Unlocking an aerosol-generating system using a trusted user device
Patent Information
- Application Number
- PCT/EP2026/054411
- Authority / Receiving Office
- WO · WO
- Patent Type
- Applications
- Current Assignee / Owner
- Priority Date
- 2025-03-25
- Filing Date
- 2026-02-18
- Publication Date
- 2026-10-01
Smart Images
Figure EP2026054411_01102026_PF_FP_ABST
Abstract
Description
[0001] PHILIP MORRIS PRODUCTS S.A. P17540WO 1
[0002] UNLOCKING AN AEROSOL-GENERATING SYSTEM FOR USE
[0003] The invention relates to control circuitry for an aerosol-generating system and to methods of unlocking the aerosol-generating system for use.
[0004] It is desirable to perform youth access prevention (YAP) methods to prevent underage users from accessing and using aerosol-generating systems. Some YAP methods involve the aerosolgenerating system pairing with a user device such as a smartphone or PC, which exchanges information with a server to obtain permission for unlocking the aerosol-generating system.
[0005] However, these methods are typically dependent on the ability of the user device to pair successfully with the aerosol-generating system and to provide the necessary functionality by way of at least one dedicated application for execution on the user device.
[0006] It would be preferable to provide apparatus and methods for unlocking aerosol-generating systems which mitigate or overcome the problems caused by pairing incompatibilities with user devices or the need to install and use a dedicated unlock app on the user device.
[0007] According to a first aspect, there is provided control circuitry for an aerosol-generating system, the aerosol-generating system having a locked state in which the aerosol-generating system is prevented from generating or delivering aerosol and an unlocked state in which the aerosolgenerating system is permitted to generate or deliver aerosol. The control circuitry is configured to:
[0008] determine whether at least one unlocking condition is fulfilled; and
[0009] in response to determining that the at least one unlocking condition is fulfilled, transition the aerosol-generating system from the locked state to the unlocked state,
[0010] wherein the control circuitry is configured to participate in an initial user verification session for identifying a user device as a trusted user device in whose proximity the aerosol-generating system may permissibly be used to generate or deliver aerosol, and
[0011] wherein the control circuitry is configured to determine that the at least one unlocking condition is fulfilled in response to successful establishment of a secure communications channel with the trusted user device.
[0012] The control circuitry may be configured to receive, during the initial user verification session, a verification code from the as-yet-untrusted user device, and to identify the user device as being trusted in response to the received verification code corresponding to an expected verification code. The control circuitry may be configured to retrieve the expected verification code, which is prestored on the aerosol-generating system for use during the initial user verification session. In an example, the expected verification code comprises, or is derivable from, a unique identification code of the aerosol-generating system. The control circuitry may be configured to establish a securePHILIP MORRIS PRODUCTS S.A. P17540WO 2
[0013] communications channel with the as-yet-untrusted user device for receiving the verification code, wherein establishing the secure communications channel comprises a key exchange phase in which security keys to be used in communications via the secure communications channel are exchanged. The control circuitry may be configured to store one or more of the exchanged security keys for use in future communications between the aerosol-generating system and the trusted user device via the secure communications channel.
[0014] In addition to, or instead of, the initial user verification, the control circuitry may be configured to perform ongoing user verification for confirming that the trusted user device remains in the proximity of the aerosol-generating system so that the aerosol-generating system may permissibly be used to generate or deliver aerosol. The control circuitry is configured to use the stored one or more security keys for the purpose of the ongoing user verification. In an example, the stored one or more security keys serve as a password which, when provided by the trusted user device in communications with the aerosol-generating system via the secure communications channel, confirms that the trusted user device remains in the proximity of the aerosol-generating system. The control circuitry may be configured to confirm that the trusted user device remains in the proximity of the aerosol-generating system by receiving, from the trusted user device via the secure communications channel, communications which are resolvable using the stored one or more security keys. The stored one or more security keys may be for use in execution of at least one cryptographic function for resolving the received communications, wherein the control circuitry is configured to determine that the received communications are resolvable using the stored one or more security keys in response to successful execution of the at least one cryptographic function. For example, the stored one or more security keys may comprise a decryption key, wherein determining that the received communications are resolvable using the stored one or more security keys comprises determining that the received communications can be successfully decrypted using the decryption key. More particularly, the stored one or more security keys may comprise a long term key to be used in relation to all present and future communications via the secure communications channel between the aerosol-generating system and the trusted user device.
[0015] In an example the secure communications channel is established using Bluetooth Low Energy (BLE), Human Interface System (HID) profile.
[0016] To ensure regulatory compliant use, the control circuitry may be configured to maintain the aerosol-generating system in the locked state in response to determining that the at least one unlocking condition is not yet fulfilled. Additionally or alternatively, the control circuitry may be configured to transition the aerosol-generating system from the unlocked state back to the locked state in response to determining that the at least one unlocking condition is no longer fulfilled. In anPHILIP MORRIS PRODUCTS S.A. P17540WO 3
[0017] example, the control circuitry is configured to determine that the at least one unlocking condition is no longer fulfilled when the trusted user device fails to respond to communications sent by the aerosol-generating system. The trusted user device may fail to respond to communications sent by the aerosol-generating system by reason of its being outside wireless communications range with the aerosol-generating system. In an example, the control circuitry is configured to determine that the at least one unlocking condition is no longer fulfilled in response to determining that communications received by the aerosol-generating system are not resolvable using the stored one or more security keys. For ensuring continued compliance, the control circuitry may be configured, when the aerosolgenerating system is in the unlocked state, to repeatedly determine whether the at least one unlocking condition is fulfilled during operation of the aerosol-generating system to generate aerosol. The control circuitry may be configured, when the aerosol-generating system is in the locked state, to determine whether the at least one unlocking condition is fulfilled upon initiation of a usage session to generate aerosol.
[0018] The locked state may be implemented in any feasible manner. In an example, the control circuitry is configured, when the aerosol-generating system is in the locked state, to prohibit activation of a heating element to generate aerosol. More particularly, the control circuitry may be configured, when the aerosol-generating system is in the locked state, to prohibit activation of the heating element based on at least one of: disabling the heating element; disabling an energy supply to the heating element, and disabling an input element for user activation of the heating element.
[0019] According to a second aspect, there is provided an aerosol-generating device, or a companion device for an aerosol-generating device, or an aerosol-generating system comprising at least one of the aerosol-generating device and the companion device, wherein the aerosolgenerating device or the companion device or the aerosol-generating system comprises the control circuitry as in the first aspect.
[0020] According to a third aspect, there is provided a system comprising the aerosol-generating device or the companion device or the aerosol-generating system as in the second aspect, and the user device, wherein the user device is configured to participate in a user authorization process for determining that the user is authorized to operate the aerosol-generating system to generate aerosol, and to receive, following successful user authorization, the verification code to be sent to the aerosol-generating system for verifying that the user device is trusted. The user device may be configured to communicate with a server for participating in the user authorization process. In one example, the aerosol-generating device comprises the control circuitry, wherein the aerosolgenerating device further comprises communications circuitry for establishing the secure communications channel with the trusted user device. In another example, the aerosol-generatingPHILIP MORRIS PRODUCTS S.A. P17540WO 4
[0021] system comprises the companion device, wherein the companion device comprises the control circuitry and further comprises communications circuitry for establishing the secure communications channel with the trusted user device, and wherein the companion device is configured to send an unlocking signal to the aerosol-generating device in response to determining that the at least one unlocking condition is fulfilled. The companion device may comprise a charging case for the aerosolgenerating device.
[0022] According to a fourth aspect, there is provided a method of unlocking an aerosol-generating system, wherein the aerosol-generating system has a locked state in which the aerosol-generating system is prevented from generating or delivering aerosol and an unlocked state in which the aerosol-generating system is permitted to generate or deliver aerosol. The method comprises: determining whether at least one unlocking condition is fulfilled; and
[0023] in response to determining that the at least one unlocking condition is fulfilled, transitioning the aerosol-generating system from the locked state to the unlocked state, the method further comprising:
[0024] participating in an initial user verification session for identifying a user device as a trusted user device in whose proximity the aerosol-generating system may permissibly be used to generate or deliver aerosol, and
[0025] determining that the at least one unlocking condition is fulfilled in response to successful establishment of a secure communications channel with the trusted user device.
[0026] The method may comprise receiving, during the initial user verification session, a verification code from the as-yet-untrusted user device, and identifying the user device as being trusted in response to the received verification code corresponding to an expected verification code. The method may comprise retrieving the expected verification code, which is prestored on the aerosolgenerating system for use during the initial user verification session. The expected verification code may comprise, or be derivable from, a unique identification code of the aerosol-generating system. The method may comprise establishing a secure communications channel with the as-yet-untrusted user device for receiving the verification code, wherein establishing the secure communications channel comprises a key exchange phase in which security keys to be used in communications via the secure communications channel are exchanged. The method may comprise storing one or more of the exchanged security keys in the aerosol-generating system for use in future communications between the aerosol-generating system and the trusted user device via the secure communications channel.
[0027] The method may comprise performing ongoing user verification for confirming that the trusted user device remains in the proximity of the aerosol-generating system so that the aerosol-PHILIP MORRIS PRODUCTS S.A. P17540WO 5
[0028] generating system may permissibly be used to generate or deliver aerosol. The method may comprise using the stored one or more security keys for the purpose of the ongoing user verification. The stored one or more security keys may serve as a password which, when provided by the trusted user device in communications with the aerosol-generating system via the secure communications channel, confirms that the trusted user device remains in the proximity of the aerosol-generating system. The method may comprise confirming that the trusted user device remains in the proximity of the aerosol-generating system by receiving, from the trusted user device via the secure communications channel, communications which are resolvable using the stored one or more security keys. The stored one or more security keys may be for use in execution of at least one cryptographic function for resolving the received communications, the method comprising determining that the received communications are resolvable using the stored one or more security keys in response to successful execution of the at least one cryptographic function. The stored one or more security keys may comprise a decryption key, wherein determining that the received communications are resolvable using the stored one or more security keys comprises determining that the received communications can be successfully decrypted using the decryption key. The stored one or more security keys may comprise a long term key to be used in relation to all present and future communications via the secure communications channel between the aerosol-generating system and the trusted user device.
[0029] In an example, the secure communications channel is established using Bluetooth Low Energy (BLE), Human Interface System (HID) profile.
[0030] The method may comprise maintaining the aerosol-generating system in the locked state in response to determining that the at least one unlocking condition is not yet fulfilled. The method may comprise transitioning the aerosol-generating system from the unlocked state back to the locked state in response to determining that the at least one unlocking condition is no longer fulfilled. The method may comprise determining that the at least one unlocking condition is no longer fulfilled when the trusted user device fails to respond to communications sent by the aerosolgenerating system. The trusted user device may fail to respond to communications sent by the aerosol-generating system by reason of its being outside wireless communications range with the aerosol-generating system. The method may comprise determining that the at least one unlocking condition is no longer fulfilled in response to determining that communications received by the aerosol-generating system are not resolvable using the stored one or more security keys. The method may comprise, when the aerosol-generating system is in the unlocked state, repeatedly determining whether the at least one unlocking condition is fulfilled during operation of the aerosolgenerating system to generate aerosol. The method may comprise, when the aerosol-generatingPHILIP MORRIS PRODUCTS S.A. P17540WO 6
[0031] system is in the locked state, determining whether the at least one unlocking condition is fulfilled upon initiation of a usage session to generate aerosol. The method may comprise, when the aerosolgenerating system is in the locked state, prohibiting activation of a heating element to generate aerosol. More particularly, the method may comprise, when the aerosol-generating system is in the locked state, prohibiting activation of the heating element based on at least one of: disabling the heating element; disabling an energy supply to the heating element, and disabling an input element for user activation of the heating element.
[0032] The user device may participate in a user authorization process for determining that the user is authorized to operate the aerosol-generating system to generate or deliver aerosol, and may receive, following successful user authorization, the verification code to be sent to the aerosolgenerating system for verifying that the user device is trusted. The user device may communicates with a server for participating in the user authorization process.
[0033] In one example, the aerosol-generating system comprises an aerosol-generating device configured to generate aerosol, wherein the aerosol-generating device establishes the secure communications channel with the trusted user device. In another example, the aerosol-generating system comprises an aerosol-generating device and a companion device, wherein the aerosolgenerating device generates aerosol, wherein the companion device establishes the secure communications channel with the trusted user device, and wherein the companion device sends an unlocking signal to the aerosol-generating device in response to determining that the at least one unlocking condition is fulfilled.
[0034] According to a fifth aspect, there is provided a method performed by a server for carrying out a user authorization process for determining whether a user is authorized to operate an aerosolgenerating system to generate aerosol, wherein the aerosol-generating system has a locked state in which the aerosol-generating system is prevented from generating or delivering aerosol and an unlocked state in which the aerosol-generating system is permitted to generate or deliver aerosol. The method comprises: receiving an unlock request identifying the aerosol-generating system; determining whether the user associated with the aerosol-generating system is an authorized user; and, if the user is an authorized user, issuing an unlock grant, wherein the unlock grant permits the aerosol-generating system to transition from the locked state to the unlocked state. The unlock request may comprise a unique device identifier identifying the aerosol-generating system.
[0035] Any of the method described herein may be computer-implemented.
[0036] According to a sixth aspect, there is provided a computing system configured to perform the method as in the fourth or fifth aspect.PHILIP MORRIS PRODUCTS S.A. P17540WO 7
[0037] According to a seventh aspect, there is provided a computer program (product) comprising instructions which, when executed by a computing system, enable or cause the computing system to perform the method as in the fourth or fifth aspect.
[0038] According to an eighth aspect, there is provided a computer-readable (storage) medium comprising instructions which, when executed by a computing system, enable or cause the computing system to perform the method as in the fourth or fifth aspect.
[0039] Below, there is provided a non-exhaustive list of non-limiting examples of such apparatus and methods. Any one or more of the features of these examples may be combined with any one or more features of any other example described herein.
[0040] Ex.l. Control circuitry for an aerosol-generating system, the aerosol-generating system having a locked state in which the aerosol-generating system is prevented from generating or delivering aerosol and an unlocked state in which the aerosol-generating system is permitted to generate or deliver aerosol, wherein the control circuitry is configured to:
[0041] determine whether at least one unlocking condition is fulfilled; and
[0042] in response to determining that the at least one unlocking condition is fulfilled, transition the aerosol-generating system from the locked state to the unlocked state,
[0043] wherein the control circuitry is configured to participate in an initial user verification session for identifying a user device as a trusted user device in whose proximity the aerosol-generating system may permissibly be used to generate or deliver aerosol, and
[0044] wherein the control circuitry is configured to determine that the at least one unlocking condition is fulfilled in response to successful establishment of a secure communications channel with the trusted user device.
[0045] Ex.2. The control circuitry as in Ex.l, wherein the control circuitry is configured to receive, during the initial user verification session, a verification code from the as-yet-untrusted user device, and to identify the user device as being trusted in response to the received verification code corresponding to an expected verification code.
[0046] Ex.3. The control circuitry as in Ex.2, wherein the control circuitry is configured to retrieve the expected verification code, which is prestored on the aerosol-generating system for use during the initial user verification session.
[0047] Ex.4. The control circuitry as in Ex.2 or Ex.3, wherein the expected verification code comprises, or is derivable from, a unique identification code of the aerosol-generating system.
[0048] Ex.5. The control circuitry as in any of Ex.l-Ex.4, wherein the control circuitry is configured to establish a secure communications channel with the as-yet-untrusted user device for receiving thePHILIP MORRIS PRODUCTS S.A. P17540WO 8
[0049] verification code, wherein establishing the secure communications channel comprises a key exchange phase in which security keys to be used in communications via the secure communications channel are exchanged.
[0050] Ex.6. The control circuitry as in Ex.5, wherein the control circuitry is configured to store one or more of the exchanged security keys for use in future communications between the aerosolgenerating system and the trusted user device via the secure communications channel.
[0051] Ex.7. The control circuitry as in any of Ex.l-Ex.6, wherein the control circuitry is configured to perform ongoing user verification for confirming that the trusted user device remains in the proximity of the aerosol-generating system so that the aerosol-generating system may permissibly be used to generate or deliver aerosol.
[0052] Ex.8. The control circuitry as in Ex.6 and Ex.7, wherein the control circuitry is configured to use the stored one or more security keys for the purpose of the ongoing user verification.
[0053] Ex.9. The control circuitry as in Ex.8, wherein the stored one or more security keys serve as a password which, when provided by the trusted user device in communications with the aerosolgenerating system via the secure communications channel, confirms that the trusted user device remains in the proximity of the aerosol-generating system.
[0054] Ex.10. The control circuitry as in any of Ex.7-Ex.9, wherein the control circuitry is configured to confirm that the trusted user device remains in the proximity of the aerosol-generating system by receiving, from the trusted user device via the secure communications channel, communications which are resolvable using the stored one or more security keys.
[0055] Ex.ll. The control circuitry as in Ex.10, wherein the stored one or more security keys are for use in execution of at least one cryptographic function for resolving the received communications, and wherein the control circuitry is configured to determine that the received communications are resolvable using the stored one or more security keys in response to successful execution of the at least one cryptographic function.
[0056] Ex.12. The control circuitry as in Ex.ll, wherein the stored one or more security keys comprise a decryption key, and wherein determining that the received communications are resolvable using the stored one or more security keys comprises determining that the received communications can be successfully decrypted using the decryption key.
[0057] Ex.13. The control circuitry as in any of Ex.l-Ex.12, wherein the stored one or more security keys comprise a long term key to be used in relation to all present and future communications via the secure communications channel between the aerosol-generating system and the trusted user device.
[0058] Ex.14. The control circuitry as in any of Ex.l-Ex.13, wherein the secure communications channel is established using Bluetooth Low Energy (BLE), Human Interface System (HID) profile.PHILIP MORRIS PRODUCTS S.A. P17540WO 9
[0059] Ex.15. The control circuitry as in any of Ex.l-Ex.14, wherein the control circuitry is configured to maintain the aerosol-generating system in the locked state in response to determining that the at least one unlocking condition is not yet fulfilled.
[0060] Ex.16. The control circuitry as in any of Ex.l-Ex.15, wherein the control circuitry is configured to transition the aerosol-generating system from the unlocked state back to the locked state in response to determining that the at least one unlocking condition is no longer fulfilled.
[0061] Ex.17. The control circuitry as in Ex.16, wherein the control circuitry is configured to determine that the at least one unlocking condition is no longer fulfilled when the trusted user device fails to respond to communications sent by the aerosol-generating system.
[0062] Ex.18. The control circuitry as in Ex.17, wherein the trusted user device fails to respond to communications sent by the aerosol-generating system by reason of its being outside wireless communications range with the aerosol-generating system.
[0063] Ex.19. The control circuitry as in any of Ex.16-Ex.18, wherein the control circuitry is configured to determine that the at least one unlocking condition is no longer fulfilled in response to determining that communications received by the aerosol-generating system are not resolvable using the stored one or more security keys.
[0064] Ex.20. The control circuitry as in any of Ex.l-Ex.19, wherein the control circuitry is configured, when the aerosol-generating system is in the unlocked state, to repeatedly determine whether the at least one unlocking condition is fulfilled during operation of the aerosol-generating system to generate aerosol.
[0065] Ex.21. The control circuitry as in any of Ex.l-Ex.20, wherein the control circuitry is configured, when the aerosol-generating system is in the locked state, to determine whether the at least one unlocking condition is fulfilled upon initiation of a usage session to generate aerosol.
[0066] Ex.22. The control circuitry as in any of Ex.l-Ex.21, wherein the control circuitry is configured, when the aerosol-generating system is in the locked state, to prohibit activation of a heating element to generate aerosol.
[0067] Ex.23. The control circuitry as in Ex.22, wherein the control circuitry is configured, when the aerosol-generating system is in the locked state, to prohibit activation of the heating element based on at least one of: disabling the heating element; disabling an energy supply to the heating element, and disabling an input element for user activation of the heating element.
[0068] Ex.24. An aerosol-generating device, or a companion device for an aerosol-generating device, or an aerosol-generating system comprising at least one of the aerosol-generating device and the companion device, wherein the aerosol-generating device or the companion device or the aerosol-generating system comprises the control circuitry as in any of Ex.l- Ex.23.PHILIP MORRIS PRODUCTS S.A. P17540WO 10
[0069] Ex.25. A system comprising the aerosol-generating device or the companion device or the aerosol-generating system as in Ex.24, and the user device, wherein the user device is configured to participate in a user authorization process for determining that the user is authorized to operate the aerosol-generating system to generate aerosol, and to receive, following successful user authorization, the verification code to be sent to the aerosol-generating system for verifying that the user device is trusted.
[0070] Ex.26. The system as in Ex.25, wherein the user device is configured to communicate with a server for participating in the user authorization process.
[0071] Ex.27. The aerosol-generating device as in Ex.24 comprising the control circuitry, wherein the aerosol-generating device further comprises communications circuitry for establishing the secure communications channel with the trusted user device.
[0072] Ex.28. The aerosol-generating system as in Ex.24 comprising the companion device, wherein the companion device comprises the control circuitry and further comprises communications circuitry for establishing the secure communications channel with the trusted user device, and wherein the companion device is configured to send an unlocking signal to the aerosolgenerating device in response to determining that the at least one unlocking condition is fulfilled.
[0073] Ex.29. The aerosol-generating system as in Ex.28, wherein the companion device comprises a charging case for the aerosol-generating device.
[0074] Ex.30. A method of unlocking an aerosol-generating system, wherein the aerosolgenerating system has a locked state in which the aerosol-generating system is prevented from generating or delivering aerosol and an unlocked state in which the aerosol-generating system is permitted to generate or deliver aerosol, the method comprising:
[0075] determining whether at least one unlocking condition is fulfilled; and
[0076] in response to determining that the at least one unlocking condition is fulfilled, transitioning the aerosol-generating system from the locked state to the unlocked state, the method further comprising:
[0077] participating in an initial user verification session for identifying a user device as a trusted user device in whose proximity the aerosol-generating system may permissibly be used to generate or deliver aerosol, and
[0078] determining that the at least one unlocking condition is fulfilled in response to successful establishment of a secure communications channel with the trusted user device.
[0079] Ex.31. The method as in Ex.30, comprising receiving, during the initial user verification session, a verification code from the as-yet-untrusted user device, and identifying the user device asPHILIP MORRIS PRODUCTS S.A. P17540WO 11
[0080] being trusted in response to the received verification code corresponding to an expected verification code.
[0081] Ex.32. The method as in Ex.31, comprising retrieving the expected verification code, which is prestored on the aerosol-generating system for use during the initial user verification session.
[0082] Ex.33. The method as in Ex.31 or Ex.32, wherein the expected verification code comprises, or is derivable from, a unique identification code of the aerosol-generating system.
[0083] Ex.34. The method as in any of Ex.30-Ex.33, comprising establishing a secure communications channel with the as-yet-untrusted user device for receiving the verification code, wherein establishing the secure communications channel comprises a key exchange phase in which security keys to be used in communications via the secure communications channel are exchanged.
[0084] Ex.35. The method as in Ex.34, comprising storing one or more of the exchanged security keys in the aerosol-generating system for use in future communications between the aerosolgenerating system and the trusted user device via the secure communications channel.
[0085] Ex.36. The method as in any of Ex.30-Ex.35, comprising performing ongoing user verification for confirming that the trusted user device remains in the proximity of the aerosolgenerating system so that the aerosol-generating system may permissibly be used to generate or deliver aerosol.
[0086] Ex.37. The method as in Ex.35 and Ex.36, comprising using the stored one or more security keys for the purpose of the ongoing user verification.
[0087] Ex.38. The method as in Ex.37, wherein the stored one or more security keys serve as a password which, when provided by the trusted user device in communications with the aerosolgenerating system via the secure communications channel, confirms that the trusted user device remains in the proximity of the aerosol-generating system.
[0088] Ex.39. The method as in any of Ex.36-Ex.38, comprising confirming that the trusted user device remains in the proximity of the aerosol-generating system by receiving, from the trusted user device via the secure communications channel, communications which are resolvable using the stored one or more security keys.
[0089] Ex.40. The method as in Ex.39, wherein the stored one or more security keys are for use in execution of at least one cryptographic function for resolving the received communications, the method comprising determining that the received communications are resolvable using the stored one or more security keys in response to successful execution of the at least one cryptographic function.
[0090] Ex.41. The method as in Ex.40, wherein the stored one or more security keys comprise a decryption key, and wherein determining that the received communications are resolvable using thePHILIP MORRIS PRODUCTS S.A. P17540WO 12
[0091] stored one or more security keys comprises determining that the received communications can be successfully decrypted using the decryption key.
[0092] Ex.42. The method as in any of Ex.30-Ex.41, wherein the stored one or more security keys comprise a long term key to be used in relation to all present and future communications via the secure communications channel between the aerosol-generating system and the trusted user device.
[0093] Ex.43. The method as in any of Ex.30-Ex.42, wherein the secure communications channel is established using Bluetooth Low Energy (BLE), Human Interface System (HID) profile.
[0094] Ex.44. The method as in any of Ex.30-Ex.43, comprising maintaining the aerosol-generating system in the locked state in response to determining that the at least one unlocking condition is not yet fulfilled.
[0095] Ex.45. The method as in any of Ex.30-Ex.44, comprising transitioning the aerosol-generating system from the unlocked state back to the locked state in response to determining that the at least one unlocking condition is no longer fulfilled.
[0096] Ex.46. The method as in Ex.45, comprising determining that the at least one unlocking condition is no longer fulfilled when the trusted user device fails to respond to communications sent by the aerosol-generating system.
[0097] Ex.47. The method as in Ex.46, wherein the trusted user device fails to respond to communications sent by the aerosol-generating system by reason of its being outside wireless communications range with the aerosol-generating system.
[0098] Ex.48. The method as in any of Ex.45-Ex.47, comprising determining that the at least one unlocking condition is no longer fulfilled in response to determining that communications received by the aerosol-generating system are not resolvable using the stored one or more security keys.
[0099] Ex.49. The method as in any of Ex.30-Ex.48, comprising, when the aerosol-generating system is in the unlocked state, repeatedly determining whether the at least one unlocking condition is fulfilled during operation of the aerosol-generating system to generate aerosol.
[0100] Ex.50. The method as in any of Ex.30-Ex.49, comprising, when the aerosol-generating system is in the locked state, determining whether the at least one unlocking condition is fulfilled upon initiation of a usage session to generate aerosol.
[0101] Ex.51. The method as in any of Ex.30-Ex.50, comprising, when the aerosol-generating system is in the locked state, prohibiting activation of a heating element to generate aerosol.
[0102] Ex.52. The method as in Ex.51, comprising, when the aerosol-generating system is in the locked state, prohibiting activation of the heating element based on at least one of: disabling the heating element; disabling an energy supply to the heating element, and disabling an input element for user activation of the heating element.PHILIP MORRIS PRODUCTS S.A. P17540WO 13
[0103] Ex.53. The method as in any of Ex.30-Ex.52, wherein the user device participates in a user authorization process for determining that the user is authorized to operate the aerosol-generating system to generate or deliver aerosol, and receives, following successful user authorization, the verification code to be sent to the aerosol-generating system for verifying that the user device is trusted.
[0104] Ex.54. The method as in Ex.53, wherein the user device communicates with a server for participating in the user authorization process.
[0105] Ex.55. The method as in any of Ex.30-Ex.54 wherein the aerosol-generating system comprises an aerosol-generating device configured to generate aerosol, wherein the aerosolgenerating device establishes the secure communications channel with the trusted user device.
[0106] Ex.56. The method as in any of Ex.30-Ex.54 wherein the aerosol-generating system comprises an aerosol-generating device and a companion device, wherein the aerosol-generating device generates aerosol, wherein the companion device establishes the secure communications channel with the trusted user device, and wherein the companion device sends an unlocking signal to the aerosol-generating device in response to determining that the at least one unlocking condition is fulfilled.
[0107] Ex.57. A method performed by a server for carrying out a user authorization process for determining whether a user is authorized to operate an aerosol-generating system to generate aerosol, wherein the aerosol-generating system has a locked state in which the aerosol-generating system is prevented from generating or delivering aerosol and an unlocked state in which the aerosol-generating system is permitted to generate or deliver aerosol, the method comprising: receiving an unlock request identifying the aerosol-generating system; determining whether the user associated with the aerosol-generating system is an authorized user; and, if the user is an authorized user, issuing an unlock grant, wherein the unlock grant permits the aerosol-generating system to transition from the locked state to the unlocked state.
[0108] Ex.58. The method as in Ex.57, wherein the unlock request comprises a unique device identifier identifying the aerosol-generating system.
[0109] Ex.59. The method as in any of Ex.30-Ex.58, wherein the method is computer-implemented. Ex.60. A computing system configured to perform the method as in any of Ex.30-Ex.59. Ex.61. A computer program (product) comprising instructions which, when executed by a computing system, enable or cause the computing system to perform the method as in any of Ex.30-Ex.59.PHILIP MORRIS PRODUCTS S.A. P17540WO 14
[0110] Ex.62. A computer-readable (storage) medium comprising instructions which, when executed by a computing system, enable or cause the computing system to perform the method as in any of Ex.30-Ex.59.
[0111] The examples described herein advantageously provide a means of readily implementing a user-friendly YAP solution for enabling an authorized user to unlock the aerosol-generating system with minimal or reduced user input and with minimal or reduced reliance on dedicated applications.
[0112] By confirming that the user of the aerosol-generating device is an authorized user using the techniques described herein, robust youth access prevention can be provided.
[0113] The aerosol-generating system may comprise an aerosol-generating device and optionally also a companion device for storing and / or charging the aerosol-generating device. The aerosolgenerating device may be designed as a handheld device that can be used by a user for consuming, for instance in one or more usage sessions (which may be referred to as "experiences), aerosol generated by an aerosol-generating article. The aerosol-generating article may comprise a precursor in liquid or solid form. The aerosol-generating article may comprise an aerosol-forming substrate, such as a tobacco containing substrate, often in the form of a stick. The stick can be configured in shape and size to be inserted at least partially into the aerosol-generating device. Other exemplary aerosol-generating articles may comprise a cartridge containing a liquid that can be vaporized during aerosol consumption by the user. Such cartridges can also be configured in shape and size to be inserted at least partially into the aerosol-generating device. The aerosol-generating device may comprise a heating element for heating the aerosol-generating article. The aerosol-generating device may comprise a receptacle for receiving the aerosol-generating article. Alternatively, the cartridge may be fixedly mounted to the aerosol-generating device and refilled by inserting liquid into the cartridge. The aerosol-generating device may alternatively be referred to as a reduced risk device (RRD), a heat-not-burn (HnB) device, or an e-vapor device.
[0114] The companion device, also describable as an auxiliary device, may comprise a charging case. The companion device may be configured to store and / or charge the aerosol-generating device. The companion device may be portable. The companion device may be configured for at least partially receiving the aerosol-generating device. For example, the companion device may be configured for being physically coupled to the aerosol-generating device. Such physical coupling can, for example, comprise a mechanical coupling based on an attachment means, such as a hook mechanism, a latch mechanism, a snap-fit mechanism or the like, based on which the aerosol-generating device can be mechanically coupled to the companion device and / or a housing thereof. Additionally or alternatively, the aerosol-generating device can be physically coupled to the companion device basedPHILIP MORRIS PRODUCTS S.A. P17540WO 15
[0115] on a magnetic or electromagnetic coupling. Additionally or alternatively, the aerosol-generating device can be at least partially inserted into the companion device, for example, into an opening of the companion device.
[0116] The aerosol-generating system (that is, the aerosol-generating device and / or the companion device) may comprise communications circuitry. The communications circuitry may be configured for wireless communication, for wired communication, or both. For instance, the communications circuitry may be configured for communicative coupling via an Internet connection, a wireless LAN connection, a WiFi connection, a Bluetooth connection including BLE, a mobile phone network, a 3G / 4G / 5G connection and so on, an edge connection, an LTE connection, a BUS connection, a wireless connection, a wired connection, a radio connection, a near field connection, an loT connection or any other connection using any appropriate communications protocol.
[0117] The aerosol-generating system (that is, the aerosol-generating device and / or the companion device) may comprise an energy supply for supplying the aerosol-generating device with energy. For example, the companion device may be configured to supply electrical energy to the aerosolgenerating device to charge the energy supply of the aerosol-generating device. In other words, the companion device may be configured to charge the aerosol-generating device, that is, its energy supply. The energy supply of the aerosol-generating device may, for example, comprise at least one battery, at least one accumulator, and / or at least one capacitor. The companion device may be configured to supply the energy supply of the aerosol-generating device with electrical energy, when the aerosol-generating device is at least partially received by the companion device. The companion device may comprise one or more batteries for supplying electrical energy to the energy supply of the aerosol-generating device. The companion device may be configured to supply the energy supply of the aerosol-generating device with electrical energy wirelessly, for example based on induction. Additionally or alternatively, the companion device may be configured to supply the energy supply of the aerosol-generating device with electrical energy via one or more electrical connectors between the companion device and the aerosol-generating device. For instance, the aerosol-generating device and the companion device may each include at least one electrical connector for electrically coupling the companion device with the aerosol-generating device, when the aerosol-generating device is at least partially received by the companion device. By way of example, the companion device may comprise an opening for at least partially receiving the aerosol-generating device. By at least partially inserting the aerosol-generating device into the opening, one or more electrical connections may be established between one or more electrical connectors of the aerosol-generating device and the companion device. Additionally or alternatively, the aerosol-generating device may be physically and / or mechanically coupled to the companion device, for example to a housing of the companionPHILIP MORRIS PRODUCTS S.A. P17540WO 16
[0118] device, such that the aerosol-generating device is at least partially received by the companion device and such that one or more electrical connections can be established between the aerosol-generating device and the companion device. Optionally, establishing an electrical connection between the companion device and the aerosol-generating device, for example via the one or more electrical connectors of the aerosol-generating device and the companion device, may establish a communicative coupling and / or a communication connection between the companion device and the aerosol-generating device. By way of example, the at least one electrical connector of the companion device may form part of the communications circuitry of the companion device. In other words, the at least one electrical connector of the companion device can be configured as communications circuitry for communicatively coupling the companion device with the aerosolgenerating device. Additionally or alternatively, the at least electrical connector of the aerosolgenerating device may form part of the communications circuitry of the aerosol-generating device. In other words, the at least one electrical connector of the aerosol-generating device can be configured as communications circuitry for communicatively coupling the aerosol-generating device with the companion device. It should be noted, however, that the communications circuitry of one or both of the companion device and the aerosol-generating device can be physically separate and independent from the at least one electrical connector of the companion device and / or the aerosol-generating device. A charge cycle may refer to a period of time, in which the aerosol-generating device is continuously supplied with electrical energy by the companion device. During a charge cycle, the at least one energy supply may be partly or entirely charged.
[0119] The user device as described herein may comprise any user equipment (UE) means equipment designed for consumer use, such as a smartphone or other mobile device, or a personal computer (PC), laptop, notebook, or tablet. The user device may be in the possession of the user or another entity or individual, such as a retail shop. Typically, the user device may be a handheld or portable device. However, alternatively, the user device may be a standalone or fixedly installed device. The user device may be equipped with communications circuitry configured to communicate with the aerosol-generating device and / or the companion device, using wireless and / or wired communication. For instance, the user device may be configured for being communicatively coupled with the aerosol-generating device and / or companion device via an Internet connection, a wireless LAN connection, a WiFi connection, a Bluetooth connection, a mobile phone network, a 3G / 4G / 5G connection and so on, an edge connection, an LTE connection, a BUS connection, a radio connection, a near field connection, an loT connection or any other connection using any appropriate communication protocol. The user device may comprise a user interface. The user device may comprise one or more processors for data processing, such as for processing one or more user inputsPHILIP MORRIS PRODUCTS S.A. P17540WO 17
[0120] received at the user interface. Additionally or alternatively, the user device may comprise data storage and / or memory for storing data, such as for example software instructions, a computer program, and / or other data.
[0121] As used herein, the term "locked state" may refer to a locked configuration of the aerosolgenerating device while the term "unlocked state" may refer to an unlocked configuration of the aerosol-generating device. The aerosol-generating device may be configured, when in the locked state, to prevent generation and / or delivery of aerosol and, when in the unlocked state, to permit generation and / or delivery of aerosol. This may mean that the aerosol-generating device, when in the locked state, is locked for aerosol consumption by the user and that the aerosol-generating device, when in the unlocked state, is unlocked for consumption of aerosol by the user. Accordingly, when the aerosol-generating device is in the locked state, the aerosol-generating device may not be actuatable by the user to generate and / or deliver aerosol, and, when the aerosol-generating device is in the unlocked state, the aerosol-generating device may be actuatable by the user to generate and / or deliver aerosol. In other words, in the locked state of the aerosol-generating device, access to one or more functions or functionalities of the aerosol-generating device, including aerosol generation and / or delivery, may be prohibited for the user, whereas, in the unlocked state of the aerosol-generating device, access to one or more functions or functionalities of the aerosolgenerating device, including aerosol generation and / or delivery, may be permitted for the user.
[0122] More particularly, the aerosol-generating device may be configured, when in the locked state, to prohibit activation of a heating element to generate aerosol. The aerosol-generating device may be configured, when in the locked state, to prohibit activation of the heating element based on at least one of: disabling the heating element; disabling an energy supply to the heating element, and disabling an input element for user activation of the heating element. Conversely, the aerosolgenerating device may be configured, when in the unlocked state, to permit activation of a heating element to generate aerosol. The aerosol-generating device may be configured, when in the unlocked state, to permit activation of the heating element based on at least one of: enabling the heating element; enabling the energy supply to the heating element, and enabling the input element for user activation of the heating element.
[0123] Additionally or alternatively, the companion device may be configured to charge the energy supply of the aerosol-generating device only if the aerosol-generating device is in the unlocked state. In this example, the locked state may be considered as the state in which the energy supply of the aerosol-generating device does not contain enough charge to cause aerosol to be generated, and the unlocked state may be considered as the state in which the energy supply contains enough charge to cause aerosol to be generated.PHILIP MORRIS PRODUCTS S.A. P17540WO 18
[0124] As used herein, the term "transition" may mean entering, configuring and / or switching the aerosol-generating device into the locked or unlocked state, which may mean or comprise actuating and / or configuring the aerosol-generating device such that the aerosol-generating device is in the locked or unlocked state.
[0125] As used herein, the term "user authorization" refers to determining the user's right to transition the aerosol-generating device from the locked state into the unlocked state, that is, their access rights. Only an authorized user is authorized to transition the aerosol-generating device from the locked state into the unlocked state for aerosol consumption. User authorization may involve secure data and account validation processes (for instance, mandatory two-factor identification, credit cart ID, GPS data provided by the user device to adjust the legal age to country legislation, and so on).
[0126] As used herein, the term "authorized user" denotes a user of full age, a user having reached the age threshold, a user having reached majority age, an adult, and / or a user that has been authorized by another authorized user, such as by the proprietor of the aerosol-generating device. An authorized user may be referred to as legal age user / legal age smoker (LAU / LAS). Further, an unauthorized user denotes an underage user, a user not having reached an age threshold, a minor, a child, or any other user who has not yet been authorized by an authorized user.
[0127] As used herein, the term "user verification" refers to verifying the identity of the user for confirming that the current user of the aerosol-generating device is an authorized user. Since, in the context of YAP methods, the user's identity is inherently bound to their access rights, the terms "authorization" and "verification" may in some circumstances be used interchangeably.
[0128] The term "circuitry", as used herein, may comprise, for example, singly or in any combination, hardwired circuitry, programmable circuitry such as computer processors comprising one or more individual instruction processing cores, state machine circuitry, and / or firmware that stores instructions executed by programmable circuitry. Modules may, collectively or individually, be embodied as circuitry that forms a part of one or more devices or systems as described herein.
[0129] The term "obtaining", as used herein, may comprise, for example, receiving from another system, device, or process; receiving via an interaction with a user; loading or retrieving from storage or memory; measuring or capturing using sensors or other data acquisition devices.
[0130] The term "determining", as used herein, encompasses a wide variety of actions, and may comprise, for example, calculating, computing, processing, deriving, investigating, looking up (e.g., looking up in a table, a database or another data structure), ascertaining, and the like. Also, "determining" may comprise receiving (e.g., receiving information), accessing (e.g., accessing data inPHILIP MORRIS PRODUCTS S.A. P17540WO 19
[0131] a memory), and the like. Also, "determining" may comprise resolving, selecting, choosing, establishing and the like.
[0132] The indefinite article "a" or "an" does not exclude a plurality. In addition, the articles "a" and "an" as used herein should generally be construed to mean "one or more" unless specified otherwise or clear from the context to be directed to a singular form.
[0133] Unless specified otherwise, or clear from the context, the phrases "one or more of A, B and C", "at least one of A, B, and C", and "A, B and / or C" as used herein are intended to mean all possible permutations of one or more of the listed items. That is, the phrase "A and / or B" means (A), (B), or (A and B), while the phrase "A, B, and / or C" means (A), (B), (C), (A and B), (A and C), (B and C), or (A, B, and C).
[0134] The term "comprising" does not exclude other elements or steps. Furthermore, the terms "comprising", "including", "having" and the like may be used interchangeably herein.
[0135] The invention may include one or more aspects, examples or features in isolation or combination whether specifically disclosed in that combination or in isolation. Any optional feature or sub-aspect of one of the above aspects applies as appropriate to any of the other aspects.
[0136] A detailed description will now be given, by way of example only, with reference to the accompanying drawings, in which:- FIG. 1 illustrates an aerosol-generating device;
[0137] FIG. 2 illustrates an initial user verification session according to a first example;
[0138] FIG. 3 illustrates an initial user verification session according to a second example;
[0139] FIGS. 4-6 illustrate ongoing user verification in various scenarios; and
[0140] FIG. 7 illustrates a computing system that can be used in accordance with the systems and methods disclosed herein.
[0141] FIG. 1 shows a block diagram of an aerosol-generating device 100. The aerosol-generating device 100 comprises a heating element 110, an input element 120, control circuitry 130, data storage circuitry 140, communications circuitry 150, and an energy supply 160.
[0142] The heating element 110 is configured to heat an aerosol-generating article for generating an aerosol for inhalation by a user of the aerosol-generating device 100. The heating element 110 obtains its energy from the energy supply 160 and is controlled by the control circuitry 130.PHILIP MORRIS PRODUCTS S.A. P17540WO 20
[0143] The input element 120 is configured for detecting a user interaction with the aerosolgenerating device 100, such as pressing a button, opening or closing a receptacle for the an aerosolgenerating article, performing a gesture by moving the device 100 in a particular manner, etc.
[0144] The control circuitry 130 is configured to control the overall operation of the aerosolgenerating device 100, which may comprise activating and deactivating the heating element 110, processing user input received via the input element 120, storing data in, and retrieving data from, the data storage circuitry 140, transmitting and receiving data via the communications circuitry 150, encrypting and decrypting data, monitoring and / or controlling flow of energy to and from the energy supply 160, and so on.
[0145] The data storage circuitry 140 is configured to store data relevant to the operation of the aerosol-generating device 100, including data relevant for user authorization and user verification. In an example, the data storage circuitry 140 comprises flash memory.
[0146] The communication circuitry 150 is configured to establish communications channels with external devices, in particular with a user device such as a smartphone and / or with a manufacturer server. In the example described herein, the communications circuitry 150 comprises a Bluetooth Low Energy (BLE) interface configured to operate using the Human Interface Device (HID) profile.
[0147] The energy supply 160 is configured to supply energy to all components of the aerosolgenerating device 100 that need it. The energy supply 160 may comprise a rechargeable battery, such as lithium ion battery or a lithium polymer battery.
[0148] The aerosol-generating device 100 is initially provided, for example following purchase by the user, in a locked state in which the aerosol-generating device 100 is prevented from generating or delivering aerosol. The locked state is implemented in one non-limiting example in that the aerosolgenerating device 100 is configured, when in the locked state, to prohibit activation of the heating element 100 to generate aerosol. For unlocking purposes, the aerosol-generating device 100 is configured to determine whether at least one unlocking condition is fulfilled and, in response to determining that the at least one unlocking condition is fulfilled, to transition the aerosol-generating device 100 from the locked state to an unlocked state in which the aerosol-generating device 100 is permitted to generate or deliver aerosol. The aerosol-generating device 100 is configured to remain in the locked state whenever it is determined that the at least one unlocking condition is not yet fulfilled. Furthermore, the aerosol-generating device 100 is configured to transition from the unlocked state back to the locked state in response to determining that the at least one unlocking condition is no longer fulfilled.PHILIP MORRIS PRODUCTS S.A. P17540WO 21
[0149] More particularly, the aerosol-generating device 100 implements youth access prevention (YAP) measures to prevent unauthorized users from unlocking the aerosol-generating device 100. The present disclosure aims to provide a user-friendly YAP solution for enabling an authorized user to unlock the aerosol-generating device 100 with minimal or reduced user input and with minimal or reduced reliance on dedicated applications. According to the present disclosure, separate provisions are made for initial user verification and ongoing user verification. In the former case, the aerosolgenerating device 100 participates in an initial user verification session for identifying a user device as a trusted user device in whose proximity the aerosol-generating device 100 may permissibly be used to generate or deliver aerosol. In the latter case, the aerosol-generating device 100 performs ongoing user verification for confirming that the trusted user device remains in the proximity of the aerosol-generating device 100 so that the aerosol-generating device 100 may permissibly (continue to) be used to generate or deliver aerosol.
[0150] FIG. 2 illustrates the initial user verification session, in which the user, the aerosol-generating device 100, and a user device 200 are participants, according to a first example. The aerosolgenerating device 100 and the user device 200 remain within communications range during the initial user verification session. The sessions begins in a state in which the aerosol-generating device 100 is in registration mode (which may be enabled by the user) and in which the user device 200 has BLE enabled. The aerosol-generating device 100 advertises itself an HID BLE-capable device by broadcasting a BLE advertising signal, which is detected by the user device 200, for example during a scan. The user device 200 sends a pairing request to the aerosol-generating device 100, which returns a pairing response. The pairing response triggers the user device 200 to display a request to the user to enter a verification code, which in this example is a PIN which has been provided to the user, for example within the packaging of the aerosol-generating device 100 or when the aerosolgenerating device 100 was registered with a server. In any case, the PIN is only provided to the user following successful user authorization to confirm that the user is an authorized user. The aerosolgenerating device 100 and the user device 200 then establish a secure communications for sending and receiving the verification code. Establishing the secure communications channel comprises a key exchange phase in which security keys to be used in communications via the secure communications channel are exchanged. The verification code is transmitted from the user device 200 to the aerosolgenerating device 100 via the secure (encrypted) communications channel. The user device 200 up to this point is untrusted. The aerosol-generating device 100 identifies the user device as being trusted in response to the received verification code being valid, meaning that it corresponds to an expected verification code. The expected verification code 146 is prestored on the aerosol-generating device 100 for use during the initial user verification session, as illustrated in FIG. 1. The expectedPHILIP MORRIS PRODUCTS S.A. P17540WO 22
[0151] verification code can be hardcoded into the aerosol-generating device 100 or it can be generated by any known method. Since the aerosol-generating device 100 has identified the user device 200 as being trusted and has established a secure communications channel with the trusted user device 200, demonstrating that the trusted user device 200 is in the proximity of the aerosol-generating device 100, the aerosol-generating device 100 determines that the at least one unlocking condition is fulfilled, and transitions to the unlocked state, for example by enabling the heating function. Pairing is now completed, and the aerosol-generating device 100 and the user device 200 proceed to a bonding phase in which both devices store the previously-exchanged keys for use in future communications between the aerosol-generating device 100 and the trusted user device 200 via the secure communications channel. Moreover, the aerosol-generating device 100 is configured to use the stored key for the purpose of the ongoing user verification, as described hereinbelow. The key 144 may be stored in the data storage circuitry 140 of the aerosol-generating device 100, as illustrated in FIG. 1.
[0152] In one convenient non-limiting implementation, the "Passkey Entry" pairing mode of BLE is leveraged for providing the verification code. In a typical implementation, Passkey Entry involves a 6-digit number being displayed on a first device, which needs to be entered on the second device for pairing between the two devices to occur. This would usually require the first device to have numeric output capability and the second device to have numeric input capability (e.g., a keyboard).
[0153] According to the present disclosure, this mechanism is counterintuitively leveraged by requiring the passkey to be entered into the user device 200 (which has numeric input capability) despite the aerosol-generating device 100 not possessing the requisite numeric output capability. Rather, as described above, the passkey is provided to the user in the form of the PIN, with the provision of this PIN being furthermore dependent on successful user authorization. During the above described BLE pairing process, the pairing request and pairing response are adapted such that, for each of the two devices 100 and 200, appropriate input and output capability is selected. More particularly, for the aerosol-generating device 100, it is indicated that the device 100 has no input capability (input capability: no input) along with the capability to provide numeric output (output capability: numeric output, as shown below in Table 1), to indicate falsely that the aerosol-generating device 100 has the ability to display or communicate the PIN. In reality, the PIN is provided separately to the user following successful user authorization. Meanwhile, the user device 200 may be indicated as having a keyboard as input capability and numeric output as output capability.PHILIP MORRIS PRODUCTS S.A. P17540WO 23
[0154]
[0155] Table 1
[0156] As is evident from FIG. 2 and its description above, the aerosol-generating device 100 may be unlocked in a YAP-compliant manner without the use of any additional, dedicated app on the user device 200.
[0157] FIG. 3 illustrates the initial user verification session according to a second example, which uses a web app on the user device 200 for the initial user verification session but which sets up the aerosol-generating device 100 for ongoing user verification without the need for the web app. The initial user verification session according to the second example differs from the first example in the manner of PIN entry. In this example, the pairing response does not prompt the user device 200 to request PIN entry and the pairing consequently completes without that. Following the bonding phase, the aerosol-generating device 100 sends its unique device ID (e.g., a serial number or a "Codentify" value, that is, a unique, multidigit alphanumeric value) to the user device 200 via the secure communications channel. The unique device ID 142 may be prestored on the aerosolgenerating device 100, as illustrated in FIG. 1. The user device 200 uses the web app to facilitate user registration of the aerosol-generating device 100. At this point, the user device 200 participates in a user authorization process for confirming that the user is authorized to operate the aerosolgenerating device 100 to generate aerosol. The user device 200 may communicate with a server (not shown) for participating in the user authorization process. Following successful user authorization, a verification code is generated by the user device 200 or server in the form of a unique PIN, which is sent via the secure communications channel to the aerosol-generating device 200 for verifying that the user device 200 is trusted. In this case, the expected verification code, i.e., that which is compared for validation purposes with the PIN received from the user device 200, may comprise, or be derivable from, the unique ID 142 of the aerosol-generating device 100. As in the first example, the exchanged keys 144 are stored for ongoing user verification. Once again, establishment of the secure communications channel confirms that the trusted user device 200 remains in the proximity of the aerosol-generating device 100 to signal permission to generate aerosol.PHILIP MORRIS PRODUCTS S.A. P17540WO 24
[0158] FIGS. 4-6 illustrate ongoing user verification in various different scenarios. All of these scenarios take place at a timepoint after the initial user verification session was conducted to identify the user device 200 as a trusted device and to exchange keys. As described above, the aerosolgenerating device 100 stores the key that was exchanged during pairing, which then serves as a valid password for unlocking the aerosol-generating device 100, whereby the password, when provided by the trusted user device 200 in communications with the aerosol-generating device 100 via the secure communications channel, confirms that the trusted user device 200 remains in the proximity of the aerosol-generating device 100 such that aerosol can be generated in a YAP-compliant manner.
[0159] Advantageously, ongoing user verification may be carried out in this way without the use of any dedicated app on the user device 200. This is possible because the HID BLE protocol allows the user device 200 to connect automatically with the aerosol-generating device 100. Moreover, the user device 200 can establish the secure communications channel even in the standby mode.
[0160] FIG. 4 pertains to a scenario in which the aerosol-generating device 100 and the user device 200 are within communications range of each other and in which the secure communications can be successfully (re)established. More particularly, the aerosol-generating device 100 begins advertising its presence after the user switches it on, for example following an idle period. At this point, the aerosol-generating device is in the locked state. BLE in the user device 200 is enabled at this point, such that the connection process can be started and the secure communications channel established. In response to successful establishment of the secure communications channel with the trusted user device 200, the aerosol-generating device 100 determines that the at least one unlocking condition is fulfilled and transitions from the locked state to the unlocked state.
[0161] FIG. 5 pertains to a scenario in which the aerosol-generating device 100 and the user device 200 are not within communications range of each other such that the secure communications cannot be (re)established. In this scenario, the ongoing user verification proceeds as in FIG. 4, except that the user device 200 fails to respond to the BLE advertising signal broadcast by the aerosol-generating device 100, by reason of its being outside wireless communications range with the aerosolgenerating device 100. Hence, the secure communications channel cannot be established, and the aerosol-generating device 100 therefore determines that the at least one unlocking condition is unfulfilled and remains in the locked state.
[0162] FIG. 6 pertains to a scenario in which the secure communications cannot be (re)established despite the aerosol-generating device 100 and the user device 200 being within communications range of each other. In this scenario, the ongoing user verification proceeds as in FIG. 5, except that BLE is disabled in the user device 200, such that the user device 200 does not receive the BLE advertising signal broadcast by the aerosol-generating device 100 and the secure communicationsPHILIP MORRIS PRODUCTS S.A. P17540WO 25
[0163] channel cannot be established. The aerosol-generating device 100 therefore determines that the at least one unlocking condition is unfulfilled and remains in the locked state.
[0164] Different keys may be used as the key which is stored to serve as a password in ongoing user verification. In one non-limiting example, this is the long term key (LTK) used in BLE HID. In other examples, the key may comprise the temporary key (TK) or the short term key (STK).
[0165] Numerous variants to the systems and methods described herein may be envisaged. For example, in one variant to the first example of the initial user verification session, several PIN codes are used to differentiate users. In an example, a couple uses the same aerosol-generating device 100 and wants to have their own profiles, so the aerosol-generating device 100 is provided with two prestored PIN codes, one for partner 1 (e.g., 123456) and one for partner 2 (e.g., 654321). Based on the PIN code provided to it, the aerosol-generating device 100 knows which user is starting the experience. In case user devices 200 of both partners are present, the one with the best RSSI (signal strength) may be selected by the aerosol-generating device 100.
[0166] In another variant, the acceptance RSSI (signal strength) of the aerosol-generating device 100 is reduced to limit its communications range and thereby provide improved certainty that the user device 200 is in the proximity of the aerosol-generating device 100. This value may be configurable depending on user preference or market legislation.
[0167] In yet another variant, a dongle is used in place of the user's smartphone as the user device 200 in case the smartphone is out of service. The dongle is configured to pair with the aerosolgenerating device 100 as a backup if no smartphone is in range.
[0168] In a further variant, a temporary PIN code is used when the user lends the aerosol-generating device 100 to a friend. The validity of the PIN may be time-limited experience-limited (for example, 20 usage sessions). The temporary PIN may be generated each time on demand or a fixed guest PIN may be used with a time limit enforced by the aerosol-generating device 100 based on the connection with the guest user device.
[0169] In a variant to the example illustrated in FIG. 1, the control circuitry which carries out the methods described herein instead forms part of the companion device for the aerosol-generating device. In this variant, the control circuitry is configured to send an unlocking signal from the companion device to the aerosol-generating device in response to determining that the at least one unlocking condition is fulfilled, and a locking signal from the companion device to the aerosolgenerating device in response to determining that the at least one unlocking condition is unfulfilled. In a further variant, the control circuitry is distributed between the aerosol-generating device and the companion device.PHILIP MORRIS PRODUCTS S.A. P17540WO 26
[0170] FIG. 7 illustrates an exemplary computing system 800 that can be used in accordance with the systems and methods disclosed herein. The computing system 800 may form part of or comprise any desktop, laptop, server, or cloud-based computing system. The computing system 800 includes at least one processor 802 that executes instructions that are stored in a memory 804. The instructions may be, for instance, instructions for implementing functionality described as being carried out by one or more components described herein or instructions for implementing one or more of the methods described herein. The processor 802 may access the memory 804 by way of a system bus 806. In addition to storing executable instructions, the memory 804 may also store conversational inputs, scores assigned to the conversational inputs, etc.
[0171] The computing system 800 additionally includes a data store 808 that is accessible by the processor 802 by way of the system bus 806. The data store 808 may include executable instructions, log data, etc. The computing system 800 also includes an input interface 810 that allows external devices to communicate with the computing system 800. For instance, the input interface 810 may be used to receive instructions from an external computer device, from a user, etc. The computing system 800 also includes an output interface 812 that interfaces the computing system 800 with one or more external devices. For example, the computing system 800 may display text, images, etc. by way of the output interface 812.
[0172] It is contemplated that the external devices that communicate with the computing system 800 via the input interface 810 and the output interface 812 can be included in an environment that provides substantially any type of user interface with which a user can interact. Examples of user interface types include graphical user interfaces, natural user interfaces, and so forth. For instance, a graphical user interface may accept input from a user employing input device(s) such as a keyboard, mouse, remote control, or the like and provide output on an output device such as a display. Further, a natural user interface may enable a user to interact with the computing system 800 in a manner free from constraints imposed by input device such as keyboards, mice, remote controls, and the like. Rather, a natural user interface can rely on speech recognition, touch and stylus recognition, gesture recognition both on screen and adjacent to the screen, air gestures, head and eye tracking, voice and speech, vision, touch, gestures, machine intelligence, and so forth.
[0173] Additionally, while illustrated as a single system, it is to be understood that the computing system 800 may be a distributed system. Thus, for instance, several devices may be in communication by way of a network connection and may collectively perform tasks described as being performed by the computing system 800.PHILIP MORRIS PRODUCTS S.A. P17540WO 1
[0174] Alternatively, or in addition, the functionally described herein can be performed, at least in part, by one or more hardware logic components. For example, and without limitation, illustrative types of hardware logic components that can be used include Field-programmable Gate Arrays (FPGAs), Application-specific Integrated Circuits (ASICs), Application-specific Standard Products (ASSPs), System-on-a-chip systems (SOCs), Complex Programmable Logic Devices (CPLDs), etc.
[0175] The applicant hereby discloses in isolation each individual feature described herein and any combination of two or more such features, to the extent that such features or combinations are capable of being carried out based on the present specification as a whole in the light of the common general knowledge of a person skilled in the art, irrespective of whether such features or combinations of features solve any problems disclosed herein, and without limitation to the scope of the claims. The applicant indicates that aspects of the present invention may consist of any such individual feature or combination of features.
[0176] It has to be noted that embodiments of the invention are described with reference to different categories. In particular, some examples are described with reference to methods whereas others are described with reference to apparatus. However, a person skilled in the art will gather from the description that, unless otherwise notified, in addition to any combination of features belonging to one category, also any combination between features relating to different category is considered to be disclosed by this application. However, all features can be combined to provide synergetic effects that are more than the simple summation of the features.
[0177] While the invention has been illustrated and described in detail in the drawings and foregoing description, such illustration and description are to be considered exemplary and not restrictive. The invention is not limited to the disclosed embodiments. Other variations to the disclosed embodiments can be understood and effected by those skilled in the art, from a study of the drawings, the disclosure, and the appended claims.
[0178] The mere fact that certain measures are recited in mutually different dependent claims does not indicate that a combination of these measures cannot be used advantageously.
[0179] Any reference signs in the claims should not be construed as limiting the scope.
Claims
PHILIP MORRIS PRODUCTS S.A. P17540WO 28CLAIMS1. Control circuitry for an aerosol-generating system, the aerosol-generating system having a locked state in which the aerosol-generating system is prevented from generating or delivering aerosol and an unlocked state in which the aerosol-generating system is permitted to generate or deliver aerosol, wherein the control circuitry is configured to:determine whether at least one unlocking condition is fulfilled; andin response to determining that the at least one unlocking condition is fulfilled, transition the aerosol-generating system from the locked state to the unlocked state,wherein the control circuitry is configured to participate in an initial user verification session for identifying a user device as a trusted user device in whose proximity the aerosol-generating system may permissibly be used to generate or deliver aerosol, andwherein the control circuitry is configured to determine that the at least one unlocking condition is fulfilled in response to successful establishment of a secure communications channel with the trusted user device.
2. The control circuitry as claimed in claim 1, wherein the control circuitry is configured to receive, during the initial user verification session, a verification code from the as-yet-untrusted user device, and to identify the user device as being trusted in response to the received verification code corresponding to an expected verification code.
3. The control circuitry as claimed in claim 2, wherein the control circuitry is configured to retrieve the expected verification code, which is prestored on the aerosol-generating system for use during the initial user verification session.
4. The control circuitry as claimed in claim 2 or 3, wherein the expected verification code comprises, or is derivable from, a unique identification code of the aerosol-generating system.
5. The control circuitry as claimed in any preceding claim, wherein the control circuitry is configured to establish a secure communications channel with the as-yet-untrusted user device for receiving the verification code, wherein establishing the secure communications channel comprises a key exchange phase in which security keys to be used in communications via the secure communications channel are exchanged.PHILIP MORRIS PRODUCTS S.A. P17540WO 296. The control circuitry as claimed in claim 5, wherein the control circuitry is configured to store one or more of the exchanged security keys in the aerosol-generating system for use in future communications between the aerosol-generating system and the trusted user device via the secure communications channel.
7. The control circuitry as claimed in any preceding claim, wherein the control circuitry is configured to perform ongoing user verification for confirming that the trusted user device remains in the proximity of the aerosol-generating system so that the aerosol-generating system may permissibly be used to generate or deliver aerosol.
8. The control circuitry as claimed in claims 6 and 7 , wherein the control circuitry is configured to use the stored one or more security keys for the purpose of the ongoing user verification.
9. The control circuitry as claimed in claim 8, wherein the stored one or more security keys serve as a password which, when provided by the trusted user device in communications with the aerosol-generating system via the secure communications channel, confirms that the trusted user device remains in the proximity of the aerosol-generating system.
10. The control circuitry as claimed in any of claims 7-9, wherein the control circuitry is configured to confirm that the trusted user device remains in the proximity of the aerosol-generating system by receiving, from the trusted user device via the secure communications channel, communications which are resolvable using the stored one or more security keys.
11. The control circuitry as claimed in any preceding claim, wherein the stored one or more security keys comprise a long term key to be used in relation to all present and future communications via the secure communications channel between the aerosol-generating system and the trusted user device.
12. The control circuitry as claimed in any preceding claim, wherein the secure communications channel is established using Bluetooth Low Energy (BLE), Human Interface Device (HID) profile.PHILIP MORRIS PRODUCTS S.A. P17540WO 3013. An aerosol-generating device, or a companion device for an aerosol-generating device, or an aerosol-generating system comprising at least one of the aerosol-generating device and the companion device, wherein the aerosol-generating device or the companion device or the aerosol-generating system comprises the control circuitry as claimed in any preceding claim.
14. A method of unlocking an aerosol-generating system, wherein the aerosolgenerating system has a locked state in which the aerosol-generating system is prevented from generating or delivering aerosol and an unlocked state in which the aerosol-generating system is permitted to generate or deliver aerosol, the method comprising:determining whether at least one unlocking condition is fulfilled; andin response to determining that the at least one unlocking condition is fulfilled, transitioning the aerosol-generating system from the locked state to the unlocked state, the method further comprising:participating in an initial user verification session for identifying a user device as a trusted user device in whose proximity the aerosol-generating system may permissibly be used to generate or deliver aerosol, anddetermining that the at least one unlocking condition is fulfilled in response to successful establishment of a secure communications channel with the trusted user device.
15. A computer-readable medium storing instructions which, when executed by a computing system, instruct the computing system to perform the method as claimed in claim 14.