 592 and 594 use the “receipt file” 712. It should be noted that it is only performed when possible.   In step 592, the meter 502 reads the receipt statement, which consists of the following information: Create a section That is, the software being used, the department (if available) It is information that identifies the amount of money, the current time, and the event to be charged. This is a meter 5 02 secret key (ie, “SK meter” when conventional cryptography is used or Is signed via public key technology). After that, the meter 502 Section, and if it is attached to a receipt file 712, Send to no storage device.   In step 594, the meter 502 generates the billable event and Current Cost Information Calculated During the Meter Charged Software Start-Up Protocol Update “total cost” based on   At step 596, if at any time during operation of the meter program 503 If the time limit or cost limit is exceeded, the meter program 50 3 is required by "Security-protected software components" Security is no longer used to create at least one output parameter Does not run the software component '710, thereby Interrupt the program execution of the computer 14 and also Advisory message that you must contact the computer 12 to obtain further permission Display   If it is very troublesome to attach a signature to each item in the “receipt file” 712 Step 592 above may be replaced by the following sequence: .   At step 592a, the meter 502 can store current from a non-secure storage device. Read “receipt file” 712. "Receiver file" 712 mentioned above As such, it consists of records of receipts (though in this case individual records are signed Not), then the signature pertaining to the file as a whole is made.   At step 592b, the meter 502 verifies the signature of the "receipt file" 712. Confirm. As mentioned above, this is a conventional dark color using “SK meter” or public key technology. It is performed using   At step 592c, if the signature is valid, the meter 502 sets the new Add receipt description item to “Receiver file” 712 and sign the entire file Ru. Thereafter, the receipt file 712 is returned to storage without security. . If the signature is invalid, then in step 592d, the meter 502 displays the above information. Adds a line to indicate that it can not be trusted. After that, it is the present 'receipt clerk Attach the entire file and sign the entire file. "Received receipt file" 712 is trusted A message is displayed to the player indicating that it can not be done.   Usage report (Figure 23)At the end of the billing period, the meter 502 The usage information accumulated in the data 12 is reported. Payment mechanism and central computer used Depending on the level of detail of the information to be sent to the computer 12, several variants are possible It is If meter 502 calculates the cost (instead of central computer 12) The following protocol is then used: Optionally, a receipt file 712 A copy of (if available) is uploaded to central computer 12 . If the information is uploaded, the central computer 12 Detailed printed invoices can be made in a form similar to the invoices. Below The one below is an exemplary protocol.   At step 598, meter 502 includes the following information: Create.                 Usage report                 Total cost                 Receipt file (optional)   At step 600, central computer 12 receives a "use report message". Take and update the billing information for this billing account.   At step 602, the central computer 12 uses the following form “ Reply ”.                 Use report approval                 Total cost   In step 604, the meter 502 displays the total cost to be billed Do.   At step 606, the meter 502 connects the names of the "receipt file" 712. Game computer to change into sequentially numbered backup files Notify 14 and create a new blank receipt file 712. Normally, Others, including permission from the central computer, "clock synchronization" and "update cost information" Protocol is executed at this time.   If the cost is not calculated by the central computer 12 instead of the meter 502 More detailed information must be uploaded.   At step 608, the meter 502 includes the following information: Create.                 Usage report                 Usage counting table                 Usage time table                 Received file (optional)   At step 610, central computer 12 executes various programs and programs. Once you understand the cost of the ram feature, calculate the billing information for this billing account. Update. that is, Create a statement showing how various software is reflected in the billed amount This information can also be used to It is the "total cost" and the new billed amount Calculate the sum of the "use report approval message" in the following form.                 Use report approval                 Total cost   At step 612, the meter 502 displays the "total cost" being charged.   At step 614, the meter 502 causes the gaming computer 14 to Will change the name of the '712' to a sequentially numbered backup file And notify the game computer 14 of a new blank receipt file 712 Create Usually includes "permission from central computer" and "clock synchronization" Another protocol is run at this time.   Audit (Figure 24): This protocol is for use and billing with players and Received when there is a disagreement with the central organization, Executed by 2. What is the validly signed 'receipt file' 712? Certifiable record of all billing activity, even for a given billing period It is. If the player's bill from the central computer 12 If it does not match the information contained in the Can.   At step 616, the meter 502 reads the form To create the                 Receipt File Check                 Receipt File (Periodical Billing Period)   At step 618, the central computer 12 generates a receipt file 712. Request from the meter 502 for its billing period. Compare with request creation information (invoice creation period is the date of “receipt receipt file” 712 Guess from the Discrepancy It may be due to a malfunction of the stem. It is possible that the broken meter 502 The software that contains the error, in the error of the central computer 12 operator is there. Once the receipt file 712 confirms the accuracy of the billing data, Did the player make a mistake when confirming the authenticity of his "receipt receipt file" 712? May I?   In step 620, in each case, the original bill during the billing period in question Central computer 12 “Acknowledgement file confirmation message including the amount and the effective amount Create the This is the same as the original amount if no discrepancy is found If an error is detected, it will be equal to the correction amount.                 Confirm receipt file                 Invoicing period start date / time                 End date of invoice creation period / time                 Original billed amount                 Effective / Corrected Billing Amount                 Invalid end text string (for display to the player)   At step 622, the meter 502 is transmitted from the central computer 12. Display a text string and this information, and explain any inconsistencies that may have been found.   Authentication (Figures 25 and 26): An example of the results authentication system described above in detail is Dedicated game High score for entertainment software on a computer system or general purpose computer It is the authenticity confirmation of "." this is, Program results that players ask for authentication Is the main protocol of the system used when creating. The meter 502 is In order to be able to determine that the specific result actually occurred Software The Secured and non-secured components Divided into two parts. In order to carry out the electronic communication shown in FIG. Example proto Col works as follows.   At step 624, The meter 502 is Encrypted by “SK meter” Create an "authenticable result message AOM" having the following format:                 Authenticable results                 Software ID                 Invalid end text (describing the result for display to the player) String   At step 626, Central computer 12 receives the block, " Authenticate by decrypting using the 'SK meter', If you are certified, The result Accept based on that. As mentioned above Then the central computer 12 Recertify the result using your own 'PK CC' or take other appropriate action Can.   At step 628, The central computer 12 is That is "the result that can be authenticated" Reply “Authentication result confirmation message AOCM” to confirm that it has been accepted in the following format Ru.                 Authentication result confirmation                 Software ID                 Invalid end text string (confirm result acceptance for display to the player Or denial)   At step 630, The meter 502 is Acceptance of results from central computer 12 Display confirmation or rejection.   As mentioned above The player is Facilitate communication with central computer 12 To Manually enter a message on the telephone keypad. in this case, Shown in FIG. like, Relate to manual data transfer between meter 502 and central computer 12 Using different protocols that are more adaptable due to limited communication bandwidth Good.   At step 632, The meter 502 is The result of the game is that “ID meter” Enough to narrow the potential of the source to just a handful of meters 502 It is displayed on the screen with a fragment of the bit of "ID meter".   At step 634, The player dials the central computer 12 , Mentioned above Like Use the touch-tone keypad in response to appropriate prompts from the IVRU Enter this information.   At step 636, Central computer 12 generates a random call sequence and Send to layer, The player then does it on a suitable input device (eg, Keeper Dod, Input to joystick interface etc.   At step 638, The meter 502 is Cipher hash of game result and challenge sequence Calculate Encrypt it with "SK meter", Result "Identifiable result message "AOM" is displayed.   At step 640, Player calls “Authenticizable Result Message AOM” Enter on the keypad From there it is sent to the central computer 12.   At step 642, The central computer 12 is Hash and encryption independently Authenticate 'authenticable result message AOM' by calculating Player Check the value received from   At step 644, The central computer 12 is "Authentication result confirmation message" As above. this is, With voice indication of result acceptance or rejection by IVRU I can.   At step 646, Player 50 meters "50% confirmation result confirmation message" Enter 2 that is, As mentioned above Display result acceptance confirmation or rejection.   It can be appreciated that there are several variations on the above. That is, To improve reliability To The value sent by the player is He is two, I accidentally entered a digit of 3 To enable detection of some level of error, Can be attached redundant Ru. Variations of the above protocol are Same for all meters 502 and RAM during manufacture Keys other than the "SK meter" programmed in 510 can be used. This The thing about The meter 502 displays an "ID meter" at step 632, and Player Saves the need to enter it in step 634. in addition, Step 638 Alternatively Instead of being encrypted with the value of the secret key, Secret key It can also be accompanied by a hash of values.   According to the above Meter charging protocol Game computer 14 or game Allows the use of program 26 to be metered in several ways, including It is possible to That is, Time dependent inoperable, Enables game center type play Credit request, as well as, It is a flat rate charge. Gameplay is Game compilation Software of the operating system of the computer Component 710 without running Also, 26 of the game program without permission Without running “Secured Software Components” 710 It can be controlled by the meter 502. in addition, Gameplay is Allowed The game will be played by an alternative system that does not display in usable or expected form. The meter can be charged. The latter is Descrambler 500 dies the game Game program instructions and / or data as necessary to crumble It can be achieved by rumbling. here, Descrambler 50 0 is "Authenticable Unlock Message (AUM)" Is enabled by Examples of descrambling are described separately below.   In the time-dependent inoperative embodiment: The game computer 14 is Specific period Are configured to function only between After the period, that is, After expiration or It needs to be input an "unlocking code" that enables play after the end date Ask for. The player is Unlocking cord to continue playing after the end date (Below, It is called "authenticizable unlock message AUM". To get " From the central computer 12, the above-mentioned "Correctable unlock message AUM" Obtained by executing the 'permission from central computer' protocol. That The "authorization request message" in the protocol of "Identifiable unlock request It is identified as a message (Authenticable Unlock Request Message) AURM. here, The "time limit" value specifies the length of the next use period to be purchased. play To ya, Moon, week, You can give the option of time purchase by day etc. Pre The year is Billing Give a credit card for Invoicing is described above after the end of the specified period The notification can be done using a protocol. "The permission from the central computer In the "permitted" protocol, The central computer 12 can make an authentication request that can be authenticated. The message “AURM” Check the status of the player's billing account, As mentioned above "Authentiable unlock message AUM" that composes "authorization response message" Create here, "New time limit" represents the permitted period. Meter is' certified Authentication possible unlock message AUM ', After It is a non-volatile memory 50 Change the end-of-use date represented by 6 “New time limit”. During the permitted period , For use of different forms depending on the "expense table element" of the game program 26 Charges can be generated against it. Additional time is to call the 900 number Therefore, you can purchase it, Billing is by mail or at retail Can also be done. For example, AURM is Write it out, Central computer 1 May be passed to the authorization agent of the terminal location connected to 2. Specially configured If you have metered software 503, The player is I'm playing Decrease the specified play time by the corresponding value (eg 1 minute) or some other value every minute If you May have several options, such as limited play time minutes Ru. If the designated time is over, The meter 502 no longer Computer component 710 does not work to execute The game is Computer 14 or a particular game program 26 becomes inoperable. to this regarding, Play a given time a day, It is understood that it can be limited to a predetermined week of January etc. Can. For example, The meter 502 is Prevent children from playing late at night You may want to prevent the gameplay from 11 pm to 7 am Also, The playable ratio may be changed according to the date and time of play.   In the game center type embodiment, The player is For gameplay Purchase "Credit". By this, In the game center environment, Pre The year calls central computer 12 and enters a specific number of gameplay codes. You can do it by hand. Center The “authorization response message” to the computer 12 is Message ACRM, except that it is identified The method is the same as the above-mentioned embodiment. “Identifiable Credit Request Message ACRM” is From central computer 12 It represents the specific number of gameplay sought. "Permission from central computer" In the protocol The central computer 12 is "Permission response message" mentioned above Authenticable Credit Permission Message (Authenticatable Credit Au Generate thorization message) ACAM. here, 'New restricted expenses' play It is the number of credits. The meter is "Identifiable Credit Authorization Message ACAM" After authenticating Copy the credit amount “limit cost” to its non-volatile memory 506 Ru. When playing, the credit amount is subtracted by the meter 502. Purchase I lost my credit, If the player wants to continue playing, He , Through the "permission from central computer" protocol Central computer 12 You have to buy more credits from.   Each game played can reduce the total credits by a specific amount. Man For games with a feeling of mind, Two or more "credits" may be required per play. ( For example, Like a game center video game machine) If you lose all assigned lives, Some games accept additional credits Is designed as This allows the player to continue the game . Request extra credits to complete the restricted stages of the game Can. The player is Whichever to play the first 10 levels of the game One credit is charged, No Yes To Do Five Additional Bonus Levels Even if there is a gap, one credit may be charged for each. For example, 10 levels While exploring the dungeon of Le To the player Use of special weapons, or Is For access to dungeon maps and hints to avoid traps, Add Credits can be imposed. Such extra features are For a specific game program 26 May be executed by the “software control block” 706, these To continue playing at the level May be configured to require additional credits within the meter 502. Available The number of credits is It may be executed after finishing the level score which is the game . For example, If you score more than 1 million points with Donkey Kong, Extra cle The digit is added to the available credit balance. Discover the secret room in the game Then 5 credits may be added. Hit home run and earn 10 credits You can do it as well. after that, This 5 credit bonus will be played in future games Store this information in the volatile memory of meter 502 so that it is never returned be able to. Make it possible for players to change the number of credits they receive for $ 1 You can also. The purchase of 10 credits is 50 cents each, Purchase of 20 credits In the case of, each will be 30 cents, etc. Credit discount is Accredited Can be done to select the player with the given title. Of five stars Mortal combat player is Receive 10% discount on all credits it can. Each credit can also buy a certain number of lives. Depends on the setting of the difficulty While the game can charge different numbers of credits. For example, Most Easy setup takes 2 credits per play, The hardest setting is 1 per play It is assumed that only the credit is taken. Instead of buying one game, Each cle Jit may give players a play for a period of time. 1 credit for 5 minutes You can buy the play of 2 credits can buy 12 minutes play Etc. As mentioned above The meter 502 is a game program 26 Game from data or instructions associated with the 'ware control block' 706 It can be determined for each credit. Charge per game is non-volatile of meter 502 Can be stored in memory Through the above-mentioned "Cost Update Information" protocol To change the fee structure for a particular game from the central computer 12 It can be manipulated by the code.   Instead of changing a specific number of credits for each gameplay, Those skilled in the art will Unlimited by requesting flat rate option from central computer 12 Level for strategic use It will be understood that one fee can only be implemented for a fixed period. "Central Computer's 'authorized protocol' "Permit request" is "recognized flat fee Request message (Authenticatable Flat Rate Request Message) AFRRM With the exception of It is performed as described above. here, "Time limit" is unlimited Represents the required fixed period of use. The central computer 12 is "Aware Certifiable flat rate request message AFFRM Player's Account Status Check The “identifiable flat rate Authenticated Flat Rate Message (AFRM) is generated. here, "new "Time limit" represents permission for unlimited use of the requested period. Game Operate the computer 14 or Run a specific game program 26 To The meter is that is, Operating system program or game pro Gram 26 “Secured Software Components” 710 When you run Before and during each play, Check "New Time Limit" It is only.   As mentioned above Another play prevention method is Specific game program 26 May scramble game data, Thereby, Game computer The game 14 can generate a game with the changed features. As shown in FIG. , The descrambler 700 Built into the game computer 14 itself, It is connected to the video output cable from the game computer 14. Sclan In order to convert the bulled game to the expected form, The descrambler 700 Up As stated, "Authentiable unlock message AUM", "Identifiable credit Authorization message ACAM ”or“ certifiable flat rate request message AFRM ” Must be enabled. The operation of the illustrative embodiment is described below by way of example. Light up.   The data and instructions associated with the computer game are It is called a sprite Similar to game character data, Typically Contains background elements. specific game is, It can have many different backgrounds that represent many different levels. An example of the background is wood, plant, river, It is a jungle scene showing rocks etc. Game characters controlled by the player Kur, Likewise for the enemy characters you encounter, Movable spry within the game background Is usually expressed by This background is a map where sprites move relative to It may be similar. This "game data" is Software that CPU 27 executes It should not be confused with computer code. The game data here is video Used to generate output, Even if scrambled or encrypted, CPU 27 It can be processed. Processed game data visibility information consists of pixels It is done. Each pixel has a color and an associated position relative to the display. Example pixel Reference (34, 15, 26) 34 pixels above the bottom of the screen (horizontal reference) Reference) corresponds to blue (represented by numeral 26) 15 pixels to the right. This information Is stored in the read only memory of the game cartridge. Normal, Gameplay Program 26 is CPU 27 runs Video signal (RF format) by appropriate means Converted to It is transmitted to a display device such as a TV. In this example The video signal is Have changed features, It is a real game in the form that the output video signal is expected Must be applied to the descrambler 700 to represent the Sclan In bull processing, The algorithm does not use pixel data to express the expected format It can operate more. Expected pixel (34, 15, 26) (12, 02, 68) can be transformed . The transformed pixel data is stored in the game cartridge, During processing If there is no intervening descrambling process displayed on the TV, The player can understand It will not be. The descrambler 700 Appropriate authenticable unlock message When it becomes operational with (12, 02, 68) is the expected form (34, 15, Return to 26) Operate on the video signal to convert. Scramble and descramble Processing is a combination of algorithm / inverse algorithm, And / or The encryption described here An authentication protocol can be used. For example, (12, 02, The value of 68) is Secret key (34, 15, 26) can be obtained by encrypting After all It is authenticated by the public key in the browser 700. The descrambler 700 End date rear, Or Appropriate "Authentiable Unlock Message AUM", "Identifiable credit authorization message ACAM" or "Identifiable flat rate" Before receiving the request message AFRM ' To descramble the video signal Does not work.   The reward points as a result of gameplay are Frequent flyer award It can be stored in the same way as the program. In relation to this Played One or more reward points are generated for each game or play time. Player , For example, One reward point for every one million scores in a particular game, such as game You can also save points for the achievement of certain results. Given game program The reward point redemption order associated with ram 26 is Non-secure data source 7 Software control block 706 or confidential for that program in 04 Software components that are protected can be present in '710 , Or It can be permanently stored in the meter's non-volatile memory 506. The During Rei, Meter 502 tracks reward points and takes non-volatile notes Store in the reward point database in i. Redeem reward points To The player is "ID meter" or secret computer or software ID An SSCID, Player PIN and other identifiers, Number of points that are subject to redemption request, as well as, Authenticating point redeemable message (Authentic) including current date / time command the meter 502 to generate an 'apable Point Redemption Message) APRM' Request the "Reward Points" feature. This APRM is SSCID and / or Is the secret key of the It can be encrypted. Central computer The 12 is Read out and authenticate "approvable point redemption message APRM", The Increase the reward point balance of the layer by the appropriate number. These reward points Is later used to purchase goods and gifts, Additional purchases if necessary It may be accompanied by payment.   In the exemplary embodiment, The credits used for pay-per-use processing are Pre Is credited for playing on the game computer 14 of another player So that you can bring Between game computers 14 (ie, Sending Side game computer 14 To the destination game computer 14). this is, Meter 50 Performed by requesting the 'credit transfer' function associated with It is possible. The meter 502 is In order to confirm the identity of the player, Player -PIN, Prompt for "Billing account number" or other identifier. This response is If it matches the data stored in memory, Processing is The player Destination game Game computer ID number or public key "PK Comp" And And / or “ID of meter 502 associated with destination game computer 14 Proceed by entering the meter or the public key "PK meter". after that, The sending meter 502 is Destination game computer 14 / meter 502 system With "time limit" or "limit cost" to use for PIN and other player identification With the child, A game computer ID number of the destination game computer 14; as well as, Sending Associate with the master meter 502 or the clock 36 of the sending game computer 14 Authenticable transfer incorporating the current date / time from clocked clock 512 "Authenticatable Transfer Message" (ATRM) is generated. This message The page is Destination game computer 14 public key "PK Comp" or destination computer The public key “PK meter” of the destination meter 502 associated with the computer 14 Encrypted and signed. after that, The sending meter 502 is a non-volatile memory 50 Reduce the credit balance in 6 by the corresponding required amount. The player is "I can authenticate Write out or print out (or, Floppy it Download it to a portable data memory medium such as destination Enter it in the destination meter 502 associated with the game computer 14 . The destination meter 502 associated with the destination game computer 14 is example If (If ATRM is encrypted with the destination meter's public key "PK meter") ATRM By the destination meter's private key 'PR meter', Or (ATRM is a line Destination computer if encrypted with the public key “PK Comp” on the By decrypting with the computer's private key "PRK Comp" Above mentioned dark Authentication message according to the protocol Read out and authenticate the ATRM Store date / time in memory, "It is possible to authenticate Date to determine if the proper transfer message "ATRM" was previously used Compare / time to previous messages. "Identifiable Transferable Message" is authenticated If credit transfer is allowed, Transfer credit is Destination game computer The destination meter 502 of the data 14 is added to the generated "guest account". Player ー is Your PIN and other identifications embedded in “Authentiable Transfer Message ATRM” By typing a different child Use these credits. after that, Meter 502 enables game play as described above. If play after credit If you have a balance, The destination meter 502 is Number of credits returned, "Limit cost" And / or "time limit", Player's PIN, Sender game computer ID number Or sender 'ID meter', as well as, 'Certifiable balance return including current date / time Generate a message (Authenticable Balance Return Message) ABRM. ABRM is Private key of meter 502 associated with destination game computer 14 -By "PRK meter" Or Associated with the destination game computer 14 Can be signed by the private key "PRK Comp". Concurrently The strike account is deleted. The player is "Certifiable balance return message ABRM" The sending game computer 14 or the game computer 14 is also associated Enter the meter 502, If the meter 502 is ABRM, For example, Destination that ABRM Decrypt using the public key "PRK meter" or "PRK Comp" on the game computer If you authenticate by It is the player's Add to credit balance.   The player is Other players' computers via central computer 12 You can set up a guest account at. In this regard, Player is another game A guest account can be requested from the computer 14. The meter 502 is "Aware Destination message (Authenticatable Gift message) AGM It is displayed on the computer 14. The message is Destination game computer 14 SSCID, Player PIN and other identification Another child, as well as, Contains the current date / time. This message is Central Compu It can be encrypted by the public key "PK CC" from the data 12. after that, The Layer is Call central computer 12, Credits Required and Credits Along with other payment preparation instructions for "Authenticizable guest message AG You will be prompted to enter M]. The central computer 12 is Encryption / decryption module “Authenticizable Guest Message AGM” by Destination game console Computer SSCID, Number of credits requested, as well as, Include current date / time Recognizable guest credit message (Authenticatable Guest Credit Messag e) Generate "AGCM" for reply. This message is Destination game computer 1 It can be encrypted by the SSCID of 4. On the destination game computer 14 The associated meter 502 is after that, "A recognizable guest credit message "AGCM", As mentioned above Credits transferred to the guest account Add.   The above example is Part of the game computer 14 (for example, PCMCIA card Etc.) using the associated meter 502, but Tamper-proof Incorporating the components in the game control device 800 as generally shown in FIG. Is possible. One exemplary type of game control device is Transfer of game character The movement of the player is transmitted to the game computer 14 to control the movement. It is a joystick. By this, Rear with existing game computer 14 Compatibility can be secured. The game control device 800 is In addition to the components of the meter mentioned above Well, As known in the art, An input associated with game computer 14 Interface controls such as joysticks and buttons that communicate via It also includes hardware that makes it possible. The game control device 504 is NTSC ( Also includes a video input interface that receives PAL video signals in Europe There is. The video output interface sends the video signal to the TV. Game control Laura is To generate an “authenticable result message” as described in detail above Program in memory to recognize data from video screen to extract result information Contains. Also, Game system Your device memory is Unique controller secret serial number CSSN, Random number generator program, And store meter program instructions. As mentioned above Encryption / Decryption module The encryption / decryption function performed by the module 28 is part of the meter of this embodiment . In this respect, Controller memory is Associated public and private encryption keys When, Store with a public encryption key associated with the hardware manufacturer . Game software 15 Another source, Control device 800 public key and random number Does it contain a source code, It can be read from there. This code is Confused to make the operation of intermediate devices such as games Genie more problematic You In the example scenario, The player is As mentioned above "Authentication is possible Purchase a functional unlock message AUM, Enter it into game controller 800 Do. Game controller CPU is Random Number R1 and Pre “I can play the“ authenticable play actionable message (Authenticatable Play En able Message) APEM '' is generated. This APEM is Control unit secret serial number including CSSN Yes, It can be encrypted by the game control device's private key. after that, APEM is As mentioned above CPU 27 of game computer 14 or death It is sent to the clamper 500. The game control device 800 is Game controller Open key and game controller secret serial number CSSN is a hardware manufacturer's private Sign by key key. The latter is known as a public key certificate. This , The game computer 14 certifies the public key certificate and the game controller 504 Can be Therefore, The game computer 14 is "Identifiable play action Controller secret serial number CSSN included in the message "APEM" You can confirm that it is correct for your device. after that, Game computer 14 is The second random number R2 transmitted along with the random number R1 to the game control device 504 is Generate The game control device 504 is This R1 was previously created and is Confirm that it matches R1 included in the play operation enable message APEM Encrypt R1 and R2 with the game controller's 504 private key, Response pre (I) Include in the operable message RPEM. RPEM Read by game computer 14, Game controller 504 public key Deciphered by next, R1 and R2 are compared to previously generated values. That If they match, The game controller 504 is authenticated and It is the above protocol It can be used to play the game according to.   The present invention describes what is considered to be the most practical and preferred embodiment. Was illustrated. But, The deformation is possible, A person skilled in the art makes obvious modifications It is clear. Glossary Certification: It is a process to confirm the identity of the sender and / or the integrity of the message. Certifiable Balance Refund Message (ABRM): Destination game generated by computer Certified message, and Player and guest with unused credits It is possible to return from the account to the sending game computer. The message is The secret serial number of the sending game computer, The number of credits to be returned, play Ya's PIN, It can include the current date / time. Authenticatable Interrogation Message (ACM): Generate an encrypted response message Message used in the challenge / response protocol to instruct the game software The page is By this, The call setup / response protocol becomes operational, Also, The A game that allows the layer to play a game that results in a registration request That the player got the game results from Or Own it You can check what you are doing. Certifiable Credit Authorization Message (A CAM): Generated by a central computer, An authenticatable message used to provide additional credits to the player is there. The message is To ensure that fresh taste, Secret serial number, Requested And the number of credits PIN and It can include a random number or a sequence number. Secret The number is The credits received can only be used on one gaming computer Ensure that there is. Certifiable Credit Request Message (ACRM): Usage by central computer Generated by the gaming computer as an imposing credit request to be used by the payment system Authentication message. The message is Secret serial number, I was demanded to With the number of credits, PIN and It can include a serial number or a random number. Random number or ream Serial numbers are used to ensure the fresh taste of the message. The secret serial number is Reply ACAM ensures that it can not be used for many gaming computers. Authenticate Flat Rate Request Message (AFRRM): Unlimited duration for players A recognizable message generated by a game computer providing gameplay is there. The message is SSCID, The requested period, Player PIN and other identification With the child, It can include the current date / time. Authenticate Flat Rate Message (AFRM): Central computer in response to AFRRM This is a recognizable message that you have created. The message is SSCID, Requested period When, Player PIN and other identifiers, Can include the current date / time Ru. Authenticatable Guest Messages (AGM): This authenticatable message is a game compilation Computer generates This allows the player to credit from the sending computer You can set up a guest account without having to bring it. The message is destination Game computer secrets Dense number and PIN and other player IDs, Include the current date / time Can. Authenticatable Guest Credit Message (AGCM): This authenticatable message is AGM The central computer creates in response to The message is Destination game computer Secret serial number of the With the number of credits requested, Including the current date / time be able to. Authenticatable Result Message (AOM): Game result (ie, Score, Time to finish , And / or play-related information etc.) Software With the Hash value of game software, Game software is resident Unique attributes of the memory medium, Depends on at least one of player's PIN etc. And And, It can be included. Authenticatable Play Enable Message (APEM): Send to game computer CPU In an authenticatable message, Allow gameplay. that is, SSCID, Remorse number, Or Contains a source that identifies the APEM. Authenticatable point redemption message (APRM): Game computer generated authentication Is a possible message, By this, Player is rewarded with a central compilation Can be transferred to The message is SSCID, Point received And the number of Player PIN and other identifiers, Including the current date / time it can. Authenticatable Response Message (ARM): Allow authentication used for call setup / response protocol A message that can Play a game that results in the player asking for registration The player gets the game result from the game software which made it possible to lay Was it, Or You can confirm that you own it. Certifiable Start Message (ASTM): Central to allow start of tournament play An authenticatable message generated by a computer. The message is Specific or A game that generates random initialization parameters for the tournament Software can be included. Also, The message is Cryptographic processing and / or Or can include encryption key information used for handicap parameters Ru. Authenticable Timing Message (ATM): Certification that represents the time until the end of the technical competition Is a possible message, Software ID, Game software hash value When, Unique attributes of the memory medium on which the game software resides and Player PI At least one of N and the like can be included. Authenticatable Transfer Message (ATRM): This message is for the player to leave credits Used to transfer high from one gaming computer to another Be This message has a secret serial number and PIN and other player identifiers, Current date / time, With the game computer ID from the destination game computer Can be included. By the ID from the destination computer, The player is numerous You can not use an ATM with your gaming computer. Authenticatable Unlock Request Message (AURM): Recognition generated by game computer A recognizable message, By this, Player extends his current end date Can be required. The message is The game computer SSCID, request End date, and And random numbers. Identifyable Unlock Message (AUM): This authenticatable message is the new end The end date A central computer generates in response to the request. The message is Game computer Ta SSCID, With the new end date, It can include the random number received by AURM. Authentication result confirmation message (AOCM): Certified game result (ie Score, Until the end Time in, And / or Play related data). Biometrics: An independent measurement system (eg, Fingerprint reader, Speech recognition system Stem, Used to uniquely identify a given individual via a retinal scanner etc.) Processing procedure. Broadcast Start Message (BSTM): For example, TV set, Radio and other media channels The start message is simultaneously broadcast to all players through. Central agency: A system that uses a central computer that applies cryptographic protocols , The gameplay method is thoroughly fair and fair, The result of such a game is exactly Reported, That is, In a system that ensures that there are no undetectable lies or hoaxes is there. Central computer: Machine as official tournament manager and / or score certifier Functional computer or computer network. Central computer , It may or may not have some or all of the game software inside . The central computer is -Generally, Is the remote area where the game computer is located? Are accessed via the telephone network. The telephone network is player Interactive voice response unit (I) prompting the user to enter information through the telephone keypad Can contain VRU) and The gaming computer communicates directly through the modem You can also Central scoreboard: Centralized data holding all certification scores It is a base. This information is Internet and major online providers Get through, Download to the game computer, Enter by mail or phone You can do it by hand. Accreditation results: Central organization as legally (fairly) achieved and accurately reported The score of the game, as certified by It is time until completion and / or play related information. Call / answer protocol: Authenticate the resulting message using a cryptographic protocol In the process of the central computer exchanging messages with the gaming computer to Yes, Play a game that produces results that players submit for certification The player obtained the game result from the game software that was able to about, Or You can also prove that you own it. Cheat code: Once entered into the game software These codes are Unlimited Give the player special benefits such as weapons, endless lives, etc. Typically game pro Grammar is used to test the software. "God code" and You can also call me. Check digit: Message generated as a simple function of the original message It is a digit attached to The recipient of the message repeats the function. If the result does not match the check digit, a transmission error will occur. . Classic Tournaments: A non-electronic tournament. Classic tournament Is Normal, It contains the following four attributes: That is, 1) Held at a specific time. 2) Specific Held at the place. 3) Held under a set of rules that apply equally to all competitors Ru. 4) One or more referees And / or under the supervision of a licensing agency. compression: Long data while retaining all or most of the information in the original long data string A protocol that uses an algorithm to shrink columns into short columns. Controller Secret Serial Number (CSSN): It is a number uniquely identifying the game control device. This Can be written to the ROM chip of the controller. credit: A payment unit used in a pay-per-use system. play He purchases credits from the central computer. Unused credit is a game It is stored in the meter of the computer. Cryptographic protocol: Enable one or more of the following for the present invention: Is a protocol aimed at         1) Legal ratio of the result, That is, The player does not simply create the result, The result is It must be the result of playing a certain game.         2) Origin of the result, That is, The result is a particular game, And / or Specific game Computer, And / or It is generated from a software package.         3) the integrity of the results, That is, The result may be tampered with or altered in any way It has not been changed.         4) Software maintainability, That is, Game software is in any way Are not tampered with or changed.         5) Tournament effectiveness, That is, Results are generated as a result of the tournament And It is not generated from practice play.         6) One time use, That is, "Authentiable start message" is used only once Be         7) Transmission integrity, That is, Expressed in encrypted result message It is not possible to change the result intentionally or accidentally during transmission without detection of such a change Yes.         8) Impossible of denial, That is, Player who registered score on central computer You can not deny it later. Dedicated game system: It is a game console manufactured by Sega and Nintendo. Unlike PC, Its main use is gameplay. Destination game computer: this is, Sender computer when preparing a guest account Computer that receives credit transfer from the computer. Digital signature: Of the message being signed and the private key of the person who signed it A bit sequence based on both Recipient is the sender's identity and message It can be used to verify both integrity. Department: The tournament is beginner, Different players like intermediate and advanced It can include groups indicated by loops or geographical locations. encryption: It is a process of describing a message in a way that hides the actual situation. Encryption key: Used to encrypt messages in cryptographic protocols It is a data string. Encryption / decryption module: Encrypt messages and / or data, Decipher Authentication Computer programs, Code block or hardware / firmware A. End date: It is data stored in the nonvolatile memory of the meter. Current date After this day, Game computer and / or game software works It becomes impossible. Alternatively Descramble scrambled video signal The descrambler device becomes inoperable. Participation: Each is a separate opportunity to play in a tournament. Each participation is multiple of play It can also be recognized for the round. Some tournaments have players I can admit to participate more than once. Participation fee: It is the cost of purchasing each participant. Player has his own credit card You may pay by giving the number to the tournament central computer . Inclusion of a certain number of participation costs without additional charge for purchasing game software Can. External authentication device: Security protected equipment in which the encryption / decryption module is present And For example, Available from National Semiconductor Company iPower card etc. External clock signal: It is a time signal generated by a third party that is broadcast extensively. Whole land Like the spherical positioning system GPS, Some atomic clocks operated by the government Broadcast to the United States. This external clock signal is To target specific recipients Also, If the signal is encrypted with the recipient's public key, It is possible. False score: Change game software or use cheat code And the score obtained by firmware: Store to ROM or other device that holds stored information permanently Is a program that Counterfeit score: The player actually makes up the score or from other players When I stole my score, A fair game is played and you get a true score As a fake score used to try to make the central agency fraudulently believe is there. Game computer: It is a computer on which a game (or test) is played . The game computer is Video game consoles (such as Nintendo or Sega), PC, PDA, Game center machine operated by coins, (Game boy or game A) may be a portable game unit. Technology games: Technology supports the results for each game or series of games Including any game determined in a distributed manner, For example, Backgammon, bridge, There is poker etc. Technology games include elements of luck, such as when using a die. You may The game of possibility: Whether randomness is the key or dominant factor in determining the outcome, The result is primarily out of the player's control or out of the player's significant influence A game that is determined by the external force of the. Game parameters: Number of levels, Game attributes such as difficulty or variability. This These Parameters are controlled by the central computer Through an authenticatable start message Can be sent to the gaming computer. Game software: The code that the game computer executes, By this , Players can play the game. Game software Typically Ka Toridge, CD-ROM, floppy disk, It is resident on a hard disk etc. . Guest account: Separate payment form prepared by another player's game computer Is a temporary account for gameplay. This account is Game computer Managed by Handicap device: A close game in which one player is clearly good is Use desired set variables to give weak players more lives, ammunition, etc. By It can be handicaped. The handicap device is The You can create these expected variables based on layer ratings and titles. Can. Handicap value: A number that equalizes two factors, such as the player's different abilities It is a method. For example, It is a case where the handicap of golf is 4 strokes. Hardware check: Final official announcement of hardware such as game cartridge The process of physically checking before. In tournaments where the prize is big enough, In order to prove that the internal seal for tampering detection is not broken, Victory play You can require Yer to submit your game cartridge. Hardware Security: Prevent tampering with programs or results and / or The use of a specific element or structure that provides a level of counterfeiting. Hash function: Take an input sequence (usually a series of digits) and Through It is usually converted to a smaller fixed-size output sequence (called a "hash"). ) To do Say the number. My goal is, Possibility that the result hash function value can represent only one input sequence As always high To "identify (fingerprint)" an input sequence. 1 input column A bit change will produce a different hash value. Hash value: Result sequence of data obtained after applying hash function to input sequence Crest). Speed award: Achieving results without considering situations that may arise in other related games or other competitors It is an award awarded to Golf tournament players are Ho If you put out a hole in one at Le Consider his or her position in the whole tournament Without considering For example, Five, I have the right to receive $ 000. Internal clock: It is a clock included in the game or computer system . IVRU: "Interactive voice response unit" is The user chooses a prompt to push Data from the keypad or by voice commands that can be recognized by the IVRU software. Computer system coupled to the telephone to enter the Key card: It is a smart card used to generate secrets of encryption keys. each card Can be uniquely configured, Message encrypted using card key The central computer can decipher. League play: The game is a team play scheduled at regular intervals. Memory medium signature: Based on the specific characteristics of a specific memory medium, Easily replicated It can not be a unique, readable set of data. Non-volatile memory: ROM, which does not require any power supply to maintain memory contents Ha Disk, floppy disk, Data storage medium including optical disk etc It is. off-line: (For example, Other computer or via a modem) Not connected to an external source, Also, Any electromagnetic external signal (eg, RF Signals are not received from them either. One-way function: It is relatively easy to calculate, but it is very difficult to reverse or restore. Say a function. For example, Multiply two X digit numbers to produce a Y digit result Is easy. But, Take the Y digit number and which two X digit numbers are Y digits It is very difficult to think about what was multiplied to create a number. One-way hash function: It also refers to a one-way hash function. From the input column It is easy to calculate the hash value, but it is difficult to generate a sequence to hash a specific value Yes. One-way hash function Compression function, Contraction function, Me Message digests, fingerprint, Crypto checksum (cryptograp hic checksums), Data integrity check (data integrity checks: DIC), Manipulation detection codes: M DC), Message Authentication Code (MAC), as well as, Also known as data authentication code (DAC) Being Keyed One-way Hash: One-way calls that require the use of both input and specific key sequences It is a shell function. ("Key" is an additional input sequence that is a secret. ) Who has the key Can calculate the hash value, That is, The hash value is encrypted with that key Be online: The computer connects to or receives signals from other computers Say that. Typical examples are It is the PCS of the local area network, PCS is Mobile phone connected by wireless network to modem, telephone line or central telephone switch It is connected to the Internet by talk. Online Proctor: Tournament games progress in a manner that follows the rules of the game Websites that aim to continuously and intermittently confirm what they are doing or Connect online to the service. Software that manages the game This includes a temporary connection to ensure that the coat has not changed May be To prevent the use of the automatic play system Random to the player Simple questions (eg, What is your middle name) it can. result: A score that is the result of all or part of the gameplay, Time to finish, as well as And / or play related information. Play related data is Game software decided As you May contain special statistical information, Play-related data is Data can be used to edit statistical information. Alternatively Result is, Game It may consist of all game data of the whole game. That is, in this case, All of the players Act of response, The entire game, including movement Is recorded in the memory. Result message: Result exchanged between data game software and central computer Result data. Public Key Certificate: It is a public key signed by a trusted authority. premium: It is a prize of a prize or less, For example, T-shirt, Coffee mug, Poster, We say certificate of approval. Prepaid Tournament Participation: Participation fee was paid before the tournament start date It is a tournament participation. award: It is a prize or prize associated with the outcome of the tournament. Typically Pre The year receives awards in relation to the results in the tournament. The prize is a check, Electricity Child fund transfer, It is paid via digital cash or credit card. The award is You can also take the form of credits for future gameplay, Award Etc. may not be a substantial reward. Qualification points: Refers to the points earned for a given rank. For example, Bury Ji-player is Win tournaments and receive master points. Rank: Hierarchical position of the certification score (first place, Say 225). The hierarchy is a competitor We can also be based on everyone, Restrict to certain agreed groups or restrictions Can be For example, 4th in the state, 6th in high school etc) Rating: It is usually distributed to players on the basis of one or more qualification scores achieved within a given period of time. It is the assigned value. The chess rating is 1, Expressed by 3 or 4 digit number such as 825 Be done. Evaluation is based on grades and It is not a relative position (order) to others. Therefore, Two players can each have the same chess rating. Authority: An organization responsible for overseeing the policies and procedures used in the tournament It is. Save / Resume Code: Allow the player to interrupt the game temporarily And it is Freeze the action until the resume code is entered into the game software It is to be connected. Secured surroundings: Hardware that is tamper proof or tamper proof Defined physical area of the In order to maintain the security of the system There are resident data or algorithms whose characteristics are unchangeable. Self-starting tournaments: The timeframes allowed by the tournament director Although set, Elements controlled by the player are controlled by the player Is a tournament. It is expected that it will take time to solve for weeks In a tournament that solves puzzles, The player is The start time is the predetermined time As long as it is after the start date of the comment You can start when you want. Software ID number: A game that uniquely identifies a particular copy of the game software Musov Unique ID number built into the computer, Change in an undetectable way What is difficult to do. Software registration process: The player To identify copies of game software It is processing to send back the number SSN and personal information to the central organization. Each game software Copy of is Special holograms and / or associated with difficult to forge A registration card with a serial number SSN can be used. Software Confidentiality: Hassi to ensure the integrity of the game software Use encryption technology such as function. Software serial number SSN: Easy associated with each copy of the game software Can be confirmed (ie, (Known) ID number. Included within the game software Yes, Software that is not known and can not be easily accessed by players Do not confuse this with an ID. Sender game computer: this is, When preparing a guest account, Destination game It is a game computer that sends credits to a computer. Sprite: Video representation of a game character. Player controls the game Move the sprite on the device. Start message: A central computer that enables tournament games Message sent to the computer. Submission: It is a process in which the player sends the game result to the central computer. Subscription fee: Monthly or yearly expenses for which players can participate in a certain number of tournaments Say. Tamper proof: Hardware that is difficult to change or deform for its intended purpose Software or software. In certain circumstances, Such hardware or software If you try to change the hardware, the hardware or software becomes inoperable . In other situations, Tampering is detectable by cryptographic tests. Tamper-detected: By inspection or question Of the intended purpose or stored data Hardware or software that is intended to be modified or altered or that demonstrates successful evidence Wow. Tie breaker: Instead of a close playoff, Rank players with same score A secondary result other than the final score used to mark the For example, Computer A golf tournament that has been turned out will determine the winner based on the score, If score If they are tied, Determine superiority or inferiority by play related information such as the one with a smaller number of pat . And If the player is more tied (tie), Driver's flight distance The longer is the standard. Tie break is For example, Number of strokes of the key and mouse cliche Can be based on the Time stamp: Security is attached to the message with the current time and / or date Refers to the timing protocol made. The timestamp is Central computer Which security protection device or digital time stamp service It can be done by a third party who has been asked. title: The rating within the given range is [Order] or the order Will qualify for the prestigious title. Therefore, Chess "experts" are two, 000 to 2, Has received a rating of 200, Karate black belt meets proficiency evaluation criteria It is a The achievement of a title does not have to be based on numerical scores, but It needs to be based on certain play-related information such as the number of finish levels and the number of enemies killed. token: Tamper-proof and / or tamper-proof used in one or more of the following Operation detection type portable device (eg, say iPower).         1) Store of secret or private key         2) Random digit store         3) Message encryption and / or decryption         4) Message signing and / or confirmation tournament: The player Alone or in a team Fight over prizes and / or ranks Say competition. Tournament ID Number: It is a number uniquely identifying a tournament. Transmission error check module: Examine the check digit of the input message Computer program or code to confirm that no transmission error occurred I say a block. Tournament Types-There are many different types of tournaments Ru. Here are some common variations:   In score type tournaments, The player plays the game (and / or the clock Play against) You can win by giving the highest score. Playing golf or bowling Is a duplicate bridge, It is a classic score type tournament.   In a close tournament, Players instead of each other Play a match. Boxing and tennis are classic close tournaments. these Tournaments are essentially interpersonal relationships.   In puzzle type tournaments, Players compete to solve the puzzle, Time Be ranked among The first game ends will win. Crostwa The puzzle puzzle tournament is a good example of this.   Talented competition is another type of tournament. Usually does not contain subjective elements Unlike core tournaments, Talented competition is based on subjective factors and scores and awards Use the referee to rate the core. A gymnastics tournament is an example of this.   The final game is a form of close tournament, Measured in the competitor's field Fastest time is the deciding factor for victory. Car racing and 100 yard runs The winner wins regardless of time.   Predictive competition is Expecting a football season winner, At some future time Forecasting various financial indicators -To compare the accuracy of the forecasts . Lottery games such as Lotto are non-technical predictive tournaments It is believed that.   All types of tournaments can be single player or multiple players (teams) It must be noted that Volatile memory: If power supply is interrupted all stored data will be lost Which memory medium to say website: Access via the World Wide Web This includes any computer connected to the Internet that can                             Industrial application field   For the above detailed description, the present invention produces one or more of the following systems It is obvious that it can be used to Any location where the player can substantially access the gaming computer (eg For example, from home) also during gameplay game computer and central computer And geographically dispersed Tonamen who can participate without connecting online System that enables -Game results by the central computer, related or independent to the tournament of interest Generated by the computer at the gaming computer by authenticating Certify the result, and based on the result or the overall result, to other players in the game A system for giving rankings and ratings of players against A trusted third party to ensure that is legally achieved and accurately reported Eliminates the need to attend tournament locations or go online System to be -A test taker of a computer-controlled test on the gaming computer Have your central computer certify your test score and let other test takers A system that allows you to receive rankings and Not provided at the end of the test software is resident or associated with the game computer Systems that are An authenticatable message representing the player's game result on the gaming computer And a unique associated with a particular gaming software or gaming computer Attributes or identifiers, and authenticate messages that can be Each gaming computer or by using a central computer to authenticate Central with a database that stores software unique attributes or identifiers Computer played on the game computer by using the computer The game result generated by the computer is identified, and based on the result or the overall result Rank and rank the players of such games against other game players Injury system. -As mentioned above, according to the player's accreditation order and / or evaluation, the winnings etc. A system for giving players a prize or a sign of recognition. -In the game computer, specified or associated with a given tournament A system that certifies the time until the end of the technical competition that starts in the specified time, First to have the central computer certify their own end time. It is a system in which the participants are declared winners, and the participants A system that allows evaluations to be made. -The game start time is variable, and the player Chains External clock signal to be broadcast through the selected clock or media means As such, technical competitions ranked by the length of time required for gameplay termination A system for commenting, where time is The system in which the player who finished a given game in the shortest time is declared as the winner Mu. -At the central computer, the player gets game scores and Core is a technology that is adjusted by the time required to finish the game and other play conditions In the row competition, as mentioned above, the player's System. -A group of players form a team and the team score is central computer Rank and rank players in tournaments recognized and ranked in System. -A system in which players participate in tournaments with game computers Start message enabling tournament play, read on the game computer As well as the game program, the player's individual For example, based on certain parameters such as difficulty, variability, randomness, etc. Commands to set game parameters according to attributes and other program characteristics System that contains the variable -A system in which players participate in tournaments with game computers A system that determines the times players want to participate in and play tournaments. -A system in which players participate in tournaments with game computers , Hardware security and / or double protocol is tournament fairness and integrity A system used to secure gender. -A tournament system that uses encryption and other protocols, which can not be detected Trusted third parties do not need to prevent replacement of a dead player system. -The result of the potential computer game is submitted to the central A system certified using Tokoru. -Video game players with different ratings and skill levels play close games It is a system that allows you to create The system being equalized by the pup code. Computer-generated results obtained on a computer are Computer can be incorporated into the “Authentiable Result Message” A system that can be authenticated on its computer by a coll. -Generated by a computer obtained on any computer in the system Results are incorporated by the computer into the "Identifiable result message" Rarely later on any other computer in the system by cryptographic protocols A system that can be certified. -A device located between the gaming computer and the TV sets the data of the video output signal Read out and get the game result from the video output signal from the video output signal , A system that incorporates the result into the "authenticable result message". -A VCR compatible device placed between the gaming computer and the TV Output message Read out the data of the issue and convert the data to Allows the data to be authenticated, and the authenticatable data is for subsequent authentication and replay System to store on data memory medium. -Use to enable video game center play on a home gaming computer Separate payment system. -By the encryption protocol of the gaming computer and / or gaming software A pay-as-you-go system that enables inter-dependency operation failure. -Many machines that execute the above items by the existing game console type game computer Functional game control device.   Generally, the present application is implemented by a computer played on a gaming computer Certifies the results of the games produced, and accurately reports those results to achieve fairness. To be certified. The system may or may not be Provide the The system, in one embodiment, comprises a plurality of game computers Contains. Here, each game computer has an associated memory and an associated memory. And a processor for executing the program. The term "related memory" is Hard disk drive, CD-ROM drive, floppy disk drive, game As well as external devices such as the It is intended to include re-memory ROM and read-write memory RAM. This memory is Generally unsecured, can also be referred to as a non-secure data source Ru. The gaming computer is at least one game executed by the processing device Equipped with game software, including programs, Is a game You can play the game on a computer. Games are technical games and techniques It consists of art competitions, games of possibilities, predictions of future events whose outcome is uncertain, etc. be able to. In technical games, the game has the end result of gameplay ing. Here, the result is defined as the whole result of the game, the score, the end Time, all data related to the game itself, and any play related data Is also included. In the present invention, the game result is "authenticable result message AOM". Embedded in the same game computer itself, any other game computer Or post-certified by a central computer. Explain here In one embodiment, the authentication process not only authenticates the result but also accurately reports the result. It also recognizes that it has been achieved fairly.   Also, in general, the present application is operatively associated with a processing device of a gaming computer Providing an authentication means for generating and authenticating an authenticatable message. Authentication The means are referred to herein as a encryption / decryption module that utilizes a cryptographic protocol Include those that The encryption / decryption module is associated with the game computer. Game software or game computer located in the memory It may be part of a dedicated firmware. However, preferably, the encryption / decryption module Is in the secure perimeter or in the secure token. Exist. "Identifiable result message" means that the game software Thus, data can be included to indicate whether an unauthorized operation has been made. This data is , Generated using a cryptographic protocol, checked and verified. Game software Was determined to have achieved without Certified results are certified. 'Authentication' generated by encryption / decryption module Possible result message is the same game computer, encryption / decryption module Central with any other gaming computer having a central computer or central computer It is certified ex post by the institution.   The central computer of the present application is a program for Processing apparatus for executing the program, and generating and authenticating an authenticatable message Central computer Having a central computer authentication means operatively associated with the processor of it can. The central computer authentication means responds to the authentication request with the Can be operated to authenticate the game result. result The central computer plays by checking the data attached to it Whether the result was obtained by "faking" the game software Make sure. Central computer manages the tournament with certified score Multiple relational databases can be included.   Where the central computer is used to identify the outcome and manage the tournament Communication between the gaming computer and the central computer is a telephone network. Can be sent through. Telephone networks communicate with human operators But it is preferable to connect to the “Interactive Voice Response Unit IVRU”. United. The IVRU will register the tournament and / or "certify" Requested in connection with the submission of certification results embodied in Used to prompt for information. Alternatively, the gaming computer A central computer to transmit the recorded data and 'authenticable result messages' You can set up an online connection to: Online connection is for commercial online In-Service Provider, Internet, World Wide Web, Electronic Bulletin Through a data network, including board systems, or RF, cable TV, satellite You can do this through   Another aspect of the present invention is implemented on a gaming computer or gaming computer. Provide separate payment for use of the game program. Pay-per-use systems are Communicate with the computer, and the game computer with permission from the central computer Including a meter that operates to enable the operation of the game or the execution of the game program. There is. The meter is a security-protected device, which is It is a computer that includes the hardware located on the side, and Can be generated and authenticated. Preferred embodiment In the case of a game computer and / or game Control program operation by cryptographic protocol.   In the system of the present application, an operating system of a game computer Program and game programs are called meter programs. Each meter The program consists of Software Control Block and Software without Security Components and software components that are protected ] And. In the first embodiment, the entire meter program is Non-secure data source associated with the computer, ie hard disk etc It is resident in "Secured Software Components" is A set of software instructions that are cryptographically security protected, which Decoded by the meter to create at least one output parameter and Will be done. “Non-secure software components” are game Depend on at least one output parameter to execute the latter on the . Software Control Block is a meter program that identifies it to the meter Information about the program, and in one embodiment the meter Can be calculated. The meter has received permission from the central computer Software in the form of time- or cost-limited Decipher the component and execute it.

── ── ── ── ──続 き Continuation of the front page (51) Int.Cl. ⁷ Identification code FI Theme code (informative) // G06F 17/60 332 H04L 9/00 673B 601B 675B (31) Priority number 08 / 694,469 ( 32) Priority date August 8, 1996 (1996.8.8) (33) Priority claiming countries United States (US) (81) Designated countries EP (AT, BE, CH, DE, DK, ES, FI, FR, GB, GR, IE, IT, LU, MC, NL, PT, SE), OA (BF, BJ, CF, CG, CI, CM, GA, GN, ML, MR, NE, SN, TD, TG), AP (KE, LS, MW, SD, SZ, UG), EA (AM, AZ, BY, KG, KZ, MD, RU, TJ, TM), AL, AM, AT, AU, Z, BA, BB, BG, BR, BY, CA, CH, CN, CU, CZ, DE, DK, EE, ES, FI, GB, GE, HU, IL, IS, JP, KE, KG, KP , KR, KZ, LC, LK, LR, LS, LT, LU, LV, MD, MG, MN, MW, MX, NO, NZ, PL, PT, RO, RU, SD, SE, SG, SI, SK, TJ, TM, TR, TT, UA, UG, UZ, VN (72) Inventor James Jawlash, No. 25 Forest Street, Stanford, Connecticut, USA No. 25G

Claims (1)

[Claim of claim]         1. Memory device with coding control code embodied therein When,         Generate an encoded message corresponding to the computer game result To transmit the encoded message to a human readable output device Processing the coding control code in relation to the computer game result And a processing unit arranged to communicate with the memory unit. Computer equipment.         2. The human readable output device is a display device The computer apparatus according to 1).         3. The memory device is a game program embodied therein Further including ram execution code, the processing unit generating the computer game result The computer of claim 1 executing the program execution code to apparatus.         4. The encoding control code comprises a cryptographic protocol code The computer apparatus according to 1).         5. The processing device is a first processing device, and the computer device A second processing unit configured to generate the computer game result The computing device of claim 1 further comprising         6. The first processing unit is a processing unit which is protected. 70. A computer apparatus according to claim 69.         7. It further comprises a module including the processing unit and the memory unit. The computer device according to claim 1.         8. The module includes (a) an unauthorized operation detection type module and (b) an unauthorized operation. The computer according to claim 7, wherein the computer is selected from the group consisting of anti-operation type modules. Device.         9. Said modules are (a) dedicated computer games and (b) personas Le Compi Plug into a computer game selected from a group of 8. A plug-in module having an electrical connector configured as in Computer device as described.         Ten. The processing unit is a computer game program execution code The computer defined in claim 1 further configured to periodically inspect the block. Device.         11. The processing device includes (a) unauthorized operation detection information and (b) user identity information. Information, (c) unique digital signature information, (d) global location of the computer device Global positioning information, (e) random numbers generated by the central computer, (f) (G) a number corresponding to the time at which the results were generated; (H) the number of end parameters received from the central computer, (i) Symmetric key information, (j) public key information, (k) hash algorithm information, and (l) Generating additional information selected from the group consisting of meter charging information; The system of claim 1 further configured to be included in the encoded message. Computer equipment.         12. The unique digital signature message is a secret software ID messages, secret computer game ID messages, biometric users Hash value corresponding to the user identity information and biometric user identity A request containing information selected from the group consisting of compressed values corresponding to The computer apparatus of claim 11.         13. The computer system of claim 1, further comprising the display.         14. Internally embodied decryption control code and computer game A memory device having an encoded message corresponding to the         Decoding the encoded message to produce the computer game result The memory device being configured to process the decoding control code to indicate And a processing unit arranged to communicate with the computer.         15. The decryption control code includes a cryptographic protocol code Claim 14. Computer device as described.         16. The processing device includes (a) unauthorized operation detection information and (b) user identity information. Information, (c) unique digital signature information, (d) global location of the computer device Global positioning information, (e) random numbers generated by the central computer, (f) (G) a number corresponding to the time at which the results were generated; (H) the number of end parameters received from the central computer, (i) Symmetric key information, (j) public key information, (k) hash algorithm information, and (l) Said decryption to represent information selected from the group consisting of meter billing information Configured to process control code to decode the encoded message The computer apparatus according to claim 14.         17. The processing unit may include information that has appeared from the decrypted message Whether the computer game result is obtained by fraud based on The computing device of claim 14, further configured to determine         18. The memory device is embodied therein and the computer ID messages containing the identity information of the player who generated the game result And the processor is based on the decrypted message and the ID message. To determine whether the computer game result was obtained by fraud. The computing device of claim 14, wherein the computing device is configured to         19. The memory device is embodied in its own computer. The player further has registration information on a player who has generated a game result. Computer device as described.         20. Said processing device permitting execution of said computer game Generate an authorization signal and send it to at least one computer game meter The computing device of claim 14 configured as follows.         twenty one. The memory device and the processing device are a plurality of computer games. In the result Configured to rank multiple computer game users based on The computer apparatus according to claim 14.         twenty two. The processing device and the memory device are computer game results To send multiple computer games holding multiple encryption keys for mutual authentication of The computing device of claim 14 configured to:         twenty three. The processing unit and the memory unit are a plurality of computer games. Are configured to generate, maintain, and transmit a unique registration number for each of The computer apparatus according to claim 14.         twenty four. Computer game to generate computer game results Executing the program,         The computer game result to generate an encoded message Encoding the         Providing the encoded message to a user. .         twenty five. The user encodes the encoded message; Further comprising the steps of: providing the device configured to decrypt the corrupted message 25. The method of claim 24.         26. Providing the encoded message to the user comprises: 26. The method according to claim 25, comprising displaying an encoded message to the user. Method.         27. Encoded message corresponding to the result of the computer game Receiving from the user, and the encoded message to recover the result. Decoding the message and for further use of the decrypted message And storing.         28. Respond to computer game results from multiple users Receiving a plurality of encoded messages;         Decoding the encoded message to recover each result When,         Ranking the results;         Ranking the plurality of users based on the ranking of the results How to have it.