WO2005006263A1

WO2005006263A1 - Management of a secure on-line instant ticket lottery

Info

Publication number: WO2005006263A1
Application number: PCT/IS2004/000008
Authority: WO
Inventors: Steindor S. Gudmundsson; Stefan Hrafnkelsson
Original assignee: Betware A Islandi Hf.
Priority date: 2003-07-10
Filing date: 2004-07-12
Publication date: 2005-01-20

Abstract

The present invention relates to management and maintenance of an on-line system. The system having at least one pool, may comprise a plurality of categories and the method provides speed generation and pool manipulation in the system. The system utilizes a random number generator, a probability table and processing means to maintain and the activity of the system. The probability table is updated in response to a request in such a way that the probability for each category is changed after the request has been handled so as to maintain an at least substantially fixed probability ratio between the categories.

Description

MANAGEMENT OF A SECURE ON-LINE INSTANT TICKET LOTTERY FIELD OF THE INVENTION The present invention relates to management and maintenance of an on-line system. More particularly, the present invention relates to management and maintenance of an on-line lottery system. Even more particularly, the present invention relates to speed generation and pool management of a secure on-line instant ticket lottery. BACKGROUND OF THE INVENTION

Modern communication networks such as the Internet, Wide Area Networks (WANs) and Local Area Networks (LANs), have proven to be enormously efficient means of organizing and distributing digital data. This has resulted in a widespread use of these networks for business, entertainment and personal applications. The Internet is now a common network for performing electronic commerce, banking and electronic mail transactions as well as being widely used for academic purposes, providing information and gaming and betting activities.

The traditional gaming and betting systems have been based on direct interaction in a common physical location, such as casinos, bingo halls, sports betting halls and buying physical lottery tickets. The Internet, however, offers a solution for those who cannot visit the physical locations for some reason, such as people living in remote areas far away from traditional gaming and betting facilities, to play anywhere at a time of their choice.

Ticket lottery games are popular sources of revenue for governmental bodies and charitable organizations, being either a scratch-off or pull-tab game with a number of preprinted tickets. A lottery ticket comprises a printed result indicator, indicating whether or not a particular ticket is a winning ticket and, if so, the nature of the winning. Several electronic lottery games have been implemented through computer-based systems. US 5,324,035 incorporates all information required to define a game play into a video lottery system, including data for various graphic symbols to be displayed to the player through the player terminal. This arrangement results in relatively large amounts of data having to be transferred to the player terminal for each game play.

US 4,494,197 discloses a method for wagering, which utilizes a counter register and winning ticket table situated in a central processor unit. Upon a request from a player terminal, the value in the counter register is incremented and then the winning ticket table is queried to determine if the resulting count corresponds to a winning electronic ticket. The central processor then sends back to the player terminal a packet of information including a winning or losing code as appropriate. The winning code includes the amount won on the piay.

US 4,842,278 describes the interconnection of two or more state lottery games into a national game. This lottery is a betting game wherein the winning odds are calculated based upon an input from the player throughout the entire region, and not just from a single state. Payoffs are provided according to a total amount wagered and the number of winning bettors, somewhat like a pari-mutuel system.

US 5,158,293 describes another multiple level game, in the sense that players may be sequentially eligible for different prizes or payoffs during the course of play. However, this document makes no mention of any different wagering denominations by different groups of bettors, and resulting different pools and accordingly different prizes or payoffs. In US 6,017,032 is disclosed a lottery game and method of play, in which provision is made for wagers at different denominational levels. Each wager of a given denominational level is placed in a separate jackpot pool, with the winner or winners paid from that pool. All wagers of all denominations pass through a central controller or agency, where they are distributed to the appropriate pool or pool fraction or portion.

The use of true random number generators (TRNG), to deliver so called true or non- deterministic random numbers are well known per se in the art. Such devices use a low- frequency oscillator and a high-frequency oscillator, and are, e.g., disclosed in US 4,641,102; US 5,781,458 and US 6,061,702. In another document, methods of generating true random numbers using components normally available on personal computers, is described (US 2003037079). The method includes generating true random number sequences of calculable entropy content. The entropy is derived from a random noise component, or transition jitter, in one or both of a low- and a high-frequency signal source that are coupled to a processor for producing the random numbers. The high-frequency signal source includes a frequency multiplier that significantly increases the size of the noise component in the high-frequency signal. This will allow for rapid production of true random numbers of known, high quality.

SUMMARY OF THE INVENTION

It is an object of the present invention to provide an interactive "Instant" or "on-line" solution having the necessary qualification for lotteries, such as some of the large state lotteries. These qualifications could be: Speed generation, where a method is provided that guarantees the exact same result as pre-created tickets with fixed winning ratio that are drawn at random Pool manipulation, wherein the a fixed winning ratio is maintained, but the method still allows probability for highest prize at all time, including allowing the lottery to define several simultaneous open pools at the same time

It is a further object of the present invention to provide an on-line system, which is suitable for on-line gaming and betting systems, such as instant ticket lotteries. It is an even further object of the present invention to provide an on-line system, which is sufficiently secure to meet the demands of a state lottery.

It is an even further object of the present invention to provide an on-line lottery system in which the probabilities for winning or not winning the various prizes are kept at an at least substantially fixed ratio.

It is an even further object of the present invention to provide a method for maintaining and managing such an on-line system in a secure manner.

It is an even further object of the present invention to provide a method for maintaining and managing such an on-line system in a fast manner.

It is an even further object of the present invention to provide a device for maintaining and managing such an on-line system in a secure manner.

It is an even further object of the present invention to provide a device for maintaining and managing such an on-line system in a fast manner.

According to a first aspect of the present invention the above and other objects can be fulfilled by providing a method of maintaining an on-line system having at least one pool comprising a plurality of categories, the method comprising the steps of: generating a random number upon request from a user, the random number being generated by a random number generator, - creating a ticket in one of a plurality of categories based upon the random number and a probability table, updating the probability table in response to a created ticket in such a way that the probability for each category is changed after a ticket has been created so as to maintain an at least substantially fixed probability ratio between the categories. According to a second aspect of the present invention the above and other objects are fulfilled by providing a system for maintaining an on-line system having at least one pool comprising a plurality of categories, the system comprising: a random number generator for generating a random number upon request from a user, a probability table, means for creating a ticket in response to a generated random number, - means for updating the probability table in response to a created ticket so as to maintain an at least substantially fixed ratio between the categories.

In accordance with the present invention, speed generation and pool management in an on-line system are disclosed. The system may be managed and used on-line on the Internet, where tickets are created upon a request from a user. By means of a random number generator and a probability table, an instant ticket is created by use of the method of the present invention. A method that allows the system to add in pools or specific categories and at the same time maintaining, with the exact same results as pre-created tickets with, a randomized fixed probability ratio between the categories is also provided. When the last ticket of each pool has been created the pool may be manually or automatically closed.

A means for speed generation is provided by the use of a probability table, which is updated after the creation of each ticket. Storage means, which stores the ticket information including the category and a specific sequence number, is used. The platform that generates the tickets requests a random number, preferably from a closed secure system. This system delivers the random number together with a sequence number.

In the present context the term "on-line" refers to a communication network, such as, but not limited to the Internet, Wide Area Networks (WANs) and Local Area Networks (LANs). Further more the term "on-line" refers to any network comprising a gaming platform and a plurality of end user clients.

In the present context the term "pool" refers to an array of tickets, e.g. lottery tickets, comprising a plurality of categories (such as winning categories and a no winning category of a lottery). The pool contains a pre-determined number of tickets. The tickets are not pre-created but exist as a probability table and will be created instantly upon a request. Each time a ticket is drawn from the pool the probability table is updated so that there will be one less tickets remaining in the category, in which that ticket was drawn from. In the present context the term "user" refers to a person being logged onto a communication network, like the Internet. The user is connected to the network through a client, preferably a PC, and from there places orders for tickets.

In the present context the term "request" refers to an order of a ticket by a user. The user logs onto a platform, such as a gaming platform, on the Internet and places an order for a ticket. In the present context the term "probability table" refers to a table comprising information relating to the various categories and the number of tickets in each of the categories. In one embodiment the probability table is a database table comprising at least two columns, one of which indicates the category, and one of which indicates the number of tickets left in the corresponding category.

In an embodiment of the present invention each category is recalculated according to a certified random number and a probability table, i.e. a random number falling within a certain category in the probability table results in that there is one less ticket remaining in that category. Therefore, as soon as the ticket has been issued, the categories are recalculated with new odds for a ticket to be issued from each category.

The step of updating the probability table in response to a created ticket makes it possible to operate the system in such a way that an at least substantially fixed probability ratio between the categories is maintained. In this way it is possible to "simulate" that a predefined number of tickets was created in advance (like in an ordinary ticket lottery game). But in fact the tickets in the system according to the present invention are created when a user requests a ticket.

The method may further comprise the steps of:

Get serial/random number pair

Get the current count left in each prize category

Number of selected prize (NSP) = count left in pool * random number

Go through all prize categories accumulatedCount = accumulatedCount + count in this category if accumulatedCount >= NSP selected prize category = this category if configured category size minimum is reached Add an new pool to the game thereby obtaining a low probability of correlation between the generated random number and the category in which the corresponding ticket is created.

The low probability of correlation between the generated random number and the category may be obtained in a secure and closed system, such as a so-called "black box".

In a preferred embodiment the on-line system is a lottery, in which case the categories may represent various winning/no winning categories, and the at least substantially fixed probability ratio between the categories may be an at least substantially fixed winning/no winning ratio. Thus, by manipulating the probability, an at least substantially fixed winning ratio for each category is reached.

In the present context the term "instant ticket" refers to a lottery ticket that is not pre- created, but rather created upon a request. The instant ticket is created by a gaming platform when a random number is generated. Based on the random number and by using the probability table the corresponding category is calculated.

The method may further comprise the steps of:

- generating a sequence number in response to the generated random number, thereby creating a random number - sequence number pair, storing the created random number - sequence number pair in a storing means,

wherein the step of creating a ticket is further based upon the random number - sequence number pair.

In the present context the term "sequence number" refers to any number being selected from an array of numbers comprising a certain amount of numbers, which have been evenly and sequentially lined up. The numbers may be selected from the group of, but not limited to 10, 100, 1.000, 10.000, 100.000, 1.000.000, 10.000.000 or 100.000.000 numbers between any two number such as, but not limited to 0 and 1. Alternatively, the numbers may be integers starting at zero and incrementing by one each time a new random number is created. Thus, there is no upper limit to the numbers in this embodiment. The random number - sequence number pair may be stored in such a way that the random number and the sequence number are stored in two different parts of the storage means. In this case one of them may be stored in a part of the storage means with limited access and the other one may be stored in a part may be stored in a part with no such limitations. Alternatively, both of the numbers may be stored in a part with limited access or in a part without such limitations. Alternatively, the random number - sequence number pairs may be stored together as a pair.

The method may further comprise the step of, at a chosen time, verifying the stored random number - sequence number pairs, so as to ensure that every stored random number - sequence number pair is an authentic random number - sequence number pair. In this process it may, e.g., be verified that the random number - sequence number pair has not been tampered with, or that no "fake" random number - sequence number pairs have been stored in the storage means.

In the present context the term "verify" refers to a process, where actions or transactions in a system are checked. The term may further refer to presence or absence of data in a system and if the data are present, then the verification process may refer to whether or not the data have been manipulated. The verification may be a manual or automatic process performed routinely or randomly.

The verifying step may comprise checking the presence of a specific random number - sequence number pair among the stored random number - sequence number pairs.

The method may further comprise the step of providing the ticket with information relating to the sequence number and to the category. In case the on-line system is a lottery, the information relating to the category indicates whether or not the ticket is a winning ticket, and, in case it is a winning ticket, the winning category (e.g. first prize, second prize, etc.)

The generated random number may be a true random number, in which case the random number generator is a true random number generator.

In the present context the term "true random number generator" refers to a device that generates true random numbers, typically by sampling and processing a source of entropy outside the device. The entropy source can be a radioactive source, atmospheric noise from a radio or lava lamps. The method may further comprise the step of receiving payment from the user. This is particularly useful in case the on-line system is a system offering services which the user should pay for, such as a ticket lottery. Preferably, the step of receiving payment is performed before the random number is generated, thereby enabling the system to make sure that appropriate payment for the service has been received before the service is provided. The payment step may, e.g., be performed by the user delivering bank notes or coins to a paying machine. Alternatively or additionally, the payment step may be performed by means of a card reader for credit cards or cash cards (smart cards). Alternatively or additionally, the payment step may be performed by means of a electronic money transfer, e.g. an account-to-account transfer, or a transfer from an electronic wallet to an account.

At least the step of generating a random number may be performed in a limited access area of the on-line system. The term "limited access" may be interpreted as meaning that only certain persons have access to the storage means. It may, e.g., be a secure enclosed system, a so-called "black box" and/or it may comprise a locked compartment.

The step of storing the random number - sequence number pair may comprise storing the random number - sequence number pair in the limited access area of the on-line system.

The storage means and the random number generator may be positioned in the same limited access area (e.g. the same "black box" or the same locked compartment) of the system. The limited access area may further comprise a sequence number generator, so that the generation of the random number, the generation of the sequence number, and the storing of the random number - sequence number pair all take place within the limited access area, thereby reducing the risk that any of the numbers may be tampered with, or that a false/unauthentic random number - sequence number pair may be stored in the storage means.

Access to the limited access area may be obtained by one or more authorised persons only, such as by two or more authorised persons. The two or more authorised persons may each represent an authority, so that at least two authorities are represented when access to the limited access area is obtained. At least one of the authorised persons may represent an operator, and at least one of the authorised persons may represent an auditor. In this embodiment, at least one person representing the operator, and at least one person representing some kind of auditing authority have to be present in order to gain access to the limited access area. The person representing the operator may be a person pointed out by or employed by the entity which administers the on-line system for management and supervision of the system. The person representing the auditor may be a government official person supervising the operation of the on-line system, e.g. in order to ensure that the system fulfils certain official requirements, e.g. in order to maintain public trust in the system. The method may further comprise the step of closing a pool as soon as the number of generated random numbers reaches a predefined level corresponding to a maximum number of random numbers associated with said pool.

An important feature of the present invention is the implementation of rules, which allow the lottery to specify the number of pools that may be open at the same time. Furthermore the lottery is allowed to define certain criteria for a minimal number of tickets in winning/no winning categories. If the number of tickets in a certain category reaches these limits a new pool (comprising tickets in the category in question) may be added to the lottery. Each time a new pool is added to the lottery, the probability table is updated for maintaining a fixed winning ratio. This pool management can be manual or automatic.

In an embodiment of the present invention a pool is closed as soon as all tickets in the pool have been drawn. A new pool and/or ticket(s) in a single category can be added to the system by a gaming platform. This function is specified by the lottery and specifications and limits are pre-determined values, so that when a criteria for addition of a new pool and/or ticket(s) in a single category is met the addition can either be made manually or automatically.

The method may further comprise the step of adding a new pool if one or more condition (s) is/are fulfilled.

The condition(s) for adding a new pool may comprise having at least one empty category, and/or having a minimum number of tickets, and/or any other suitable conditions.

The method may further comprise the step of checking whether a new pool is to be added. This step may comprise checking if a maximum number of pools has been reached. In this case the method may further comprise the step of adding a specific category to at least one of the existing pools in case the maximum number of pools has been reached.

The adding step may be performed automatically when the maximum number of pools has been reached. Alternatively, it may be performed manually.

The method may further comprise the step of updating the probability table in case a new pool is added, said step being performed in response to the step of adding the new pool. Thus, the probability table is updated to include the added pool, thereby maintaining an at least substantially fixed probability ratio between the categories.

The time lapsed between performing the step of creating a ticket and the step of updating the probability table may be less than 15 ms, such as less than 10 ms, such as less than 5 ms, such as less than 3 ms.

According to a third aspect of the present invention the above and other objects are fulfilled by providing a method of managing at least one pool having a plurality of categories, the method comprising the steps of: generating a random number, creating a ticket in one of the plurality of categories based upon the random number and a probability table, - determining whether the number of pools is to be updated based on certain conditions, updating the number of pools in case it is determined that the number of pools is to be updated.

The certain conditions may be selected from the group consisting of:

1. the number of generated random numbers has reached a predefined level corresponding to a maximum number of random numbers associated with a corresponding pool,

2. at least one pool has at least one empty category, 3. the number of possible tickets left in a specific pool does not exceed a predefined minimum number, 4. a maximum number of pools has not been reached.

The updating step may comprise closing a pool. In this case the determining step is preferably performed based on the condition that the number of generated random numbers has reached a predefined level corresponding to a maximum number of random numbers associated with a corresponding pool. Thus, if no more tickets are available in a pool, this pool is closed.

The updating step may comprise adding a new pool. In this case the determining step may be performed based on the condition that at least one pool has at least one empty category. If, e.g., no more first prize tickets are left, it may be desirable to add a new pool (with a new set of winning categories) in order to maintain the probability that a user wins the first prize. Alternatively or additionally, the determining step may be performed based on the condition that the number of possible tickets left in a specific pool does not exceed a predefined minimum number. Thus, if only a few tickets are left in a pool, and the first prize has not yet been won, it may be desirable to add a new pool in order to decrease the probability of a user winning the first prize. An experienced user may be able to figure out that a large number of tickets have been sold and that the first prize has not yet been won. He will then know that the probability of winning the first prize is very high, and he may therefore buy a lot of tickets. This situation is prevented when a new pool can be added, because then the user will not know whether or not a new pool has been added, and he therefore has no chance of figuring out whether or not an increased probability of winning the first prize is present.

Alternatively or additionally, the determining step may be performed based on the condition that a maximum number of pools has not been reached. Thus, even if one or more of the other conditions may be fulfilled, a new pool is not added if the maximum number of pools is already present.

The method may further comprise the step of updating the probability table in response to the step of updating the number of pools. This step may be performed automatically. Alternatively, the step may be performed manually.

According to a fourth aspect of the present invention the above and other objects are fulfilled by providing a device for maintaining an on-line system having at least one pool comprising a plurality of categories, the device comprising: a random number generator for generating a random number upon request from a user, a probability table, - means for creating a ticket in response to a generated random number, means for updating the probability table in response to a created ticket so as to maintain an at least substantially fixed ratio between the categories,

the device further comprising: means for generating a sequence number in response to the generated random number, thereby creating a random number - sequence number pair, and storage means for storing the created random number - sequence number pair in a storing means, wherein ticket is further created on the basis of the random number - sequence number pair.

EXAMPLES

Example 1 Speed generation in an on-line ticket lottery

Objectives

To generate a method in order to reach speed in an on-line ticket lottery without using pre-created tickets. The speed is generated by the use of a True Random Number Generator (TRNG) and a probability table. A specific algorithm is provided that guarantees the exact same result as pre-created tickets with fixed winning ratio that are drawn at random, but with much higher speed.

Method A customer plays an instant lottery game through the Internet, by placing an electronic request at the Betware Gaming Platform (BGP). An algorithm is utilized to handle the process. The BGP handles the request by charging the customer for the ticket. When the BGP has received a confirmation that a payment has been made the BGP calls a "black box" and gets a true random number (TRN) from a True Random Number Generator (TRNG). A processor generates a sequence number and it is associated to the TRN, thereby generating a random number - sequence number pair. The "black box" saves the pair in its archives and then returns it to BGP. Based on the current instant pool and the random number the BGP calculates a winning category. The probability table of the instant pool is changed according to winning category (one less of that prize/no prize). After generation of each ticket the probability table is updated and the platform is ready to service the next player. The BGP saves the pair from the "black box" with the charged bet and prize/no prize info for this customer and the sequence number is saved on the ticket for verification.

Results

This method secures speedy emulation of real time Instant Ticket manipulation without pre-drawing the instant tickets, i.e. creating the ticket in the database. The probability for each winning category is the centre of the algorithm, where the probability is changed after each ticket is drawn. Example 2

Creation of fixed winning ratio

Objectives

To reach the goal of creating fixed winning ratio, but still allow probability for highest prize at all time. A flexible method of allowing Lotteries to define several simultaneous open pools at the same time is programmed. The algorithm of the method allows addition of pools, specific winning categories or even single winnings into the Lottery.

Method Each pool has several winning categories including a no winning category. If under any circumstances the number of "tickets" in a single category is too low, as defined by the lottery, the lottery can add in a new pool, a specific winning category or a single winning. This may be necessary if the first prize is no longer available in the lottery, for example.

The algorithm is generic in the way that the Lottery can define the following by simple config files:

How many pools can maximally be open at the same time Define the condition for creating a new pool Closing a pool as soon as all the tickets for a pool have been sold, or at least a maximum number of tickets in each category for the pool has been sold - Manual/Automatic addition of specific prize category in case maximum pools have been reached

Therefore limits are set by the Lottery and these limits are checked, after creation of each ticket, and if applicable a new pool is added.

Results

To allow simulation of current "pools" manipulation without sacrificing at least substantially fixed winning ratio (using an efficient algorithm), but at the same time allow for the first prize to be available at all times, the present invention provides a process to have several open pools at the same time.

BRIEF DESCRIPTION OF THE DRAWINGS The present invention will now be described in more detail by means of the accompanying drawings in which:

Fig. 1 shows a block diagram describing how speed is generated in an on-line system according to the present invention,

Fig. 2 shows a block diagram describing the overall audit process of an on-line system according to the present invention, Fig. 3 shows the features of the audit process of Fig. 2, and

Fig. 4 shows a manual take over process of an on-line system according to the present invention DETAILED DESCRIPTION OF THE DRAWINGS

Fig. 1 describes the method of generating speed in a ticket lottery and how one or several pools are managed during a lottery game. The process of the method is initiated by a request from a customer. The customer accesses an instant lottery game through the Internet, by placing an electronic request using a PC compatible client. The request is directed to the Betware Gaming Platform (BGP), comprising a processing means including a probability table and storage means. The probability table represents the current pool. The BGP handles the request by charging the customer for the ticket and when the BGP has received a confirmation that a payment has been made the BGP requests a true random number (TRN). Based on the current instant pool (i.e. the probability table) and the random number, the BGP calculates the category the ticket belongs to. The instant pool is changed after generation of each ticket according to the category (one less in that particular category), by updating the probability table. The game transaction, including a sequence number and the category to which the ticket belongs, is saved by the BGP. The platform is thereafter ready to service the next customer.

Based on criteria set by the Lottery, a minimal number of tickets in the lottery or in each category are allowed. If these criteria are not meet, a new pool or category may be added into the lottery. If a new pool or category is added into the lottery, the probability table is updated, and the platform is thereafter ready to service the next customer.

Fig. 2 describes the overall audit process offered by the system. The process is initiated by selecting a sequence range, which covers all sequence numbers issued from the last time of auditing and to the time of present auditing. The process verifies each pair stored in a "black box" of the system and compares them to all pairs stored in the Betware Gaming Platform (BGP). This process is described in detail in Fig. 3. If the pair is confirmed the BW marks the pair as confirmed and starts verifying the next pair, provided that there are more pairs stored in the BW. However, if the pair is not confirmed a report is printed alerting the administrators/auditors, and appropriate actions are taken. This basically results in manual take over (described in Fig. 4).

If there are no more pairs in the BW, the audit process gets unconfirmed pairs, a process described in more detail in Fig. 3. If there are no unconfirmed pairs in the system the audit process asks if a certain pool should be closed. Based on the current status of the pool, e.g. if all the tickets in the pool have been sold, the pool is closed. If unconfirmed pairs remain in the system the audit process prints a report alerting the administrators/auditors and appropriate actions are taken. Figure 3a shows the different components of the "Black Box". The Black Box is a standard PC computer running a a operating system such as DOS or Linux and is running very specialized program (and nothing else). Preferably the Black Box comprises nothing it does not have to use.

All numbers the Black Box returns are written to a local file along with a timestamp. This file is later used for auditing. Physical security of the Black Box is very important, possibly protocols should be invented where at least two people have to be present when it is accessed.

The standard implementation of the Black Box shown in figure 3. a, has 3 different methods:

Get random - Get list - Keeping a transaction log

The "get random" function is used in the buy process, whereas the "get list" function is used in the auditing process.

The standard implementation of a Black Box is during buy process only to return serial number and a random number to the BGP. The serial number is for auditing purposes and will be stored with the Betware transaction in the database. The random number is used to determine the prize category the user gets (non-winner being a prize category as well). The Transaction lop comprises the following for each request:

Random number to be able to recreate the prize category without information from the Betware System.

The qameld is sent into the Black Box so that different games can have different ranges of random numbers. A certain game has for example a random number in the range of 1 to 4.000.000 while another has one to 2 billions. The customerld is important for the auditing purposes. It provides a record on who the customer is that is getting this particular random number, since bad code outside the black box (in a not as certified and protected area) could else "steal" the prize. Therefore the solution is to store the customerld in the Black Box and then the code is certified, so it can be made sure that no harmful code is there. A timestamp is useful when tracing a problem or a security breach. Although the Black Box should be as simple as possible, the same applies to the timestamp as to the customerld, that is this code will be certified. The Sequence number "from". As the auditing process is not starting from the very ^■ beginning every time it does auditing, it only needs a list from some specific point. All records created after the "from" sequence number should be returned in the Getϋ^'st method. The Get list function fetches all rows higher than the given sequence number and returns that list to the evidence database. For simplicity purposes the Black Box can be a simple Black Box and a driver that participates in the Transaction log process.

The more complex version of the Black Box is shown in figure 3.b, which is implemented with Prize Table

It is an option to store the prize table in the Black Box. In this particular application, the prize table is no longer kept in the database but only in the Black Box. The BB starts by generating sequence number and random number the standard way and uses it internally to look up the prize in the prize table, using the same principles as are used when the prize table is on the BGP (database) side. Sequence number and random number, along with prize category and prize amount are then returned to the JBgjfjj.

Claims

1. A method of maintaining an on-line system having at least one pool comprising a plurality of categories, the method comprising the steps of: generating a random number upon request from a user, the random number being generated by a random number generator, creating a ticket in one of a plurality of categories based upon the random number and a probability table, - updating the probability table in response to a created ticket in such a way that the probability for each category is changed after a ticket has been created so as to maintain an at least substantially fixed probability ratio between the categories.

2. A method according to claim 1, further comprising the steps of:

Get serial/random number pair

Get the current count left in each prize category Number of selected prize (NSP) = count left in pool * random number

Go through all prize categories accumulatedCount = accumulatedCount + count in this category if accumulatedCount >= NSP selected prize category = this category if configured category size minimum is reached Add an new pool to the game

thereby obtaining a low probability of correlation between the generated random number and the category in which the corresponding ticket is created.

3. A method according to claim 1 or 2, wherein the on-line system is a lottery.

4. A method according to claim 3, wherein the categories represent various winning/no winning categories, and wherein the at least substantially fixed probability ratio between the categories is an at least substantially fixed winning/no winning ratio.

5. A method according to any of claims 1-4, further comprising the steps of: generating a sequence number in response to the generated random number, thereby creating a random number - sequence number pair, storing the created random number - sequence number pair in a storing means, wherein the step of creating a ticket is further based upon the random number - sequence number pair.

6. A method according to claim 5, further comprising the step of, at a chosen time, verifying the stored random number - sequence number pairs, so as to ensure that every stored random number - sequence number pair is an authentic random number - sequence number pair.

7. A method according to claim 6, wherein the verifying step comprises checking the presence of a specific random number - sequence number pair among the stored random number - sequence number pairs.

8. A method according to any of claims 5-7, further comprising the step of providing the ticket with information relating to the sequence number and to the category.

9. A method according to any of claims 1-8, wherein the generated random number is a true random number, the random number generator being a true random number generator.

10. A method according to any of claims 1-9, further comprising the step of receiving payment from the user.

11. A method according to claim 10, wherein the step of receiving payment from the user is performed before the step of generating a random number.

12. A method according to any of claims 1-11, wherein at least the step of generating a random number is performed in a limited access area of the on-line system. '

13. A method according to claim 12 and claim 5, wherein the step of storing the random number - sequence number pair comprises storing the random number - sequence number pair in the limited access area of the on-line system.

14. A method according to claim 12 or 13, wherein access to the limited access area can only be obtained by one or more authorised persons.

15. A method according to claim 14, wherein access to the limited access area can only be obtained by two or more authorised persons.

5 16. A method according to claim 15, wherein the two or more authorised persons each represents an authority, so that at least two authorities are represented when access to the limited access area is obtained.

17. A method according to claim 16, wherein at least one of the authorised persons 10 represents an operator, and at least one of the authorised persons represents an auditor.

18. A method according to any of claims 1-17, further comprising the step of closing a pool as soon as the number of generated random numbers reaches a predefined level corresponding to a maximum number of random numbers associated with said pool. 15

19. A method according to any of claims 1-18, further comprising the step of adding a new pool if one or more condition(s) is/are fulfilled.

20. A method according to claim 19, wherein the condition(s) for adding a new pool 20 comprises having at least one empty category.

21. A method according to claim 19 or 20, wherein the condition(s) for adding a new pool comprises having a minimum number of tickets.

25 22. A method according to any of claims 19-21, further comprising the step of checking whether a new pool is to be added.

23. A method according to claim 22, wherein the step of checking whether a new pool is to be added comprises checking if a maximum number of pools has been reached.

30 24. A method according to claim 23, further comprising the step of adding a specific category to at least one of the existing pools in case the maximum number of pools has been reached.

35 25. A method according to claim 24, wherein the step of adding a specific category is performed automatically when the maximum number of pools has been reached.

26. A method according to claim 24, wherein the step of adding a specific category is performed manually when the maximum number of pools has been reached.

27. A method according to any of claims 19-26, further comprising the step of updating the probability table in case a new pool is added, said step being performed in response to ^" the step of adding the new pool. 5

28. A method according to any of claims 1-27, wherein the time lapsed between performing the step of creating a ticket and the step of updating the probability table is less than 15 ms.

10 29. A method according to claim 28, wherein the time lapsed between performing the step of creating a ticket and the step of updating the probability table is less than 10 ms.

30. A method according to claim 29, wherein the time lapsed between performing the step of creating a ticket and the step of updating the probability table is less than 5 ms.

15 31. A method according to claim 30, wherein the time lapsed between performing the step of creating a ticket and the step of updating the probability table is less than 3 ms.

32. A method of managing at least one pool having a plurality of categories, the method 0 comprising the steps of: generating a random number, creating a ticket in one of the plurality of categories based upon the random number and a probability table, 5 - determining whether the number of pools is to be updated based on certain conditions, updating the number of pools in case it is determined that the number of pools is to be updated.

33. A method according to claim 32, wherein the certain conditions are selected from the 0 group consisting of:

- the number of generated random numbers has reached a predefined level corresponding to a maximum number of random numbers associated with a corresponding pool,5 - at least one pool has at least one empty category, the number of possible tickets left in a specific pool does not exceed a predefined minimum number, a maximum number of pools has not been reached.

34. A method according to claim 33, wherein the updating step comprises closing a pool, and wherein the determining step is performed based on the condition that the number of generated random numbers has reached a predefined level corresponding to a maximum number of random numbers associated with a corresponding pool. 5

35. A method according to claim 33 or 34, wherein the updating step comprises adding a new pool, and wherein the determining step is performed based on the condition that at least one pool has at least one empty category.

10 36. A method according to any of claims 33-35, wherein the updating step comprises adding a new pool, and wherein the determining step is performed based on the condition that the number of possible tickets left in a specific pool does not exceed a predefined minimum number.

15 37. A method according to any of claims 33-36, wherein the updating step comprises adding a new pool, and wherein the determining step is performed based on the condition that a maximum number of pools has not been reached.

38. A method according to any of claims 32-37, further comprising the step of updating 20 the probability table in response to the step of updating the number of pools.

39. A method according to any of claims 32-38, wherein the step of updating the number of pools is performed automatically.

25 40. A method according to any of claims 32-38, wherein the step of updating the number of pools is performed manually.

41. A system for maintaining an on-line system having at least one pool comprising a plurality of categories, the system comprising: 30 a random number generator for generating a random number upon request from a user, a probability table, means for creating a ticket in response to a generated random number, 5 - means for updating the probability table in response to a created ticket so as to maintain an at least substantially fixed ratio between the categories.

42. A system according to claim 41, further comprising means for obtaining a low probability of correlation between the generated random number and the category in which the corresponding ticket is created.

5 43. A system according to claim 41 or 42, wherein the on-line system is a lottery.

44. A system according to claim 43, wherein the categories represent various winning/no winning categories, and wherein the at least substantially fixed probability ratio between the categories is an at least substantially fixed winning/no winning ratio. 10

45. A system according to any of claims 41-44, further comprising: means for generating a sequence number in response to the generated random number, thereby creating a random number - sequence number pair, 15 - storage means for storing the created random number - sequence number pair in a storing means, wherein ticket is further created on the basis of the random number - sequence number pair. 20

46. A system according to claim 45, further comprising verifying means for, at a chosen time, verifying the stored random number - sequence number pairs, so as to ensure that every stored random number - sequence number pair is an authentic random number - sequence number pair.

25 47. A system according to claim 46, wherein the verifying means comprises means for checking the presence of a specific random number - sequence number pair among the stored random number - sequence number pairs.

30 48. A system according to any of claims 45-47, wherein the ticket is provided with information relating to the sequence number and to the category.

49. A system according to any of claims 41-48, wherein the random number generator is a true random number generator.

35 50. A system according to any of claims 41-49, further comprising means for receiving payment from the user.

51. A system according to claim 50, further comprising means for activating the random generator in response to receiving payment from the user.

52. A system according to claim 51, wherein the activating means form part of the means 5 for receiving payment from the user.

53. A system according to claim 52, wherein the activating means react in response to a signal generated by the means for receiving payment from the user.

10 54. A system according to any of claims 41-53, wherein at least the random number generator is positioned in a limited access area of the on-line system.

55. A system according to claim 54 and 45, wherein the storage means is positioned in the limited access area of the on-line system.

15 56. A system according to claim 54 or 55, wherein access to the limited access area can only be obtained by one or more authorised persons.

57. A system according to claim 56, wherein access to the limited access area can only be 0 obtained by two or more authorised persons.

58. A system according to claim 57, wherein the two or more authorised persons each represents an authority, so that at least two authorities are represented when access to the limited access area is obtained. 5

59. A system according to claim 58, wherein at least one of the authorised persons represents an operator, and at least one of the authorised persons represents an auditor.

60. A device for maintaining an on-line system having at least one pool comprising a 0 plurality of categories, the device comprising: a random number generator for generating a random number upon request from a user, a probability table,5 - means for creating a ticket in response to a generated random number, means for updating the probability table in response to a created ticket so as to maintain an at least substantially fixed ratio between the categories, the device further comprising: means for generating a sequence number in response to the generated random number, thereby creating a random number - sequence number pair, and storage means for storing the created random number - sequence number pair in a 5 storing means, wherein ticket is further created on the basis of the random number - sequence number pair.

10 61. A computer program product for maintaining, in a memory of a ticket generating computer system, a probability table, the computer system administering at least one pool comprising a plurality of categories, the program being adapted to: generate a random number upon request from a user, the random number being 15 generated in the computer by a random number generator, create a ticket in one of a plurality of categories based upon the random number and a probability table, and to update the probability table in response to a created ticket in such a way that the probability for each category is changed after a ticket has been created so as to 0 maintain an at least substantially fixed probability ratio between the categories.

62. A signal comprising at least one of a ticket in one of a plurality of categories and a probability table for a ticket generating computer system according to any of claims 41-60.