Modularized portable lottery terminal system

Abstract

The invention discloses a modularized portable lottery terminal system, and relates to the technical field of lottery sales terminals. The system takes a lottery function voucher as a core, a terminal function and hardware are decoupled, software definition and dynamic loading of the function are realized by remotely and safely issuing a digital voucher, and traditional hardware replacement is replaced, so that the service agility is greatly improved, the online period is shortened, and the operation cost is reduced. According to the system, a'security contract module 'is taken as a hardware trust root, an end-to-end closed-loop security system is constructed, key strategies such as graded prize claiming and responsible lottery ticket are forcibly executed in a tamper-proof environment, and an auditing log which cannot be tampered is generated for all operations, so that the highest-level credibility, security and compliance guarantee is provided for lottery ticket business.

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of lottery sales terminals, and in particular to a modular portable lottery terminal system. BACKGROUND

[0002] Traditional modular lottery terminals generally rely on hardware plug-and-play to extend functions in technical implementation, however, this mode has a series of inherent defects that are profound and interrelated. The strong binding relationship between its functions and physical hardware modules means that any upgrade of functions or introduction of new play methods must be completed by physically replacing hardware, which not only results in high maintenance costs and slow response, but more critically, its open modular interface brings huge security risks to system integrity, so that unauthorized or tampered hardware modules can be accessed to implement fraudulent bets or steal data, seriously threatening the credibility and financial security of lottery issuance. In addition, this hardware-centric architecture also makes its operation mode extremely rigid, and the terminal is difficult to dynamically adjust functions and permissions according to different business scenarios, and the change of functions generally lacks a unified, secure and tamper-proof record mechanism, which together leads to serious deficiencies in auditing and tracing, making it difficult for regulatory agencies to obtain reliable basis when conducting compliance review or accident investigation. SUMMARY

[0003] In view of the above problems existing in the prior art, the purpose of the present application is to provide a modular portable lottery terminal system, which comprises a modular body for carrying hardware modules, one or more physical hardware modules for performing specific lottery business operations, and a core control unit; the core control unit is internally disposed with a secure contract module with a globally unique contract module identifier and an internal asymmetric encryption key pair, a local configuration coordinator responsible for coordinating internal and external communication of the terminal, and a communication interface for connecting external networks; the system is configured to initiate a request to a remote central authorization and credential distribution platform through the local configuration coordinator to download one or more encrypted lottery function credentials, and the secure contract module uses its internal key pair to decrypt, digitally sign and verify, and securely install the lottery function credentials, and finally according to the function definition contained in the activated lottery function credential, dynamically allocates and loads logical business capabilities to the physical hardware module, thereby realizing remote, secure and dynamic configuration of terminal functions.

[0004] Further, the lottery function credential is a digitally signed and encrypted data container, which internally defines a complete set of functions, including business process scripts to ensure transaction atomicity, compliance policy markers in accordance with specific regional jurisdiction regulations, peripheral control instruction sets to drive specific models of printers or scanners, and a set of short-term session keys for signing and encrypting lottery transaction data.

[0005] Further, the security contract module is a hardware security element with a physical tamper-proof protection mechanism, which integrates a hardware cryptographic operation accelerator to efficiently perform encryption and decryption and signature verification operations, and its internal firmware can forcibly create an independent, hardware-isolated sandboxed security domain for each installed lottery function credential, ensuring that code, data, and key resources from different sources cannot cross-access each other.

[0006] Further, the system is configured to continuously interact with the central authorization and credential distribution platform, which is responsible not only for the generation and distribution of lottery function credentials, but also has the ability to manage the entire life cycle of lottery function credentials deployed in the terminal security contract module, including remotely sending instructions to update the lottery function credential version, temporarily suspend its functions, or permanently revoke its validity based on security events, and can execute pre-set geofencing strategies according to the terminal's geographic location information.

[0007] Further, the system, through the coordinated work of its local configuration coordinator and security contract module, is configured to perform a complete credential activation process, which includes the following steps: Step S1, after parsing a configuration activation token, the local configuration coordinator initiates an authentication download request containing the unique identifier of the terminal security contract module to the central authorization and credential distribution platform.

[0008] Step S2, after completing the authentication, the central authorization and credential distribution platform returns a lottery function credential package encrypted with a key associated with the unique identifier of the security contract module and attached with a digital signature.

[0009] Step S3, after receiving the lottery function credential package, the security contract module performs complete signature verification and decryption operations, and securely installs the decrypted lottery function credential inside.

[0010] Step S4, the local configuration coordinator triggers the activation of the installed lottery function credential according to external instructions, and the terminal operating system completes the dynamic mapping of business functions to physical hardware modules.

[0011] Further, the system comprises a hardware logic reconfigurable execution module, which is configured to dynamically load the configuration instruction set contained in the lottery function ticket after receiving a lottery function ticket defining a virtual function module, so as to change the operation logic and function behavior thereof, thereby constructing a new function entity defined by the lottery function ticket at the physical level without adding new physical hardware.

[0012] Further, the system has a hardware module security access mechanism, when a new physical hardware module is connected to the modular body, the physical hardware module initiates a hardware identity proof request to the security contract module through an internal bus, and the security contract module verifies the validity of the hardware certificate and instructs the local configuration coordinator to automatically request a lottery function ticket matching the function of the new hardware module from the central authorization and ticket distribution platform, so as to realize the security of the hardware plug and play, and ensure that only the authenticated hardware can be activated and used by the system.

[0013] Further, the system is configured to execute a policy-driven business process defined by the lottery function ticket and enforced by the security contract module, and the process at least includes one of the following: a hierarchical redemption process, in which the system obtains a digitally signed processing instruction according to the prize interval to perform the redemption or guide operation; a responsible lottery strategy, in which the security contract module compares the transaction behavior with the preset threshold in real time and issues a mandatory intervention instruction that cannot be bypassed to limit sales or prompt the user.

[0014] Further, the security contract module can concurrently store multiple isolated lottery function tickets, and the system provides an interface visible only to authorized administrators to switch between different business modes in real time; the security contract module internally integrates an unalterable event log recorder, which generates an encrypted log record containing an accurate timestamp and operator identity information for each operation of installing, activating and switching the lottery function ticket, for compliance auditing.

[0015] Further, to adapt to network instability in portable use, the local configuration coordinator comprises an offline activation cache module, which can pre-download and securely store the lottery function ticket pre-authorized by the central authorization and ticket distribution platform, so that the terminal can still install and activate the new ticket in the offline state, and after the network connection is restored, it automatically synchronizes the latest ticket status with the central authorization and ticket distribution platform, and uploads all audit logs generated by the security contract module during the offline period in batches.

[0016] Compared with the prior art, the present application has the following advantages: The application breaks the rigid binding relationship between the traditional terminal function and the physical hardware by introducing the software-defined function paradigm with "lottery function voucher" as the core. It changes the terminal function upgrade, rule change and play addition from relying on expensive and slow physical hardware replacement to a one-time secure, verifiable and remotely deployable digital voucher issuing process, thereby giving the lottery operation unprecedented agility and market response ability, greatly shortening the business online cycle and reducing the operation and maintenance cost throughout the life cycle.

[0017] The application takes the hardware security element "security contract module" as the trust root and builds a closed-loop security system from the cloud to the terminal with end-to-end encryption. This not only fundamentally eliminates the security risks caused by module counterfeiting, data tampering and illegal access, but more importantly, it places complex business strategies such as hierarchical redemption and responsible lottery in a tamper-proof execution environment for mandatory implementation, and generates tamper-proof, legally binding audit trails for all function changes and key operations, thereby providing complete technical support for highly sensitive lottery business to meet the highest level of public trust, security and compliance requirements. BRIEF DESCRIPTION OF DRAWINGS

[0018] Figure 1 A system configuration diagram of the application is shown.

[0019] Figure 2 An exemplary step flowchart of the voucher activation process of the application is shown. DETAILED DESCRIPTION

[0020] The application will be further described below in conjunction with specific embodiments.

[0021] As Figure 1The illustrated system structure diagram of the present application, the embodiment provides a kind of modular portable lottery terminal system, system includes a module for carrying hardware module Body, for example, the body adopts high-strength ABS+PC composite material, with IP67 level dustproof waterproof capacity, and be designed with standard electrical and mechanical docking slot, to facilitate the hot plug of different function modules;One or more physical hardware modules for performing specific lottery business operations, in one embodiment, these modules can include a thermal printer module for printing lottery, a high-speed CMOS image scanning module for scanning payment code and winning code, and a non-contact card reader module supporting NFC and IC card transaction;And a core control unit;Example, the core control unit can be an embedded mainboard with ARM architecture high-performance processor;Core control unit is deployed with a secure contract module with global unique contract module identification and built-in asymmetric encryption key pair, for example, the identification is a 256-bit globally unique identifier solidified at factory, its built-in key pair can be ECC-256 elliptic curve password pair or RSA-2048 key pair in line with national password management specification, private key never leaves module hardware boundary;A local configuration coordinator responsible for coordinating internal and external communication of terminal, the coordinator can be a privileged background service process running on terminal main operating system in practice, and it carries out secure communication with secure contract module through exclusive driver program interface;And a communication interface for connecting external network;In a specific embodiment, the communication interface integrates LTE module supporting 4G / 5G cellular network and wireless local area network module supporting Wi-Fi6 standard, to ensure network connectivity in different environments;System is configured to initiate request to a remote central authorization and credential distribution platform through local configuration coordinator, which is a service cluster deployed in cloud, with high availability and disaster recovery capability;To download one or more encrypted lottery function credentials, and the secure contract module uses its internal key pair to decrypt, digitally sign and verify and securely install lottery function credentials, finally, according to the function definition contained in the activated lottery function credential, dynamically allocate and load logical business capability to physical hardware module, specifically, terminal operating system will route logical function request such as "print double-color ball lottery" to physical thermal printer module for execution according to the function mapping table defined in the credential through driver program;So as to realize the remote, secure and dynamic configuration of terminal function.

[0022] The lottery function credential is a digitally signed and encrypted data container, which in one embodiment can be a structured data packet following the JSON Web Encryption specification, with a header declaring the encryption and signature algorithms; and an internal structure defining a complete set of functions, including a business process script to ensure transaction atomicity, such as a script written in a lightweight sandboxed scripting language, which defines the complete process of "bet-deduct-ticket", and any step failure will trigger a rollback operation; a compliance policy flag conforming to the regulations of a specific jurisdiction, such as an enumerated field named JURISDICTION_FLAG, whose value can be CALIFORNIA_USA or GUANGDONG_CN, and the system will load different sales limits and play rules accordingly; a peripheral control instruction set to drive a specific model of printer or scanner, such as a complete set of ESC / POS instruction sequences to control a specific model of thermal printer to print a correctly formatted lottery ticket; and a set of short-term session keys for signing and encrypting lottery transaction data, for example, an AES-256 symmetric key generated by the central platform for each business session, with a validity period of 8 hours.

[0023] In this embodiment, the security contract module is a hardware security element with a physical tamper-proof protection mechanism, such as a special security chip conforming to FIPS140-2 Level 3 or higher security level certification, which has a metal shielding layer and a sensor integrated into its physical package, and will immediately destroy the internal stored keys once it detects a physical intrusion attempt; a hardware password operation accelerator is integrated to efficiently perform encryption and decryption and signature verification operations, which can provide hardware-level acceleration for standard cryptographic algorithms such as AES, SHA-256, ECDSA, reducing the time consumption of signature verification operations from hundreds of milliseconds to tens of milliseconds; and its internal firmware can create a separate, hardware-based isolated sandboxed security domain for each installed lottery function credential, which in one embodiment uses hardware virtualization technologies such as ARM TrustZone to allocate independent protected memory areas and processor execution states for each credential; ensuring that code, data and key resources of lottery function credentials from different sources cannot cross-access each other.

[0024] In this embodiment, the system is configured to continuously interact with the central authorization and credential distribution platform, which is responsible not only for the generation and distribution of lottery function credentials, but also has the ability to manage the entire life cycle of the lottery function credentials deployed in the terminal security contract module, including remotely sending instructions to update the lottery function credential version, for example, by issuing an UPDATE_CREDENTIAL instruction in JSON format through a secure MQTT push channel; temporarily suspend its function, or permanently revoke its validity based on security events, and can execute pre-set geofencing strategies according to the terminal's geographic location information; for example, when the GPS coordinates reported by the terminal exceed the provincial administrative area bound to the credential, the platform will automatically issue a SUSPEND_CREDENTIAL instruction, so that the terminal cannot sell outside the area.

[0025] As shown in Figure 2 FIG. 1 is an exemplary step flowchart of the credential activation process of this embodiment, and the system is configured to perform a complete credential activation process through the coordinated work of its local configuration coordinator and security contract module, which includes the following steps: Step S1, after parsing a configuration activation token, for example, the operator scans a one-time two-dimensional code provided by the authorized institution using the scanning module of the terminal, and the content of the two-dimensional code is the token; the local configuration coordinator initiates an authentication download request containing the unique identifier of the terminal security contract module to the central authorization and credential distribution platform; the request is an HTTPS POST request signed by the private key of the security contract module, and the request body contains the GUID, timestamp and random number of the module to prevent replay attacks.

[0026] Step S2, after completing the authentication, the central authorization and credential distribution platform returns a lottery function credential package encrypted using the key associated with the unique identifier of the security contract module and attached with a digital signature; in an embodiment, the platform uses the public key obtained by pre-exchange or based on the module GUID to encrypt the credential content, and uses the private key of the platform to perform ECDSA signature on the entire credential package.

[0027] Step S3, after receiving the lottery function credential package, the security contract module performs complete signature verification and decryption operations, and securely installs the decrypted lottery function credential in its internal; the decrypted credential content is written to an encrypted, access-controlled flash partition in the security contract module.

[0028] Step S4, the local configuration coordinator triggers the activation of the installed lottery function credential according to external instructions, and the terminal operating system completes the dynamic mapping of business functions to physical hardware modules. For example, on the touch screen of the terminal, the administrator enters the password and clicks the "Activate New Game" button, which is an external instruction.

[0029] The system comprises a hardware logic reconfigurable execution module, which is configured to, upon receiving a lottery function ticket defining a virtual function module, dynamically load the configuration instruction set contained in the lottery function ticket to change its own operation logic and function behavior, thereby constructing a brand new function entity defined by the lottery function ticket at the physical level without adding new physical hardware. For example, reconfiguring a general signal processing unit into a hardware co-processor dedicated to a certain lottery high-speed draw number verification The system has a hardware module security access mechanism. When a brand new physical hardware module is connected to the modular body, the physical hardware module initiates a hardware identity proof request to the security contract module through an internal bus. In an embodiment, the internal bus is a dedicated and physically isolated I2C bus. The hardware identity proof is a hardware certificate conforming to the X.509v3 standard and signed by the device manufacturer, which is fixed in the OTP memory of the module. After verifying the validity of the hardware certificate, the security contract module instructs the local configuration coordinator to automatically request a lottery function ticket matching the function of the new hardware module from the central authorization and ticket distribution platform, thereby realizing the security of the hardware plug-and-play and ensuring that only authenticated hardware can be activated and used by the system.

[0030] In this embodiment, the system is configured to execute a policy-driven business process defined by the lottery function ticket and enforced by the security contract module. The process at least includes one of the following: a hierarchical redemption process, in which the system obtains digitally signed processing instructions according to the prize interval to perform redemption or guide operations; for example, for prizes below 500 yuan, the instruction is PAY_DIRECTLY, and the terminal directly completes the redemption; for prizes between 500 yuan and 10,000 yuan, the instruction is GUIDE_TO_STATION, and the terminal prints a guide ticket; for prizes above 10,000 yuan, the instruction is GUIDE_TO_CENTER, and the terminal prompts the user to go to the lottery center; a responsible lottery policy, in which the security contract module compares the transaction behavior with the preset threshold in real time and issues a mandatory intervention instruction that cannot be bypassed to limit sales or prompt the user. For example, comparing the "chasing number" behavior of purchasing the same number more than 10 times within 5 minutes, or the "large amount" behavior of purchasing more than 2000 yuan per day; and issuing a mandatory intervention instruction that cannot be bypassed to limit sales or prompt the user, for example, forcibly locking the sales function for 5 minutes and popping up a "please purchase rationally" prompt on the screen.

[0031] The security contract module is capable of concurrently storing multiple mutually isolated lottery function credentials, and the system provides an interface only visible to authorized administrators to switch between different business modes in real time; for example, an administrative interface that requires double authentication of the administrator through fingerprint and password to enter, allowing the administrator to switch between "instant ticket sales mode" and "lottery type lottery sales mode" with one key. The security contract module integrates an unalterable event log recorder inside, which generates an encrypted log record containing an accurate timestamp and operator identity information for every operation on the lottery function credentials, including installation, activation and switching. In one embodiment, each log record is a JSON object containing event type, UTC timestamp, operator ID and event summary fields, and forms a chain structure with the hash value of the previous record to form an anti-tampered audit log chain; for compliance audit.

[0032] To adapt to the instability of the network in portable use, the local configuration coordinator contains an offline activation cache module, which can pre-download and securely store lottery function credentials pre-authorized by the central authorization and credential distribution platform, for example, when the network is good, download the credentials of 3 new games that may need to be activated in the future week at one time, these credentials are encrypted and stored in the flash area managed by the local coordinator; so that the terminal can still complete the installation and activation of new credentials in the offline state of the network, and after the network connection is restored, automatically synchronize the latest credential status with the central authorization and credential distribution platform, and upload all audit logs generated by the security contract module during the offline period in batches. For example, once the network connection is detected to be restored, the system will immediately establish a secure TLS connection to upload the compressed log data to the audit server.

Claims

1. A modular portable lottery terminal system, characterized by: The system comprises a modular body for carrying hardware modules, one or more physical hardware modules for performing specific lottery business operations, and a core control unit; the core control unit is internally disposed with a secure contract module with a globally unique contract module identifier and a built-in asymmetric encryption key pair, a local configuration coordinator responsible for coordinating internal and external communications of the terminal, and a communication interface for connecting external networks; The system is configured to initiate a request to a remote central authorization and credential distribution platform through the local configuration coordinator to download one or more encrypted lottery function credentials, and to decrypt, digitally sign, and securely install the lottery function credentials by the secure contract module using its internal key pair, and finally to dynamically allocate and load logical business capabilities to the physical hardware modules according to the function definitions contained in the activated lottery function credentials, thereby realizing remote, secure, and dynamic configuration of terminal functions.

2. The modular portable lottery terminal system of claim 1 wherein: The lottery function credential is a digitally signed and encrypted data container that internally defines a complete set of functions, including business process scripts to ensure transaction atomicity, compliance policy markers that comply with specific regional jurisdiction regulations, peripheral control instruction sets that drive specific models of printers or scanners, and a set of short-term session keys for signing and encrypting lottery transaction data.

3. The modular portable lottery terminal system of claim 1 wherein: The secure contract module is a hardware security element with a physical tamper-proof protection mechanism, which integrates a hardware password operation accelerator to efficiently perform encryption and decryption and signature verification operations, and its internal firmware can forcibly create an independent, hardware-isolated sandboxed security domain for each installed lottery function credential, ensuring that code, data, and key resources from different sources cannot cross-access each other.

4. The modular portable lottery terminal system of claim 1 wherein: The system is configured to continuously interact with the central authorization and credential distribution platform, which is responsible not only for the generation and distribution of lottery function credentials, but also has the ability to manage the entire life cycle of lottery function credentials deployed in the terminal secure contract module, including remotely sending instructions to update the lottery function credential version, temporarily suspend its function, or permanently revoke its validity based on security events, and can execute pre-set geofencing strategies based on the geographical location information of the terminal.

5. The modular portable lottery terminal system of claim 1 wherein: The system, through the collaborative work of its local configuration coordinator and secure contract module, is configured to perform a complete credential activation process, which includes the following steps: Step S1, after parsing a configuration activation token, the local configuration coordinator initiates an authentication download request containing the unique identifier of the terminal secure contract module to the central authorization and credential distribution platform; Step S2, after completing authentication, the central authorization and credential distribution platform returns a lottery function credential package encrypted using the key associated with the unique identifier of the secure contract module and attached with a digital signature; Step S3, the security contract module, after receiving the lottery function credential package, performs complete signature verification and decryption operation, and securely installs the decrypted lottery function credential inside; Step S4, the local configuration coordinator triggers the activation of the installed lottery function credential according to external instructions, and completes the dynamic mapping of the business function to the physical hardware module by the terminal operating system.

6. The modular portable lottery terminal system of claim 1 wherein: The system contains a hardware logic reconfigurable execution module, which is configured to dynamically load the configuration instruction set contained in the lottery function credential to change its own operation logic and functional behavior after receiving a lottery function credential defining a virtual function module, thereby constructing a new functional entity defined by the lottery function credential on the physical layer without adding new physical hardware.

7. The modular portable lottery terminal system of claim 1 wherein: The system has a hardware module security access mechanism, when a new physical hardware module is connected to the modular body, the physical hardware module initiates a hardware identity proof request to the security contract module through an internal bus, and the security contract module verifies the validity of the hardware certificate and instructs the local configuration coordinator to automatically request a lottery function credential matching the function of the new hardware module from the central authorization and credential distribution platform, thereby realizing the security of plug and play of hardware and ensuring that only authenticated hardware can be activated and used.

8. The modular portable lottery terminal system of claim 1, wherein: The system is configured to execute the policy-driven business process defined by the lottery function credential and enforced by the security contract module, which at least contains one of the following: a hierarchical redemption process, in which the system obtains digitally signed processing instructions according to the prize interval to perform redemption or guide operation; a responsible lottery strategy, in which the security contract module compares the transaction behavior with the preset threshold in real time and issues a mandatory intervention instruction that cannot be bypassed to limit sales or prompt the user.

9. The modular portable lottery terminal system of claim 1 wherein: The security contract module can concurrently store multiple isolated lottery function credentials, and the system provides an interface visible only to authorized administrators to switch between different business modes in real time; the security contract module internally integrates an unalterable event log recorder, which generates an encrypted log record containing an accurate timestamp and operator identity information for each operation of installing, activating, and switching the lottery function credential, for compliance auditing.

10. The modular portable lottery terminal system of claim 1 wherein: To adapt to network instability in portable use, the local configuration coordinator contains an offline activation cache module that can pre-download and securely store lottery function credentials pre-authorized by the central authorization and credential distribution platform, so that the terminal can still install and activate new credentials in offline state, and after network connection is restored, automatically synchronize the latest credential status with the central authorization and credential distribution platform, and upload all audit logs generated by the security contract module during offline period in batches.

Images