Control circuitry for aerosol-generating device

Abstract

To provide control circuitry for an aerosol-generating device.SOLUTION: An aerosol-generating device has a locked state in which the aerosol-generating device is prohibited from delivering aerosol and an unlocked state in which the aerosol-generating device is permitted to deliver aerosol. The control circuitry is configured to receive user-input authentication information from one or more user interface components, to receive the user-input authentication information during multiple time windows of predetermined duration, each time window corresponding to a respective digit of a sequence of digits forming the user-input authentication information, to attribute user input received via the user interface components during the time window to the digit corresponding to the time window, to perform offline authentication of the aerosol-generating device based on the user-input authentication information, and to determine to transition the aerosol-generating device from the locked state to the unlocked state on the basis of a successful result of the offline authentication.SELECTED DRAWING: Figure 1

Description

[Technical field]

[0001] The present disclosure relates generally to the field of aerosol generating devices and systems. [Background technology]

[0002] An aerosol generating system typically comprises an aerosol generating device for generating an aerosol, and a companion device, which may be referred to as a companion device or main unit, for storing the aerosol generating device. Typically, the aerosol generating device is designed as a handheld device that can be used by a user to consume the aerosol generated by the aerosol generating article, for example, in one or more use sessions. Typically, the aerosol generating article includes an aerosol-forming substrate, such as a tobacco-containing substrate, and / or a cartridge containing a liquid. To generate an aerosol during use or consumption, heat can be applied or transferred from a heating element or heat source in the aerosol generating device (or within the aerosol generating article), for example, to heat at least a portion of the aerosol-forming substrate.

[0003] Exemplary aerosol-generating articles for use with an aerosol-generating device may comprise an aerosol-forming substrate assembled in the form of a stick, often together with other elements or components. Such a stick may be configured in a shape and size to be at least partially inserted into the aerosol-generating device, and may include, for example, a heating element for heating the aerosol-generating article and / or the aerosol-forming substrate. Other exemplary aerosol-generating articles may include cartridges containing a liquid that may be evaporated during aerosol consumption by a user. Such cartridges may also be configured in a shape and size to be at least partially inserted into the aerosol-generating device. Alternatively, the cartridge may be fixedly attached to the aerosol-generating device and refilled by inserting liquid into the cartridge.

[0004] To prevent minors from accessing and using such aerosol generating devices, it may be desirable to implement a Minor Access Prevention (YAP) activation method. Some YAP methods may require a user to register and activate and use a device by connecting the device to a computing device, such as a smartphone or personal computer, on which a registration application is running. The application may be provided as a USB application. Connection to the computing device may be accomplished via Bluetooth Low Energy (BLE).

[0005] Despite the prevalence of smartphones, tablets, personal computers, etc., the inventors recognize that the connectivity and applications required to perform the YAP method in the manner described above may be technically problematic, and therefore it would be desirable to provide an improved aerosol generating apparatus or system and / or an improved companion device that can perform authentication such as the YAP method without relying on device connectivity and without the use of any external applications.

[0006] This problem is achieved by the subject matter of the independent claims. Optional features are provided by the dependent claims and the following description. Summary of the Invention

[0007] According to a first aspect, there is provided a control circuit for an aerosol generating device. The aerosol generating device has a locked state in which the aerosol generating device is prohibited from delivering an aerosol, and an unlocked state in which the aerosol generating device is permitted to deliver an aerosol. The control circuit is configured to receive user-input authentication information from one or more user interface components. The control circuit is configured to receive the user-input authentication information during a plurality of time windows of a predetermined duration, each time window corresponding to a respective digit of a series of digits forming the authentication information, and to attribute user input received via the user interface component during the time window to the digit corresponding to the time window. The control circuit is further configured to perform an offline authentication of the aerosol generating device based on the user-input authentication information, and to decide to transition the aerosol generating device from the locked state to the unlocked state based on a successful outcome of the offline authentication.

[0008] By performing authentication offline, authentication such as the YAP method can be performed without relying on any device connectivity and without the use of any external applications. Unauthorized users can be effectively and reliably prohibited from transitioning the aerosol generating device to an unlocked state, and therefore, unauthorized users can be effectively and reliably prohibited from using the aerosol generating device for aerosol consumption.

[0009] As used herein, "offline" refers to authentication that is connectivity-free, connectivity-independent, or connectivity-independent in the sense that authentication is performed while the aerosol generating device or the aerosol generating system including the aerosol generating device is disconnected or offline during authentication. For example, the control circuitry may be further configured to perform offline authentication of the aerosol generating device without the aerosol generating device (or any part of the system including the aerosol generating device) being connected (or needing to be connected) to an external computing device (e.g., a mobile phone, a personal computer, or a tablet device) during authentication (and / or for authentication to be completed). Additionally or alternatively, the control circuitry may be further configured to perform offline authentication of the aerosol generating device without transmitting authentication-related data to or receiving authentication-related data from an external computing device during authentication, where "authentication-related data" includes, for example, data used by or required for authentication even when the aerosol generating device is connected to an external computing device. The control circuitry may be further configured to perform offline authentication of the aerosol generating device without being controlled and / or being controlled by an external computing device during authentication. The control circuitry may further be configured to perform offline authentication of the aerosol generating device without the aerosol generating device being connected to or forming part of a network that includes one or more external computing devices, such as the Internet. "Offline" may refer to any connectivity of the aerosol generating device that is not being used for authentication-related purposes or tasks, regardless of whether the aerosol generating device is connected / connectable to an external computing device. For example, "offline" may refer to a state in which data is exchanged during authentication by any communication interface of the aerosol generating device, and that connectivity is not input to or output from the control circuitry, or more specifically, its threads or components that are performing authentication-related tasks.In other words, the aerosol generating device may be equipped with a communications interface for managing a connection to an external computing device, where "offline" indicates that during authentication, the communications interface remains idle or performs only tasks unrelated to authentication. It should be noted that the term "external computing device" when used in conjunction with the term "offline" does not include either the companion device or the aerosol generating device, where authentication is performed by the other of those devices.

[0010] The control circuitry may be further configured to guide the user in inputting authentication information as part of a guided interactive input process, and to control a user interface component to output a user-perceptible guidance signal, e.g., (i) prompting the user to take a predetermined action, (ii) providing feedback to the user regarding the progress of the guided interactive input process, or both (i) and (ii), in response to a control signal from the control circuitry to guide the user during the guided interactive input process, e.g., by controlling a user interface component. Thus, the interactive input process is an example of a guided human-machine interaction process. The user-perceptible guidance signal may include any one or more of a visual signal, an audible signal, and a tactile signal. To this end, the user interface component may include one or more output elements, including, for example, any combination of one or more of the following elements: a visual indicator (e.g., a light source such as an LED, an incandescent lamp, a compact fluorescent lamp, etc.), a tactile output element (e.g., a vibration actuator such as an eccentric rotating mass motor, a linear resonant actuator, a C2 tactor, a piezoelectric actuator, etc.), an audible output element such as a speaker, etc. The user interface component further includes one or more input elements, such as a button (e.g., a push button), a touch screen, a microphone, etc. In one implementation, the user interface component comprises a number of LEDs and a push button. In any of these ways, the user interface component facilitates implementation of offline authentication while conserving area of ​​the device of what may be a small form factor aerosol generating device or companion device.

[0011] The sequence of digits forming the authentication information may include a personal ID number or code, e.g., a pin code. Thus, a separate time window is provided for inputting each digit of the sequence or pin code, thereby providing certainty and security as to which digit is currently being input. By "attribute" it is meant that the control circuitry associates a user input received during the time window with a digit corresponding to the time window, or that the control circuitry uses a user input received during the time window to determine or calculate a value for the digit corresponding to the time window. To enhance security, the control circuitry may be configured to trigger a timeout in response to no user input being received by one or more user interface components within a predefined time period beginning from the beginning of a respective one of the time windows. As a result, the control circuitry may be further configured to determine not to transition the aerosol generating device to an unlocked state in response to triggering the timeout. By "timeout" it is meant that at the start of a predefined period and at the end of a predefined period, a timer is started and an interrupt or trigger signal is generated, thereby "triggering" the timeout if a predefined action is not taken to cancel or reset the timer within the predefined period.

[0012] The control circuitry may be configured to initiate a first one of the time windows in response to a user interacting with one or more user interface components. For example, the control circuitry may be configured to initiate a first one of the time windows in response to receiving a predetermined signal (or signals) generated by a user interacting with one or more user interface components. In one example, the one or more user interface components may include a push button, and the predetermined signal may be generated by a user pressing the push button a predetermined number of times. For example, a first time window may be initiated by a user pressing the push button a predetermined number of times (e.g., five times) within a predetermined time period (e.g., 30 seconds).

[0013] There may be preliminary time windows before and / or between one or more of the time windows (e.g., before and / or between the first time window). If no user input authentication is received during the preliminary time window, the control circuit determines a result of failure of the offline authentication. However, if a user input authentication is received during the preliminary time window, the received user input authentication is stored (attributed to the corresponding digit) and the corresponding time window is initiated and / or execution continues (the corresponding digit is completed).

[0014] To help guide the user through the interactive input process, the control circuitry may be further configured to control the user interface component to output a user-perceptible guidance signal indicating at least the beginning of each time window so that the user knows when input is required. The user-perceptible guidance signal may also indicate that a time window is running, for example by emitting a continuous or flashing signal, such as a visual signal, to the user. To provide further certainty to the user and increase interactivity, the control circuitry may be further configured to control the user interface component to output a user-perceptible guidance signal indicating a digit of a sequence at which the user is being guided to provide input. For example, the aerosol generating device and / or the companion device may be provided with a number of output elements corresponding to the number of digits in the sequence, where the position of an active output element relative to other inactive output elements indicates the position of the digit in the sequence at which input is required. The control circuitry may be further configured to interpret multiple signals resulting from repeated user manipulations of the same user interface component as a code input signal that defines the digit of the sequence to which the time window corresponds during the time window, whereby only one user interface component, such as one button, can be used to input a digit of any value, thereby saving area on the device. Advantageously, the one user interface component may be a power button on the aerosol generating device or companion device, thereby further conserving area. Either of these methods facilitates a guided interactive input process for entering authentication information, while minimizing requirements on the capabilities and size of the user interface component.

[0015] To prevent fraudulent users or other attackers from brute-forcing the offline authentication process by attempting to enter credentials multiple times, the control circuitry may be further configured to respond to a failed offline authentication outcome by prohibiting the user from entering further credentials until a time delay period has elapsed or by refraining from performing an offline authentication based on the user-entered credentials until a time delay period has elapsed. The control circuitry may be configured to increase the length of the time delay period after each successive failed offline authentication outcome. In one particular example, the time delay period may be exponentially longer with each successive failed outcome, such that an exponential delay may be introduced between retries to deter an attacker.

[0016] The control circuitry may be further configured to compare the user-entered authentication information with pre-stored reference authentication information and determine whether to transition the aerosol generating device from a locked state to an unlocked state based on the result of the comparison.

[0017] Authenticating the aerosol generating device may mean or include identifying a user, determining the identity of the user, verifying the identity of the user, and / or determining whether the user is authorized or verified to transition the aerosol generating device to an unlocked state and deliver and / or generate aerosol. Thus, "successful authentication" of a user may mean that the user has been identified as authorized to transition the aerosol generating device to an unlocked state. "Failed authentication" of a user may mean that the user has not been authorized or has not been identified as authorized to transition the aerosol generating device to an unlocked state.

[0018] The locked state of the aerosol generation device may refer to a locked configuration, and the unlocked state may refer to an unlocked configuration of the aerosol generation device.

[0019] In the locked state or configuration, the aerosol generation device is prohibited from delivering and / or generating aerosol, which may mean that in the locked state, the aerosol generation device is locked from aerosol consumption by a user and / or that the aerosol generation device is configured in the locked state such that aerosol is not delivered and / or generated.

[0020] On the other hand, in an unlocked state or configuration, the aerosol generating device is permitted or allowed to deliver and / or generate aerosol, which may mean that in the unlocked state, the aerosol generating device is unlocked for aerosol consumption by a user and / or that the aerosol generating device is configured in the unlocked state such that aerosol may be delivered and / or generated.

[0021] Thus, when the aerosol generation device is in a locked state, the aerosol generation device may not be operable by a user to deliver and / or generate aerosol, and when the aerosol generation device is in an unlocked state, the aerosol generation device may be operable by a user to deliver and / or generate aerosol. In other words, in the locked state of the aerosol generation device, access to one or more functions of the aerosol generation device including aerosol delivery and / or generation may be prohibited for a user, and in the unlocked state of the aerosol generation device, access to one or more functions of the aerosol generation device including aerosol delivery and / or generation may be permitted for a user.

[0022] Additionally or alternatively, the companion device may be configured to charge the energy storage of the aerosol generating device only upon successful authentication of the user. In this example, the locked state may be considered as the energy storage of the aerosol generating device not containing a sufficient charge to generate aerosol, and the unlocked state as the energy storage containing a sufficient charge to generate aerosol. The authentication signal may then be considered as the provision of charge by the companion device to the energy storage of the aerosol generating device.

[0023] In the locked state, the control circuit may be configured to prohibit activation of the heating elements based on, for example, at least one of: disabling the at least one heating element, disabling an energy supply source for supplying electrical energy to the at least one heating element, and disabling an input element for activating the at least one heating element by a user.

[0024] The control circuit may be further configured to transition the aerosol generating device to an unlocked state in response to a decision to transition the aerosol generating device from a locked state to an unlocked state based on a successful result of the offline authentication.

[0025] The control circuit may further be configured to transition the aerosol generating device to an unlocked state by one or more of: (i) changing the value of the authentication indicator stored in the data storage; (ii) adding an authentication indicator to the data storage; and (iii) removing the authentication indicator from the data storage.

[0026] Additionally or alternatively, the control circuit may be further configured to transition the aerosol generation device to an unlocked state by enabling one or more functions of the aerosol generation device that were previously disabled when the aerosol generation device was in a locked state.

[0027] Additionally or alternatively, the control circuit may be further configured to transition the aerosol generation device to an unlocked state by sending an unlock signal to a companion device for the aerosol generation device, and in response to receiving the unlock signal, the companion device is configured to enable one or more functions of the aerosol generation device and the companion device that were previously disabled when the aerosol generation device was in the locked state.

[0028] One or more functions enabled in the unlocked state may be essential for the delivery of an aerosol by the aerosol generating device, and enabling may include enabling one or more of: (i) an electrical energy supply component (e.g., to charge the aerosol generating device); (ii) a volatile liquid supply component; (iii) a heating element; and (iv) an airflow enabling component.

[0029] Additionally or alternatively, the control circuit may be further configured to transition the aerosol generating device to an unlocked state by disabling one or more mechanical locking components that are configured when in an enabled state to prevent delivery and / or generation of aerosol.

[0030] The control circuitry may be further configured to determine, based on the result of the offline authentication failure, not to transition the aerosol generation device from the locked state to the unlocked state. The control circuitry may be further configured to maintain the aerosol generation device in the locked state in response to determining, based on the result of the offline authentication failure, not to transition the aerosol generation device from the locked state to the unlocked state.

[0031] As used herein, "transition" may mean causing, configuring, and / or switching the aerosol generating device into a locked or unlocked state, and may mean or include operating and / or configuring the aerosol generating device so that the aerosol generating device is in a locked or unlocked state.

[0032] The aerosol generating device and / or companion device and / or system including the aerosol generating device and companion device may further include data storage, and the control circuitry may be configured to determine an authentication indicator based on the authentication signal, such as described herein, and store the authentication indicator in the data storage. The control circuitry may be configured to derive the authentication indicator from the authentication signal, as described herein.

[0033] The authentication indicator may indicate, represent and / or describe successful or unsuccessful authentication of the user. Additionally or alternatively, the authentication indicator may indicate, represent and / or describe whether the user has authorization to transition the aerosol generating device to an unlocked state. Thus, the authentication indicator may be usable to transition the aerosol generating device to a locked or unlocked state or to maintain the aerosol generating device in a respective state. In other words, the authentication indicator may facilitate transitioning and / or enabling the aerosol generating device to transition to, enter into, switch to, and / or maintain at least temporarily in a locked or unlocked state. In particular, the aerosol generating device may be transitioned to or maintained in a locked state if or when the authentication indicator indicates unsuccessful authentication of the user, and may be transitioned to or maintained in an unlocked state if or when the authentication indicator indicates successful authentication of the user.

[0034] Storing an authentication indicator in the aerosol generation data storage may allow the aerosol generation device to be efficiently, reliably, and securely transitioned to a locked or unlocked state, and to keep the aerosol generation device in a configured locked or unlocked state, at least temporarily, even if, for example, a companion device is not currently available to the user. Protection may also be provided in the event that the aerosol generation device is lost. The authentication indicator may refer to an anonymized data element that indicates whether authentication of the user was successful or unsuccessful.

[0035] For example, the authentication indicator may refer to a data element, such as a binary data element, where a first value may indicate successful authentication of the user with the companion device and a second value different from the first value may indicate unsuccessful authentication of the user with the companion device. Further, the aerosol generating device may be transitioned to or maintained in an unlocked state if or when the authentication indicator takes a first value and may be transitioned to or maintained in a locked state if or when the authentication signal takes a second value.

[0036] Alternatively or additionally, the aerosol generating device may be transitioned to or maintained in one of the locked and unlocked states if or when the authentication indicator is present or stored in the data storage, and may be transitioned to or maintained in the other of the locked and unlocked states if or when the authentication indicator is not present in the data storage. Thus, control circuitry of the aerosol generating device may be configured to cause the aerosol generating device to be transitioned to or maintained in the locked or unlocked state based on the presence or absence of the authentication indicator in the data storage.

[0037] Additionally, the control circuitry of the aerosol generating device may be configured to remove, delete and / or erase the authentication indicator from the data storage such that the aerosol generating device is transitioned to the locked state. In other words, the aerosol generating device may be transitioned to the locked state in the absence of the authentication indicator in the data storage by removing the authentication indicator from the data storage.

[0038] For example, the control circuitry of the aerosol generating device may be configured to periodically erase and / or delete the data storage for storing the authentication indicator, resulting in the aerosol generating device being periodically transitioned to a locked state. By periodically removing the authentication indicator from the data storage and / or periodically erasing the data storage, the aerosol generating device may be periodically transitioned to a locked state. Thus, a user is required to periodically authenticate or re-authenticate himself / herself, thereby efficiently, reliably and securely preventing use of the aerosol generating device by unauthorized users.

[0039] Alternatively or additionally, the control circuitry of the aerosol generating device may be configured to modify, alter, adjust and / or change the value of the authentication indicator, such that the aerosol generating device is transitioned to the locked state. The control circuitry of the aerosol generating device may be configured to modify, alter, adjust and / or change the value of the authentication indicator to a value associated with the locked state, such as a second value of the authentication indicator. By periodically modifying the value of the authentication indicator, the aerosol generating device may be periodically transitioned to the locked state. Thus, a user may be required to periodically authenticate or re-authenticate themselves, thereby efficiently, reliably and securely preventing use of the aerosol generating device by unauthorized users.

[0040] The aerosol generating device may include at least one heating element configured to heat an aerosol-generating article to produce an aerosol, and control circuitry of the aerosol generating device may be configured to prohibit activation of the at least one heating element by a user when the aerosol generating device is in a locked state. Further, control circuitry of the aerosol generating device may be configured to allow activation of the at least one heating element by a user when the aerosol generating device is in an unlocked state. By allowing activation of the heating element in the unlocked state and prohibiting activation of the heating element in the locked state, it may be ensured that a user can only use the aerosol generating device for aerosol consumption upon successful authentication.

[0041] As an example, the control circuitry of the aerosol generating device may be configured to prohibit activation of the heating element based on at least one of disabling at least one heating element, disabling an energy supply source for supplying electrical energy to the at least one heating element, and disabling an actuation element of the aerosol generating device for activating the at least one heating element by a user.

[0042] Alternatively or additionally, the flow path of the aerosol through the aerosol generating device may be blocked in the locked state and the flow path may be opened or unblocked in the unlocked state, for example by enabling one or more airflow enabling components. Alternatively or additionally, the insertion of an aerosol-generating article into the aerosol generating device may be prohibited in the locked state and the insertion of an aerosol-generating article may be permitted in the unlocked state. However, any other means of permitting aerosol generation in the unlocked state and prohibiting aerosol generation in the locked state may be implemented.

[0043] The aerosol generating device may be transitioned or held in one of the locked and unlocked states if or when an authentication signal is generated or transmitted by the control circuitry, and may be transitioned or held in the other of the locked and unlocked states if or when an authentication signal is not generated or transmitted by the control circuitry. For this purpose, the control circuitry may generate and / or transmit an authentication signal that can be used to transition the aerosol generating device to the locked or unlocked state. In other words, the authentication signal may refer to a data signal or data element that allows transitioning the aerosol generating device to the locked or unlocked state, causing the aerosol generating device to enter the locked or unlocked state, and / or enabling the aerosol generating device to switch to the locked or unlocked state. The authentication signal may refer to a binary signal, where a first value may indicate successful authentication of the user and a second value different from the first value may indicate unsuccessful authentication of the user. Furthermore, the aerosol generating device may be transitioned or held in the unlocked state if the authentication signal takes a first value, and may be transitioned or held in the locked state if the authentication signal takes a second value. Thus, an authentication signal may refer to an anonymized data signal or data element that indicates whether authentication of a user was successful or unsuccessful.

[0044] Furthermore, the authentication signal may be an encrypted signal. For example, a secret or a passcode may be shared, for example, between the aerosol generating device and the companion device, to encrypt the authentication signal. Therein, the secret or the passcode may be coded or included in the authentication signal. Alternatively, the secret or the passcode may be transmitted separately from the authentication signal. However, any other encryption approach may be applied to encrypt the authentication signal. In general, by encrypting the authentication signal, attacks of unauthorized users who configure the aerosol generating device in an unlocked state, such as, for example, reply attacks, may be reliably prevented. Furthermore, the authentication indicator may be stored in a protected storage area of ​​the companion device and / or the aerosol generating device's data storage.

[0045] An aerosol generating device may be configured or designed, for example, as a handheld device that can be used by a user or authorized user to consume the aerosol generating article during one or more usage sessions (also referred to as experience or experience sessions). For example, an aerosol generating article that can be used with an aerosol generating device may include an aerosol-forming substrate, such as a tobacco-containing substrate, in the form of a stick that can be at least partially inserted into the aerosol generating device, optionally assembled with other elements or components. Alternatively or additionally, an aerosol generating article that can be used with an aerosol generating device may include at least one cartridge that contains a liquid that can be evaporated during aerosol consumption by a user. Such a cartridge may be a refillable cartridge that is fixedly attached to the aerosol generating device, or the cartridge may be at least partially inserted into the aerosol generating device.

[0046] The control circuitry may further control one or more functions of the aerosol generating device. The control circuitry may include one or more processors for data processing. Alternatively or additionally, the aerosol generating device may include data storage and / or memory for storing data, such as software instructions, computer programs, and / or other data.

[0047] A companion device may also be referred to as a receiving device, and generally may refer to a supporting device for supporting and / or storing an aerosol generating device. A companion device may be a portable companion device. In the context of the present disclosure, a companion device may be configured to at least partially receive an aerosol generating device. This should be interpreted broadly. For example, this may mean that the companion device is configured to be physically coupled to the aerosol generating device. Such physical coupling may include, for example, a mechanical coupling based on an attachment means, such as a hook mechanism, a latch mechanism, a snap-fit ​​mechanism, etc., whereby the aerosol generating device may be mechanically coupled to the companion device and / or its housing. Alternatively or additionally, the aerosol generating device may be physically coupled to the companion device based on a magnetic or electromagnetic coupling. Alternatively or additionally, the aerosol generating device may be at least partially inserted into the companion device, such as, for example, into an opening of the companion device. Furthermore, the aerosol generating device and the companion device may refer to physically separate components or elements of an aerosol generating system.

[0048] In the context of this disclosure, an external computing device may refer to a computing device configured to communicate with the aerosol generating device and / or the companion device, for example, based on the exchange of data or information. In general, an external computing device may be a handheld or portable device. Alternatively, an external computing device may be a stand-alone or fixedly attached device. Furthermore, an external computing device may be owned or installed by a user or another entity or individual, such as a retail store. As an example, an external computing device may refer to a handheld, smartphone, personal computer ("PC"), tablet PC, laptop, or computer.

[0049] The external computing device may include a user interface. The external computing device may include one or more processors for data processing, such as processing one or more user inputs received at the user interface. Alternatively or additionally, the external computing device may include data storage and / or memory for storing data, such as software instructions, computer programs, and / or other data. Furthermore, the external computing device may include a communication interface, a communication module, and / or a communication circuit for communicatively coupling the external computing device to the aerosol generating device, for example, via a communication interface of the companion device. Thus, the external computing device may be configured for wireless and / or wired communication with the aerosol generating device, the companion device, or both. For example, the external computing device may be configured to be communicatively coupled to the aerosol generating device and / or the companion device via an Internet connection, a wireless LAN connection, a WiFi connection, a Bluetooth connection, a cellular network, a 3G / 4G / 5G connection, etc., an edge connection, an LTE connection, a BUS connection, a wireless connection, a wired connection, a radio connection, a short-range connection, an IoT connection, or any other connection using any suitable communication protocol.

[0050] To communicate with each other, with an external computing device, and / or to exchange data or signals, each of the aerosol generating device and the companion device may include at least one communication interface. The communication interface may be configured for wireless communication, wired communication, or both. For example, the communication interface may be configured to communicatively couple via an Internet connection, a wireless LAN connection, a WiFi connection, a Bluetooth connection including BLE, a cellular network, a 3G / 4G / 5G connection, an edge connection, an LTE connection, a BUS connection, a wireless connection, a wired connection, a radio connection, a short-range connection, an IoT connection, or any other connection using any suitable communication protocol.

[0051] The aerosol generating device and / or the companion device may include at least one energy storage for storing electrical energy and / or for supplying electrical energy to the aerosol generating device. For example, the companion device may be configured to supply electrical energy to the aerosol generating device and charge the at least one energy storage of the aerosol generating device. In other words, the companion device may be configured to charge the aerosol generating device and / or its at least one energy storage. The at least one energy storage of the aerosol generating device may include, for example, at least one battery, at least one accumulator, at least one capacitor, or any other energy storage. The companion device may be configured to supply electrical energy to the energy storage of the aerosol generating device when the aerosol generating device is at least partially received by the companion device. The companion device may include one or more batteries for supplying electrical energy to the energy storage of the aerosol generating device. The companion device may be configured to wirelessly supply electrical energy to the energy storage of the aerosol generating device, for example, based on induction. Alternatively or additionally, the companion device may be configured to provide electrical energy to an energy storage unit of the aerosol generating device via one or more electrical connectors between the companion device and the aerosol generating device. For example, the aerosol generating device and the companion device may each include at least one electrical connector for electrically coupling the companion device with the aerosol generating device when the aerosol generating device is at least partially received by the companion device. As an example, the companion device may include an opening for at least partially receiving the aerosol generating device. By at least partially inserting the aerosol generating device into the opening, one or more electrical connectors may be established between the one or more electrical connectors of the aerosol generating device and the companion device.Alternatively or additionally, the aerosol generating device may be physically and / or mechanically coupled to the companion device, e.g., via a housing of the companion device, such that the aerosol generating device is at least partially received by the companion device and one or more electrical connections can be established between the aerosol generating device and the companion device. Optionally, a communicative coupling and / or connection between the companion device and the aerosol generating device may be established, e.g., for the transmission of an authentication signal, by establishing an electrical connection between the companion device and the aerosol generating device, e.g., via one or more electrical connectors of the aerosol generating device and the companion device. As an example, at least one electrical connector of the companion device may combine with and / or include a communication interface of the companion device. In other words, at least one electrical connector of the companion device may be configured as a communication interface for communicatively coupling the companion device with the aerosol generating device. Alternatively or additionally, at least an electrical connector of the aerosol generating device may combine with and / or include a communication interface of the aerosol generating device. In other words, at least one electrical connector of the aerosol generating device may be configured as a communication interface for communicatively coupling the aerosol generating device with the companion device. Thus, the authentication signal may be transmitted from the companion device to the aerosol generating device via one or more electrical connectors of the companion device and the aerosol generating device. However, it should be noted that the communication interface of one or both of the companion device and the aerosol generating device may be physically separate and independent from the at least one electrical connector of the companion device and / or the aerosol generating device. A charging cycle may refer to a period during which the aerosol generating device is continuously supplied with electrical energy by the companion device. During a charging cycle, the at least one energy storage unit may be partially or fully charged.

[0052] To authenticate a user, the reference authentication information may be stored in the data storage and / or memory of the aerosol generating device and / or companion device. For example, the reference authentication information may be obtained during and stored upon completion of an age verification or registration process, as discussed further below.

[0053] According to a second aspect, there is provided an aerosol generating device including the control circuit of the first aspect.

[0054] According to a third aspect, there is provided a companion device for an aerosol generating device, the companion device including the control circuitry of the first aspect.

[0055] According to a fourth aspect, there is provided a system comprising an aerosol generating device, a companion device for the aerosol generating device, and control circuitry according to the first aspect. The control circuitry may be distributed among multiple components of the system, including, for example, the aerosol generating device and / or the companion device.

[0056] According to a fifth aspect, there is provided a method of authenticating use of an aerosol generating device, the aerosol generating device having a locked state in which the aerosol generating device is prohibited from delivering an aerosol, and an unlocked state in which the aerosol generating device is permitted to deliver an aerosol, the method comprising: receiving user-entered authentication information from one or more user interface components during a plurality of time windows of a predetermined period, each time window corresponding to a respective digit of a series of numbers forming the authentication information, attributing user input received via the user interface components during that time window to the digit corresponding to that time window, performing an offline authentication of the aerosol generating device based on the user-entered authentication information, and deciding to transition the aerosol generating device from the locked state to the unlocked state based on a successful outcome of the offline authentication.

[0057] The method may further include controlling a user interface component to guide the user to input authentication information as part of the guided interactive input process. The method may further include controlling the user interface component to output a user-perceptible guidance signal in response to a control signal from the control circuitry to guide the user during the guided interactive input process. The method may further include controlling the user interface component to output a user-perceptible guidance signal to (i) prompt the user to take a predetermined action, (ii) provide feedback to the user regarding the progress of the guided interactive input process, or both (i) and (ii). The method may further include controlling the user interface component to output a user-perceptible guidance signal comprising any one or more of a visual signal, an audible signal, and a tactile signal.

[0058] The method may further include triggering a timeout within a predetermined period starting from a beginning of a respective one of the time windows in response to no user input being received by one or more user interface components. The method may further include determining not to transition the aerosol generating device to an unlocked state in response to triggering the timeout. The method may further include controlling the user interface component to output a user-perceptible guidance signal indicative of at least a beginning of a respective time window. The method may further include controlling the user interface component to output a user-perceptible guidance signal indicative of a digit of the sequence to which the user is guided to provide input. The method may further include interpreting a plurality of signals resulting from repeated user actuation of the same aforementioned user interface component as coded input signals that define a digit of the sequence to which the time window corresponds during the time window. The method may further include responding to a result of a failed offline authentication by prohibiting the user from inputting further authentication information until a time delay period has elapsed or by refraining from performing an offline authentication based on the user-input authentication information until a time delay period has elapsed. The method may further include increasing (eg, exponentially increasing) the length of the time delay period after each successive failed outcome of the offline authentication.

[0059] The method may further include comparing the user-entered authentication information with pre-stored reference authentication information and determining whether to transition the aerosol generating device from a locked state to an unlocked state based on a result of the comparison.

[0060] The method may further include transitioning the aerosol generating device to an unlocked state in response to determining to transition the aerosol generating device from the locked state to an unlocked state based on a successful outcome of the offline authentication. The method may further include transitioning the aerosol generating device to the unlocked state by one or more of: (i) changing a value of an authentication indicator stored in the data storage; (ii) adding an authentication indicator to the data storage; (iii) deleting an authentication indicator from the data storage. The method may further include transitioning the aerosol generating device to the unlocked state by enabling one or more features of the aerosol generating device that were previously disabled when the aerosol generating device was in the locked state. The method may further include transitioning the aerosol generating device to the unlocked state by transmitting an unlock signal to a companion device for the aerosol generating device, the companion device enabling one or more features of the aerosol generating device and the companion device that were previously disabled when the aerosol generating device was in the locked state in response to receiving the unlock signal. The one or more functions enabled in the unlocked state may be essential for delivery of an aerosol by the aerosol generating device, and the enabling includes enabling one or more of: (i) an electrical energy supply component, (ii) a volatile liquid supply component, (iii) a heating element, (iv) an airflow enabling component. The method may further include transitioning the aerosol generating device to the unlocked state by disabling one or more mechanical locking components. The method may further include determining not to transition the aerosol generating device from the locked state to the unlocked state based on the result of the offline authentication failure. The method may further include maintaining the aerosol generating device in the locked state in response to determining not to transition the aerosol generating device from the locked state to the unlocked state based on the result of the offline authentication failure.

[0061] The method may further include performing offline authentication of the aerosol generating device without being connected to an external computing device during authentication. The method may further include performing offline authentication of the aerosol generating device without transmitting authentication-related data to an external computing device during authentication or receiving authentication-related data from an external computing device.

[0062] The method of the fifth aspect may be carried out, for example, by control circuitry of an aerosol generating device, by control circuitry of a companion device for an aerosol generating device, or by control circuitry of a system including an aerosol generating device and a companion device for an aerosol generating device.

[0063] According to a sixth aspect, there is provided a method of generating authentication information for offline authentication of an aerosol generating device and transmitting the authentication information to a user for input to the control circuit of the first aspect as user-input authentication information. Generating the authentication information may include receiving an ID code from the user and generating the authentication information based on the received ID code. The method may further include performing an age verification process to verify the age of the user prior to generating the authentication information, and generating the authentication information only in response to a successful outcome of the age verification process.

[0064] The age verification process may be operable to determine whether a user of an aerosol generating device has reached a minimum age as indicated by an age threshold. As used herein, an "age threshold" may indicate a predetermined minimum age for a user of an aerosol generating device. In certain jurisdictions, for example, consumption of aerosols may be permitted for citizens or individuals who have reached and / or are at or above a certain minimum age. Furthermore, in at least some jurisdictions, individuals who have reached this minimum age may be considered of full age and / or adulthood. Thus, the term age threshold may indicate, represent, and / or describe a minimum age required for a user to use an aerosol generating device for aerosol consumption. Alternatively or additionally, the term "age threshold" may indicate, represent, and / or describe an adult age at which a user may be considered an adult. For example, the age threshold may range from 14 to 25 years old, such as 16, 18, or 21 years old. The age verification process may thus be operable to determine whether a user of an aerosol generating system has reached full age, full adult age, and / or is an adult. The age verification process may be associated with a registration or set-up procedure prior to or at the time of a user's first use of the aerosol generating device.

[0065] Furthermore, the age verification process may be performed using a user device, for example, a telephone where the user contacts a call center. An external computing device may implement a comprehensive and secure procedure for determining the user's age based on the user's personal data or information, such as, for example, the user's ID card, passport, credit card, driver's license, social security number, etc. Thus, the user's real age can be reliably and unambiguously determined.

[0066] By determining that a user has reached an age threshold based on an age verification process, misuse or legally abusive use of the aerosol generating device for aerosol consumption by users who have not reached and / or are below the age threshold may be reliably and effectively prohibited, and in particular, use of the aerosol generating device for aerosol consumption by underage users may be reliably and effectively prohibited.

[0067] As used herein, an authorized user (also referred to as a verified user) may refer to or denote an owner of the aerosol generating device, an adult, an adult individual, a user of full age, a user who has reached an age threshold, a user who has reached the age of majority, and / or a user who has been authenticated to configure the aerosol generating device by another authorized user, such as the owner. Additionally, an unauthorized user may refer to or denote an underage user, a user who has not reached an age threshold, a child, or any other user who is not authorized to configure the aerosol generating device, particularly a user who is not authorized to transition the aerosol generating device to an unlocked state for aerosol consumption.

[0068] According to a seventh aspect, there is provided a server computer including a processor configured to carry out the method of any of the sixth aspect.

[0069] According to an eighth aspect there is provided a computer program product comprising instructions which, when executed by a server computer, cause the server computer to carry out the method of the sixth aspect.

[0070] According to a variation of the first aspect, there is provided a control circuit for an aerosol generating device. The aerosol generating device has a locked state in which the aerosol generating device is prohibited from delivering an aerosol, and an unlocked state in which the aerosol generating device is permitted to deliver an aerosol. The control circuit is configured to receive user-input authentication information from one or more user interface components, perform authentication of the aerosol generating device based on the user-input authentication information, and decide to transition the aerosol generating device from the locked state to the unlocked state based on a successful result of the authentication. The authentication optionally includes or consists of an offline authentication as described herein.

[0071] According to another variation of the first aspect, there is provided a control circuit for an aerosol generating device having a locked state in which the aerosol generating device is prohibited from delivering an aerosol and an unlocked state in which the aerosol generating device is permitted to deliver an aerosol, the control circuit being configured to receive user-input authentication information from one or more user interface components, perform offline authentication of the aerosol generating device based on the user-input authentication information, and decide to transition the aerosol generating device from the locked state to the unlocked state based on a successful outcome of the offline authentication.

[0072] According to a variation of the fifth aspect, there is provided a method for authenticating an aerosol generating device for use, the aerosol generating device having a locked state in which it is prohibited from delivering an aerosol and an unlocked state in which it is permitted to deliver an aerosol, the method comprising receiving user-input authentication information from one or more user interface components, performing offline authentication of the aerosol generating device based on the user-input authentication information, and deciding to transition the aerosol generating device from the locked state to the unlocked state based on a successful outcome of the offline authentication.

[0073] It is emphasized that any feature, step, function, element, technical effect and / or advantage described herein with reference to one embodiment applies to any other embodiment of the disclosure as well.

[0074] The following provides a non-exhaustive list of non-limiting examples, any one or more of the features of which may be combined with any one or more features of the other examples, embodiments, or aspects described herein.

[0075] Example 1 1. A control circuit for an aerosol generating device, the control circuit having a locked state in which the aerosol generating device is prohibited from delivering an aerosol and an unlocked state in which the aerosol generating device is permitted to deliver an aerosol; the control circuit comprising: a control circuit configured to receive user input authentication information from one or more user interface components, the control circuitry receiving the user input authentication information during a plurality of time windows of a predetermined period, each time window corresponding to a respective digit of a series of digits forming the authentication information, and attributing user input received via the user interface components during that time window to the digit corresponding to that time window; Perform offline authentication of the aerosol generating device based on user-entered authentication information; A control circuit configured to determine to transition the aerosol generating device from a locked state to an unlocked state based on a successful outcome of the offline authentication. Example 2 The control circuit of example 1, further configured to control a user interface component to prompt a user to input authentication information as part of a prompted interactive input process. Example 3 The control circuit of example 2, further configured to control the user interface component to output a user-perceptible guidance signal in response to a control signal from the control circuit to guide the user during a guided interactive input process. Example 4 The control circuit of Example 3, further configured to control the user interface component to output a user-perceivable guidance signal to (i) prompt the user to take a predetermined action, (ii) provide feedback to the user regarding the progress of the guided interactive input process, or both (i) and (ii). Example 5 The control circuit of example 3 or 4, further configured to control the user interface component to output a user-perceivable guidance signal, including any one or more of a visual signal, an audible signal, and a tactile signal. Example 6 A control circuit as described in any of embodiments 1 to 5, configured to trigger a timeout in response to user input received by one or more user interface components not being within a predetermined time period starting from the start of a respective one of the time windows. Example 7 The control circuit of Example 6, further configured to determine not to transition the aerosol generating device to an unlocked state in response to a timeout being triggered. Example 8 A control circuit as described in any of Examples 1 to 7, further configured to initiate an initial one of the time windows in response to a user interacting with one or more user interface components. Example 9 The control circuit of example 8, further configured to initiate a first one of the time windows in response to receiving a predetermined signal generated by a user interacting with one or more user interface components. Example 10 The control circuit of example 9, wherein the one or more user interface components include a push button, and a predetermined signal is generated when the user presses the push button a predetermined number of times. Example 11 A control circuit as described in any of embodiments 1 to 10, wherein there is an auxiliary time window before and / or between one or more time windows, and the control circuit is configured to determine a result of offline authentication failure if no user input authentication is received during the auxiliary time window, store the received user input authentication, start the corresponding time window, and / or continue execution of the corresponding time window if user input authentication is received during the auxiliary time window. Example 12 The control circuit of any of Examples 1-11, further configured to control a user interface component to output a user-perceptible guidance signal indicating at least a beginning of each time window. Example 13 13. The control circuit of any of Examples 1-12, further configured to control a user interface component to output a user-perceivable guidance signal indicating that the time window is running. Example 14 The control circuit of any one of Examples 1 to 13, further configured to control a user interface component to output a user-perceivable guidance signal indicating a digit of the sequence to which the user is being guided to provide an input. Example 15 A control circuit as described in Example 14, wherein the aerosol generating device has a number of output elements corresponding to a number of digits in the sequence, and the position of active output elements relative to inactive output elements indicates the position of the digit number in the sequence for which input is required. Example 16 16. The control circuit of claim 1, further configured to interpret a plurality of signals resulting from repeated user operation of the same user interface component during the time window as coded input signals defining a digit of a sequence to which the time window corresponds. Example 17 The control circuit of Example 16, wherein the user interface component is a power button for the aerosol generating device. Example 18 The control circuit of any of Examples 1 to 17, further configured to respond to a failed offline authentication result by prohibiting the user from inputting further authentication information until a time delay period has elapsed, or by refraining from performing offline authentication based on the user-entered authentication information until a time delay period has elapsed. Example 19 20. The control circuit of example 18, configured to increase a length of the time delay period after each successive failed outcome of the offline authentication. Example 20 A control circuit described in any of Examples 1 to 19, further configured to compare user-entered authentication information with pre-stored reference authentication information and determine whether to transition the aerosol generating device from a locked state to an unlocked state based on the result of the comparison. Example 21 A control circuit described in any of embodiments 1 to 20, further configured to transition the aerosol generating device to an unlocked state in response to a decision to transition the aerosol generating device from a locked state to an unlocked state based on the successful result of offline authentication. Example 22 The control circuit of Example 21, further configured to transition the aerosol generating device to an unlocked state by one or more of: (i) changing the value of the authentication indicator stored in the data storage; (ii) adding an authentication indicator to the data storage; and (iii) deleting an authentication indicator from the data storage. Example 23 A control circuit as described in Example 21 or 22, further configured to transition the aerosol generation device to an unlocked state by enabling one or more functions of the aerosol generation device that were previously disabled when the aerosol generation device was in a locked state. Example 24 A control circuit as described in any of Examples 21 to 23, further configured to transition the aerosol generating device to an unlocked state by sending an unlock signal to a companion device for the aerosol generating device, and configured such that in response to receiving the unlock signal, the companion device enables one or more functions of one or more of the aerosol generating devices and companion devices that were previously disabled when the aerosol generating device was in a locked state. Example 25 A control circuit as described in Example 23 or 24, wherein one or more functions enabled in the unlocked state are essential for delivery of an aerosol by the aerosol generating device, and the enabling includes enabling one or more of: (i) an electrical energy supply component, (ii) a volatile liquid supply component, (iii) a heating element, and (iv) an airflow enabling component. Example 26 A control circuit as described in any of Examples 21 to 25, wherein the control circuit is further configured to transition the aerosol generating device to an unlocked state by disabling one or more mechanical locking components. Example 27 A control circuit described in any of Examples 1 to 26, further configured to decide not to transition the aerosol generating device from a locked state to an unlocked state based on the result of a failed offline authentication. Example 28 A control circuit described in any of Examples 1 to 27, further configured to maintain the aerosol generating device in a locked state in response to deciding not to transition the aerosol generating device from a locked state to an unlocked state based on the result of a failed offline authentication. Example 29 A control circuit described in any of Examples 1 to 28, further configured to perform offline authentication of the aerosol generating device without being connected to an external computing device during authentication. Example 30 A control circuit described in any of Examples 1 to 29, further configured to perform offline authentication of the aerosol generating device without transmitting authentication-related data to an external computing device during authentication or receiving authentication-related data from an external computing device. Example 31 An aerosol generating device comprising the control circuit according to any one of Examples 1 to 30. Example 32 A companion device for an aerosol generating device, comprising a control circuit according to any one of Examples 1 to 30. Example 33 A system comprising an aerosol generating device, a companion device for the aerosol generating device, and a control circuit according to any one of Examples 1 to 30. Example 34 16. A method of authenticating an aerosol generating device for use, the aerosol generating device having a locked state in which the aerosol generating device is prohibited from delivering aerosol and an unlocked state in which the aerosol generating device is permitted to deliver aerosol, the method comprising: receiving user input authentication information from one or more user interface components during a plurality of time windows during a predetermined period of time, each time window corresponding to a respective digit of a series of digits forming the authentication information, and attributing user input received via the user interface components during that time window to the digit corresponding to that time window; performing offline authentication of the aerosol generating device based on user-entered authentication information; and determining to transition the aerosol generating device from a locked state to an unlocked state based on a successful outcome of the offline authentication. Example 35 35. The method of example 34, further comprising controlling a user interface component to prompt the user to enter authentication information as part of a guided interactive input process. Example 36 The method of example 35, further comprising controlling a user interface component to output a user-perceivable guidance signal in response to a control signal from the control circuit to guide the user during the guided interactive input process. Example 37 The method of example 36, further comprising controlling a user interface component to output a user-perceivable guidance signal for (i) prompting the user to take a predetermined action, (ii) providing feedback to the user regarding the progress of the guided interactive input process, or both (i) and (ii). Example 38 The method of example 36 or 37, further comprising controlling a user interface component to output a user-perceivable guidance signal including any one or more of a visual signal, an audible signal, and a tactile signal. Example 39 The method of any of Examples 34 to 38, further comprising triggering a timeout in response to user input not being received by one or more user interface components within a predetermined time period starting from the start of a respective one of the time windows. Example 40 The method of example 39, further comprising determining not to transition the aerosol generating device to an unlocked state in response to triggering a timeout. Example 41 The method of any of Examples 34 to 740, further comprising initiating an initial one of the time windows in response to a user interacting with one or more user interface components. Example 42 42. The method of example 41, further comprising initiating a first one of the time windows in response to receiving a predetermined signal generated by a user interacting with one or more user interface components. Example 43 43. The method of claim 42, wherein the one or more user interface components comprise a push button and generate a predetermined signal when the user presses the push button a predetermined number of times. Example 44 The method according to any of Examples 34 to 43, wherein there is an auxiliary time window before and / or between one or more time windows, and the method further includes determining a result of failure of the offline authentication if no user input authentication is received during the auxiliary time window, or storing the received user input authentication and starting the corresponding time window and / or continuing to execute the corresponding time window if a user input authentication is received during the auxiliary time window. Example 45 45. The method of any of Examples 34-44, further comprising controlling a user interface component to output a user-perceptible guidance signal indicating at least the beginning of each time window. Example 46 46. ​​The method of any one of Examples 34-45, further comprising controlling a user interface component to output a user-perceptible guidance signal indicating that the time window is running. Example 47 The method of any of Examples 34 to 46, further comprising controlling a user interface component to output a user-perceivable guidance signal indicating a digit of the sequence to which the user is being guided to provide an input. Example 48 The method of Example 47, wherein the aerosol generating device is provided with a number of output elements corresponding to the number of digits in the sequence, and the position of the active output elements relative to the inactive output elements indicates the position of the digit in the sequence for which input is required. Example 49 The method of any of Examples 34 to 48, further comprising interpreting a plurality of signals resulting from repeated user operation of the same user interface component during the time window as coded input signals defining a digit of the sequence to which the time window corresponds. Example 50 The method of any of Examples 34-49, further comprising responding to a failed offline authentication result by prohibiting the user from inputting further authentication information until a time delay period has elapsed, or by refraining from performing offline authentication based on the user-entered authentication information until a time delay period has elapsed. Example 51 51. The method of example 50, further comprising increasing the length of the time delay period after each successive failed result of offline authentication. Example 52 The method described in any of Examples 34 to 51, further comprising comparing the user-entered authentication information with pre-stored reference authentication information, and determining whether to transition the aerosol generating device from a locked state to an unlocked state based on the result of the comparison. Example 53 A method as described in any of Examples 34 to 52, further comprising transitioning the aerosol generating device to an unlocked state in response to a decision to transition the aerosol generating device from a locked state to an unlocked state based on the successful outcome of offline authentication. Example 54 The method of Example 53, further comprising transitioning the aerosol generating device to an unlocked state by one or more of: (i) changing the value of the authentication indicator stored in the data storage; (ii) adding an authentication indicator to the data storage; and (iii) removing the authentication indicator from the data storage. Example 55 The method of example 53 or 54, further comprising transitioning the aerosol generation device to an unlocked state by enabling one or more functions of the aerosol generation device that were previously disabled when the aerosol generation device was in a locked state. Example 56 A method as described in any of Examples 42 to 55, further comprising transitioning the aerosol generating device to an unlocked state by sending an unlock signal to a companion device for the aerosol generating device, wherein in response to receiving the unlock signal, the companion device enables one or more functions of the aerosol generating device and the companion device that were previously disabled when the aerosol generating device was in the locked state. Example 57 The method described in Example 55 or 56, wherein the one or more functions enabled in the unlocked state are essential for delivery of an aerosol by the aerosol generating device, and the enabling includes enabling one or more of: (i) an electrical energy supply component, (ii) a volatile liquid supply component, (iii) a heating element, and (iv) an airflow enabling component. Example 58 The method of any of Examples 53 to 57, further comprising transitioning the aerosol generating device to an unlocked state by disabling one or more mechanical locking components. Example 59 The method of any of Examples 34 to 58, further comprising deciding not to transition the aerosol generating device from a locked state to an unlocked state based on the result of a failed offline authentication. Example 60 A method as described in any of Examples 34 to 59, further comprising maintaining the aerosol generating device in a locked state in response to deciding not to transition the aerosol generating device from a locked state to an unlocked state based on the result of failed offline authentication. Example 61 The method of any of Examples 34 to 60, further comprising performing offline authentication of the aerosol generating device without being connected to an external computing device during authentication. Example 62 The method of any of Examples 34 to 61, further comprising performing offline authentication of the aerosol generating device without transmitting authentication-related data to an external computing device during authentication or receiving authentication-related data from an external computing device. Example 63 The method according to any one of Examples 34 to 62, which is carried out by a control circuit of an aerosol generating device. Example 64 A method according to any of Examples 34 to 62, implemented by a control circuit of a companion device for an aerosol generating device. Example 65 The method according to any of Examples 34 to 62, implemented by a control circuit of a system comprising an aerosol generating device and a companion device for the aerosol generating device. Example 66 A method comprising: generating authentication information for offline authentication of an aerosol generating device; and transmitting the authentication information to a user as user-input authentication information for input into a control circuit described in any of Examples 1 to 30. Example 67 67. The method of example 66, wherein generating the authentication information includes receiving an ID code from the user and generating the authentication information based on the received ID code. Example 68 The method of example 66 or 67, further comprising: performing an age verification process to verify the age of the user prior to generating the authentication information; and generating the authentication information only in response to a successful result of the age verification process. Example 69 A server computer comprising a processor configured to implement the method according to any one of Examples 66 to 68. Example 70 A computer program product comprising instructions that, when executed by a server computer, cause the server computer to execute the method described in any one of Examples 66 to 68. [Brief description of the drawings]

[0076] The embodiments will now be further described with reference to the figures.

[0077] [Figure 1] FIG. 1 shows an aerosol generation system. [Diagram 2] FIG. 2 shows a block diagram of a portion of a companion device of the aerosol generation system of FIG. [Diagram 3] FIG. 3 illustrates an external computing device for use in conjunction with the aerosol generation system of FIG. [Figure 4] FIG. 4 shows a flow chart illustrating a method of authenticating an aerosol generating device for use with the aerosol generating system of FIG. [Diagram 5] FIG. 5 shows a flow chart illustrating a method involving generating authentication information and transmitting it to a user. [Figure 6] FIG. 6 is a flow chart illustrating a method for device activation.

[0078] The figures are schematic and not to scale. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0079] 1 shows an aerosol generation system 500 for generating an aerosol, for example for consumption by a user. The system 500 includes an aerosol generation apparatus 100 for generating an aerosol, and a companion device 300 for at least partially receiving the aerosol generation apparatus 100. The companion device 300 may be a charging device for charging the aerosol generation apparatus 100.

[0080] The aerosol generating device 100 includes an insertion opening 101 for at least partially inserting an aerosol-generating article (not shown). The aerosol-generating article includes an aerosol-forming substrate, such as a tobacco-containing substrate, and / or a cartridge containing a liquid.

[0081] The aerosol generating device 100 further includes a control circuit 102 having one or more processors 103. The control circuit 102 may be configured to control the activation, activation, and / or deactivation of at least one heating element 120.

[0082] The aerosol generating device 100 further includes a user interface component including an input element in the form of a push button 104. The push button 104 is operable for a user to input a pin code into the control circuitry 102, as described further below. After successful authentication, the push button 104 may further be used as a power button to activate or deactivate the heating element 120 for aerosol generation to activate or deactivate the aerosol generating device 100. Upon activation of the aerosol generating device 100, the heating element 120 may be activated such that heat is applied to at least a portion of the aerosol-generating article such that aerosol may be generated for consumption by the user. Upon deactivation of the aerosol generating device 100, the heating element 120 may be deactivated such that no heat is applied or reduced to at least a portion of the aerosol-generating article such that no aerosol may be generated for consumption by the user.

[0083] The aerosol generating device 100 further includes a communication device 106 having one or more communication interfaces 108 for communicatively coupling the aerosol generating device 100 and the companion device 300, for example, via an Internet connection, a wireless LAN connection, a WiFi connection, a Bluetooth connection, a cellular network, a 3G / 4G / 5G connection, an edge connection, an LTE connection, a BUS connection, a wireless connection, a wired connection, a radio connection, a short-range connection, and / or an IoT connection.

[0084] The aerosol generating device 100 further includes a data storage 110 for storing information or data, such as, for example, at least one authentication indicator and / or other data.

[0085] The user interface component further includes an output element in the form of an LED array 112 and a tactile output element (not shown) for providing a tactile pulse. The output element provides a user-perceivable guidance signal to the user. The LED array 112 may further be used to indicate the charge level of the at least one energy store 122, for example, whether the at least one energy store should be charged, etc. The LED array 112 may also be used to indicate the configuration or state of the aerosol generating device 100, for example whether the aerosol generating device is in a locked or unlocked state.

[0086] The aerosol generating device 100 further includes at least one electrical connector 114 for coupling to at least one corresponding electrical connector 313 of the companion device 300. For example, when the aerosol generating device 100 is at least partially inserted into the opening 301 of the companion device 300, the one or more electrical connectors 114 of the aerosol generating device 100 may couple with the one or more electrical connectors 313 of the companion device 300 to charge the at least one energy storage unit 122 of the aerosol generating device 100.

[0087] To generate aerosol during use or consumption of the aerosol-generating article, the aerosol-generating device 100 includes at least one heating element 120 or heat source 120 for heating at least a portion of the aerosol-generating article.

[0088] To power the at least one heating element 120, the aerosol generating device 100 further comprises at least one energy storage unit 122 or energy source 122 for storing electrical energy or power.

[0089] The aerosol generation device 100 has a locked state in which the aerosol generation device 100 is prohibited from delivering an aerosol, and an unlocked state in which the aerosol generation device 100 is permitted to deliver an aerosol.

[0090] In use, the control circuit 102 is configured to receive user-input authentication information from the user interface component, perform offline authentication of the aerosol generating device based on the user-input authentication information, and based on the successful result of the offline authentication, decide to transition the aerosol generating device from a locked state to an unlocked state.

[0091] The control circuitry 102 is configured to control the user interface components to guide the user to input authentication information as part of a guided interactive input process, also referred to herein as the offline YAP process. In particular, the control circuitry 102 is configured to control the user interface components to output user-perceptible guidance signals in response to control signals from the control circuitry 102 to guide the user during the offline YAP process. The user-perceptible guidance signals prompt the user to take a predetermined action and provide the user with feedback regarding the progress of the offline YAP process. More specifically, the user is guided by the control circuitry 102 during the offline YAP process to unlock the device 100 by manually inputting authentication information in the form of a pin code into the device 100 by successively pressing each digit into the device 100 using the push button 104.

[0092] One non-limiting example of an offline YAP process will now be described.

[0093] To enter the offline YAP process, the user presses the push button 104 five times in a three second period. The device 100 responds with a one second haptic pulse, and the first LED (herein referred to as LED1) of the array 112 begins to flash, indicating to the user that the first digit of the pin code needs to be entered into the device 100. The first LED (LED1) thus corresponds to the first digit of the pin code. In this manner, the control circuit 102 controls the LED array 112 to indicate the digit of the pin code for which the user is being guided to provide an input. Furthermore, the flashing of LED1 indicates to the user that a first time window is running during which the first digit needs to be entered. The start of the flashing indicates the start of the time window. The control circuit 102 interprets a plurality of signals resulting from repeated user actuation of the push button 104 during the first time window as a coded input signal defining the first digit of the pin code.

[0094] In one illustrative example, if a user wishes to enter pin code 3521, they must press push button 104 three times while LED1 is flashing during the first time window. The three signals resulting from repeatedly pressing push button 104 during the first time window define a coded input signal that is interpreted by control circuitry 102 as the digit "3." This digit received during the first time window is assigned by control circuitry 102 to correspond to the first digit of the pin code.

[0095] A double timeout is implemented to leave enough time for the user to begin pressing the push button 104. The first timeout is configured for 15 seconds to leave enough time for the user to understand the process. If the push button 104 is not pressed within these first 15 seconds, the control circuitry determines not to transition the device 100 to the unlocked state. In one example, the device 100 turns off in response to the triggering of the first timeout. If the push button 104 is pressed once (before the first timeout expires), a second timeout begins and the user has an additional 7 seconds to complete the first digit before the first time window ends. The end of the first time window defines the point at which the control circuitry 102 no longer attributes the received user input to the first digit.

[0096] At the end of the first time window, LED1 turns off and LED2 begins to flash, indicating that the user is being guided to enter a second digit during a second time window having a predetermined duration of 7 seconds. While LED2 is flashing during the second time window, the user must press push button 104 five times (for example pin code 3521) to generate a coded input signal that defines the second digit of the pin code.

[0097] Once the second time window is over, LED2 turns off and LED3 begins flashing, prompting the user to enter the third digit. To continue with the example pin code 3521, the user must press push button 104 twice while LED3 is flashing for the third time window of 7 seconds.

[0098] Once the third time window is over, LED3 will turn off and LED4 will begin to flash, prompting the user to enter the fourth digit. Continuing with the above example, while LED4 is flashing, the user only needs to press push button 104 once. Once the fourth time window is over, LED4 will turn off and all LEDs will flash simultaneously for three seconds.

[0099] Thus, the control circuitry 102 receives user input during a number of time windows of a predetermined duration, each time window corresponding to a respective digit of the pin code, with a first time window corresponding to the first digit, a second time window corresponding to the second digit, and so on. The control circuitry 102 attributes user input received via the push button 104 during one of the time windows to the digit corresponding to that time window. User input received during the first time window is attributed to the first digit, user input received during the second time window is attributed to the second digit, and so on.

[0100] After the end of the final time window, the control circuit 102 compares the user-entered pin code with a pre-stored reference pin code and, based on the result of the comparison, decides whether to transition the aerosol generating device 100 from the locked state to the unlocked state. If the pin code is entered successfully, the device 100 is transitioned to the unlocked state and the device 100 is ready for use. If the pin is entered incorrectly, the control circuit decides not to transition the aerosol generating device from the locked state to the unlocked state, for example by turning off the device 100. To avoid people trying to brute force the process by trying multiple pin codes, an exponential delay time can be imposed between pin code retries. If the pin is entered incorrectly a certain number of times (e.g., one to five times), the device 100 may be blocked so that the pin code cannot be entered again until a predetermined time (e.g., 10 minutes to 24 hours) has passed. Multiple incorrect pin code entries may require a new pin code to be requested.

[0101] Of course, the use of push buttons, LEDs, and tactile feedback is merely exemplary and other forms of input and output elements are contemplated by this disclosure.

[0102] It will be appreciated that the length and format of the pin code, as well as the encoding of the digits described above, are merely exemplary and other encoding sequences may be used, preferably but not necessarily entered using a single input element or a minimum of input elements, including, for example, a password formed by a sequence of characters entered using different encoding methods, for example, Morse code. The pin code may be of any suitable length and the range of values ​​for each digit may be restricted, for example, to 5 or more (e.g., 1-9).

[0103] Additionally, the timing of the time windows and timeouts may vary from those described above without departing from the scope of the appended claims.

[0104] The aerosol generating device 100 can include a number of alternative or additional features, for example, as described with reference to any of the first through fifth aspects of the present disclosure.

[0105] The above operations are described as being performed under the control of the control circuitry 102 of the aerosol generating device 100. However, it will be appreciated that the above operations may similarly be performed by the companion device 300, and more specifically by its control circuitry 302 (described below), or by the system 500 as a whole, with control being distributed between the control circuitry 102 of the aerosol generating device 100 and the control circuitry 302 of the companion device 300.

[0106] Additionally, the user interface components used to input and output information may include those of the aerosol generating device 100, those of the companion device 300 (described below), or any combination of input and output elements of the aerosol generating device 100 and the companion device 300.

[0107] To further illustrate these possibilities, a companion device 300 will now be described.

[0108] The companion device 300 may be configured to physically couple to the aerosol generating device 100. To at least partially receive the aerosol generating device 100 and / or to physically couple the aerosol generating device 100 with the companion device 300, the companion device 300 includes an opening 301 or receiving opening 301 into which the aerosol generating device 100 can be at least partially inserted, e.g., to store and / or support the aerosol generating device 100. Optionally, the companion device 300 may include a cover for opening and closing the opening 301.

[0109] Alternatively or additionally, the companion device 300 may be configured to receive the aerosol generation device 100 at least in part based on coupling the aerosol generation device 100 to a mechanical attachment or coupling mechanism, such as, for example, a hook mechanism, a latch mechanism, a snap fit, etc., of the companion device 300. Alternatively or additionally, the companion device 300 may be configured to receive the aerosol generation device 100 at least in part based on coupling the aerosol generation device 100 with the companion device 300 by magnetic or electromagnetic coupling.

[0110] For this purpose, the companion device 300 comprises a charging module 312 or charging circuit 312 coupled to an electrical connector 313. The charging module 312 may for example be coupled to a supply grid for supplying electrical energy to the energy storage 122 of the aerosol generating device 100. Alternatively or additionally, the companion device 300 may comprise one or more batteries, accumulators, capacitors, etc.

[0111] Companion device 300 further comprises control circuitry 302 including one or more processors 303. Control circuitry 302 may be configured to control charging module 312 and / or other components or functions of companion device 300. It should also be noted that charging circuitry or module 312 may be combined with or included in control circuitry 302.

[0112] The control circuitry may be configured to implement the offline YAP process as described above, which will not be repeated here for brevity. However, the process of this embodiment is similar to that described above, except that in this embodiment, the offline YAP process is implemented by the control circuitry 302 in the companion device 300, rather than by the control circuitry 102 in the aerosol generating device 100. Thus, the user implements the offline YAP process by interacting with the companion device 300, rather than being required to interact with the aerosol generating device 100. The control circuitry 302 may unlock or lock the aerosol generating device in a variety of different ways according to the YAP process. For example, the control circuitry 302 of the companion device 300 may send a lock or unlock signal to the aerosol generating device depending on whether the offline YAP process was successful or unsuccessful.

[0113] The companion device 300 includes a user interface component that includes a push button 304 and a visual indicator 314, such as, for example, one or more LEDs 314 and / or an LED array 314.

[0114] The companion device 300 further includes a data storage 306 for storing information or data such as the authentication indicator, reference authentication information, and / or other data.

[0115] The control circuitry 302, data storage 306 and user interface components may be embodied in a single unit. In this manner, a user can be authenticated without the authentication information ever leaving the single unit, thereby improving security.

[0116] The companion device 300 further includes a communication unit 308 having one or more communication interfaces 310 for communicatively coupling the aerosol generating device 100 and the companion device 300, for example, via an Internet connection, a wireless LAN connection, a WiFi connection, a Bluetooth connection, a cellular network, a 3G / 4G / 5G connection, an edge connection, an LTE connection, a BUS connection, a wireless connection, a wired connection, a radio connection, a short-range connection, and / or an IoT connection.

[0117] 2 is a block diagram illustrating the companion device 300 in more detail. Specifically, FIG. 2 illustrates generally at least one component 305 of a control circuit 302 that includes at least one processor 303 and is coupled to a push button 304 via a multiplexer 307. Therein, the component 305 may be coupled to or comprise a charging circuit 312 and / or other electrical components of the companion device 300. For example, the example at least one component 305 of the control circuit 302 illustrated in FIG. 2 may refer to a main controller 305 of the companion device 300.

[0118] Further, a port 309, such as a one-wire MT communication port (referred to as an “MTRTX” port), may be used to couple the control circuit 302 to the multiplexer 307. This one-wire communication may be converted to two-wire communication via the multiplexer 307. For example, a signal may be sent from the multiplexer 307 to an input port 315 (such as an RX port) of the push button 304, and a signal may be sent from an output port 317 (such as a TX port) of the push button 304 to the multiplexer 307. Therein, the multiplexer 307 may be controlled by the control circuit 302 via a port 311.

[0119] Further, in the example shown in FIG. 2, at least one communication interface 310 is combined with or integrated into the electrical connector 313 so that an electrical connection for charging the energy storage unit 122 of the aerosol generating device 100 and a communicative connection between the aerosol generating device 100 and the companion device 300 can be established via the electrical connector 114 of the aerosol generating device 100 and the connector 313 of the companion device.

[0120] 3 shows an external computing device 700 that may or may not be used with the aerosol generation system 500. The external computing device 700 includes control circuitry 704 including a user interface 702, one or more processors 705 for processing data, a communication interface 706 for communicatively coupling the external computing device 700 to one or more of the server 1000 or the aerosol generation system 500, and data storage 708 for storing data or information.

[0121] 4 shows a flow chart illustrating a method for authenticating use of the aerosol generating device 100. Unless otherwise stated, the aerosol generating device 100 includes the same features, elements and / or functionality as described elsewhere herein.

[0122] Step 401 includes receiving user input authentication information from one or more user interface components during a number of time windows of a predetermined period, each time window corresponding to a respective digit of a series of numbers forming the authentication information, and attributing the user input received via the user interface components during that time window to the digit corresponding to that time window.

[0123] Step 402 includes performing offline authentication of the aerosol generating device 100 based on the user-entered authentication information.

[0124] Step 403 includes deciding to transition the aerosol generating device 100 from a locked state to an unlocked state based on the successful outcome of the offline authentication.

[0125] The method illustrated in FIG. 4 may include a number of alternative or additional steps, for example as described with reference to any of the first to fifth aspects of the present disclosure.

[0126] FIG. 5 shows a flowchart illustrating a method in which step 501 includes generating authentication information for offline authentication of the aerosol generating device 100, and step 502 includes sending the authentication information to a user for input into the control circuit 102 and / or 302 as user-input authentication information.

[0127] Unless otherwise stated, the aerosol generating device 100 and the control circuitry 102 and / or 302 include the same features, elements and / or functions as described elsewhere herein.

[0128] The method illustrated in FIG. 5 may include a number of alternative or additional steps, for example as described with reference to any of the sixth to eighth aspects of the present disclosure.

[0129] FIG. 6 is a flow chart showing a method of device activation including steps from factory preparation to user activation. Step 601 involves storing a pin code in the encrypted firmware of the aerosol generating device 100 at the factory. The user then acquires the device 100 and activates and uses it using one of the flows starting with steps 602, 607, and 609, respectively. If the user is already registered, the method proceeds to step 602, where a hard age verification is performed if not already done. Step 603 registers the device 100 to the user if not already done. Step 604 involves the user entering or scanning an ID code (codentify) on a website to generate a pin code as described elsewhere herein. Step 605 involves the user entering the pin code into the device 100 using the push button 104 in the manner described above. In step 606, the device 100 is activated for use after successful authentication as described above. If the user is not yet registered, the method instead proceeds from step 601 to step 607, where hard-age verification is performed again on the website, which is valid only for one device and for one session, as the user is a guest user. Step 608 involves the user entering or scanning an identification code on the website to generate a pin code, as was done in step 604. The method then proceeds again to step 605. If the user cannot access the website, the user may call the call center, in which case the method proceeds from step 601 to step 609, where the user is authenticated as a registered user or guest. For guest users, the method proceeds to step 610, where hard-age verification is performed. Step 611 involves the user entering an ID code into a call center tool to generate a pin code before the method proceeds to step 605. For registered users, the method proceeds from step 609 to step 612, where hard-age verification is performed, if not already performed.Step 613 involves registering the device 100 with the user, if this has not already been done. The method then proceeds to step 611.

[0130] In Figure 6, the generation of the pin code corresponds to step 501 in Figure 5, while the user obtains the pin code via a website or call center in a step corresponding to step 502. Hard age verification may also be referred to herein as an age verification process.

[0131] Importantly, entering the pin code in step 605 does not require any connection between the aerosol generating device 100 (or companion device 300) and any external computing device (such as those mentioned above), nor the use of any app for this purpose.

[0132] While the present invention has been illustrated and described in detail in the drawings and the foregoing description, such illustration and description is illustrative or representative and not restrictive, and the present invention is not limited to the disclosed embodiments. Other variations to the disclosed embodiments can be understood and effected by those skilled in the art, from a study of the drawings, the disclosure, and the appended claims, and can be practiced in the practice of the claims.

[0133] In the claims, the word "comprising" does not exclude other elements or steps, and the indefinite article "a" or "an" does not exclude a plurality. The mere fact that certain measures are recited in mutually different dependent claims does not indicate that a combination of these measures cannot be used to advantage. Any reference signs in the claims are not to be construed as limiting their scope.

Claims

1. 1. A control circuit for an aerosol generating device, the aerosol generating device having a locked state in which the aerosol generating device is prohibited from delivering an aerosol, and an unlocked state in which the aerosol generating device is permitted to deliver an aerosol, the control circuit comprising: receiving user input authentication information from one or more user interface components, the control circuitry being configured to receive the user input authentication information during a plurality of time windows of a predetermined duration, each time window corresponding to a respective digit of a series of digits forming the authentication information, and attributing user input received via the user interface components during the time windows to the digit corresponding to the time window; performing offline authentication of the aerosol generating device based on the user-entered authentication information; A control circuit configured to determine, based on a successful outcome of the offline authentication, to transition the aerosol generating device from the locked state to the unlocked state.

2. 2. The control circuit of claim 1, configured to trigger a timeout in response to no user input being received by the one or more user interface components within a predetermined time period beginning from a start of a respective one of the time windows.

3. The control circuit of claim 1 or 2, further configured to initiate an initial one of the time windows in response to a user interacting with the one or more user interface components.

4. The control circuit of claim 3 , further configured to initiate the first one of the time windows in response to receiving a predetermined signal generated by the user interacting with the one or more user interface components.

5. The control circuit of claim 4 , wherein the one or more user interface components comprise a push button, the predetermined signal being generated by the user pressing the push button a predetermined number of times.

6. The control circuit according to any one of claims 1 to 5, wherein there is an auxiliary time window before and / or between the one or more time windows, and the control circuit is configured to determine a result of failure of the offline authentication if no user input authentication is received during the auxiliary time window, to store the received user input authentication, to start the corresponding time window, and / or to continue execution of the corresponding time window if a user input authentication is received during the auxiliary time window.

7. The control circuit of any preceding claim, further configured to control the user interface component to output a user-perceptible guidance signal indicating at least a start of a respective time window.

8. The control circuit of any preceding claim, further configured to control the user interface component to output a user-perceptible guidance signal indicating that the time window is running.

9. The control circuit of any of claims 1 to 8, further configured to control the user interface component to output a user-perceivable guidance signal indicating a digit of a sequence for which the user is being guided to provide an input.

10. 10. The control circuit of claim 9, wherein the aerosol generating device has a number of output elements corresponding to a number of digits in a sequence, and the position of an active output element relative to an inactive output element indicates the position of the digit in the sequence for which an input is required.

11. The control circuit of any preceding claim, further configured to interpret, during the time window, a plurality of signals resulting from repeated user manipulations of the same user interface component as coded input signals defining a digit of a sequence to which the time window corresponds.

12. The control circuit of claim 11 , wherein the user interface component is a power button for the aerosol generating device.

13. The control circuit of any of claims 1 to 12, further configured to respond to a result of a failure of the offline authentication by prohibiting the user from inputting further authentication information until a time delay period has elapsed, or by refraining from performing an offline authentication based on user-entered authentication information until a time delay period has elapsed.

14. The control circuit of claim 13 , configured to increase a length of the time delay period after each successive failed outcome of the offline authentication.

15. An aerosol generating device or an aerosol generating system comprising an aerosol generating device, the aerosol generating device or system comprising a control circuit according to any one of claims 1 to 14.

Images