Lottery sales terminal based on Android system and modular structure thereof

Abstract

The invention discloses a lottery sale terminal based on an Android system and a modular structure thereof, and relates to the technical field of lottery machines. The terminal is composed of a cabinet main body with IP65 protection, an industrial-grade main control module, an identity verification module, an interaction module, a payment module, a hot-pluggable printing module, a prompt module, a power supply, a protection monitoring module and the like. The identity verification module adopts a dual mechanism of certificate IC reading and OCR-living body comparison to ensure that the lottery is sold only to people who accord with the legal age; all the functional modules are connected through a standard bus and support hot plug maintenance. The terminal realizes end-to-end encryption payment, double-partition FOTA self-healing upgrading, UPS power-off protection and multi-dimensional environment-vibration linkage alarm.

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of lottery machines, in particular to a lottery sales terminal based on an Android system and a modular structure thereof. BACKGROUND

[0002] Currently, the common lottery terminals on the street are mostly indoor counter machines or modified vending machines: the machine shell is usually a thin plate or a plastic shell, and the protection level is generally lower than IP54, with poor adaptability to water, dust and temperature difference, and the whole machine often needs to be returned to the factory after water ingress or corrosion; the printing mechanism, power supply and code scanner are fixedly installed, and once a fault occurs, the multi-layer structure needs to be disassembled, the maintenance time is long, and the downtime is high; software upgrade depends on a U disk or manual flashing, and upgrade failure can easily lead to a black screen; identity verification relies on swiping a second-generation ID card or manual input, which cannot verify the consistency of the portrait and is difficult to prevent underage people from violating the lottery rules; the payment interface is single, and the common two-dimensional code module lacks encryption; there is a lack of UPS, surge and cabinet vibration detection, and data is easily lost after power failure. SUMMARY

[0003] To overcome the defects of the prior art, the present application provides the following technical solution: a modular structure of a lottery sales terminal based on an Android system, the terminal device comprising: a cabinet main body composed of a steel plate or an engineering plastic with a thickness not less than 1mm, with an overall protection level not less than IP65, and provided with a multi-point mechanical anti-theft lock; a main control module, which is an industrial-grade Android mainboard, configured with a multi-core processor, an independent security chip and a dual-system partition to support remote firmware update; an identity verification module, which includes an ID card IC reader, an OCR camera and a fill light, used to obtain and cross-check user age information; an interactive module, which includes an integrated capacitive touch screen and optional physical buttons, and the touch screen is used for number selection, menu operation and result display; a payment module, which integrates a bank card reader, an NFC antenna and a two-dimensional code scanner in accordance with PBOC2.0 / EMVCo standards; a printing module, which is a hot plug structure of a thermal printer, and is connected to the main control module and the power module through a waterproof aviation plug; a prompt module, which is composed of multiple LED light strips and a loudspeaker, used to output ticket purchase status and winning prompt; a protection monitoring module, provided with a door magnet, a vibration sensor and a temperature and humidity sensor, used to detect abnormalities of the cabinet main body and send an alarm to the main control module; a power and endurance module, including an AC-DC power supply, a UPS battery pack and a full-line surge protection unit; wherein each functional module is connected to the main control module through a bus or a high-speed serial interface.

[0004] Preferably, the identity authentication module is arranged on the cabinet body; the printing module is slidably arranged in the cabinet body by means of rail clamping, so that the printing module can be easily detached from the cabinet body for hot-plugging maintenance on site, and the door magnet is arranged at the connection between the printing module and the cabinet body; and the interactive module is hingedly arranged on the cabinet body, so that the interactive module can swing and rotate on the cabinet body.

[0005] Preferably, a self-resetting limit switch is arranged at the end of the pull-out rail of the printing module; when it is detected that the printing module is not completely in place, the main control module prohibits ticket printing and prompts the user to reinsert the printing module on the touch screen.

[0006] Preferably, the identity authentication module calls the OCR algorithm to extract the head portrait of the certificate holder while reading the information of the IC chip of the identity card, and compares the extracted head portrait with the head portrait taken by the camera in real time; only when the two head portraits match and the age of the user meets the regulatory requirements, the main control module allows the user to enter the number selection process. The edge position of the touch screen is also provided with a camera for extracting the head portrait of the certificate holder.

[0007] Preferably, the LED light strip of the prompt module is connected to the GPIO port in sections, and the preset light effect is triggered to be synchronously output with the sound effect when the ticket printing is completed or a prize is won.

[0008] Preferably, the main control module periodically downloads the signed firmware from the cloud server through the remote FOTA mechanism, and writes the firmware into the backup partition during the business off-peak period to complete the upgrade; if the watchdog does not detect the heartbeat within the set time, the system automatically rolls back to the old version of the firmware. In embedded / IoT devices, it is a hardware or kernel-level timer. The system must periodically feed the dog (send a signal or reset the counter). If the dog is not fed within the specified time, the hardware will determine that the system is stuck or abnormal, and will trigger a reset or report failure to the boot program. Heartbeat refers to the short message or signal sent by the system at regular intervals (for example, every 2-5 seconds) when it is running normally, which is used to prove that it is alive. It is usually completed by a key process or daemon. The watchdog listens for these heartbeats. When upgrading the firmware of the device, the new version is first written into the backup partition (referred to as B partition), and then restarted from the new firmware. If the watchdog does not receive a heartbeat within the set time (for example, within 5 minutes after startup), it means that the new firmware may have crashed or cannot work normally. At this time, the boot program automatically switches back to the last stable old firmware partition (A partition), ensuring that the terminal continues to be available, and will not be completely paralyzed due to a failed upgrade.

[0009] Preferably, the protection and monitoring module immediately cuts off the power supply of the printing module and the payment module, and simultaneously alarms through the buzzer and the background server when detecting abnormal vibration or the cabinet body being pried.

[0010] A method for using a lottery ticket selling terminal based on an Android system, comprising: S1, power-on self-checking and device identity authentication to a server; S2, age verification of a user by an identity verification module; S3, after satisfying the verification conditions, the user completes number selection by manually selecting numbers through a touch screen or selecting a machine selection mode; S4, completing encrypted payment through a payment module; S5, ticket printing by a printing module and outputting a prompt by a prompt module; S6, uploading betting data, payment credentials and logs to a background server through an encrypted channel by a main control module.

[0011] Preferably, in the machine selection process of step S3, the main control module calls a high-quality pseudo-random number generator to generate betting numbers, and displays a number generation progress animation in real time on the touch screen.

[0012] Preferably, before uploading in step S6, the main control module calculates a SHA-256 hash value of the betting data, and uploads the hash value together with the original data for background integrity verification.

[0013] Compared with the prior art, the present application has the following beneficial effects: (1) the cabinet body of the present application adopts a steel plate with a thickness of ≥1 mm and a yield strength of ≥235 MPa, the shell gap is supplemented with a sealing strip, a waterproof joint, and a heat dissipation hole and a wiring hole are added in the customer operation area, and the protection level of the whole machine reaches IP65 or above; the multi-point mechanical anti-theft lock is cooperated with the vibration-door magnet linkage power-off protection, so that it can continuously work in an outdoor high-humidity and dusty environment, and the equipment can be applied to an outdoor environment; (2) the identity verification module of the present application synchronously reads the IC chip information of an ID card and calls OCR to extract the head portrait of the certificate, and compares the head portrait with the head portrait captured by a real-time camera, and only when the person and the certificate match and the age meets the regulations, the number selection page is entered; at the same time, a secondary verification by a short message can be selected. The closed loop eliminates the loopholes of traditional single path verification, such as stolen use, photo retouching or other people's replacement, and blocks the purchase of tickets by minors from the source; (3) the printer of the present application adopts a guide rail pull-out and a waterproof aviation plug, and the payment and interaction sub-modules are hot-plugged through a standard bus; all the components in the cabinet can be disassembled at the front end or the side slide rail position, and when the printing module is not locked in place, the limit switch feeds back in time and automatically prohibits ticketing. The on-site operation and maintenance are changed from disassembly + return to factory to second-level replacement, the annual downtime of a single device is shortened, and the maintenance cost and service influence are significantly reduced; (4) the payment link of the present application meets the PBOC2.0 / EMVCo standard, the betting data and the log are calculated by SHA-256 hash locally and uploaded through a TLS tunnel, and the key file storage adopts double-length key encryption; FOTA writes new firmware into a standby partition and cooperates with a hardware watchdog to monitor the heartbeat, and if an abnormality occurs within 5 minutes of starting, the old version is rolled back, so that the upgrade brick is prevented. This mechanism, which pays equal attention to safety and reliability, takes into account continuous iteration and business continuity, and eliminates the data leakage and downtime risks caused by traditional manual brushing; (5) the power module of the present application integrates UPS battery, surge suppression, electromagnetic filtering and overvoltage and overcurrent protection, and in combination with temperature and humidity sensors and vibration sensors, the internal and surrounding environment of the cabinet can be diagnosed in real time; when lightning strike, power grid short circuit or pry damage occurs, the system automatically cuts off the power supply of the vulnerable module, triggers the buzzer and synchronously alarms on the cloud, and ensures the safety of the print head and financial peripherals. BRIEF DESCRIPTION OF DRAWINGS

[0014] Figure 1 The connection flow chart between the modules of the present application.

[0015] Figure 2 The overall structure diagram of the present application.

[0016] Figure 3 The structure diagram of the hinge of the present application.

[0017] In the figure: 101-cabinet body; 102-interaction module; 103-identity verification module; 104-printing module; 105-hinge. DETAILED DESCRIPTION

[0018] The technical solutions of the present application are further illustrated below in conjunction with the drawings and through specific embodiments.

[0019] The present application provides a modular structure of a lottery sales terminal based on an Android system, the terminal device comprising: a cabinet main body 101 composed of a steel plate with a thickness not less than 1 mm or an engineering plastic, with an overall protection level not less than IP65, and provided with a multi-point mechanical anti-theft lock; the shell material is a steel plate with a thickness ≥1.0 mm and a yield strength ≥235 MPa (to improve quality, such as using engineering plastic, to save cost), and a heat dissipation hole and a wiring hole design are added behind the customer operation area, all cable interfaces and top cover joints use sealing strips and waterproof joints to ensure that the whole machine has a protection level of IP65 or above, preventing damage caused by user water splashing. The main control module is an industrial-grade Android motherboard, configured with a multi-core processor, an independent security chip and a dual-system partition to support remote firmware updates; the core is composed of an industrial-grade Android motherboard or an embedded system, responsible for running applications and controlling various modules. The device communicates with the background server through 4G / 5G or a dedicated line, automatically authenticates the identity and sends a heartbeat packet to monitor the status at regular intervals. Each functional module is connected to the central processor through a standard bus or an expansion board, supporting hot plug upgrade. The identity verification module 103 includes an ID card IC reader, an OCR camera and a fill light, used to obtain and cross-check user age information; the interaction module 102 includes an integrated capacitive touch screen and optional physical buttons, the touch screen is used for number selection, menu operation and result display; the payment module integrates a bank card reader, an NFC antenna and a two-dimensional code scanner that meet the PBOC2.0 / EMVCo standard; encrypted communication and a payment gateway are used in the payment process to meet the financial-level security standards. The identity verification module 103 is arranged on the cabinet main body 101; the printing module 104 is slidably embedded in the cabinet main body 101 through a guide rail buckle, so that the printing module 104 can be easily detached from the cabinet main body 101 for on-site hot plug maintenance, and a door magnet is arranged at the connection between the printing module 104 and the cabinet main body 101; the interaction module 102 is hingedly mounted on the cabinet main body 101, used to swing and rotate the interaction module 102 on the cabinet main body 101. The identity verification module 103 reads the ID card IC chip information while calling the OCR algorithm to extract the head portrait of the certificate holder and compare it with the real-time camera shot head portrait, and only when the two are matched and the user age meets the regulatory requirements, the main control module allows entering the number selection process. The edge position of the touch screen is also provided with a camera for extracting the head portrait of the certificate holder.

[0020] The printing module 104 is a hot-swap thermal printer, and is connected with the main control module and the power module through a waterproof aviation plug. The prompt module is composed of a plurality of LED light strips and a loudspeaker, and is used for outputting ticket purchase status and winning prompt. For example, a screen animation is triggered when a user wins a big prize in a draw. When winning, a plurality of LED light strips flash and are accompanied by celebratory sound effects. A self-resetting limit switch is arranged at the end of the pull-out guide rail of the printing module 104. When it is detected that the printing module 104 is not completely in place, the main control module prohibits ticket purchase and prompts on the touch screen to reinsert the printing module 104. The segmented LED light strips of the prompt module are connected to the GPIO port, and preset light effects and sound effects are synchronously output when ticket purchase is completed or winning occurs.

[0021] The protection monitoring module is provided with a door magnet, a vibration sensor and a temperature and humidity sensor, and is used for detecting abnormalities of the cabinet body 101 and sending an alarm to the main control module. The power supply and endurance module includes an AC-DC power supply, a UPS battery pack and a full-line surge protection unit. The built-in UPS uninterruptible power supply is used to deal with sudden power failure and ensure data security. In view of the outdoor thunderstorm environment, surge protection devices (such as a varistor, a discharge tube and a transient voltage suppression diode) are arranged on the power supply side and the signal line. At the same time, a temperature sensor and a heat dissipation air duct are arranged to ensure that the equipment works stably in the range of-20℃ to 50℃. The above-mentioned functional modules are connected with the main control module through a bus or a high-speed serial interface. When the protection monitoring module detects abnormal vibration or the cabinet body 101 is pried, the power supply of the printing module 104 and the payment module is immediately cut off, and an alarm is sent to the background server at the same time through a buzzer.

[0022] The main control module periodically downloads signed firmware to the cloud server through a remote FOTA mechanism, and writes the firmware into a backup partition during a business off-peak period to complete upgrading. If the watchdog does not detect a heartbeat within a set time, the system automatically rolls back to the old version of the firmware. In embedded / IoT devices, it is a hardware or kernel-level timer. The system must periodically feed it (send a signal or reset the counter). If it does not feed within the specified time, the hardware determines that the system is stuck or abnormal, and triggers a reset or reports a failure to the boot program. The heartbeat refers to a short message or signal sent by the system at regular intervals (for example, every 2-5 seconds) when it is running normally, which is used to prove that it is alive. It is usually completed by a key process or daemon. The watchdog listens for these heartbeats. When upgrading the firmware of the device, the new version is first written into the backup partition (referred to as the B partition), and then restarted from the new firmware. If the watchdog does not receive a heartbeat within a set time (for example, within 5 minutes after starting), it means that the new firmware may crash or cannot work normally. At this time, the boot program automatically switches back to the last stable old firmware partition (A partition), ensuring that the terminal continues to be available, and will not be completely paralyzed due to a failed upgrade.

[0023] A method for using a lottery ticket selling terminal based on an Android system, comprising: S1, power-on self-checking and device identity authentication to a server; S2, age verification of a user by an identity verification module 103; S3, after satisfying the verification conditions, the user completes number selection by manually selecting numbers through a touch screen or selecting a machine selection mode; S4, completing encrypted payment through a payment module; S5, ticket printing by a printing module 104 and outputting a prompt by a prompt module; S6, uploading betting data, payment vouchers and logs to a background server through an encrypted channel by a main control module. In the machine selection process of step S3, the main control module calls a high-quality pseudo-random number generator to generate betting numbers, and displays a number generation progress animation in real time on the touch screen. Before uploading in step S6, the main control module calculates a SHA-256 hash value of the betting data, and uploads the hash value together with the original data for background integrity verification.

[0024] The terminal software runs on a customized Android operating system, which simplifies development and maintenance using the Android ecosystem. The hardware platform uses an industrial-grade embedded solution, with the motherboard supporting multi-core ARM or X86 processors. All functional modules are connected to the main control board through standard interfaces such as USB, serial port, or CAN bus. The peripherals such as printers, card readers, and code scanners are all mature models on the market, making it easy to replace them later. The payment function is compatible with bank card EMV and two-dimensional code protocols, and can be smoothly upgraded to new electronic payment methods. The entire machine supports remote management and FOTA upgrade, and the operator can batch issue software and configuration updates. Innovative interaction functions are achieved through simple hardware control logic: for example, LED lights are directly driven by GPIO ports and lit up in the event of a winning.

[0025] Ticket selection and purchase process: Selecting lottery types: after the user touches the screen, select the lottery type (such as the lottery, sports lottery) and the play (such as the double-color ball, 3D lottery, etc.). Selecting numbers and placing bets: provide multiple ways to select numbers: users can manually select numbers, or use machine selection or interesting machine selection. The system checks the input number format and betting amount in real time. Confirming the bet: the terminal displays the selected numbers, bet amount, and other betting information for the user to check. At this time, it can prompt the input of the ID number or log in to the account to confirm the identity. Payment and ticket purchase: the user selects the payment method and completes the payment operation (card swiping, code scanning, or coin feeding). Payment information is processed through an encrypted channel and verified in real time. Ticket printing and feedback: after successful payment, the terminal automatically prints the lottery ticket and outputs it from the ticket outlet; the screen and sound prompt the user that the ticket purchase is successful. The system uploads the betting records to the background and can send electronic receipts. Winning query (optional; or the user queries online himself): the user can use the terminal to scan the existing lottery barcode, and the background server returns the winning information. The terminal screen displays the redemption result, making it easy to check and redeem.

[0026] Electronic and network security: the software and user data running on the terminal are all encrypted with national encryption / double-length key, in line with the self-service device security specification. The payment channel uses a security module that meets the specifications of UnionPay / PCIDSS. The touch screen is equipped with a privacy film, and the input device uses a dynamic layout or a physical privacy cover to prevent side-viewing from leaking sensitive information. When starting up, the device needs to automatically authenticate the device identity to the server, and periodically sends a heartbeat packet to the background. If communication is interrupted or the program is abnormal, the device will automatically lock or alarm. Age verification: strictly prevent selling lottery tickets to minors. The terminal requires scanning an ID card before purchasing a ticket to verify the user's age; at the same time, auxiliary means such as mobile phone message verification or ID card information comparison can be used to ensure that the ticket purchaser has reached the legal age. Environmental and electrical safety: built-in UPS ensures that the system can save the current state and shut down safely in the event of a sudden power outage. The power module is equipped with overvoltage, overcurrent, and lightning surge protection; all internal wiring uses shielded cables and is equipped with EMI filters to ensure electromagnetic compatibility. The external AC power interface has a fuse and leakage protection, in line with safety standards.

Claims

1. A modular structure of a lottery sales terminal based on an Android system, characterized by, The terminal device comprises: A cabinet body (101) composed of a steel plate or an engineering plastic with a thickness not less than 1 mm, with an overall protection level not less than IP65, and provided with a multi-point mechanical anti-theft lock; A main control module, which is an industrial-grade Android mainboard, is configured with a multi-core processor, an independent security chip and a dual-system partition to support remote firmware updating; An identity verification module (103) comprising an ID card IC card reader, an OCR camera and a fill-in light, for obtaining and cross-checking user age information; An interaction module (102) comprising an integrated capacitive touch screen and optional physical buttons, the touch screen being used for number selection, menu operation and result display; A payment module integrating a bank card swiping device, an NFC antenna and a two-dimensional code scanner in accordance with PBOC2.0 / EMVCo standards; A printing module (104) which is a hot plug structure of a thermal printer and is connected to the main control module and the power module through a waterproof aviation plug; A prompt module composed of a plurality of LED light strips and a loudspeaker, for outputting ticket purchase status and winning prompt; A protection monitoring module provided with a door magnet, a vibration sensor and a temperature and humidity sensor, for detecting abnormalities of the cabinet body (101) and sending an alarm to the main control module; A power supply and endurance module comprising an AC-DC power supply, a UPS battery pack and a full-line surge protection unit; The above functional modules are connected to the main control module through a bus or a high-speed serial interface.

2. The modular structure of a lottery sales terminal based on an Android system according to claim 1, characterized in that: The identity verification module (103) is arranged on the cabinet body (101); the printing module (104) is slidably embedded in the cabinet body (101) through a guide rail buckle, so that the printing module (104) can be easily detached from the cabinet body (101) for on-site hot plug maintenance, and the door magnet is arranged at the connection between the printing module (104) and the cabinet body (101); the interaction module (102) is hingedly mounted on the cabinet body (101) to swing and rotate on the cabinet body (101).

3. The modular structure of a lottery sales terminal based on the Android system according to claim 2, characterized in that: The pull-out guide rail of the printing module (104) is provided with a self-resetting limit switch at the end; when it is detected that the printing module (104) is not completely in place, the main control module prohibits ticketing and prompts on the touch screen to reinsert the printing module (104).

4. The modular structure of a lottery sales terminal based on an Android system according to claim 1, characterized in that: The identity verification module (103) calls an OCR algorithm to extract the head portrait of the certificate holder while reading the ID IC chip information, and compares it with the head portrait taken by the camera in real time; only when the two are matched and the user age meets the regulatory requirements, the main control module allows the number selection process.

5. The modular structure of a lottery sales terminal based on an Android system according to claim 1, characterized in that: The segmented LED light strips of the prompt module are connected to the GPIO port, and the preset light effect is triggered to output synchronously with the sound effect when the ticketing is completed or a prize is won.

6. The modular structure of a lottery sales terminal based on an Android system according to claim 1, characterized in that: The main control module periodically downloads signed firmware to the cloud server through the remote FOTA mechanism, and writes it to the standby partition to complete the upgrade during the business low peak; if the watchdog does not detect the heartbeat within the set time, it automatically rolls back to the old version of the firmware.

7. The modular structure of a lottery sales terminal based on an Android system according to claim 1, characterized in that: The protection monitoring module cuts off the power supply of the printing module (104) and the payment module and simultaneously alarms through a buzzer and the background server when detecting abnormal vibration or the cabinet main body (101) being pried.

8. A method for using an Android system-based lottery sales terminal, characterized by, The method comprises the following steps: S1, power-on self-test and device identity authentication to the server; S2, age verification of the user through the identity verification module (103); S3, after meeting the verification conditions, the user completes number selection through manual selection or machine selection on the touch screen; S4, complete encrypted payment through the payment module; S5, the printing module (104) prints the ticket and the prompt module outputs the prompt; S6, the main control module uploads the betting data, payment voucher and log to the background server through an encrypted channel. 9.The lottery terminal based on Android system and modular structure thereof according to claim 8, characterized in that: In the machine selection process of step S3, the main control module calls a high-quality pseudo-random number generator to generate a betting number, and displays a number generation progress animation on the touch screen in real time. 10.The lottery terminal based on Android system and modular structure thereof according to claim 9, characterized in that: Before uploading in step S6, the main control module calculates the SHA-256 hash value of the betting data, and uploads the hash value together with the original data for the background to perform integrity verification.

Images