Control circuit for aerosol generating device

Abstract

To provide control circuitry for an aerosol-generating device.SOLUTION: An aerosol-generating device has a locked state in which the aerosol-generating device is prohibited from delivering aerosol and an unlocked state in which the aerosol-generating device is permitted to deliver aerosol. The control circuitry is configured to receive user-input authentication information from one or more user interface components, to receive the user-input authentication information during multiple time windows of predetermined duration, each time window corresponding to a respective digit of a sequence of digits forming the user-input authentication information, to attribute user input received via the user interface components during the time window to the digit corresponding to the time window, to perform offline authentication of the aerosol-generating device based on the user-input authentication information, and to determine to transition the aerosol-generating device from the locked state to the unlocked state on the basis of a successful result of the offline authentication.SELECTED DRAWING: Figure 1

Description

[Technical Field]

[0001] The present disclosure relates generally to the field of aerosol generating devices and systems. [Background technology]

[0002] An aerosol generating system typically includes an aerosol generating device for generating aerosol and a companion device, which may be referred to as a companion device or primary unit, for storing the aerosol generating device. Typically, the aerosol generating device is designed as a handheld device that can be used by a user to consume the aerosol generated by the aerosol-generating article, for example, in one or more use sessions. Typically, the aerosol-generating article includes an aerosol-forming substrate, such as a tobacco-containing substrate, and / or a cartridge containing a liquid. To generate aerosol during use or consumption, heat can be applied or transferred from a heating element or heat source in the aerosol generating device (or within the aerosol-generating article), for example, to heat at least a portion of the aerosol-forming substrate.

[0003] An exemplary aerosol-generating article for use with an aerosol-generating device may include an aerosol-forming substrate assembled in the form of a stick, often along with other elements or components. Such a stick may be configured in a shape and size to be at least partially inserted into the aerosol-generating device and may include, for example, a heating element for heating the aerosol-generating article and / or the aerosol-forming substrate. Another exemplary aerosol-generating article may include a cartridge containing a liquid that can be evaporated during aerosol consumption by a user. Such a cartridge may also be configured in a shape and size to be at least partially inserted into the aerosol-generating device. Alternatively, the cartridge may be fixedly attached to the aerosol-generating device and refilled by inserting liquid into the cartridge.

[0004] To prevent minors from accessing and using such aerosol-generating devices, it may be desirable to implement a youth access prevention (YAP) activation method. Some YAP methods may require users to register and activate a device by connecting it to a computing device, such as a smartphone or personal computer, running a registration application. The application may be provided as a USB application. Connecting to a computing device may be achieved via Bluetooth Low Energy (BLE).

[0005] Despite the popularity of smartphones, tablets, personal computers, etc., the inventors recognize that the connectivity and application required to perform the YAP method in the manner described above can be technically problematic, and therefore, it would be desirable to provide an improved aerosol generating apparatus or system and / or an improved companion device that can perform authentication such as the YAP method without relying on device connectivity and without the use of any external applications.

[0006] This problem is solved by the subject matter of the independent claims. Optional features are provided by the dependent claims and the following description. Summary of the Invention

[0007] According to a first aspect, there is provided a control circuit for an aerosol generating device. The aerosol generating device has a locked state in which the aerosol generating device is prohibited from delivering an aerosol, and an unlocked state in which the aerosol generating device is permitted to deliver an aerosol. The control circuit is configured to receive user-input authentication information from one or more user interface components. The control circuit is configured to receive the user-input authentication information during a plurality of time windows of a predetermined duration, each time window corresponding to a respective digit of a series of numbers forming the authentication information, and to attribute user input received via the user interface component during that time window to the digit corresponding to that time window. The control circuit is further configured to perform offline authentication of the aerosol generating device based on the user-input authentication information, and to determine to transition the aerosol generating device from the locked state to the unlocked state based on a successful result of the offline authentication.

[0008] By performing authentication offline, authentication such as the YAP method can be performed without relying on any device connectivity and without the use of any external applications. Unauthorized users can be effectively and reliably prohibited from transitioning the aerosol generating device to an unlocked state, thereby effectively and reliably prohibiting unauthorized users from using the aerosol generating device for aerosol consumption.

[0009] As used herein, "offline" refers to authentication that is connectivity-free, connectivity-independent, or connectivity-independent, in the sense that authentication is performed while the aerosol generating device or the aerosol generating system including the aerosol generating device is disconnected or offline during authentication. For example, the control circuitry may be further configured to perform offline authentication of the aerosol generating device without the aerosol generating device (or any part of the system including the aerosol generating device) being connected (or needing to be connected) to an external computing device (e.g., a mobile phone, personal computer, or tablet device) during authentication (and / or for authentication to be completed). Additionally or alternatively, the control circuitry may be further configured to perform offline authentication of the aerosol generating device without transmitting or receiving authentication-related data to or from an external computing device during authentication, where "authentication-related data" includes, for example, data used by or necessary for authentication even when the aerosol generating device is connected to an external computing device. The control circuitry may be further configured to perform offline authentication of the aerosol generating device without being controlled by and / or being controlled by an external computing device during authentication. The control circuitry may further be configured to perform offline authentication of the aerosol generating device, without the aerosol generating device being connected to or forming part of a network that includes one or more external computing devices, such as the Internet. "Offline" may refer to any connectivity of the aerosol generating device that is not being used for authentication-related purposes or tasks, regardless of whether the aerosol generating device is connected / connectable to an external computing device. For example, "offline" may refer to a state in which data is exchanged during authentication by any communication interface of the aerosol generating device, but that connectivity is not input to or output from the control circuitry, or more specifically, its threads or components that are performing authentication-related tasks.In other words, the aerosol generating device may be equipped with a communications interface for managing connections to an external computing device, where "offline" indicates that the communications interface remains idle or performs only tasks unrelated to authentication during authentication. Note that the term "external computing device," when used in connection with the term "offline," does not include either a companion device or the aerosol generating device, where authentication is performed by a device other than those devices.

[0010] The control circuitry may be further configured to guide the user in entering authentication information as part of the guided interactive input process and control a user interface component to output user-perceptible guidance signals, e.g., (i) prompting the user to take a predetermined action, (ii) providing feedback to the user regarding the progress of the guided interactive input process, or both (i) and (ii), in response to control signals from the control circuitry to guide the user through the guided interactive input process, e.g., by controlling the user interface component. Thus, the interactive input process is an example of a guided human-machine interaction process. The user-perceptible guidance signals may include any one or more of visual, audible, and tactile signals. To this end, the user interface component may include one or more output elements, including, for example, any combination of one or more of the following elements: a visual indicator (e.g., a light source such as an LED, incandescent lamp, compact fluorescent lamp, etc.), a tactile output element (e.g., a vibration actuator such as an eccentric rotating mass motor, a linear resonant actuator, a C2 tactor, a piezoelectric actuator, etc.), an audible output element such as a speaker, etc. The user interface component further includes one or more input elements, such as a button (e.g., a push button), a touch screen, a microphone, etc. In one implementation, the user interface component comprises a plurality of LEDs and a push button. In any of these ways, the user interface component facilitates implementation of offline authentication while conserving device area in what may be a small form factor aerosol generating device or companion device.

[0011] The sequence of digits forming the authentication information may include a personal ID number or code, e.g., a pin code. Thus, a separate time window is provided for entering each digit of the sequence or pin code, thereby providing certainty and security regarding which digit is currently being entered. "Attribution" means that the control circuit associates user input received during the time window with the digit corresponding to the time window, or uses user input received during the time window to determine or calculate the value of the digit corresponding to the time window. For enhanced security, the control circuit may be configured to trigger a timeout in response to no user input being received by one or more user interface components within a predetermined time period beginning from the beginning of each of the time windows. As a result, the control circuit may be further configured to determine not to transition the aerosol generating device to the unlocked state in response to the triggering of the timeout. "Timeout" means that a timer begins to run at the start and end of the predetermined period, generating an interrupt or trigger signal, thereby "triggering" the timeout if a predetermined action is not taken to cancel or reset the timer within the predetermined period.

[0012] The control circuitry may be configured to initiate a first one of the time windows in response to a user interacting with one or more user interface components. For example, the control circuitry may be configured to initiate a first one of the time windows in response to receiving a predetermined signal (or signals) generated by a user interacting with one or more user interface components. In one example, one or more user interface components may include a push button, and the predetermined signal may be generated by a user pressing the push button a predetermined number of times. For example, a first time window may be initiated by a user pressing the push button a predetermined number of times (e.g., five times) within a predetermined time period (e.g., 30 seconds).

[0013] There may be preliminary time windows before and / or between one or more time windows (e.g., before and / or between the first time window). If no user input authentication is received during the preliminary time window, the control circuit determines the outcome of offline authentication failure. However, if a user input authentication is received during the preliminary time window, the received user input authentication is stored (attributed to the corresponding digit), and the corresponding time window is initiated and / or execution continues (the corresponding digit is completed).

[0014] To help guide the user through the interactive input process, the control circuitry may be further configured to control the user interface component to output a user-perceptible guidance signal indicating at least the beginning of each time window so that the user knows when input is required. The user-perceptible guidance signal may also indicate that a time window is running by, for example, emitting a continuous or flashing signal, such as a visual signal, to the user. To provide further assurance to the user and enhance interactivity, the control circuitry may be further configured to control the user interface component to output a user-perceptible guidance signal indicating the digit of the sequence to which the user is being guided to provide input. For example, the aerosol generating device and / or companion device may be provided with a number of output elements corresponding to the number of digits in the sequence, where the position of an active output element relative to other inactive output elements indicates the position of the digit in the sequence to which input is required. The control circuitry may be further configured to interpret multiple signals resulting from repeated user operation of the same user interface component as a code input signal that defines the digit of the sequence to which the time window corresponds during the time window, thereby allowing only one user interface component, such as a button, to be used to input digits of any value, thereby conserving device area. Advantageously, this one user interface component may be the power button of the aerosol generating device or companion device, thereby further conserving space. Either of these methods facilitates a guided, interactive input process for entering authentication information, while minimizing the capacity and size requirements of the user interface component.

[0015] To prevent unauthorized users or other attackers from brute-forcing the offline authentication process by attempting to enter credentials multiple times, the control circuitry may be further configured to respond to failed offline authentication outcomes by prohibiting the user from entering further credentials until a time delay period has elapsed or by refraining from performing offline authentication based on the user-entered credentials until a time delay period has elapsed. The control circuitry may be configured to increase the length of the time delay period with each successive failed offline authentication outcome. In one particular example, the time delay period may become exponentially longer with each successive failed outcome, thereby introducing an exponential delay between retries to deter attackers.

[0016] The control circuit may be further configured to compare the user-entered authentication information with pre-stored reference authentication information and determine whether to transition the aerosol generating device from a locked state to an unlocked state based on the results of the comparison.

[0017] Authenticating an aerosol generating device may mean or include identifying a user, determining the user's identity, verifying the user's identity, and / or transitioning the aerosol generating device to an unlocked state to determine whether the user is authorized or verified to deliver and / or generate aerosol. Thus, "successful authentication" of a user may mean that the user has been identified as authorized to transition the aerosol generating device to an unlocked state. "failed authentication" of a user may mean that the user has not been authorized or has not been identified as authorized to transition the aerosol generating device to an unlocked state.

[0018] The locked state of the aerosol generation device may refer to a locked configuration, and the unlocked state may refer to an unlocked configuration of the aerosol generation device.

[0019] In the locked state or configuration, the aerosol generation device is prohibited from delivering and / or generating aerosol, which may mean that the aerosol generation device is locked from aerosol consumption by a user in the locked state and / or that the aerosol generation device is configured in the locked state such that aerosol cannot be delivered and / or generated.

[0020] On the other hand, in an unlocked state or configuration, the aerosol generating device is authorized or permitted to deliver and / or generate aerosol, which may mean that the aerosol generating device is unlocked for aerosol consumption by a user in the unlocked state and / or that the aerosol generating device is configured in the unlocked state such that aerosol can be delivered and / or generated.

[0021] Thus, when the aerosol generation device is in a locked state, the aerosol generation device may not be operable by the user to deliver and / or generate aerosol, and when the aerosol generation device is in an unlocked state, the aerosol generation device may be operable by the user to deliver and / or generate aerosol. In other words, when the aerosol generation device is in a locked state, the user may be prohibited from accessing one or more functions of the aerosol generation device, including aerosol delivery and / or generation, and when the aerosol generation device is in an unlocked state, the user may be permitted to access one or more functions of the aerosol generation device, including aerosol delivery and / or generation.

[0022] Additionally or alternatively, the companion device may be configured to charge the energy storage of the aerosol generating device only upon successful authentication of the user. In this example, a locked state may be considered as the energy storage of the aerosol generating device not containing sufficient charge to generate aerosol, and an unlocked state may be considered as the energy storage containing sufficient charge to generate aerosol. An authentication signal may then be considered as the companion device providing charge to the energy storage of the aerosol generating device.

[0023] In the locked state, the control circuit may be configured to prohibit activation of the heating elements based on, for example, at least one of disabling the at least one heating element, disabling an energy supply source for supplying electrical energy to the at least one heating element, and disabling an input element for activating the at least one heating element by a user.

[0024] The control circuit may be further configured to transition the aerosol generating device to an unlocked state in response to a decision to transition the aerosol generating device from a locked state to an unlocked state based on a successful result of the offline authentication.

[0025] The control circuit may further be configured to transition the aerosol generating device to an unlocked state by one or more of: (i) changing the value of the authentication indicator stored in the data storage; (ii) adding an authentication indicator to the data storage; and (iii) removing the authentication indicator from the data storage.

[0026] Additionally or alternatively, the control circuit may be further configured to transition the aerosol generating device to an unlocked state by enabling one or more functions of the aerosol generating device that were previously disabled when the aerosol generating device was in a locked state.

[0027] Additionally or alternatively, the control circuit may be further configured to transition the aerosol generating device to an unlocked state by sending an unlock signal to a companion device for the aerosol generating device, and in response to receiving the unlock signal, the companion device is configured to enable one or more functions of the one or more aerosol generating devices and companion devices that were previously disabled when the aerosol generating device was in the locked state.

[0028] One or more functions enabled in the unlocked state may be essential for the aerosol generation device to deliver aerosol, and enabling may include enabling one or more of: (i) an electrical energy supply component (e.g., to charge the aerosol generation device); (ii) a volatile liquid supply component; (iii) a heating element; and (iv) an airflow enabling component.

[0029] Additionally or alternatively, the control circuit may be further configured to transition the aerosol generating device to an unlocked state by disabling one or more mechanical locking components that are configured when in an enabled state to prevent delivery and / or generation of aerosol.

[0030] The control circuitry may be further configured to determine not to transition the aerosol generation device from the locked state to the unlocked state based on the result of the offline authentication failure. The control circuitry may be further configured to maintain the aerosol generation device in the locked state in response to determining not to transition the aerosol generation device from the locked state to the unlocked state based on the result of the offline authentication failure.

[0031] As used herein, "transition" may mean causing, configuring, and / or switching the aerosol generating device into a locked or unlocked state, and may mean or include operating and / or configuring the aerosol generating device so that the aerosol generating device is in a locked or unlocked state.

[0032] The aerosol generating device and / or companion device and / or system including the aerosol generating device and companion device may further include data storage, and the control circuitry may be configured to determine an authentication indicator based on the authentication signal, such as described herein, and store the authentication indicator in the data storage. The control circuitry may be configured to derive the authentication indicator from the authentication signal, as described herein.

[0033] The authentication indicator may indicate, represent, and / or describe successful or unsuccessful authentication of the user. Additionally or alternatively, the authentication indicator may indicate, represent, and / or describe whether the user has authorization to transition the aerosol generating device to an unlocked state. Accordingly, the authentication indicator may be usable to transition the aerosol generating device to a locked or unlocked state or to maintain the aerosol generating device in a respective state. In other words, the authentication indicator may facilitate transitioning the aerosol generating device to, entering, switching to, and / or at least temporarily maintaining the aerosol generating device in a locked or unlocked state. In particular, the aerosol generating device may be transitioned to or maintained in the locked state if or when the authentication indicator indicates unsuccessful authentication of the user, and may be transitioned to or maintained in the unlocked state if or when the authentication indicator indicates successful authentication of the user.

[0034] Storing an authentication indicator in the aerosol generation data storage may enable the aerosol generating device to transition to a locked or unlocked state efficiently, reliably, and securely, and may allow the aerosol generating device to remain in a configured locked or unlocked state, at least temporarily, even if, for example, a companion device is not currently available to the user. Protection may also be provided in the event of loss of the aerosol generating device. The authentication indicator may refer to an anonymized data element that indicates whether the user's authentication was successful or unsuccessful.

[0035] For example, the authentication indicator may refer to a data element, such as a binary data element, where a first value may indicate successful authentication of the user with the companion device and a second value different from the first value may indicate unsuccessful authentication of the user with the companion device. Further, the aerosol generating device may be transitioned to or maintained in an unlocked state if or when the authentication indicator takes on a first value, and may be transitioned to or maintained in a locked state if or when the authentication signal takes on a second value.

[0036] Alternatively or additionally, the aerosol generating device may be transitioned to or maintained in one of the locked and unlocked states if or when the authentication indicator is present or stored in the data storage, and may be transitioned to or maintained in the other of the locked and unlocked states if or when the authentication indicator is not present in the data storage. Thus, the control circuitry of the aerosol generating device may be configured to cause the aerosol generating device to be transitioned to or maintained in the locked or unlocked state based on the presence or absence of the authentication indicator in the data storage.

[0037] Additionally, the control circuitry of the aerosol generating device may be configured to remove, delete and / or erase the authentication indicator from the data storage such that the aerosol generating device is transitioned to a locked state. In other words, the aerosol generating device may be transitioned to a locked state in the absence of the authentication indicator in the data storage by removing the authentication indicator from the data storage.

[0038] For example, the control circuitry of the aerosol generating device may be configured to periodically erase and / or delete the data storage for storing the authentication indicator, resulting in the aerosol generating device being periodically transitioned to a locked state. By periodically removing the authentication indicator from the data storage and / or periodically erasing the data storage, the aerosol generating device may be periodically transitioned to a locked state. Thus, users are required to periodically authenticate or re-authenticate themselves, thereby efficiently, reliably, and securely preventing use of the aerosol generating device by unauthorized users.

[0039] Alternatively or additionally, the control circuitry of the aerosol generating device may be configured to modify, alter, adjust, and / or change the value of the authentication indicator, thereby transitioning the aerosol generating device to a locked state. The control circuitry of the aerosol generating device may be configured to modify, alter, adjust, and / or change the value of the authentication indicator to a value associated with a locked state, such as a second value of the authentication indicator. By periodically modifying the value of the authentication indicator, the aerosol generating device may be periodically transitioned to a locked state. Thus, a user may be required to periodically authenticate or re-authenticate themselves, thereby efficiently, reliably, and securely preventing use of the aerosol generating device by unauthorized users.

[0040] The aerosol generating device may include at least one heating element configured to heat an aerosol-generating article to produce an aerosol, and the control circuitry of the aerosol generating device may be configured to prohibit activation of the at least one heating element by a user when the aerosol generating device is in a locked state. Further, the control circuitry of the aerosol generating device may be configured to allow activation of the at least one heating element by a user when the aerosol generating device is in an unlocked state. By allowing activation of the heating element in the unlocked state and prohibiting activation of the heating element in the locked state, it may be ensured that a user can only use the aerosol generating device for aerosol consumption upon successful authentication.

[0041] As an example, the control circuit of the aerosol generating device may be configured to prohibit activation of the heating element based on at least one of disabling at least one heating element, disabling an energy supply source for supplying electrical energy to at least one heating element, and disabling an operating element of the aerosol generating device for activating at least one heating element by a user.

[0042] Alternatively or additionally, the flow path of the aerosol through the aerosol generating device may be blocked in the locked state, and the flow path may be opened or unblocked in the unlocked state, for example, by enabling one or more airflow enabling components. Alternatively or additionally, insertion of an aerosol-generating article into the aerosol generating device may be prohibited in the locked state, and insertion of an aerosol-generating article may be permitted in the unlocked state. However, any other means of permitting aerosol generation in the unlocked state and prohibiting aerosol generation in the locked state may be implemented.

[0043] The aerosol generating device may be transitioned to or maintained in one of the locked and unlocked states when or if an authentication signal is generated or transmitted by the control circuitry, and may be transitioned to or maintained in the other of the locked and unlocked states when or if an authentication signal is not generated or transmitted by the control circuitry. To this end, the control circuitry may generate and / or transmit an authentication signal that can be used to transition the aerosol generating device to the locked or unlocked state. In other words, the authentication signal may refer to a data signal or data element that transitions the aerosol generating device to the locked or unlocked state, causes the aerosol generating device to enter the locked or unlocked state, and / or enables the aerosol generating device to switch between the locked and unlocked states. The authentication signal may refer to a binary signal, where a first value may indicate successful user authentication and a second value different from the first value may indicate unsuccessful user authentication. Furthermore, the aerosol generating device may be transitioned to or maintained in the unlocked state when the authentication signal assumes a first value, and may be transitioned to or maintained in the locked state when the authentication signal assumes a second value. Thus, an authentication signal may refer to an anonymized data signal or data element that indicates whether a user has been successfully or unsuccessfully authenticated.

[0044] Furthermore, the authentication signal may be an encrypted signal. For example, a secret or passcode may be shared, for example, between the aerosol generating device and the companion device, to encrypt the authentication signal. The secret or passcode may be coded or included in the authentication signal. Alternatively, the secret or passcode may be transmitted separately from the authentication signal. However, any other encryption approach may be applied to encrypt the authentication signal. Generally, encrypting the authentication signal can reliably prevent attacks by unauthorized users who configure the aerosol generating device in an unlocked state, such as a reply attack. Furthermore, the authentication indicator may be stored in a protected storage area of ​​the companion device and / or the aerosol generating device's data storage.

[0045] An aerosol-generating device may be configured or designed, for example, as a handheld device that can be used by a user or authorized user to consume the aerosol-generating article during one or more use sessions (also referred to as experience or experience sessions). For example, an aerosol-generating article that can be used with an aerosol-generating device may include an aerosol-forming substrate, such as a tobacco-containing substrate, in the form of a stick that can be at least partially inserted into the aerosol-generating device, optionally assembled with other elements or components. Alternatively or additionally, an aerosol-generating article that can be used with an aerosol-generating device may include at least one cartridge containing a liquid that can be evaporated during aerosol consumption by a user. Such a cartridge may be a refillable cartridge that is fixedly attached to the aerosol-generating device, or the cartridge may be at least partially inserted into the aerosol-generating device.

[0046] The control circuitry may further control one or more functions of the aerosol generating device. The control circuitry may include one or more processors for data processing. Alternatively or additionally, the aerosol generating device may include data storage and / or memory for storing data, such as software instructions, computer programs, and / or other data.

[0047] A companion device, also referred to as a receiving device, may generally refer to a support device for supporting and / or storing an aerosol generating device. A companion device may be a portable companion device. In the context of the present disclosure, a companion device may be configured to at least partially receive an aerosol generating device. This should be interpreted broadly. For example, this may mean that the companion device is configured to be physically coupled to the aerosol generating device. Such physical coupling may include, for example, a mechanical coupling based on an attachment means such as a hook mechanism, a latch mechanism, a snap-fit ​​mechanism, or the like, by which the aerosol generating device may be mechanically coupled to the companion device and / or its housing. Alternatively or additionally, the aerosol generating device may be physically coupled to the companion device based on magnetic or electromagnetic coupling. Alternatively or additionally, the aerosol generating device may be at least partially inserted into the companion device, for example, into an opening in the companion device. Furthermore, the aerosol generating device and the companion device may refer to physically separate components or elements of an aerosol generating system.

[0048] In the context of the present disclosure, an external computing device may refer to a computing device configured to communicate with the aerosol generating device and / or companion device, for example, based on the exchange of data or information. Generally, an external computing device may be a handheld or portable device. Alternatively, an external computing device may be a standalone or fixedly attached device. Furthermore, an external computing device may be owned by or installed by a user or another entity or individual, such as a retail store. By way of example, an external computing device may refer to a handheld smartphone, personal computer ("PC"), tablet PC, laptop, or computer.

[0049] The external computing device may include a user interface. The external computing device may include one or more processors for data processing, such as processing one or more user inputs received via the user interface. Alternatively or additionally, the external computing device may include data storage and / or memory for storing data, such as software instructions, computer programs, and / or other data. Furthermore, the external computing device may include a communication interface, a communication module, and / or communication circuitry for communicatively coupling the external computing device with the aerosol generating device, for example, via a communication interface of the companion device. Thus, the external computing device may be configured for wireless and / or wired communication with the aerosol generating device, the companion device, or both. For example, the external computing device may be configured to be communicatively coupled with the aerosol generating device and / or the companion device via an Internet connection, a wireless LAN connection, a WiFi connection, a Bluetooth connection, a cellular network, a 3G / 4G / 5G connection, an edge connection, an LTE connection, a BUS connection, a wireless connection, a wired connection, a radio connection, a short-range connection, an IoT connection, or any other connection using any suitable communication protocol.

[0050] To communicate with each other, exchange data or signals with external computing devices, and / or devices, the aerosol generating device and the companion device may each include at least one communication interface. The communication interface may be configured for wireless communication, wired communication, or both. For example, the communication interface may be configured to communicatively couple via an Internet connection, a wireless LAN connection, a WiFi connection, a Bluetooth connection, including BLE, a cellular network, a 3G / 4G / 5G connection, an edge connection, an LTE connection, a BUS connection, a wireless connection, a wired connection, a radio connection, a short-range connection, an IoT connection, or any other connection using any suitable communication protocol.

[0051] The aerosol generating device and / or companion device may include at least one energy storage unit for storing electrical energy and / or supplying electrical energy to the aerosol generating device. For example, the companion device may be configured to supply electrical energy to the aerosol generating device and charge the at least one energy storage unit of the aerosol generating device. In other words, the companion device may be configured to charge the aerosol generating device and / or its at least one energy storage unit. The at least one energy storage unit of the aerosol generating device may include, for example, at least one battery, at least one accumulator, at least one capacitor, or any other energy storage unit. The companion device may be configured to supply electrical energy to the energy storage unit of the aerosol generating device when the aerosol generating device is at least partially received by the companion device. The companion device may include one or more batteries for supplying electrical energy to the energy storage unit of the aerosol generating device. The companion device may be configured to wirelessly supply electrical energy to the energy storage unit of the aerosol generating device, for example, based on induction. Alternatively or additionally, the companion device may be configured to supply electrical energy to an energy storage unit of the aerosol generating device via one or more electrical connectors between the companion device and the aerosol generating device. For example, the aerosol generating device and the companion device may each include at least one electrical connector for electrically coupling the companion device with the aerosol generating device when the aerosol generating device is at least partially received by the companion device. As an example, the companion device may include an opening for at least partially receiving the aerosol generating device. By at least partially inserting the aerosol generating device into the opening, one or more electrical connectors may be established between the one or more electrical connectors of the aerosol generating device and the companion device.Alternatively or additionally, the aerosol generating device may be physically and / or mechanically coupled to the companion device, e.g., via the housing of the companion device, such that the aerosol generating device is at least partially received by the companion device and one or more electrical connections can be established between the aerosol generating device and the companion device. Optionally, a communicative coupling and / or connection between the companion device and the aerosol generating device may be established, e.g., for transmitting authentication signals, by establishing an electrical connection between the companion device and the aerosol generating device, e.g., via one or more electrical connectors of the aerosol generating device and the companion device. As an example, at least one electrical connector of the companion device may be combined with and / or include a communication interface of the companion device. In other words, at least one electrical connector of the companion device may be configured as a communication interface for communicatively coupling the companion device with the aerosol generating device. Alternatively or additionally, at least one electrical connector of the aerosol generating device may be combined with and / or include a communication interface of the aerosol generating device. In other words, at least one electrical connector of the aerosol generating device may be configured as a communication interface for communicatively coupling the aerosol generating device with the companion device. Thus, an authentication signal may be transmitted from the companion device to the aerosol generating device via one or more electrical connectors of the companion device and the aerosol generating device. However, it should be noted that the communication interface of one or both of the companion device and the aerosol generating device may be physically separate and independent from the at least one electrical connector of the companion device and / or the aerosol generating device. A charging cycle may refer to a period during which the aerosol generating device is continuously supplied with electrical energy by the companion device. During a charging cycle, the at least one energy storage unit may be partially or fully charged.

[0052] To authenticate a user, reference authentication information may be stored in the data storage and / or memory of the aerosol generating device and / or companion device. For example, the reference authentication information may be obtained during and stored upon completion of an age verification or registration process, as discussed further below.

[0053] According to a second aspect, there is provided an aerosol generating device including the control circuit of the first aspect.

[0054] According to a third aspect, there is provided a companion device for an aerosol generating device, the companion device comprising the control circuit of the first aspect.

[0055] According to a fourth aspect, there is provided a system comprising an aerosol generating device, a companion device for the aerosol generating device, and the control circuitry of the first aspect. The control circuitry may be distributed among multiple components of the system, including, for example, the aerosol generating device and / or the companion device.

[0056] According to a fifth aspect, there is provided a method for authenticating use of an aerosol generating device, the aerosol generating device having a locked state in which the aerosol generating device is prohibited from delivering an aerosol, and an unlocked state in which the aerosol generating device is permitted to deliver an aerosol, the method comprising: receiving user-input authentication information from one or more user interface components during a plurality of time windows of a predetermined period, each time window corresponding to a respective digit of a series of numbers forming the authentication information, attributing user input received via the user interface components during that time window to the digit corresponding to that time window, performing offline authentication of the aerosol generating device based on the user-input authentication information, and determining to transition the aerosol generating device from the locked state to the unlocked state based on a successful outcome of the offline authentication.

[0057] The method may further include controlling a user interface component to guide the user to enter authentication information as part of the guided interactive input process. The method may further include controlling the user interface component to output a user-perceptible guidance signal in response to a control signal from the control circuitry to guide the user during the guided interactive input process. The method may further include controlling the user interface component to output the user-perceptible guidance signal to (i) prompt the user to take a predetermined action, (ii) provide the user with feedback regarding the progress of the guided interactive input process, or both (i) and (ii). The method may further include controlling the user interface component to output the user-perceptible guidance signal, including any one or more of a visual signal, an audible signal, and a tactile signal.

[0058] The method may further include triggering a timeout within a predetermined period starting from the beginning of a respective one of the time windows in response to no user input being received by one or more user interface components. The method may further include determining not to transition the aerosol generating device to an unlocked state in response to the triggering of the timeout. The method may further include controlling the user interface component to output a user-perceptible guidance signal indicating at least the beginning of each time window. The method may further include controlling the user interface component to output a user-perceptible guidance signal indicating a digit of a sequence to which the user is guided to provide input. The method may further include interpreting multiple signals resulting from repeated user operation of the same aforementioned user interface component as coded input signals during the time window that define a digit of the sequence to which the time window corresponds. The method may further include responding to a result of a failed offline authentication by prohibiting the user from entering further authentication information until a time delay period has elapsed or by refraining from performing offline authentication based on the user-input authentication information until a time delay period has elapsed. The method may further include increasing (eg, exponentially increasing) the length of the time delay period after each successive failed outcome of the offline authentication.

[0059] The method may further include comparing the user-entered authentication information with pre-stored reference authentication information and determining whether to transition the aerosol generating device from a locked state to an unlocked state based on the results of the comparison.

[0060] The method may further include transitioning the aerosol generating device to an unlocked state in response to determining to transition the aerosol generating device from a locked state to an unlocked state based on a successful offline authentication. The method may further include transitioning the aerosol generating device to the unlocked state by one or more of: (i) changing the value of an authentication indicator stored in data storage; (ii) adding an authentication indicator to data storage; or (iii) deleting an authentication indicator from data storage. The method may further include transitioning the aerosol generating device to the unlocked state by enabling one or more functions of the aerosol generating device that were previously disabled when the aerosol generating device was in the locked state. The method may further include transitioning the aerosol generating device to the unlocked state by transmitting an unlock signal to a companion device for the aerosol generating device, wherein the companion device, in response to receiving the unlock signal, enables one or more functions of the aerosol generating device and the companion device that were previously disabled when the aerosol generating device was in the locked state. The one or more functions enabled in the unlocked state may be essential for aerosol delivery by the aerosol generating device, and enabling may include enabling one or more of: (i) an electrical energy supply component; (ii) a volatile liquid supply component; (iii) a heating element; or (iv) an airflow enabling component. The method may further include transitioning the aerosol generating device to the unlocked state by disabling one or more mechanical locking components. The method may further include determining not to transition the aerosol generating device from the locked state to the unlocked state based on the result of failed offline authentication. The method may further include maintaining the aerosol generating device in the locked state in response to determining not to transition the aerosol generating device from the locked state to the unlocked state based on the result of failed offline authentication.

[0061] The method may further include performing offline authentication of the aerosol generating device without being connected to an external computing device during authentication. The method may further include performing offline authentication of the aerosol generating device without transmitting authentication-related data to or receiving authentication-related data from the external computing device during authentication.

[0062] The method of the fifth aspect may be performed, for example, by control circuitry of an aerosol generating device, by control circuitry of a companion device for an aerosol generating device, or by control circuitry of a system including an aerosol generating device and a companion device for an aerosol generating device.

[0063] According to a sixth aspect, there is provided a method for generating authentication information for offline authentication of an aerosol generating device and transmitting the authentication information to a user for input to the control circuit of the first aspect as user-input authentication information. Generating the authentication information may include receiving an ID code from the user and generating the authentication information based on the received ID code. The method may further include performing an age verification process to verify the age of the user before generating the authentication information, and generating the authentication information only in response to a successful result of the age verification process.

[0064] The age verification process may be operable to determine whether a user of an aerosol generating device has reached a minimum age indicated by an age threshold. As used herein, an "age threshold" may refer to a predetermined minimum age for a user of an aerosol generating device. In certain jurisdictions, for example, aerosol consumption may be permitted for citizens or individuals who have reached and / or are at or above a certain minimum age. Furthermore, in at least some jurisdictions, individuals who have reached this minimum age may be considered of legal age and / or adulthood. Thus, the term "age threshold" may indicate, represent, and / or describe the minimum age required for a user to use an aerosol generating device for aerosol consumption. Alternatively or additionally, the term "age threshold" may indicate, represent, and / or describe the age of adulthood at which a user may be considered an adult. For example, the age threshold may be in the range of 14 to 25 years old, such as 16, 18, or 21 years old. The age verification process may therefore be operable to determine whether a user of an aerosol generating system has reached legal age, legal age, and / or is an adult. The age verification process may be associated with a registration or set-up procedure prior to or at the time of the user's first use of the aerosol generating device.

[0065] Furthermore, the age verification process may be performed using a user device, for example, a telephone through which the user contacts a call center. An external computing device may implement a comprehensive and secure procedure for determining the user's age based on the user's personal data or information, such as the user's ID card, passport, credit card, driver's license, social security number, etc. Thus, the user's actual age can be reliably and unambiguously determined.

[0066] By determining that a user has reached an age threshold based on an age verification process, misuse or legally abusive use of the aerosol generating device for aerosol consumption by users who have not reached and / or are below the age threshold can be reliably and effectively prohibited, and in particular, use of the aerosol generating device for aerosol consumption by underage users can be reliably and effectively prohibited.

[0067] As used herein, an authorized user (also referred to as a verified user) may refer to or denote a user who has been authenticated to configure an aerosol generating device by another authorized user, such as the owner of the aerosol generating device, an adult, an adult individual, a user of full age, a user who has reached an age threshold, a user who has reached the age of majority, and / or the owner. Additionally, an unauthorized user may refer to or denote a minor user, a user under the age threshold, a child, or any other user who is not authorized to configure the aerosol generating device, particularly a user who is not authorized to transition the aerosol generating device to an unlocked state for aerosol consumption.

[0068] According to a seventh aspect, there is provided a server computer including a processor configured to perform the method of any of the sixth aspect.

[0069] According to an eighth aspect, there is provided a computer program product comprising instructions which, when executed by a server computer, cause the server computer to carry out the method of the sixth aspect.

[0070] According to a variation of the first aspect, there is provided a control circuit for an aerosol generating device. The aerosol generating device has a locked state in which the aerosol generating device is prohibited from delivering an aerosol, and an unlocked state in which the aerosol generating device is permitted to deliver an aerosol. The control circuit is configured to receive user-input authentication information from one or more user interface components, perform authentication of the aerosol generating device based on the user-input authentication information, and, based on a successful result of the authentication, decide to transition the aerosol generating device from the locked state to the unlocked state. The authentication optionally includes or consists of offline authentication as described herein.

[0071] According to another variation of the first aspect, there is provided a control circuit for an aerosol generating device having a locked state in which the aerosol generating device is prohibited from delivering an aerosol and an unlocked state in which the aerosol generating device is permitted to deliver an aerosol, the control circuit being configured to receive user-input authentication information from one or more user interface components, perform offline authentication of the aerosol generating device based on the user-input authentication information, and decide to transition the aerosol generating device from the locked state to the unlocked state based on a successful result of the offline authentication.

[0072] According to a variation of the fifth aspect, there is provided a method for authenticating an aerosol generating device for use, the aerosol generating device having a locked state in which it is prohibited from delivering an aerosol and an unlocked state in which it is permitted to deliver an aerosol, the method comprising receiving user-input authentication information from one or more user interface components, performing offline authentication of the aerosol generating device based on the user-input authentication information, and deciding to transition the aerosol generating device from the locked state to the unlocked state based on a successful result of the offline authentication.

[0073] It is emphasized that any feature, step, function, element, technical effect and / or advantage described herein with reference to one aspect applies to any other aspect of the disclosure as well.

[0074] The following provides a non-exhaustive list of non-limiting examples, any one or more of the features of which may be combined with any one or more features of any other example, embodiment, or aspect described herein.

[0075] Example 1 1. A control circuit for an aerosol generating device, the control circuit having a locked state in which the aerosol generating device is prohibited from delivering an aerosol and an unlocked state in which the aerosol generating device is permitted to deliver an aerosol; receiving user-input authentication information from one or more user interface components, wherein the control circuitry is configured to receive the user-input authentication information during a plurality of time windows of a predetermined duration, each time window corresponding to a respective digit of a series of numbers forming the authentication information, and to attribute user input received via the user interface component during that time window to the digit corresponding to that time window; Perform offline authentication of the aerosol generator based on user-entered authentication information; A control circuit configured to determine, based on the successful result of the offline authentication, to transition the aerosol generating device from a locked state to an unlocked state. Example 2 10. The control circuit of example 1, further configured to control a user interface component to guide a user to input authentication information as part of a guided interactive input process. Example 3 The control circuit of example 2, further configured to control the user interface component to output a user-perceptible guidance signal in response to a control signal from the control circuit to guide the user during a guided interactive input process. Example 4 The control circuit of example 3 is further configured to control the user interface component to output a user-perceptible guidance signal to (i) prompt the user to take a predetermined action, (ii) provide feedback to the user regarding the progress of the guided interactive input process, or both (i) and (ii). Example 5 5. The control circuit of example 3 or 4, further configured to control the user interface component to output a user-perceptible guidance signal, including any one or more of a visual signal, an audible signal, and a tactile signal. Example 6 A control circuit described in any of Examples 1 to 5, configured to trigger a timeout in response to user input received by one or more user interface components not being within a predetermined time period starting from the start of a respective one of the time windows. Example 7 7. The control circuit of example 6, further configured to determine not to transition the aerosol generation device to an unlocked state in response to a timeout being triggered. Example 8 8. The control circuit of any of Examples 1 to 7, further configured to initiate an initial one of the time windows in response to a user interacting with one or more user interface components. Example 9 The control circuit of example 8, further configured to initiate a first one of the time windows in response to receiving a predetermined signal generated by a user interacting with one or more user interface components. Example 10 10. The control circuit of example 9, wherein one or more user interface components include a push button, and a predetermined signal is generated when the user presses the push button a predetermined number of times. Example 11 11. The control circuit of any of Examples 1 to 10, wherein there is an auxiliary time window before and / or between one or more time windows, and the control circuit is configured to determine a result of offline authentication failure if no user input authentication is received during the auxiliary time window, store the received user input authentication, start the corresponding time window, and / or continue execution of the corresponding time window if user input authentication is received during the auxiliary time window. Example 12 The control circuit of any of Examples 1-11, further configured to control a user interface component to output a user-perceptible guidance signal indicating at least the beginning of each time window. Example 13 13. The control circuit of any of Examples 1-12, further configured to control a user interface component to output a user-perceptible guidance signal indicating that the time window is running. Example 14 14. The control circuit of any one of Examples 1 to 13, further configured to control a user interface component to output a user-perceivable guidance signal indicating a digit of the sequence to which the user is being guided to provide input. Example 15 15. The control circuit of Example 14, wherein the aerosol generating device has a number of output elements corresponding to the number of digits in the sequence, and the position of active output elements relative to inactive output elements indicates the position of the digit number in the sequence for which input is required. Example 16 16. The control circuit of claim 1, further configured to interpret a plurality of signals resulting from repeated user manipulations of the same said user interface component during said time window as coded input signals defining a digit of a sequence to which said time window corresponds. Example 17 17. The control circuit of Example 16, wherein the user interface component is a power button for the aerosol generating device. Example 18 18. The control circuit of any of Examples 1-17, further configured to respond to a result of a failed offline authentication by prohibiting the user from inputting further authentication information until a time delay period has elapsed, or by refraining from performing offline authentication based on the user-entered authentication information until a time delay period has elapsed. Example 19 19. The control circuit of example 18, configured to increase the length of the time delay period after each successive failed outcome of offline authentication. Example 20 A control circuit described in any of Examples 1 to 19, further configured to compare user-entered authentication information with pre-stored reference authentication information and, based on the results of the comparison, determine whether to transition the aerosol generating device from a locked state to an unlocked state. Example 21 A control circuit described in any of Examples 1 to 20, further configured to transition the aerosol generating device to an unlocked state in response to a decision to transition the aerosol generating device from a locked state to an unlocked state based on the successful result of offline authentication. Example 22 The control circuit described in Example 21 is further configured to transition the aerosol generating device to an unlocked state by one or more of: (i) changing the value of the authentication indicator stored in the data storage; (ii) adding an authentication indicator to the data storage; and (iii) deleting the authentication indicator from the data storage. Example 23 A control circuit as described in Example 21 or 22, further configured to transition the aerosol generating device to an unlocked state by enabling one or more functions of the aerosol generating device that were previously disabled when the aerosol generating device was in a locked state. Example 24 A control circuit described in any of Examples 21 to 23, further configured to transition the aerosol generating device to an unlocked state by sending an unlock signal to a companion device for the aerosol generating device, and configured the companion device to enable one or more functions of one or more aerosol generating devices and companion devices that were previously disabled when the aerosol generating device was in a locked state in response to receiving the unlock signal. Example 25 A control circuit as described in Example 23 or 24, wherein one or more functions enabled in the unlocked state are essential for the aerosol to be delivered by the aerosol generating device, and the enabling includes enabling one or more of: (i) an electrical energy supply component; (ii) a volatile liquid supply component; (iii) a heating element; and (iv) an airflow enabling component. Example 26 A control circuit described in any of Examples 21 to 25, wherein the control circuit is further configured to transition the aerosol generating device to an unlocked state by disabling one or more mechanical locking components. Example 27 A control circuit described in any of Examples 1 to 26, further configured to determine not to transition the aerosol generating device from a locked state to an unlocked state based on the result of a failed offline authentication. Example 28 A control circuit described in any of Examples 1 to 27, further configured to maintain the aerosol generating device in a locked state in response to deciding not to transition the aerosol generating device from a locked state to an unlocked state based on the result of failed offline authentication. Example 29 A control circuit described in any of Examples 1 to 28, further configured to perform offline authentication of the aerosol generating device without being connected to an external computing device during authentication. Example 30 A control circuit described in any of Examples 1 to 29, further configured to perform offline authentication of the aerosol generating device without transmitting authentication-related data to an external computing device during authentication or receiving authentication-related data from an external computing device. Example 31 An aerosol generating device comprising the control circuit according to any one of Examples 1 to 30. Example 32 A companion device for an aerosol generating device, comprising the control circuit described in any one of Examples 1 to 30. Example 33 A system comprising an aerosol generating device, a companion device for the aerosol generating device, and a control circuit according to any one of Examples 1 to 30. Example 34 1. A method of authenticating an aerosol generating device for use, the aerosol generating device having a locked state in which the aerosol generating device is prohibited from delivering an aerosol, and an unlocked state in which the aerosol generating device is permitted to deliver an aerosol, the method comprising: receiving user-input authentication information from one or more user interface components during a plurality of time windows of a predetermined period, each time window corresponding to a respective digit of a series of digits forming the authentication information, and attributing user input received via the user interface components during that time window to the digit corresponding to that time window; performing offline authentication of the aerosol generating device based on user-entered authentication information; and determining to transition the aerosol generating device from a locked state to an unlocked state based on a successful outcome of the offline authentication. Example 35 35. The method of example 34, further comprising controlling a user interface component to guide the user to enter authentication information as part of a guided interactive input process. Example 36 36. The method of example 35, further comprising controlling a user interface component to output a user-perceptible guidance signal in response to a control signal from the control circuitry to guide the user during the guided interactive input process. Example 37 The method described in Example 36, further comprising controlling a user interface component to output a user-perceptible guidance signal to (i) prompt the user to take a predetermined action, (ii) provide the user with feedback regarding the progress of the guided interactive input process, or both (i) and (ii). Example 38 38. The method of example 36 or 37, further comprising controlling a user interface component to output a user-perceptible guidance signal comprising any one or more of a visual signal, an audible signal, and a tactile signal. Example 39 A method as described in any of Examples 34 to 38, further comprising triggering a timeout in response to user input not being received by one or more user interface components within a predetermined time period starting from the start of each of the time windows. Example 40 40. The method of example 39, further comprising determining not to transition the aerosol generating device to an unlocked state in response to triggering a timeout. Example 41 The method of any of Examples 34 to 740, further comprising initiating an initial one of the time windows in response to a user interacting with one or more user interface components. Example 42 42. The method of example 41, further comprising initiating a first one of the time windows in response to receiving a predetermined signal generated by a user interacting with one or more user interface components. Example 43 The method described in Example 42, wherein one or more user interface components comprise a push button, and a predetermined signal is generated when the user presses the push button a predetermined number of times. Example 44 44. The method of any of Examples 34 to 43, wherein there is an auxiliary time window before and / or between one or more time windows, and the method further includes determining a result of failure of offline authentication if no user input authentication is received during the auxiliary time window, or storing the received user input authentication and starting the corresponding time window and / or continuing to execute the corresponding time window if user input authentication is received during the auxiliary time window. Example 45 45. The method of any of Examples 34-44, further comprising controlling a user interface component to output a user-perceptible guidance signal indicating at least the beginning of each time window. Example 46 46. ​​The method of any of Examples 34-45, further comprising controlling a user interface component to output a user-perceptible guidance signal indicating that the time window is running. Example 47 47. The method of any of Examples 34-46, further comprising controlling a user interface component to output a user-perceptible guidance signal indicating the digit of the sequence to which the user is being guided to provide input. Example 48 The method described in Example 47, wherein the aerosol generating device is provided with a number of output elements corresponding to the number of digits in the sequence, and the position of an active output element relative to an inactive output element indicates the position of the digit in the sequence for which input is required. Example 49 49. The method of any of Examples 34-48, further comprising interpreting a plurality of signals resulting from repeated user manipulations of the same user interface component during the time window as coded input signals defining a digit of the sequence to which the time window corresponds. Example 50 50. The method of any of Examples 34-49, further comprising responding to a result of a failed offline authentication by prohibiting the user from entering further authentication information until a time delay period has elapsed, or by refraining from performing offline authentication based on the user-entered authentication information until a time delay period has elapsed. Example 51 51. The method of example 50, further comprising increasing the length of the time delay period after each successive failed offline authentication result. Example 52 52. The method of any of Examples 34 to 51, further comprising comparing the user-entered authentication information with pre-stored reference authentication information, and determining whether to transition the aerosol generating device from a locked state to an unlocked state based on the results of the comparison. Example 53 A method described in any of Examples 34 to 52, further comprising transitioning the aerosol generating device to an unlocked state in response to a decision to transition the aerosol generating device from a locked state to an unlocked state based on the successful result of offline authentication. Example 54 The method of Example 53, further comprising transitioning the aerosol generating device to an unlocked state by one or more of: (i) changing the value of the authentication indicator stored in the data storage; (ii) adding an authentication indicator to the data storage; and (iii) removing the authentication indicator from the data storage. Example 55 The method described in Example 53 or 54, further comprising transitioning the aerosol generating device to an unlocked state by enabling one or more functions of the aerosol generating device that were previously disabled when the aerosol generating device was in a locked state. Example 56 A method described in any of Examples 42 to 55, further comprising transitioning the aerosol generating device to an unlocked state by sending an unlock signal to a companion device for the aerosol generating device, wherein the companion device, in response to receiving the unlock signal, enables one or more functions of the aerosol generating device and the companion device that were previously disabled when the aerosol generating device was in the locked state. Example 57 The method described in Example 55 or 56, wherein the one or more functions enabled in the unlocked state are essential for delivery of an aerosol by the aerosol generating device, and the enabling includes enabling one or more of: (i) an electrical energy supply component; (ii) a volatile liquid supply component; (iii) a heating element; and (iv) an airflow enabling component. Example 58 58. The method of any of Examples 53-57, further comprising transitioning the aerosol generating device to an unlocked state by disabling one or more mechanical locking components. Example 59 The method of any of Examples 34 to 58, further comprising determining not to transition the aerosol generating device from a locked state to an unlocked state based on the result of a failed offline authentication. Example 60 A method described in any of Examples 34 to 59, further comprising maintaining the aerosol generating device in a locked state in response to deciding not to transition the aerosol generating device from a locked state to an unlocked state based on the result of failed offline authentication. Example 61 The method of any of Examples 34 to 60, further comprising performing offline authentication of the aerosol generating device without connecting to an external computing device during authentication. Example 62 A method described in any of Examples 34 to 61, further comprising performing offline authentication of the aerosol generating device without transmitting authentication-related data to an external computing device during authentication or receiving authentication-related data from an external computing device. Example 63 The method of any of Examples 34 to 62, wherein the method is performed by a control circuit of an aerosol generating device. Example 64 63. The method of any of Examples 34 to 62, implemented by a control circuit of a companion device for an aerosol generating device. Example 65 63. The method of any of Examples 34 to 62, implemented by a control circuit of a system comprising an aerosol generating device and a companion device for the aerosol generating device. Example 66 A method comprising: generating authentication information for offline authentication of an aerosol generating device; and transmitting the authentication information to a user as user-input authentication information for input into a control circuit described in any of Examples 1 to 30. Example 67 67. The method of example 66, wherein generating the authentication information includes receiving an ID code from the user and generating the authentication information based on the received ID code. Example 68 The method described in example 66 or 67, further comprising: performing an age verification process to verify the user's age before generating the authentication information; and generating the authentication information only in response to a successful result of the age verification process. Example 69 A server computer comprising a processor configured to implement the method according to any one of Examples 66 to 68. Example 70 A computer program product comprising instructions that, when executed by a server computer, cause the server computer to perform the method described in any one of Examples 66 to 68. [Brief explanation of the drawings]

[0076] The embodiments will now be further described with reference to the figures.

[0077] [Figure 1] FIG. 1 shows an aerosol generation system. [Figure 2] FIG. 2 shows a block diagram of a portion of the companion device of the aerosol generation system of FIG. [Figure 3] FIG. 3 illustrates an external computing device for use in conjunction with the aerosol generation system of FIG. [Figure 4] FIG. 4 shows a flow chart illustrating a method for authenticating an aerosol generating device for use with the aerosol generating system of FIG. [Figure 5] FIG. 5 shows a flowchart illustrating a method involving generating authentication information and transmitting it to a user. [Figure 6] FIG. 6 is a flow chart illustrating a method for device activation.

[0078] The figures are schematic and not to scale. DETAILED DESCRIPTION OF THE INVENTION

[0079] 1 shows an aerosol generation system 500 for generating an aerosol, for example, for consumption by a user. The system 500 includes an aerosol generation device 100 for generating an aerosol and a companion device 300 for at least partially receiving the aerosol generation device 100. The companion device 300 may be a charging device for charging the aerosol generation device 100.

[0080] The aerosol-generating device 100 includes an insertion opening 101 for at least partially inserting an aerosol-generating article (not shown). The aerosol-generating article includes an aerosol-forming substrate, such as a tobacco-containing substrate, and / or a cartridge containing a liquid.

[0081] The aerosol generating device 100 further includes a control circuit 102 having one or more processors 103. The control circuit 102 may be configured to control the activation, activation, and / or deactivation of at least one heating element 120.

[0082] The aerosol generating device 100 further includes a user interface component including an input element in the form of a push button 104. The push button 104 is operable by a user to input a pin code into the control circuit 102, as described further below. After successful authentication, the push button 104 may also be used as a power button to activate or deactivate the heating element 120 for aerosol generation to activate or deactivate the aerosol generating device 100. Upon activation of the aerosol generating device 100, the heating element 120 may be activated, thereby applying heat to at least a portion of the aerosol-generating article, thereby generating aerosol for consumption by the user. Upon deactivation of the aerosol generating device 100, the heating element 120 may be deactivated, thereby applying no heat, or reduced heat, to at least a portion of the aerosol-generating article, thereby generating no aerosol for consumption by the user.

[0083] The aerosol generating device 100 further includes a communication device 106 having one or more communication interfaces 108 for communicatively linking the aerosol generating device 100 with the companion device 300, for example, via an Internet connection, a wireless LAN connection, a WiFi connection, a Bluetooth connection, a cellular network, a 3G / 4G / 5G connection, an edge connection, an LTE connection, a BUS connection, a wireless connection, a wired connection, a radio connection, a short-range connection, and / or an IoT connection.

[0084] The aerosol generating device 100 further includes a data storage 110 for storing information or data, such as, for example, at least one authentication indicator and / or other data.

[0085] The user interface component further includes an output element in the form of an LED array 112 and a tactile output element (not shown) for providing a tactile pulse. The output element provides a user-perceptible guidance signal to the user. The LED array 112 may further be used to indicate the charge level of the at least one energy storage unit 122, for example, whether the at least one energy storage unit needs to be charged. The LED array 112 may also be used to indicate the configuration or state of the aerosol generation device 100, for example, whether the aerosol generation device is in a locked or unlocked state.

[0086] The aerosol generating device 100 further includes at least one electrical connector 114 for coupling to at least one corresponding electrical connector 313 of the companion device 300. For example, when the aerosol generating device 100 is at least partially inserted into the opening 301 of the companion device 300, the one or more electrical connectors 114 of the aerosol generating device 100 may couple with the one or more electrical connectors 313 of the companion device 300 to charge at least one energy storage unit 122 of the aerosol generating device 100.

[0087] To generate aerosol during use or consumption of the aerosol-generating article, the aerosol-generating device 100 includes at least one heating element 120 or heat source 120 for heating at least a portion of the aerosol-generating article.

[0088] To power the at least one heating element 120, the aerosol generating device 100 further comprises at least one energy storage unit 122 or energy source 122 for storing electrical energy or power.

[0089] The aerosol generation device 100 has a locked state in which the aerosol generation device 100 is prohibited from delivering an aerosol, and an unlocked state in which the aerosol generation device 100 is permitted to deliver an aerosol.

[0090] In use, the control circuit 102 is configured to receive user-input authentication information from the user interface component, perform offline authentication of the aerosol generating device based on the user-input authentication information, and based on the successful result of the offline authentication, decide to transition the aerosol generating device from a locked state to an unlocked state.

[0091] The control circuitry 102 is configured to control the user interface components to guide the user to input authentication information as part of a guided interactive input process, also referred to herein as the offline YAP process. In particular, the control circuitry 102 is configured to control the user interface components to output user-perceptible guidance signals in response to control signals from the control circuitry 102 to guide the user through the offline YAP process. The user-perceptible guidance signals prompt the user to take predetermined actions and provide the user with feedback regarding the progress of the offline YAP process. More specifically, the user is guided by the control circuitry 102 during the offline YAP process to unlock the device 100 by manually entering authentication information in the form of a pin code into the device 100 by sequentially pressing each digit on the device 100 using the pushbutton 104.

[0092] One non-limiting example of an offline YAP process will now be described.

[0093] To enter the offline YAP process, the user presses the push button 104 five times over a three-second period. The device 100 responds with a one-second haptic pulse, causing the first LED (referred to herein as LED1) of the array 112 to begin flashing, indicating to the user that the first digit of the pin code must be entered into the device 100. Thus, the first LED (LED1) corresponds to the first digit of the pin code. In this manner, the control circuit 102 controls the LED array 112 to indicate the digit of the pin code for which the user is being guided to provide input. Furthermore, the flashing of LED1 indicates to the user that a first time window is running, during which the first digit must be entered. The start of the flashing indicates the start of the time window. The control circuit 102 interprets multiple signals resulting from repeated user actuation of the push button 104 during the first time window as coded input signals defining the first digit of the pin code.

[0094] In one illustrative example, if a user wishes to enter pin code 3521, they must press push button 104 three times while LED1 is flashing during the first time window. The three signals resulting from repeatedly pressing push button 104 during the first time window define a coded input signal that is interpreted by control circuit 102 as the digit "3." This digit received during the first time window is assigned by control circuit 102 to correspond to the first digit of the pin code.

[0095] A double timeout is implemented to allow sufficient time for the user to begin pressing the pushbutton 104. The first timeout is configured for 15 seconds to allow sufficient time for the user to understand the process. If the pushbutton 104 is not pressed within these first 15 seconds, the control circuitry determines not to transition the device 100 to the unlocked state. In one example, the device 100 turns off in response to the triggering of the first timeout. If the pushbutton 104 is pressed once (before the first timeout expires), a second timeout begins, and the user has an additional seven seconds to complete the first digit before the end of the first time window. The end of the first time window defines the point at which the control circuitry 102 no longer attributes the received user input to the first digit.

[0096] At the end of the first time window, LED1 turns off and LED2 begins flashing, indicating that the user is being prompted to enter the second digit during a second time window having a predetermined duration of 7 seconds. While LED2 is flashing during the second time window, the user must press push button 104 five times (for example pin code 3521) to generate a coded input signal defining the second digit of the pin code.

[0097] At the end of the second time window, LED2 turns off and LED3 begins flashing, prompting the user to enter the third digit. To continue with exemplary pin code 3521, the user must press push button 104 twice while LED3 is flashing during the third time window of 7 seconds.

[0098] At the end of the third time window, LED3 will turn off and LED4 will begin flashing, prompting the user to enter the fourth digit. Continuing the example above, while LED4 is flashing, the user only needs to press push button 104 once. At the end of the fourth time window, LED4 will turn off and all LEDs will flash simultaneously for three seconds.

[0099] Thus, the control circuit 102 receives user input during multiple time windows of a predetermined duration. Each time window corresponds to a different digit of the pin code, with the first time window corresponding to the first digit, the second time window corresponding to the second digit, and so on. The control circuit 102 attributes user input received via the pushbuttons 104 during one of the time windows to the digit corresponding to that time window. User input received during the first time window is attributed to the first digit, user input received during the second time window is attributed to the second digit, and so on.

[0100] After the final time window expires, the control circuit 102 compares the user-entered pin code with a pre-stored reference pin code and, based on the comparison result, determines whether to transition the aerosol generating device 100 from a locked state to an unlocked state. If the pin code is entered correctly, the device 100 transitions to the unlocked state, and the device 100 becomes usable. If the pin code is entered incorrectly, the control circuit determines not to transition the aerosol generating device from a locked state to an unlocked state, for example, by turning off the device 100. To prevent people from attempting to brute-force the process by attempting multiple pin codes, an exponential delay can be imposed between pin code retries. If the pin is entered incorrectly a certain number of times (e.g., one to five times), the device 100 may be blocked so that the pin code cannot be re-entered until a predetermined time (e.g., 10 minutes to 24 hours) has elapsed. Multiple incorrect pin code entries may require a new pin code to be requested.

[0101] Of course, the use of push buttons, LEDs, and tactile feedback is merely exemplary, and other forms of input and output elements are contemplated by this disclosure.

[0102] It will be appreciated that the length and format of the pin code, as well as the encoding of the digits described above, are merely exemplary and other encoding sequences may be used, preferably but not necessarily entered using a single input element or a minimum of input elements, including, for example, a password formed by a sequence of characters entered using different encoding methods, for example, Morse code. The pin code may be of any suitable length and the range of values ​​for each digit may be limited, for example, to 5 or more (e.g., 1 to 9).

[0103] Additionally, the timing of the time windows and timeouts may vary from those described above without departing from the scope of the appended claims.

[0104] The aerosol generating device 100 can include a number of alternative or additional features, for example, as described with reference to any of the first through fifth aspects of the present disclosure.

[0105] The above operations are described as being performed under the control of the control circuitry 102 of the aerosol generating device 100. However, it will be understood that the above operations may similarly be performed by the companion device 300, more specifically by its control circuitry 302 (described below), or by the system 500 as a whole, with control distributed between the control circuitry 102 of the aerosol generating device 100 and the control circuitry 302 of the companion device 300.

[0106] Additionally, the user interface components used to input and output information may include those of the aerosol generating device 100, those of the companion device 300 (described below), or any combination of input and output elements of the aerosol generating device 100 and the companion device 300.

[0107] To further illustrate these possibilities, a companion device 300 will now be described.

[0108] The companion device 300 may be configured to physically couple to the aerosol generating device 100. To at least partially receive the aerosol generating device 100 and / or to physically couple the aerosol generating device 100 to the companion device 300, the companion device 300 includes an opening 301 or receiving opening 301 into which the aerosol generating device 100 can be at least partially inserted, e.g., to store and / or support the aerosol generating device 100. Optionally, the companion device 300 may include a cover for opening and closing the opening 301.

[0109] Alternatively or additionally, the companion device 300 may be configured to receive the aerosol generation device 100 at least in part based on coupling the aerosol generation device 100 to a mechanical attachment or coupling mechanism, such as a hook mechanism, a latch mechanism, a snap fit, etc., of the companion device 300. Alternatively or additionally, the companion device 300 may be configured to receive the aerosol generation device 100 at least in part based on coupling the aerosol generation device 100 to the companion device 300 by magnetic or electromagnetic coupling.

[0110] For this purpose, the companion device 300 comprises a charging module 312 or charging circuit 312 coupled to an electrical connector 313. The charging module 312 may, for example, be coupled to a supply grid for supplying electrical energy to the energy storage unit 122 of the aerosol generating device 100. Alternatively or additionally, the companion device 300 may comprise one or more batteries, accumulators, capacitors, etc.

[0111] Companion device 300 further comprises control circuitry 302 including one or more processors 303. Control circuitry 302 may be configured to control charging module 312 and / or other components or functions of companion device 300. It should also be noted that charging circuitry or module 312 may be combined with or included in control circuitry 302.

[0112] The control circuitry may be configured to implement the offline YAP process as described above, which will not be repeated here for the sake of brevity. However, although the process in this example is similar to that described above, in this example, the offline YAP process is implemented by the control circuitry 302 in the companion device 300 rather than by the control circuitry 102 in the aerosol generating device 100. Thus, the user implements the offline YAP process by interacting with the companion device 300 rather than being required to interact with the aerosol generating device 100. The control circuitry 302 may unlock or lock the aerosol generating device in a variety of different ways according to the YAP process. For example, the control circuitry 302 of the companion device 300 may send a lock or unlock signal to the aerosol generating device depending on whether the offline YAP process was successful or unsuccessful.

[0113] The companion device 300 includes a user interface component that includes a push button 304 and a visual indicator 314, such as, for example, one or more LEDs 314 and / or an LED array 314.

[0114] The companion device 300 further includes a data storage 306 for storing information or data such as authentication indicators, reference authentication information, and / or other data.

[0115] The control circuitry 302, data storage 306, and user interface components may be embodied in a single unit. In this way, users can be authenticated without their authentication information ever leaving the single unit, thereby improving security.

[0116] The companion device 300 further includes a communication unit 308 having one or more communication interfaces 310 for communicatively linking the aerosol generating device 100 and the companion device 300, for example, via an Internet connection, a wireless LAN connection, a WiFi connection, a Bluetooth connection, a cellular network, a 3G / 4G / 5G connection, an edge connection, an LTE connection, a BUS connection, a wireless connection, a wired connection, a radio connection, a short-range connection, and / or an IoT connection.

[0117] 2 is a block diagram illustrating companion device 300 in more detail. Specifically, FIG. 2 schematically illustrates at least one component 305 of control circuitry 302, including at least one processor 303, coupled to push button 304 via multiplexer 307. Therein, component 305 may be coupled to or comprise charging circuitry 312 and / or other electrical components of companion device 300. For example, the exemplary at least one component 305 of control circuitry 302 illustrated in FIG. 2 may refer to a main controller 305 of companion device 300.

[0118] Furthermore, a port 309, such as a one-wire MT communication port (referred to as an "MTRTX" port), may be used to couple the control circuit 302 to the multiplexer 307. This one-wire communication may be converted to two-wire communication via the multiplexer 307. For example, a signal may be sent from the multiplexer 307 to an input port 315 (e.g., an RX port) of the pushbutton 304, and a signal may be sent from an output port 317 (e.g., a TX port) of the pushbutton 304 to the multiplexer 307. Therein, the multiplexer 307 may be controlled by the control circuit 302 via a port 311.

[0119] Furthermore, in the example shown in Figure 2, at least one communication interface 310 is combined with or integrated into the electrical connector 313 so that an electrical connection for charging the energy storage unit 122 of the aerosol generating device 100 and a communicative connection between the aerosol generating device 100 and the companion device 300 can be established via the electrical connector 114 of the aerosol generating device 100 and the connector 313 of the companion device.

[0120] 3 shows an external computing device 700 that may or may not be used with the aerosol generation system 500. The external computing device 700 includes a control circuit 704 that includes a user interface 702, one or more processors 705 for data processing, a communication interface 706 for communicatively coupling the external computing device 700 to one or more of the server 1000 or the aerosol generation system 500, and data storage 708 for storing data or information.

[0121] 4 shows a flowchart illustrating a method for authenticating use of the aerosol generating device 100. Unless otherwise stated, the aerosol generating device 100 includes the same features, elements and / or functionality as described elsewhere herein.

[0122] Step 401 includes receiving user-input authentication information from one or more user interface components during a plurality of time windows of a predetermined period, each time window corresponding to a respective digit of a series of numbers forming the authentication information, and attributing the user input received via the user interface component during that time window to the digit corresponding to that time window.

[0123] Step 402 includes performing offline authentication of the aerosol generating device 100 based on the user-entered authentication information.

[0124] Step 403 includes deciding to transition the aerosol generating device 100 from a locked state to an unlocked state based on the successful outcome of the offline authentication.

[0125] The method illustrated in FIG. 4 may include numerous alternative or additional steps, for example, as described with reference to any of the first through fifth aspects of the present disclosure.

[0126] FIG. 5 shows a flowchart illustrating a method in which step 501 includes generating authentication information for offline authentication of the aerosol generating device 100, and step 502 includes transmitting the authentication information to a user for input into the control circuit 102 and / or 302 as user-input authentication information.

[0127] Unless otherwise stated, the aerosol generating device 100 and the control circuitry 102 and / or 302 include the same features, elements and / or functions as described elsewhere herein.

[0128] The method illustrated in FIG. 5 may include a number of alternative or additional steps, for example, as described with reference to any of the sixth to eighth aspects of the present disclosure.

[0129] FIG. 6 is a flowchart illustrating a method for device activation, including steps from factory preparation to user activation. Step 601 involves storing a pin code in the encrypted firmware of the aerosol generating device 100 at the factory. The user then acquires the device 100 and activates and uses it using one of the methods beginning with steps 602, 607, and 609, respectively. If the user is already registered, the method proceeds to step 602, where a hard-age verification is performed if not already performed. Step 603 registers the device 100 to the user if not already performed. Step 604 involves the user entering or scanning an ID code (code) on a website to generate a pin code, as described elsewhere herein. Step 605 involves the user entering the pin code into the device 100 using the pushbutton 104 in the manner described above. In step 606, the device 100 is activated for use after successful authentication, as described above. If the user is not yet registered, the method instead proceeds from step 601 to step 607, where hard-age verification is again performed on the website, which is valid only for one device and one session, assuming the user is a guest user. Step 608 involves the user entering or scanning an identification code on the website to generate a pin code, as was done in step 604. The method then proceeds again to step 605. If the user cannot access the website, the user may call the call center, in which case the method proceeds from step 601 to step 609, where the user is authenticated as a registered user or guest. For guest users, the method proceeds to step 610, where hard-age verification is performed. Step 611 involves the user entering an ID code into a call center tool to generate a pin code before the method proceeds to step 605. For registered users, the method proceeds from step 609 to step 612, where hard-age verification is performed, if not already performed.Step 613 involves registering the device 100 with the user, if this has not already been done. The method then proceeds to step 611.

[0130] In Figure 6, the generation of the pin code corresponds to step 501 in Figure 5, while the user obtains the pin code via a website or call center in a step corresponding to step 502. Hard age verification may also be referred to herein as the age verification process.

[0131] Importantly, entering the pin code in step 605 does not require any connection between the aerosol generating device 100 (or companion device 300) and any external computing device (such as those mentioned above) or the use of any app for this purpose.

[0132] While the invention has been illustrated and described in detail in the drawings and foregoing description, such illustration and description is exemplary or representative and not restrictive, and the invention is not limited to the disclosed embodiments. Other variations to the disclosed embodiments can be understood and effected by those skilled in the art, from a study of the drawings, the disclosure, and the appended claims, and can be practiced within the scope of the claims.

[0133] In the claims, the word "comprising" does not exclude other elements or steps, and the indefinite article "a" or "an" does not exclude a plurality. The mere fact that certain measures are recited in mutually different dependent claims does not indicate that a combination of these measures cannot be used to advantage. Any reference signs in the claims should not be construed as limiting their scope.

Claims

1. 1. A control circuit for an aerosol generating device, the aerosol generating device having a locked state in which the aerosol generating device is prohibited from delivering aerosol, and an unlocked state in which the aerosol generating device is permitted to deliver aerosol, the control circuit comprising: receiving user input authentication information from one or more user interface components, the control circuitry configured to receive the user input authentication information during a plurality of time windows of a predetermined duration, each time window corresponding to a respective digit of a series of numbers forming the user input authentication information, and attributing user input received via the user interface components during the time window to the digit corresponding to the time window; performing offline authentication of the aerosol generating device based on the user-entered authentication information; and determining, based on a successful result of the offline authentication, to transition the aerosol generating device from the locked state to the unlocked state; A control circuit further configured to control the user interface component to output a user-perceptible guidance signal indicating at least the beginning of each time window.

2. 2. The control circuit of claim 1, configured to trigger a timeout in response to no user input being received by the one or more user interface components within a predetermined time period beginning from the beginning of a respective one of the time windows.

3. The control circuit of claim 1 or 2, further configured to initiate a first one of the time windows in response to a user interacting with the one or more user interface components.

4. The control circuit of claim 3 , further configured to initiate the first one of the time windows in response to receiving a predetermined signal generated by the user interacting with the one or more user interface components.

5. The control circuit of claim 4 , wherein the one or more user interface components comprise a push button, and the predetermined signal is generated by the user pressing the push button a predetermined number of times.

6. 6. The control circuit of claim 1, wherein there is an auxiliary time window before and / or between the one or more time windows, and the control circuit is configured to determine a result of failure of the offline authentication if no user input authentication is received during the auxiliary time window, store the received user input authentication, start the corresponding time window, and / or continue execution of the corresponding time window if user input authentication is received during the auxiliary time window.

7. The control circuit of any preceding claim, further configured to control the user interface component to output a user-perceptible guidance signal indicating that the time window is running.

8. 8. The control circuit of claim 7, further configured to control the user interface component to output a user-perceptible guidance signal indicating that the time window is running by issuing a continuous or flashing signal to a user.

9. 9. The control circuit of claim 1, further configured to control the user interface component to output a user-perceptible guidance signal indicating a digit of a sequence for which a user is being guided to provide an input.

10. 10. The control circuit of claim 9, wherein the aerosol generating device has a number of output elements corresponding to the number of digits in the sequence, and the position of an active output element relative to an inactive output element indicates the position of the digit in the sequence for which input is required.

11. and further configured to interpret, during the time window, a plurality of signals resulting from repeated user manipulations of the same user interface component as coded input signals defining a sequence of digits to which the time window corresponds; the user interface component is a power button for the aerosol generating device; The control circuit according to any one of claims 1 to 10.

12. 12. The control circuit of claim 1, further configured to respond to a result of a failure of the offline authentication by prohibiting a user from entering further authentication information until a time delay period has elapsed, or by refraining from performing an offline authentication based on user-entered authentication information until a time delay period has elapsed.

13. The control circuit of claim 12 , configured to increase the length of the time delay period after each successive failed outcome of the offline authentication.

14. An aerosol generating device or an aerosol generating system comprising an aerosol generating device, the aerosol generating device or system comprising a control circuit according to any one of claims 1 to 13.

Images