Aerosol-generating devices with gesture based control

Aerosol-generating devices use environmental sensors to generate codes for secure access and encryption, addressing YAP and encryption challenges by enabling secure, device-independent activation and communication.

WO2026068407A1PCT designated stage Publication Date: 2026-04-02PHILIP MORRIS PRODUCTS SA
View PDF 4 Cites 0 Cited by

Patent Information

Authority / Receiving Office
WO · WO
Patent Type
Applications
Current Assignee / Owner
Filing Date
2025-09-22
Publication Date
2026-04-02

AI Technical Summary

Technical Problem

Existing aerosol-generating devices face challenges in youth access prevention (YAP) activation methods that require device connectivity and external applications, posing security risks and technical inefficiencies, and existing encryption methods are computationally heavy or add attack vectors.

Method used

Aerosol-generating devices use sensors to sense environmental changes, generating a code through a sequence of movements, allowing secure, encrypted communication without device pairing, using the generated code as a key for access control and encryption.

Benefits of technology

Enables seamless youth access prevention and secure communication without reliance on external devices, reducing security risks and computational overheads.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure EP2025077031_02042026_PF_FP_ABST
    Figure EP2025077031_02042026_PF_FP_ABST
Patent Text Reader

Abstract

A method for operating an aerosol-generating device, the aerosol-generating device comprising at least one sensor configured to sense a change in environmental conditions of an environment of the aerosol-generating device and to generate signals in response to changes in the environmental conditions, the method comprising: generating a code based on the generated signals by effecting a sequence of changes in environmental conditions so as to generate a sequence of signals and converting the sequence of signals into the code; and either switching the aerosol-generating device from a first state to a second state based on the generated code; or using the generated code to establish encrypted communications with an external device.
Need to check novelty before this filing date? Find Prior Art

Description

[0001] AEROSOL-GENERATING DEVICES WITH CODE ACCESS CONTROL

[0002] The present disclosure relates to the field of aerosol-generating devices and systems.

[0003] Aerosol-generating systems usually comprise an aerosol-generating device for generating an aerosol and optionally a companion device, which may be called a companion device or main unit, for storing the aerosol-generating device. Typically, aerosol-generating devices are designed as handheld devices that can be used by a user for consuming, for instance in one or more usage sessions, aerosol generated by an aerosol-generating article. Usually, aerosol-generating articles comprise an aerosol-forming substrate, such as a tobacco containing substrate, and / or a cartridge comprising a liquid. For generating the aerosol during use or consumption, for example, heat can be applied or transferred from a heating element or heat source in the aerosol-generating device (or in the aerosol-generating article) to heat at least a portion of the aerosol-forming substrate.

[0004] Exemplary aerosol-generating articles for use with aerosol-generating devices can comprise an aerosol-forming substrate that is assembled, often with other elements or components, in the form of a stick. Such a stick can be configured in shape and size to be inserted at least partially into the aerosol-generating device, which, for example, can comprise a heating element for heating the aerosol-generating article and / or the aerosol-forming substrate. Other exemplary aerosol-generating articles can comprise a cartridge containing a liquid that can be vaporized during aerosol consumption by the user. Also, such a cartridge can be configured in shape and size to be inserted at least partially into the aerosol-generating device. Alternatively, the cartridge may be fixedly mounted to the aerosol-generating device and refilled by inserting liquid into the cartridge.

[0005] It is desirable to perform youth access prevention (YAP) activation methods to prevent underage users from accessing and using such aerosol-generating devices. Some YAP methods may require the user to register the device and activate it for use by connecting the device to a computing device such as a smartphone, personal computer or the like on which a registration application is running. The application may be provided as a USB application. The connection to the computing device may be achieved via Bluetooth Low Energy (BLE).

[0006] Despite the ubiquity of smartphones, tablets, personal computers, and the like, the inventors have recognised that the connectivity and the applications required in order for the YAP method to be performed in the above-described manner may be technically problematic and that it may therefore be desirable to provide for an improved aerosol-generating device or system and / or an improved companion device which allow authentication such as YAP methods to be performed without relying on any device connectivity and without the use of any external application. The solution should ensure a seamless user experience such as smooth, initial device activation process to a legal age (LA) consumer. In that context, it would be preferred that a YAP solution may be executed without the aerosol-generating devices pairing with another device.

[0007] Electronic devices often must exchange information using encryption to keep the information transmitted secure. This can be useful to protect customer or technical information. Existing solutions to establish a secure communications channel are typically based on symmetric encryption established using a key or secret either pre-shared or derived using asymmetric encryption techniques.

[0008] Using a pre-shared key can pose security risks and technical challenges. For example: (1) a global key, once compromised, cannot be easily re-secured while remaining compatible with non-updated devices; (2) a local key must be exchanged in a secure environment with the two devices connected by some communications link.

[0009] Another solution is to use asymmetric cryptography and signed certificates to exchange or establish a key or secret. Such a method is computationally heavy, potentially adding unsatisfactory delays to the exchange of info or adding cost to the devices. In both cases the transmission of data to establish the secure connection or the shared secret add an additional attack vector (potentially small, but nevertheless present) to a malicious actor.

[0010] According to first aspect of the present invention, there is provided a method for operating an aerosol-generating device, the aerosol-generating device comprising at least one sensor configured to sense a change in environmental conditions of an environment of the aerosol-generating device and to generate signals in response to changes in the environmental conditions, the method comprising: generating a code based on the generated signals by effecting a sequence of changes in environmental conditions so as to generate a sequence of signals and converting the sequence of signals into the code; and either switching the aerosol-generating device from a first state to a second state based on the generated code; or using the generated code to establish encrypted communications with an external device.

[0011] Different generated signals may be converted to different numerical or alphanumerical characters so as to generate the code. The generated code may comprise a sequence of numerical or alphanumerical characters.

[0012] In some embodiments, the generated code may be used as an encryption key for encrypted communication with another aerosol-generating device. In some embodiments, the generated code may be used as an encryption key for encrypted communication with a communications device operated by a user of the aerosolgenerating device. The communications device may be a mobile handset or a tablet.

[0013] The encrypted communication may be short-range wireless communication and the encryption key may be a pairing key. For example, the short-range wireless communication may be Bluetooth®, Bluetooth LE®, or Near-Field Communication (NFC).

[0014] In this way, it is possible to establish secure, encrypted communication between two aerosol-generating devices, neither of which has a keyboard or other usual I / O device suitable for entering or confirming a pairing key. Instead, a pairing key is generated by effecting a sequence of changes in environmental conditions, for example by moving the aerosolgenerating device with respect to gravity or an electromagnetic field. When two aerosolgenerating devices are subject to the same sequence of changes in environmental conditions (for example, both aerosol-generating devices are held in one hand and moved in synchrony), then each aerosol-generating device will independently generate the same code, and the aerosol-generating devices can use the generated code as a shared secret or pairing key for encrypted communications.

[0015] Likewise, it is possible to establish secure, encrypted communication between an aerosol-generating device and a communications device, such as a mobile handset or tablet. In this scenario, the communications device is also able to sense changes in environmental conditions, for example by sensing movement with respect to gravity or an electromagnetic field. The communications device may be configured to generate a code in the same way as the aerosol-generating device, and synchronized movement (for example, by holding the aerosol-generating device and the communications device together in one hand and effecting a sequence of movements) will result in the same code being generated by both the aerosolgenerating device and the communications device, and this generated code can be used as a shared secret or pairing key for encrypted communication.

[0016] In these embodiments, the sequence of characters forming the generated code is not of importance - what is important is that both devices generate the same code, which can then be used as a shared secret or pairing key. Accordingly, the sequence of changes in environmental conditions is not of particular importance - a user may simply hold both devices together in one hand and effect a random sequence of movements until the codes have been generated. Because both devices experience the same sequence of changes in environmental conditions, and are programmed to generate numerical or alphanumerical characters in the same way, both devices will generate the same code.

[0017] In some embodiments, the method may further comprise: comparing the generated code with a predetermined code; and switching the aerosol-generating device from the first state to the second state if the generated code matches the predetermined code.

[0018] Different generated signals may be converted to different numerical or alphanumerical characters so as to generate the code, and the predetermined code may be formed of a predetermined sequence of numerical or alphanumerical characters.

[0019] These embodiments may enable controlled access to certain functionalities of an aerosol-generating device only to a user who is in possession of a predetermined code. The predetermined code may be programmed into the aerosol-generating device at manufacture or at sale to a user. The predetermined code, or the sequence of changes in environmental conditions required to generate the sequence of signals that leads to generation of a code that matches the predetermined code, may be transmitted to a user by a secure method.

[0020] For example, instructions for performing a sequence of operations to change the environment external to the aerosol-generating device so as to cause generation of a code that matches the predetermined code, and thus enables the aerosol-generating device to be switched from the first state to the second state, may be transmitted to a communications device operated by a user of the aerosol-generating device.

[0021] The communications device may be a mobile handset, such as a smartphone, or a tablet, or a personal computer. The communications device may run an application downloaded from an application store. The application may be provided by a manufacturer or seller of the aerosol-generating device. The application may be configured to recognise a serial number or other unique identifier of the aerosol-generating device and to correlate this with a predetermined code or a predetermined sequence of changes of environmental conditions required to generate a code that corresponds to the predetermined passcode that has been programmed into the aerosol-generating device prior to sale to the user. In this way, different aerosol-generating devices may have different predetermined codes, and a user has to interact with the manufacturer or seller of the aerosol-generating device through the application in order to determine the correct predetermined code or predetermined sequence of changes of environmental conditions required to generate a code that corresponds to the predetermined code, otherwise the user cannot switch the aerosol-generating device from the first state to the second state.

[0022] Access to the application may be restricted to users of legal age by way of known age verification and security measures. For example, a user may be required to set up a user account by way of the application, and may be required to submit proof of identity or proof of age as part of the account set up procedure.

[0023] The user account can be associated with one or more particular aerosol-generating devices by entering the serial number or serial numbers of the aerosol-generating devices using the application. This might be done manually, or by scanning a barcode or other optically-readable indicia using a camera of the electronic computing device. A database maintained by the manufacturer or seller of an aerosol-generating device can correlate the aerosol-generating device serial number with the predetermined code or predetermined sequence of changes of environmental conditions required to generate a code that corresponds to the predetermined code that has been programmed into the aerosolgenerating device prior to sale to the user.

[0024] The instructions may be user instructions for the user to perform the sequence of operations. The instructions may be displayed on a display of the communications device. The user instructions may take the form of a sequence of written instructions. The user instructions may take the form of a sequence of images. The user instructions may take the form of video instructions. The user instructions may take the form of audio instructions.

[0025] The predetermined code may itself be transmitted from a remote authentication server to a communications device operated by a user of the aerosol-generating device. The communications device may be operable to generate instructions for performing the sequence of changes in the environmental conditions so as to cause generation of the code. In these embodiments, translation of the predetermined code into a corresponding set of instructions may be performed in the communications device, reducing the volume of data that might otherwise need to be transmitted to the communications device from the remote authentication server. For example, the numbers zero up to nine may each be uniquely associated with a particular distinct movement. For example, zero may be represented by a straight upward movement, one by a straight downward movement, two by a straight rightward movement, three by a straight leftward movement, four by a clockwise movement, five by an anticlockwise movement, six by a diagonal upward and rightward movement, seven by a diagonal upward and leftward movement, eight by a diagonal downward and rightward movement and nine by a diagonal downward and leftward movement. The communications device may be programmed with images or animations for each action, and it is straightforward for the communications device to present appropriate instructions for any given predetermined code on this basis.

[0026] Alternatively, instructions for performing the sequence of changes in the environmental conditions so as to cause generation of the code may be transmitted to a communications device operated by a user of the aerosol-generating device. In these embodiments, the communications device does not need to store files for all possible movements, but instead receives the instructions from the remote authentication server. However, this may require the transmission of more data from the remote authentication server to the communications device.

[0027] Preferably, the instructions are only accessible to an authorized user of the communications device who is of legal age to use the aerosol-generating device. The changes in environmental conditions may comprise changes in an orientation of the aerosol-generating device with respect to gravity. The changes in the orientation of the aerosol-generating device with respect to gravity may be sensed by at least one accelerometer provided in the aerosol-generating device and connected to control circuitry of the aerosolgenerating device.

[0028] The changes in environmental conditions may comprise changes in an orientation of the aerosol-generating device with respect to an external electromagnetic field. The external electromagnetic field may be a communications network electromagnetic field. For example, the external electromagnetic field may be a WiFi®, 4G or 5G network electromagnetic field. The changes in orientation may be determined by changes in received signal strength or direction measured by a sensor provided in the aerosol-generating device and connected to control circuitry of the aerosol-generating device.

[0029] In some embodiments, it may be advantageous to sense changes in an orientation of the aerosol-generating device with respect to gravity (for example, by way of an accelerometer), as well as local characteristics of an external electromagnetic field (for example, a received signal strength indicator (RSSI) value due a local WiFi network). This is of particular benefit in embodiments where two aerosol-generating devices, or an aerosolgenerating device and a communication device, are being moved in synchrony so as to generate a pairing key. By checking that both devices are sensing the same RSSI due to the local WiFi network, it is possible to infer that both devices are in the same location.

[0030] The changes in environmental conditions may comprise changes due to at least one of: motion of the aerosol-generating device, acceleration of the aerosol-generating device, position of the aerosol-generating device as determined by a satellite positioning system, received signal strength of an external electromagnetic field, temperature, light, sound, and vibration.

[0031] The instructions may be instructions to the communications device to perform the sequence of changes in environmental conditions. For example, the instructions may comprise instructions to the communications device to perform at least one of: generation of light patterns, generation of sound patterns, generation of physical vibration patterns, and generation of electromagnetic field patterns. In these embodiments, the user need not move the aerosol-generating device relative to gravity, but can simply place the aerosol-generating device next to, on top of, or underneath the communications device.

[0032] In some embodiments, the predetermined code that has been programmed into the aerosol-generating device prior to sale to the user may be invariant. However, this has a potential disadvantage that an unauthorised user might be able to activate the aerosolgenerating device by surreptitiously observing the authorised user so as to learn the necessary sequence of movements, and then subsequently copying the movements. In order to reduce this risk, in some embodiments, an array of different predetermined codes may be programmed into the aerosol-generating device prior to sale to the user, and the aerosolgenerating device may cycle through the array of predetermined codes by requiring a new predetermined code from the array of predetermined codes at each activation. The array of predetermined codes may also be stored at the authentication server, together with instructions for cycling through the array in the same sequence as in the aerosol-generating device. In this way, and provided that the authentication server and the aerosol-generating device remain synchronized, it is possible for the code to change from one activation to the next, with instructions for generating a correct one-time code being transmitted to the user’s communications device at each activation. The larger the array of different predetermined codes, the harder it will be for an unauthorised user (without access to the authorised user’s communications device) to switch the aerosol-generating device from the first state to the second state.

[0033] In some embodiments, the predetermined sequence of signals is not stored in the aerosol-generating device itself. Rather, once the user has registered themself with an appropriate authentication server (for example, an authentication server maintained by the manufacturer or retailer of the aerosol-generating device) and verified that they are of legal age, the user may communicate with the authentication server by way of an application running on a communications device operated by the user of the aerosol-generating device. The user may initiate an unlocking procedure by sending a request to the authentication server using the communications device. If the user is authenticated to the authentication server (for example, by way of knowing a username and password combination, or biometric identification using the electronic computing device), the authentication server may send instructions to the communications device for manipulating both the aerosol-generating device and the communications device to unlock the aerosol-generating device. These instructions may simply include instructions to move the communications device and aerosol-generating device together (e.g., for a certain period of time). These instructions may comprise more detailed instructions for moving the devices together in a particular sequence.

[0034] For example, the instructions may instruct the user to hold the aerosol-generating device and the communications device (in embodiments where the communications device is a mobile handset, such as a smartphone, or a tablet) together and to perform a sequence of movements of both devices while they are held together. Both devices will then experience the same sequence of changes in environmental conditions, and each device can independently generate a sequence of signals in response to the sequence of changes in environmental conditions. This sequence of signals can be used to generate a code. Since the devices will then experience the same sequence of changes in environmental conditions, the codes will match one another. The code (that is common then to both the communications device and the aerosol-generating device) can be used to establish a secure communications channel between the communications device and the aerosol-generating device. The communications device can transmit a signal to the aerosol-generating device via the secure communications channel so as to switch the aerosol-generating device from the first state to the second state.

[0035] The sequence of movements can be random so long as both the communications device and the aerosol-generating device experience the same sequence of movements. Alternatively, the sequence of movements could be determined by the authentication server, and included in the instructions sent by the authentication server. However, the sequence of movements could still be generated by the authentication server without necessarily being based on any information regarding the communications device or the aerosol-generating device. For instance, the sequence of movements could be generated randomly, or pseudo- randomly.

[0036] Such embodiments require communication between the aerosol-generating device and the communications device so as to allow the sequences of signals to establish the secure communications channel and to allow the state switching signal to be transmitted and received. Such communication may be by any appropriate protocol, such as Bluetooth® or near-field communication (NFC). Preferably, the communication is by way of a secure channel. The communications may be encrypted by using a generated code as a shared secret or pairing key as previously described.

[0037] In such embodiments it is not necessary to store a predetermined code at the aerosolgenerating device. This is because the sequence of signals may be random, or may be set by the authentication server and transmitted to the user’s communications device when the user has authenticated themselves appropriately to the authentication server. Provided that both the communications device and the aerosol-generating device experience substantially the same sequence of changes in environmental conditions in response to instructions sent from the authentication server to the communications device, the aerosol-generating device can be switched from the first state to the second state.

[0038] The aerosol-generating device may be switched to a sensing mode prior to effecting the sequence of changes in environmental conditions. For example, the aerosol-generating device may be provided with a switch or button that must be activated by the user prior to performing the sequence of operations. This can help to define a time window during which the aerosol-generating device needs to monitor changes in environmental conditions and, optionally, communicate with an external communications device. This can save processing overheads and power when the sensing mode is not required.

[0039] The first state may be a state in which the aerosol-generating device is prohibited from delivering aerosol, and the second state may be a state in which the aerosol-generating device is permitted to deliver aerosol. This may prevent unauthorised use of the aerosol-generating device by persons not of legal age who do not have knowledge of the predetermined sequence of operations or who are unable to authenticate themselves to the authentication server.

[0040] The first state may be a state in which the aerosol-generating device is prohibited from communicating with a second device, and the second state may be a state in which the aerosol-generating device is permitted to communicate with a second device.

[0041] The second device may be a second aerosol-generating device. The second aerosolgenerating device may be similar to or substantially identical to the aerosol-generating device.

[0042] This may enable the second aerosol-generating device to be synchronised or programmed by an existing aerosol-generating device that has been registered to an authorised user.

[0043] The aerosol-generating device and the second aerosol-generating device may be subjected in synchrony to the same sequence of changes in stimuli external to the aerosolgenerating device so as each to generate a sequence of signals, and the aerosol-generating device and the second aerosol-generating device may be switched from the first state to the second state if both aerosol-generating devices generate the same sequence of signals and if the same sequence of signals matches the predetermined sequence of signals.

[0044] According to a second aspect of the present invention, there is provided an aerosolgenerating device comprising: at least one sensor configured to sense a change in environmental conditions of an environment of the aerosol-generating device and to generate signals in response to changes in the environmental conditions; electronic circuitry configured to generate a code based on the generated signals; and either electronic circuitry configured to switch the aerosol-generating device from a first state to a second state based on the generated code; or electronic circuitry configured to use the generated code to establish encrypted communications with an external device.

[0045] The electronic circuitry configured to generate the code may be configured to convert different generated signals to different numerical or alphanumerical characters so as to generate the code.

[0046] The device may comprise a communications processor configured to use the generated code as an encryption key for encrypted communication with another aerosol-generating device.

[0047] The device may comprise a communications processor configured to use the generated code as an encryption key for encrypted communication with a communications device operated by a user of the aerosol-generating device. The device may comprise electronic circuitry configured to compare the generated code with a predetermined code; and electronic circuitry configured to switch the aerosol-generating device from the first state to the second state if the generated code matches the predetermined code.

[0048] The sensor may be configured to sense changes in an orientation of the aerosolgenerating device with respect to gravity.

[0049] The sensor may be configured to sense changes in an orientation of the aerosolgenerating device with respect to an external electromagnetic field.

[0050] The sensor may be configured to sense changes due to at least one of: motion of the aerosol-generating device, acceleration of the aerosol-generating device, position of the aerosol-generating device as determined by a satellite positioning system, received signal strength of an external electromagnetic field, temperature, light, sound, and vibration.

[0051] The first state may be a state in which the aerosol-generating device does not permit access to at least one functionality of the aerosol-generating device, and the second state may be a state in which the aerosol-generating device permits access to the at least one functionality of the aerosol-generating device.

[0052] The first state may be a state in which the aerosol-generating device is prohibited from delivering aerosol, and the second state may be a state in which the aerosol-generating device is permitted to deliver aerosol.

[0053] According to a third aspect of the present invention, there is provided a system comprising the device according to the second aspect, in combination with a communications device operated by a user of the aerosol-generating device.

[0054] The communications device may be configured to receive the predetermined code from a remote authentication server.

[0055] The communications device may be configured to generate instructions for performing the changes in the environmental conditions based on the received predetermined code.

[0056] The communications device may be configured to receive instructions for performing the sequence of changes in the environmental conditions from the authentication server.

[0057] The instructions may be user instructions for the user to perform a predetermined sequence of operations.

[0058] The communications device may comprise a display and the instructions may be displayed on the display.

[0059] The instructions may comprise a video displayed on the display of the communications device.

[0060] The instructions may be instructions to the communications device to perform the sequence of changes in environmental conditions. The instructions may comprise instructions to the communications device to perform at least one of: generation of light patterns, generation of sound patterns, generation of physical vibration patterns, and generation of electromagnetic field patterns.

[0061] The aerosol-generating device may be switched to a sensing mode prior to effecting the sequence of changes in environmental conditions.

[0062] The first state may be a state in which the aerosol-generating device does not permit access to at least one functionality of the aerosol-generating device, and the second state may be a state in which the aerosol-generating device permits access to the at least one functionality of the aerosol-generating device.

[0063] The first state may be a state in which the aerosol-generating device is prohibited from delivering aerosol, and the second state may be a state in which the aerosol-generating device is permitted to deliver aerosol.

[0064] The aerosol-generating device and the second aerosol-generating device may communicate with each other by a wireless communication protocol when both aerosolgenerating devices are in the second state. The wireless communication protocol may, for example, be Bluetooth® or NFC.

[0065] The aerosol-generating device may transmit data to the second aerosol-generating device in a secure manner when the aerosol-generating devices are both in the second state. The data may comprise, for example, user-preferred heating profiles for different consumable aerosol-generating articles. Some aerosol-generating devices allow a user to select between a variety of different heating profiles, and in some cases to program customised heating profiles, so as to adjust a flavour or strength or temperature of aerosol generated by the aerosol-generating device by heating an aerosol-generating article. Different types of aerosolgenerating article may be best enjoyed using different heating profiles. A heating profile in this context may include a heating temperature, a heating period, and a rate of increase (and optionally a subsequent rate of decrease) of heating temperature. A user may wish to transfer heating profiles from one aerosol-generating device to a second aerosol-generating device so as to avoid the need for manually programming new heating profiles into the second aerosolgenerating device.

[0066] As used herein, the term “aerosol-generating device” refers to a device configured to generate an aerosol from an aerosol-generating substrate. The aerosol-generating substrate may be a solid, a liquid, a gel or a powder. Aerosol may be generated by vaporisation from the aerosol-generating substrate. Vaporisation may be achieved by heating the aerosolgenerating substrate, or by subjecting the aerosol-generating substrate to ultrasonic vibration.

[0067] As used herein, the term “communications device” refers to an electronic computing device configured for communication through a network, for example the Internet, either wirelessly or through a wired connection. Such a communications device is operable to communicate securely, and preferably includes security measures such as biometric user identification or password or passcode access to prevent operation by persons not authorized to do so. Suitable communications devices include mobile handsets such as smartphones and tablets.

[0068] As used herein, the term “environmental conditions” refers to conditions pertaining to a situation of a device, which conditions can be changed in a controllable manner. Environmental conditions may include gravity or an electromagnetic field, and changes to the environmental conditions may be movements of the device with respect to gravity or the electromagnetic field. Other environmental conditions may be light, sound, vibration or temperature.

[0069] As used herein, the term “sensor” refers to an electronic component configured to sense changes in environmental conditions and to generate electrical signals indicative of different changes in environmental conditions. For example, a sensor may be an accelerometer and the changes in environmental conditions may be movements relative to gravity.

[0070] The invention is defined in the claims. However, below there is provided a non- exhaustive list of non-limiting examples. Any one or more of the features of these examples may be combined with any one or more features of another example, embodiment, or aspect described herein.

[0071] Example Ex1 : A method for operating an aerosol-generating device, the aerosolgenerating device comprising at least one sensor configured to sense a change in environmental conditions of an environment of the aerosol-generating device and to generate signals in response to changes in the environmental conditions, the method comprising: generating a code based on the generated signals by effecting a sequence of changes in environmental conditions so as to generate a sequence of signals and converting the sequence of signals into the code; and, optionally, either switching the aerosol-generating device from a first state to a second state based on the generated code; or using the generated code to establish encrypted communications with an external device.

[0072] Example Ex2: The method according to Example Ex1 , wherein different generated signals are converted to different numerical or alphanumerical characters so as to generate the code.

[0073] Example Ex3: The method according to any preceding Example, wherein the generated code is used as an encryption key for encrypted communication with another aerosolgenerating device. Example Ex4: The method according to any preceding Example, wherein the generated code is used as an encryption key for encrypted communication with a communications device operated by a user of the aerosol-generating device.

[0074] Example Ex5: The method according to Example Ex4, wherein the communications device is a mobile handset or a tablet.

[0075] Example Ex6: The method according to any one of Examples Ex3 to Ex5, wherein the encrypted communication is short-range wireless communication and wherein the encryption key is a pairing key.

[0076] Example Ex7: The method according to Example Ex1 or Ex2, further comprising: comparing the generated code with a predetermined code; and switching the aerosol-generating device from the first state to the second state if the generated code matches the predetermined code.

[0077] Example Ex8: The method according to Example Ex7, wherein different generated signals are converted to different numerical or alphanumerical characters so as to generate the code and wherein the predetermined code is formed of a predetermined sequence of numerical or alphanumerical characters.

[0078] Example Ex9: The method according to Example Ex7 or Ex8, wherein the predetermined code is transmitted from a remote authentication server to a communications device operated by a user of the aerosol-generating device.

[0079] Example Ex10: The method according to Example Ex9, wherein the communications device is operable to generate instructions for performing the sequence of changes in the environmental conditions so as to cause generation of the code.

[0080] Example Ex11 : The method according to Example Ex7 or Ex8, wherein instructions for performing the sequence of changes in the environmental conditions so as to cause generation of the code are transmitted to a communications device operated by a user of the aerosol-generating device.

[0081] Example Ex12: The method according to Example Ex10 or Ex11 , wherein the instructions are only accessible to an authorized user of the communications device who is of legal age to use the aerosol-generating device.

[0082] Example Ex13: The method according to any one of Examples Ex10 to Ex12, wherein the instructions are user instructions for the user to perform a predetermined sequence of operations.

[0083] Example Ex14: The method according to Example Ex13, wherein the instructions are displayed on a display of the communications device.

[0084] Example Ex15: The method according to Example Ex14, wherein the instructions are displayed as a video on the display of the communications device. Example Ex16: The method according to any preceding Example, wherein the changes in environmental conditions comprise changes in an orientation of the aerosol-generating device with respect to gravity.

[0085] Example Ex17: The method according to any preceding Example, wherein the changes in environmental conditions comprise changes in an orientation of the aerosol-generating device with respect to an external electromagnetic field.

[0086] Example Ex18: The method according to any preceding Example, wherein the changes in environmental conditions comprise changes due to at least one of: motion of the aerosolgenerating device, acceleration of the aerosol-generating device, position of the aerosolgenerating device as determined by a satellite positioning system, received signal strength of an external electromagnetic field, temperature, light, sound, and vibration.

[0087] Example Ex19: The method according to any one of Examples Ex9 to Ex15, wherein the instructions are instructions to the communications device to perform the sequence of changes in environmental conditions.

[0088] Example Ex20: The method according to Example Ex18, wherein the instructions comprise instructions to the communications device to perform at least one of: generation of light patterns, generation of sound patterns, generation of physical vibration patterns, and generation of electromagnetic field patterns.

[0089] Example Ex21 : The method according to any preceding Example, wherein the aerosolgenerating device is switched to a sensing mode prior to effecting the sequence of changes in environmental conditions.

[0090] Example Ex22: The method according to any preceding Example, wherein the first state is a state in which the aerosol-generating device does not permit access to at least one functionality of the aerosol-generating device and wherein the second state is a state in which the aerosol-generating device permits access to the at least one functionality of the aerosolgenerating device.

[0091] Example Ex23: The method according to any preceding Example, wherein the first state is a state in which the aerosol-generating device is prohibited from delivering aerosol, and wherein the second state is a state in which the aerosol-generating device is permitted to deliver aerosol.

[0092] Example Ex24: The method according to any preceding Example, wherein the external device is a second aerosol-generating device comprising at least one sensor configured to sense a change in environmental conditions of an environment of the aerosol-generating device and to generate signals in response to changes in the environmental conditions.

[0093] Example Ex25: The method according to Example Ex24, further comprising the second aerosol-generating device generating a code based on the generated signals by effecting a sequence of changes in environmental conditions so as to generate a sequence of signals and converting the sequence of signals into a code.

[0094] Example Ex26: The method according to Example Ex25, wherein the aerosol-generating device and the second aerosol-generating device are subjected to the same changes in the environmental conditions so that each one of the aerosol-generating device and the second aerosol-generating device generate the same code.

[0095] Example Ex27: The method according to Example Ex26, wherein the aerosol-generating device and the second aerosol-generating device each comprise a timer, wherein the timers of the aerosol-generating device and the second aerosol-generating device are synchronised with one another.

[0096] Example Ex28: The method according to any one of Examples Ex24 to Ex27, wherein the codes generated by the aerosol-generating device and the second aerosol-generating device are used to establish encrypted communications between the aerosol-generating device and the second aerosol-generating device.

[0097] Example Ex29: An aerosol-generating device comprising: at least one sensor configured to sense a change in environmental conditions of an environment of the aerosol-generating device and to generate signals in response to changes in the environmental conditions; electronic circuitry configured to generate a code based on the generated signals; and, optionally, either electronic circuitry configured to switch the aerosol-generating device from a first state to a second state based on the generated code; or electronic circuitry configured to use the generated code to establish encrypted communications with an external device.

[0098] Example Ex30: The device according to Example Ex29, wherein the electronic circuitry configured to generate the code is configured to convert different generated signals to different numerical or alphanumerical characters so as to generate the code.

[0099] Example Ex31 : The device according to Example Ex29 or Ex30, further comprising a communications processor configured to use the generated code as an encryption key for encrypted communication with another aerosol-generating device.

[0100] Example Ex32: The device according to any one of Examples Ex29 to Ex31 , further comprising a communications processor configured to use the generated code as an encryption key for encrypted communication with a communications device operated by a user of the aerosol-generating device.

[0101] Example Ex33: The device according to any one of Examples Ex29 to Ex32, further comprising: electronic circuitry configured to compare the generated code with a predetermined code; and electronic circuitry configured to switch the aerosol-generating device from the first state to the second state if the generated code matches the predetermined code.

[0102] Example Ex34: The device according to any one of Examples Ex29 to Ex33, wherein the sensor is configured to sense changes in an orientation of the aerosol-generating device with respect to gravity.

[0103] Example Ex35: The device according to any one of Examples Ex29 to Ex34, wherein the sensor is configured to sense changes in an orientation of the aerosol-generating device with respect to an external electromagnetic field.

[0104] Example Ex36: The device according to any one of Examples Ex29 to Ex35, wherein the sensor is configured to sense changes due to at least one of: motion of the aerosolgenerating device, acceleration of the aerosol-generating device, position of the aerosolgenerating device as determined by a satellite positioning system, received signal strength of an external electromagnetic field, temperature, light, sound, and vibration.

[0105] Example Ex37: The device according to any one of Examples Ex29 to Ex36, wherein the first state is a state in which the aerosol-generating device does not permit access to at least one functionality of the aerosol-generating device, and the second state is a state in which the aerosol-generating device permits access to the at least one functionality of the aerosol-generating device.

[0106] Example Ex38: The device according to any one of Examples Ex29 to Ex37, wherein the first state is a state in which the aerosol-generating device is prohibited from delivering aerosol, and wherein the second state is a state in which the aerosol-generating device is permitted to deliver aerosol.

[0107] Example Ex39: A system comprising the aerosol-generating device according to any one of Examples Ex29 to Ex38 and an aerosol-generating article for use with the aerosolgenerating device.

[0108] Example Ex40: The system according to Example Ex39, in combination with a communications device operated by a user of the aerosol-generating device.

[0109] Example Ex41 : The system according to Example Ex40 depending from Example Ex33, wherein the communications device is configured to receive the predetermined code from a remote authentication server.

[0110] Example Ex42: The system according to Example Ex41 , wherein the communications device is configured to generate instructions for performing the changes in the environmental conditions based on the received predetermined code. Example Ex43: The system according to Example Ex40 depending from Example Ex33, wherein the communications device is configured to receive instructions for performing the sequence of changes in the environmental conditions from the authentication server.

[0111] Example Ex44: The system according to Example Ex42 or Ex43, wherein the instructions are user instructions for the user to perform a predetermined sequence of operations.

[0112] Example Ex45: The system according to Example Ex44, wherein the communications device comprises a display and wherein the instructions are displayed on the display.

[0113] Example Ex46: The system according to Example Ex45, wherein the instructions comprise a video displayed on the display of the communications device.

[0114] Example Ex47: The system according to any one of Examples Ex40 to Ex43, wherein the instructions are instructions to the communications device to perform the sequence of changes in environmental conditions.

[0115] Example Ex48: The system according to Example Ex47, wherein the instructions comprise instructions to the communications device to perform at least one of: generation of light patterns, generation of sound patterns, generation of physical vibration patterns, and generation of electromagnetic field patterns.

[0116] Example Ex49: The system according to any one of Examples Ex39 to Ex48, wherein the aerosol-generating device is switched to a sensing mode prior to effecting the sequence of changes in environmental conditions.

[0117] Example Ex50: The system according to any one of Examples Ex39 to Ex49, wherein the first state is a state in which the aerosol-generating device does not permit access to at least one functionality of the aerosol-generating device and a second state in which the aerosol-generating device permits access to the at least one functionality of the aerosolgenerating device.

[0118] Example Ex51 : The system according to any one of Examples Ex39 to Ex50, wherein the first state is a state in which the aerosol-generating device is prohibited from delivering aerosol, and wherein the second state is a state in which the aerosol-generating device is permitted to deliver aerosol.

[0119] Examples will now be further described with reference to the figures in which:

[0120] Figure 1 shows an implementation in which an aerosol-generating device is activated by performing a sequence of movements;

[0121] Figure 2 shows how instructions for performing the sequence of movements in Figure 1 are displayed on a display of a mobile handset or tablet;

[0122] Figure 3 shows an implementation in which first and second aerosol-generating devices are securely paired with each other by performing a sequence of movements;

[0123] Figure 4 shows a system overview of the implementation of Figures 1 and 2; Figure 5 shows a system overview of the implementation of Figure 3;

[0124] Figure 6 shows an aerosol-generating device in schematic form; and Figure 7 shows another aerosol-generating device in schematic form.

[0125] As indicated hereinabove, there exist two main methods for establishing a connection with a device to transmit, for example, a one-time password (OTP).

[0126] The first method uses a pre-shared key or passcode. This can pose security risks and technical challenges. For example, a global key or passcode may be compromised, but remain compatible with existing devices.

[0127] The second method uses asymmetric encryption techniques and signed certificates to exchange or establish a key or secret. This is computationally heavy, potentially adding unsatisfactory delays to the exchange of information, and may increase manufacturing costs of the devices.

[0128] It would be of interest to enable an aerosol-generating device to permit access to certain functionalities only upon successful generation and confirmation of a security key or passcode in a secure and inexpensive manner, without necessarily pairing with another device.

[0129] Referring now to Figure 1 , there is shown an aerosol-generating device 1. The aerosolgenerating device 1 incorporates at least one sensor (not shown) that is configured to sense changes in environmental conditions of an environment of the aerosol-generating device 1 . In the illustrated embodiment, the at least one sensor may comprise an accelerometer configured to sense changes in orientation of the aerosol-generating device 1 with respect to gravity. The at least one sensor is configured to generate different signals in response to different changes in environmental conditions. For example, a first movement may generate a signal that is translated by control electronics in the aerosol-generating device to the numerical value 9, a second movement may generate a signal that is translated by the control electronics to the numerical value 5, a third movement may generate a signal that is translated by the control electronics to the numerical value 6, and a fourth movement may generate a signal that is translated by the control electronics to the numerical value 4. There may be a range of ten different movements, each movement being detected by the at least one sensor and translated to respective numerical values of 0 to 9.

[0130] The aerosol-generating device 1 may be programmed, for example at manufacture or prior to sale to a user, with an activation code that permits switching of the aerosol-generating device 1 from a first state to a second state. The first state may be a “power off” state, and the second state may be a “power on” state. In the example of Figure 1 , the activation code is “9564”. It will be appreciated that the activation code need not be limited to four digits. The greater the number of digits, the greater the security, since it becomes more difficult to guess the correct activation code or to attempt a brute force attack by methodically generating all possible activation codes. Different aerosol-generating devices 1 preferably have different activation codes. This means that an activation code for one aerosol-generating device 1 will not work for a different aerosol-generating device 1.

[0131] An authentication server 2 may be maintained by a manufacturer or a retailer of the aerosol-generating device 1 . The authentication server 2 may include a database (not shown) correlating unique serial numbers of aerosol-generating devices 1 with their respective predetermined activation codes as programmed into the aerosol-generating devices 1 at manufacture or prior to sae to a user.

[0132] When a user takes ownership of an aerosol-generating device 1 , they are invited to access the authentication server 2, for example by way of an application running on a communications device, such as a mobile handset or tablet (not shown in Figure 1). The user may be prompted by the application to input the unique serial number of the aerosolgenerating device 1 , and to provide user identity information including proof of legal age. For example, the user may be required to upload a copy of their passport or driving licence or other suitable document proving that they are of legal age.

[0133] When the user has been appropriately authenticated at the authentication server, the authentication server may look up the activation code for the user’s aerosol-generating device 1 in the database on the basis of the unique serial number of the aerosol-generating device 1. The unique serial number may be manually typed into the user’s communications device, or may be scanned from a barcode or other optically-readable indicia provided on the aerosolgenerating device 1 or its associated packaging, before being transmitted to the authentication server so as to allow the authentication server to look up the activation code in the database.

[0134] The authentication server may then transmit instructions to be displayed on the user’s communications device for generating a sequence a signals in the aerosol-generating device 1 by effecting a sequence of changes in environmental conditions. For example, the instructions may comprise instructions to place the aerosol-generating device 1 in a sensing mode by pressing and holding a button, for example (“trigger” in Figure 1). The aerosolgenerating device 1 may acknowledge that it is in the sensing mode by emitting a sound or illuminating a light.

[0135] The instructions may subsequently guide the user to make a sequence of predetermined movements of the aerosol-generating device 1 so as to cause the sensor to generate signals giving rise to a sequence of numerical values corresponding to the activation code, in this example, the sequence “9564”. If the sequence of numerical values generated by the sequence of movements matches the predetermined activation code preprogrammed into the aerosol-generating device 1 , then the aerosol-generating device 1 may permit switching from the first state to the second state. For example, the aerosol-generating device 1 may permit “power on” so as to allow aerosol to be generated by heating an aerosol-generating article. The control circuitry in the aerosol-generating device 1 may be configured continuously to receive data from the at least one sensor when the aerosol-generating device 1 is in the sensing mode. For example, where the at least one sensor comprises an accelerometer, the control circuitry may continuously receive accelerometer data from the accelerometer representative of movement of the aerosol-generating device 1 with respect to gravity. The control circuitry may run an algorithm configured to detect patterns of changes in the accelerometer data caused by movement of the aerosol-generating device 1. In some embodiments, the algorithm is not configured to detect predetermined values, but instead to detect patterns of changes of values representing movement. This may enable more reliable authentication by permitting greater tolerances in detecting different movements of the aerosol-generating device 1.

[0136] Upon successful generation of an activation code that matches the preprogrammed activation code, the aerosol-generating device may acknowledge that it is ready for operation by emitting another sound or illuminating another light or a different colour light.

[0137] If the at least one sensor fails to generate an activation code that matches the correct preprogrammed activation code, the aerosol-generating device 1 may issue a further sound or illuminate another light or colour of light to indicate failure, and the user may then have to repeat the process of placing the aerosol-generating device 1 into sensing mode and performing the instructed sequence of movements.

[0138] Optionally, the aerosol-generating device 1 may be configured to enter a temporary or permanent locked state in the event that an incorrect activation code is generated more than a predetermined number of times in succession. This may prevent or hinder brute force attempts to guess the correct activation code.

[0139] Figure 2 shows how a user’s communications device 3 may be used to provide instructions to the user for effecting a sequence of changes in environmental conditions. The general principle of operation is as shown in Figure 1 , but Figure 2 shows the communications device 3 rather than the aerosol-generating device 1. The communications device 3, which may be a mobile handset of tablet, includes a display 4 on which instructions may be presented to the user. Once the user has been authenticated at the authentication server 2 and registered ownership of a particular aerosol-generating device 1 , as described above, it is possible for the user to access the activation code associated with the aerosol-generating device 1 at the authentication server 2 by way of the communications device 3. The communications device 3 incorporates known security features, for example a passcode or biometric identification sensors, to ensure that only an authorized user of the communications device 3 is able to operate the communications device 3. When a user wishes to activate the aerosol-generating device 1 , the activation code may be requested from the authentication server 2 by the communications device 3 and then transmitted to the communications device 3. Alternatively, the activation code may already have been sent to the communications device 3 during initial registration of the aerosol-generating device 1. An application running in the communications device 3 can then display instructions on the display 4 instructing the authorized user as to the changes in environmental conditions that are required to generate the activation code. For example, a first step may be to put the aerosol-generating device 1 into the sensing mode (“trigger”), following by instructions to perform a sequence of movements of the aerosol-generating device 1 so as to cause the sensor to generate signals giving rise to the sequence of numerical values corresponding to the activation code, in this example, the sequence “9564”, in the manner described in relation to Figure 1. The instructions may be displayed as a sequence of still images, a sequence of animations, or a sequence of videos.

[0140] Figure 3 shows another embodiment in which a first aerosol-generating device 1a and a second aerosol-generating device 1b may be placed in a state allowing encrypted communication between the first and second aerosol-generating devices 1a, 1 b. This may allow the first and second aerosol-generating devices 1a, 1b to be synchronized. This may allow the second aerosol-generating device 1b to receive computer program information from the first aerosol-generating device 1a, for example one or more heating profiles. The communication may be by way of an appropriate short-range communications protocol, such as Bluetooth®, Bluetooth LE® or NFC. The aerosol-generating devices 1a, 1b may be the same as or similar to the aerosol-generating device 1 of Figure 1 .

[0141] In order to establish a short-range communications protocol between two devices, it is necessary to pair the devices. However, additional steps are required to ensure that the communication is secure. One way of ensuring a secure communication connection is to employ a pairing key, for example a numerical or alphanumerical string. This can help to provide confirmation to a user as to which devices are being paired with each other. This works well for devices that have relatively large displays and input keys for entering or confirming alphanumeric characters, such as smartphones or televisions and the like. However, aerosol-generating devices 1a, 1b do not generally have large displays or alphanumeric input keys.

[0142] Accordingly, as shown in Figure 3, there is a first aerosol-generating device 1a and a second aerosol-generating device 1b that have not yet been paired with each other. In order to effect a secure pairing, the aerosol-generating devices 1a, 1 b are first placed into a sensing mode, for example by pressing and holding a button on each aerosol-generating device 1a, 1 b or by performing a predetermined movement or action (for example, tapping both devices 1a, 1b together on a surface). The aerosol-generating devices 1a, 1 b are held next to each other, preferably in one hand of a user, and both aerosol-generating devices 1a, 1 b are together subjected to a sequence of changes of external stimuli. In the example shown in Figure 3, the changes in external stimuli are generated by moving the aerosol-generating devices 1a, 1b together through a sequence of movements, and monitoring signals generated by an accelerometer in each of the aerosol-generating devices 1a, 1 b. As described in relation to Figures 1 and 2, the accelerometers and associated control circuitry may be configured to generate different numerical values for different movements. The user may be required to keep moving the aerosol-generating devices 1a, 1b together for a predetermined period of time after entering the sensing mode. Activation of the sensing mode and termination of the predetermined period of time may be indicated by a light or a sound or a haptic.

[0143] In the example of Figure 3, moving the two aerosol-generating devices 1a, 1b together will cause each of the aerosol-generating devices 1a, 1b to generate the same string of numerical values, and this can be used as a pairing key for short-range communication between the aerosol-generating devices 1a, 1 b. The pairing key need not be visible to a user, nor does the pairing key need to correspond to a predetermined pairing key, since the pairing key need only be generated once in order to pair the aerosol-generating devices 1a, 1 b. Accordingly, any random sequence of movements may be employed to pair the aerosolgenerating devices 1a, 1 b, since the pairing key need only be generated once so as to establish secure pairing. Once the aerosol-generating devices 1a, 1b are paired, they can communicate securely with each other, and do not need to re-establish their credentials to each other.

[0144] In the example shown in Figure 3, the sequence of movements generates the numerical sequence “9654”, and since this sequence is generated by both aerosol-generating devices 1a, 1 b together and at the same time, the sequence “9654” can be used as a pairing key to pair the aerosol-generating devices 1a, 1b with each other in a secure manner.

[0145] As an additional security measure, the first and second aerosol-generating devices 1a, 1b may use one or more other sensors to ensure that both the first and second aerosolgenerating devices 1 a, 1 b are in the same location. For example, the first and second aerosolgenerating devices 1a, 1b may each be provided with a sensor that determines local WiFi® strength and only allows pairing when both the first and second aerosol-generating devices 1a, 1b detect the same local WiFi® strength, for example by sensing RSSI values. Alternatively, some other sensor may be employed to determine that the first and second aerosol-generating devices 1a, 1b are in close proximity to each other.

[0146] Optionally, the pairing key generated by the aerosol-generating devices 1a, 1 b may be transmitted to a user’s communications device 3 (for example, a mobile handset or tablet) and, optionally, from there may be transmitted to the authentication server 2 shown in Figures 1 and 2. This may allow the pairing key to be checked by the communications device 3 and / or authentication server 2. For instance, the pairing key generated by one of the aerosol- generating devices 1a may be compared with the pairing key generated by the other one of the aerosol-generating devices 1 b to ensure that they match one another.

[0147] The pairing key may allow secure communication between the first and second aerosolgenerating devices by protocols other than Bluetooth® or Bluetooth LE® or NFC, for example by WiFi®, 3G, 4G, 5G or other LTE (Long Term Evolution) protocols.

[0148] Once the first and second aerosol-generating devices 1a, 1 b are securely paired, they may exchange data with each other. For example, the second aerosol-generating device 1b may receive customised heating profiles from the first aerosol-generating device 1a.

[0149] Instead of or in addition to pairing a first aerosol-generating device 1a with a second aerosol-generating device 1b, the same technique may be used to pair an aerosol-generating device 1a with a user’s communications device 3. Communications devices 3 such as mobile handsets and tablets already comprise suitable sensors that detect changes in environmental conditions, such as accelerometers and the like. Accordingly, by programming a communications device 3 to generate a sequence of numerical or alphanumerical characters in response to specific movements following the same protocol as that employed in the aerosol-generating device 1a, it can be ensured that the aerosol-generating device 1a and the communications device 3 will generate the same code when both are held together and subjected to the same changes in environmental conditions, for example a sequence of movements relative to gravity. Because both the aerosol-generating device 1a and the communications device 3 will have generated the same code independently of each other, they will be in possession of a shared secret that can be used as a pairing key to establish encrypted communication with each other.

[0150] Figure 4 is a system overview flow diagram illustrating the implementation of Figures 1 and 2. The authentication server 2 transmits the code to the communications device 3, and the communications device 3 then displays instructions to a user for generating the code. The user puts the aerosol-generating device 1 into sensing mode, and then follows the instructions displayed on the communications device 3. In the illustrated example, the changes in environmental conditions that are sensed by the aerosol-generating device 1 and converted into a generated code are movements with respect to gravity, and the sensor is an accelerometer. The aerosol-generating device 1 can compare the generated code with a predetermined code that is stored in memory, and if the generated code matches the predetermined code, the aerosol-generating device 1 can be activated.

[0151] Figure 5 is a system overview flow diagram illustrating the implementation of Figure 3, and illustrates the steps allowing a first aerosol-generating device 1a and a second device, which may be a second aerosol-generating device 1b or a communications device 3 such as a mobile handset or tablet, to be paired for secure communication with each other. The devices 1a and 1 b, or 1a and 3, are each placed in a code generating mode, and then simultaneously subjected to the same changes in environmental conditions, in this example a sequence of movements conducting while holding both devices 1a, 1 b or 1a, 3 together in one hand. Provided that both devices use the same code generation protocol, each device will independently generate the same code, and this can be used as a pairing key for encrypted communication.

[0152] Figure 6 shows an outline of an aerosol-generating device 1. A detailed description of the aerosol-generating functionality of the aerosol-generating device 1 is omitted for the sake of conciseness, but it will be understood that any type of aerosol-generating device 1 comprising a power source and a heater configured to heat an aerosol-generating substrate in order to generate an aerosol may be used with the present invention. The aerosolgenerating device 1 includes a memory 10, a processor 11 , a sensor 12 to sense changes in environmental conditions (for example, an accelerometer), and a heater 13. A predetermined code is stored in the memory 10, and this may be done at manufacture. The processor 11 is operable to receive signals from the sensor 12 indicative of changes in environmental conditions, as explained above. When a user wishes to activate the aerosol-generating device 1 , the user puts the aerosol-generating device 1 into a sensing mode and performs a sequence of operations, for example movements relative to gravity, following instructions displayed on a communications device operated by the user. The sensor 12 sends signals responsive to the sequence of operations to the processor 11 , where the signals are converted into a generated code according to a predetermined protocol. The processor 11 compares the generated code with the predetermined code stored in the memory 10, and if the codes match, the processor 11 allows operation of the heater 13. If the codes do not match, the processor 11 does not allow operation of the heater 13.

[0153] Figure 7 shows an outline of an aerosol-generating device 1 similar to that shown in Figure 6, but additionally comprising encrypted communication circuitry 14, which may be a Bluetooth® transceiver, for example. The encrypted communication circuitry 14 may be provided with a pairing key from the processor 11 , the pairing key comprising a code generated by subjecting the sensor 12 to changes in environmental conditions and converting the signals into alphanumeric characters in the processor 11 , as further described above in relation to Figures 3 and 5.

[0154] For the purpose of the present description and of the appended claims, except where otherwise indicated, all numbers expressing amounts, quantities, percentages, and so forth, are to be understood as being modified in all instances by the term "about". Also, all ranges include the maximum and minimum points disclosed and include any intermediate ranges therein, which may or may not be specifically enumerated herein. In this context, therefore, a number A is understood as A ± 5% of A. Within this context, a number A may be considered to include numerical values that are within general standard error for the measurement of the property that the number A modifies. The number A, in some instances as used in the appended claims, may deviate by the percentages enumerated above provided that the amount by which A deviates does not materially affect the basic and novel characteristic(s) of the claimed invention. Also, all ranges include the maximum and minimum points disclosed and include any intermediate ranges therein, which may or may not be specifically enumerated herein.

Claims

26 / 29CLAIMS:1 . A method for operating an aerosol-generating device, the aerosol-generating device comprising at least one sensor configured to sense a change in environmental conditions of an environment of the aerosol-generating device and to generate signals in response to changes in the environmental conditions, the method comprising: generating a code based on the generated signals by effecting a sequence of changes in environmental conditions so as to generate a sequence of signals and converting the sequence of signals into the code; and either switching the aerosol-generating device from a first state to a second state based on the generated code; or using the generated code to establish encrypted communications with an external device.

2. The method according to claim 1 , wherein different generated signals are converted to different numerical or alphanumerical characters so as to generate the code.

3. The method according to any preceding claim, wherein the generated code is used as an encryption key for encrypted communication with another aerosol-generating device.

4. The method according to claim 1 or 2, further comprising: comparing the generated code with a predetermined code; and switching the aerosol-generating device from the first state to the second state if the generated code matches the predetermined code.

5. The method according to claim 4, wherein the predetermined code is transmitted from a remote authentication server to a communications device operated by a user of the aerosolgenerating device.

6. The method according to claim 5, wherein the communications device is operable to generate instructions for performing the sequence of changes in the environmental conditions so as to cause generation of the code.

7. The method according to claim 6, wherein the instructions are user instructions for the user to perform a predetermined sequence of operations.

8. The method according to claim 7, wherein the instructions are displayed on a display of the communications device.

9. The method according to any preceding claim, wherein the changes in environmental conditions comprise changes in an orientation of the aerosol-generating device with respect to gravity.

10. The method according to any preceding claim, wherein the aerosol-generating device is switched to a sensing mode prior to effecting the sequence of changes in environmental conditions.11 . The method according to any preceding claim, wherein the first state is a state in which the aerosol-generating device does not permit access to at least one functionality of the aerosol-generating device and wherein the second state is a state in which the aerosolgenerating device permits access to the at least one functionality of the aerosol-generating device.

12. The method according to any preceding claim, wherein the first state is a state in which the aerosol-generating device is prohibited from delivering aerosol, and wherein the second state is a state in which the aerosol-generating device is permitted to deliver aerosol.

13. The method according to any preceding claim, wherein the external device is a second aerosol-generating device comprising at least one sensor configured to sense a change in environmental conditions of an environment of the aerosol-generating device and to generate signals in response to changes in the environmental conditions.

14. An aerosol-generating device comprising: at least one sensor configured to sense a change in environmental conditions of an environment of the aerosol-generating device and to generate signals in response to changes in the environmental conditions; electronic circuitry configured to generate a code based on the generated signals; and either electronic circuitry configured to switch the aerosol-generating device from a first state to a second state based on the generated code; or electronic circuitry configured to use the generated code to establish encrypted communications with an external device.

15. A system comprising the aerosol-generating device according to claim 14 and an aerosol-generating article for use with the aerosol-generating device.

Citation Information

Patent Citations

  • Aerosol-generating device

    US20240251872A1

  • Aerosol generation device user authentication

    WO2021219791A1

  • Aerosol delivery device with an access key

    WO2023041439A1

  • Electronic aerosol provision system including a motion sensor and an ai-system

    WO2023218171A1