EP4167785A1

EP4167785A1 - Aerosol generation device user authentication

Info

Publication number: EP4167785A1
Application number: EP21733798.9A
Authority: EP
Inventors: Theo Verlaan
Original assignee: JT International SA
Current assignee: JT International SA
Priority date: 2020-06-18
Filing date: 2021-06-17
Publication date: 2023-04-26
Also published as: JP2023531198A; WO2021255167A1

Abstract

An aerosol generation device user authentication unit (200) is provided. The user authentication unit comprises a controller (202) and one or more user authentication input means (204) configured to detect a plurality of types of user input. The controller is configured to detect a first user input and a second user input at the one or more user authentication input means (S402), determine a first authentication score for the first user input (S404-1), determine a second authentication score for the second user input (S404-2), determine an overall authentication score (S406), wherein the overall authentication score is based upon a combination of the first authentication score and the second authentication score, and control the user authentication unit to perform a first action when the overall authentication score is determined to meet a predetermined requirement (S408).

Description

Aerosol Generation Device User Authentication Field of Invention

The present application relates to aerosol generation devices, or electronic cigarettes, and more specifically user authentication for aerosol generation devices.

Background

Aerosol generation devices such as electronic cigarettes and other aerosol inhalers or vaporisation devices are becoming increasingly popular consumer products.

Heating devices for vaporisation or aerosolisation are known in the art. Such devices typically include a heater arranged to heat a vaporisable or aerosolisable product. In operation, the vaporisable or aerosolisable product is heated with the heater to vaporise or aerosolise the constituents of the product for the consumer to inhale. In some examples, the product may comprise tobacco and may be similar to a traditional cigarette, in other examples the product may be a liquid, or liquid contents in a capsule.

There is a need for robust and efficient user authentication in such devices. An object of the invention is, therefore, to address such a challenge.

Summary

According to a first aspect, there is provided an aerosol generation device user authentication unit, the user authentication unit comprising a controller and one or more user authentication input means configured to detect a plurality of types of user input, wherein the controller is configured to: detect a first user input and a second user input at the one or more user authentication input means, wherein the first user input is of a first type of input and the second user input is of a second type of input; determine a first authentication score for the first user input, wherein the first authentication score is based upon a comparison of the first user input to corresponding first predetermined authentication data; determine a second authentication score for the second user input, wherein the second authentication score is based upon a comparison of the second user input to corresponding second predetermined authentication data; determine an overall authentication score, wherein the overall authentication score is based upon a combination of the first authentication score and the second authentication score; and control the user authentication unit to perform a first action when the overall authentication score is determined to meet a predetermined requirement.

Aerosol generation devices can be locked to prevent accidental or unauthorised use. Unlocking can be achieved by biometric-based input tests or knowledge- based input tests such as passwords. These input tests are binary based systems in that they either passed and the device is unlocked, or they are failed and the device is not unlocked. Errors in the input result in the device being locked until the test is fully passed. For the user of the aerosol generation device, it is of importance to be able to unlock the device in an efficient manner. Failure to unlock the device, by an authorised user, results in a negative user experience.

The first aspect provides for an improved user experience by using more than one type of user input in an authentication process. An authentication score is determined for each type of user input, and these are combined to determine an overall authentication score. When this overall authentication score meets a predetermined requirement, a first action is performed. A non-perfect authentication score from a first user input can be offset by the authentication score of the second user input. For example, a slightly mistyped password or the detection of only a partial fingerprint can, for example, unlock the device provided that the second user input increases the overall authentication score to meet the predetermined requirement. In this way, the authentication is not a binary pass/fail based upon a single user input and the operator can unlock the device whilst inputting a non-perfect user input. This improves the user experience as it allows for an authorised user to efficiently unlock the aerosol generation device. Furthermore, this allows for the device to incorporate noisier, but cheaper to implement, user input means whilst still ensuring adequate levels of security in the user authentication.

Optionally, the first authentication score is based upon how closely the first user input matches the first predetermined authentication data, and the second authentication score is based upon how closely the second user input matches the second predetermined authentication data.

Optionally, the first type of input and the second type of input are different types of input.

Optionally, the overall authentication score is determined to meet the predetermined requirement when the overall authentication score is determined to be indicative of an authorised user having provided the user inputs.

Optionally, the overall authentication score is determined to be indicative of an authorised user having provided the user inputs when the overall authentication score is greater than or equal to a threshold authentication score.

Optionally, the controller is configured to detect the first user input and the second user input concurrently.

In this way, user input types of a lower security level can be simultaneously detected and combined to provide an overall higher security level without substantially increasing the time taken for the authentication process.

Optionally, the controller is configured to detect the first user input in a predetermined time period defined by the first type of input, and to detect the second user input within the predetermined time period defined by the first type of input.

In this way, the detection of both user inputs can be completed in the same time period. Optionally, the controller is configured to: detect the first user input; determine the first authentication score for the first user input; control the user authentication unit to perform the first action when determining that the first authentication score meets a preliminary predetermined requirement; detect the second user input when determining that the first authentication score does not meet the preliminary predetermined requirement; determine the second authentication score for the second user input; and determine the overall authentication score wherein the overall authentication score is based upon the combination the first authentication score and the second authentication score.

In this way, when the first user input meets the preliminary predetermined requirement, the second user input is not detected. This improves the processing time and reduces power consumption.

Optionally, the controller is configured to: detect the first user input; determine the first authentication score for the first user input; control the user authentication unit to perform the first action when determining that the first authentication score meets a preliminary predetermined requirement; detect the second user input and a third user input, wherein the third user input is of a third type of input, in a user input detection period when determining that the first authentication score of the first user input does not meet the preliminary predetermined requirement; determine the second authentication score for the second user input and a third authentication score for the third user input, wherein the third authentication score is based upon a comparison of the third user input to corresponding third predetermined authentication data; and determine the overall authentication score based upon the combination of the first authentication score, and the second authentication score, and the third authentication score.

In this way, flexibility can be provided in the authentication process in the ordering and combination of the detection of the user inputs. This allows for the process to be tailored to limit power consumption, or minimise the processing time, for example.

Optionally, the controller is configured to: detect the first user input in a first time period; detect the second user input in a second time period overlapping the first time period; determine the first authentication score for the first user input, stop detecting the second user input, and control the user authentication unit to perform the first action, when determining the first authentication score meets a preliminary predetermined requirement; and determine the second authentication score for the second user input, and determine the overall authentication score based upon the combination of the first authentication score and the second authentication score when determining the first authentication score does not meet the preliminary predetermined requirement.

In this way, the authentication score for the fastest user input (i.e. the first user input) to be detected is determined first. When this first authentication score meets the preliminary predetermined requirement the detection of the second user input can be terminated thereby providing a faster authentication process and reducing power consumption. When the authentication score of the first user input does not meet the preliminary predetermined requirement, the detection of the second user input can be completed and the second authentication score can be determined and combined with the first authentication score for the overall authentication score. In this way, the speed of the authentication process can be improved without negatively impacting the likelihood of an authorised operator successfully meeting the predetermined requirement. Optionally, the first authentication score is determined to meet the preliminary predetermined requirement when the first authentication score is determined to be indicative of an authorised user having provided the first user input, and to not meet the preliminary predetermined requirement when the first authentication score is determined to not be indicative of an authorised user having provided the first user input.

Optionally, the first action comprises unlocking the aerosol generation device.

Optionally, the one or more user authentication input means comprises at least one of: a button sensor module, wherein the type of user input comprises a number of button actuations, and/or a time between button actuations, and/or a force of a button actuation; a fingerprint scan module, wherein the type of user input comprises a scan of a fingerprint of the user by a fingerprint sensor; a body impedance measurement module, wherein the type of user input comprises a measurement of body impedance of the user by the body impedance measurement scanner; a password module, wherein the type of user input comprises an input password received by the password module; a motion sensor module, wherein the type of user input comprises device motion detected by a motion sensor; or a facial recognition module, wherein the type of user input comprises a facial recognition scan of the user by a facial recognition scanner.

According to a second aspect, there is provided an aerosol generation device comprising the aerosol generation device user authentication unit of the first aspect.

According to a third aspect, there is provided an aerosol generation device user authentication method performed at a user authentication unit of an aerosol generation device, the method comprising: detecting a first user input and a second user input at one or more user authentication input means configured to detect a plurality of types of user input, wherein the first user input is of a first type of input and the second user input is of a second type of input; determining a first authentication score for the first user input, wherein the first authentication score is based upon a comparison of the first user input to corresponding first predetermined authentication data; determining a second authentication score for the second user input, wherein the second authentication score is based upon a comparison of the second user input to corresponding second predetermined authentication data; determining an overall authentication score, wherein the overall authentication score is based upon a combination of the first authentication score and the second authentication score; and controlling the user authentication unit to perform a first action when the overall authentication score is determined to meet a predetermined requirement.

According to a fourth aspect, there is provided a non-transitory computer-readable medium storing instructions thereon which when executed by one or more processors cause the one or more processors to control an aerosol generation device user authentication unit, wherein the instructions cause the one or more processors to perform steps comprising: detecting a first user input and a second user input at one or more user authentication input means configured to detect a plurality of types of user input, wherein the first user input is of a first type of input and the second user input is of a second type of input; determining a first authentication score for the first user input, wherein the first authentication score is based upon a comparison of the first user input to corresponding first predetermined authentication data; determining a second authentication score for the second user input, wherein the second authentication score is based upon a comparison of the second user input to corresponding second predetermined authentication data; determining an overall authentication score, wherein the overall authentication score is based upon a combination of the first authentication score and the second authentication score; and controlling the user authentication unit to perform a first action when the overall authentication score is determined to meet a predetermined requirement.

Brief Description of the Drawings

Embodiments of the invention are now described, by way of example, with reference to the drawings, in which:

Figures 1 A and 1 B are schematic diagrams of an aerosol generation device; Figure 2 is a block diagram of an authentication unit;

Figure 3 is a block diagram of an authentication unit comprising various types of exemplary user input means;

Figure 4 is a flow diagram of an aerosol generation device user authentication process; Figure 5 is a flow diagram of an implementation of the aerosol generation device user authentication process according to Figure 4;

Figure 6 is a flow diagram of another implementation of the aerosol generation device user authentication process according to Figure 4;

Figure 7 is a flow diagram of another implementation of the aerosol generation device user authentication process according to Figure 4; and

Figure 8 is a flow diagram of another implementation of the aerosol generation device user authentication process according to Figure 4. Detailed Description

Figures 1A and 1 B show schematic illustrations of an aerosol generation device 100, also known as a vapor generation device or electronic cigarette. For the purposes of the present disclosure, it will be understood that the terms vapour and aerosol are interchangeable.

In such an embodiment, the aerosol generation device 100 has a main body 104 and a connectable mouthpiece portion 102.

The mouthpiece portion 102 comprises a liquid store 106 and a mouthpiece 108 which form a single entity. That is, a liquid store 106, arranged to contain a vaporisable liquid, is part of the mouthpiece portion 102, such that the mouthpiece portion 102 including the liquid store 106 is removable from the main body 104, and interchangeable. The mouthpiece portion 102 can be thought of as a liquid store, or cartridge, 106 with a mouthpiece 108.

The main body 104 comprises a battery for providing power to the aerosol generation device 100, and control electronics for controlling the operation of the aerosol generation device 100. In particular, an atomizer 116 in the mouthpiece portion 102 is powered and controlled by the battery and control electronics in the main body 104. The main body 104 can further comprise a user operable button for functions such as switching the aerosol generation device on and off, and engaging a heater of the atomizer to aerosolise or vaporise a vaporisable liquid from the liquid store 106. The control electronics, or controller, comprise one or more processors and memory storing operating instructions for the aerosol generation device 100. In an example, the control electronics may be comprised in a microcontroller unit. The mouthpiece portion 102 comprises a mouthpiece 108 with an opening or orifice 110 at a first end portion 112, and an atomizer 116 at a second end portion 114 (the second end portion 114 being a distally opposite end to the first end portion 112). The second end portion 114 of the mouthpiece portion further comprises an electrical contact 118 arranged to engage the main body 104 to create an electric connection between the atomizer 116 and the battery and controller, that is a power and control electric connection for the atomizer 116.

Figure 1A shows the mouthpiece portion 102 separate to the main body 104. Figure 1B shows the mouthpiece portion 102 engaged with the main body 104.

A liquid store 106 is arranged between the first end portion 112 and the second end portion 114 of the mouthpiece portion 102, and a vapor flow tube 120 extends from the atomizer 116 at the second end 114 of the mouthpiece portion 102, through the liquid store 106, to the mouthpiece opening 110 at the first end 112 of the mouthpiece portion 102. That is, the vapor flow tube 120 has a portion in the liquid store 106 connecting to the atomizer 116, and a portion in the mouthpiece 108 connecting to the mouthpiece opening 110.

The atomizer 116 comprises a fluid transfer element, such as a wick or any other suitable means to transfer liquid, and a heater. The fluid transfer element is arranged to wick liquid from the liquid store 106 to the heater. The heater then heats and vaporises the liquid to generate a vapor.

When the mouthpiece portion 102 and main body 104 are brought into connection with one another, the electrical contact 118 and liquid store 106 are received within the main body 104. In doing so, the electrical contact 118 of the mouthpiece portion 102 is brought into connection with a corresponding contact within the main body 104, thereby allowing for the main body 104 to power and control the atomizer 116.

In use, power is applied from the battery, by the controller, to the heater in the atomizer 116. The heater then heats liquid wicked to the heater, by the fluid transfer element, and generates a vapor. When a consumer inhales upon the opening 110 in the mouthpiece 108, the generated vapor is drawn by the mouthpiece 108 along a vapor flow path, or vapor flow channel 105; this comprises the vapor being drawn through the vapor flow tube 120, from the atomizer 116, and to the mouthpiece opening 110. The consumer can then inhale the generated vapor. This can be considered an aerosolisation or vaporisation session.

In an example, when the liquid in the liquid store 106 has run out, the mouthpiece portion 102 can be removed from main body 104 and replaced with a fresh mouthpiece portion 102. In another example, the liquid store 106 in the mouthpiece portion 102 can be refilled with fresh liquid.

In examples, the aerosol generation device 100 may also include an indicator 122 such as a light emitting indicator (for example one or more light emitting diodes), an audio emitting indicator (for example a speaker) or a display screen. In the particular example of Figure 1, the indicator 122 is arranged in the main body 104. In various examples, the indicator 122 is used to convey internal operational state information of the aerosol generation device 100.

It will be readily understood that the subject matter described subsequently can be readily applied to any type of aerosol generation device, vapour generation device or electronic cigarette, and not just the type described with reference to Figures 1 A and 1 B. Such other types of device may, for example, include without being limited to devices with an integral liquid reservoir arranged to receive a vaporisable liquid that can be vaporised by a vaporiser in the device, devices that receive cartridges or capsules of liquid or fibrous material for vapor or aerosol generation, devices configured to receive and heat tobacco products such as plugs or cigarette-like consumables without burning the tobacco so as to form an aerosol, and the like.

Figure 2 shows a block diagram of an authentication unit 200 configured for use with an aerosol generation device 100 such as, but not limited to, that described with reference to Figures 1A and 1B.

The authentication unit 200 comprises one or more user authentication input means 204 that are configured to detect a plurality of types of user input. That is, the authentication unit 200 can comprise one or more user authentication input means 204 configured to detect a plurality of user inputs, or a plurality of user authentication input means 204 each configured to detect one or more types of user input. User inputs can be of a knowledge-based type (such as a password), or a biometric type (such as a fingerprint scan).

The authentication unit 200 further comprises a controller 202 configured to carry out the user authentication process. The one or more user authentication input means 204 (also referred to as user input means 204) are connected to and in communication with the controller 202. The controller 202 is configured to detect user inputs at the user input means 204 and determine authentication scores for the user inputs. The controller 202 can determine an overall authentication score based upon these authentication scores and can unlock the aerosol generation device 100 if the overall authentication score meets or exceeds a threshold.

The controller 202 can be the main controller 202 of the aerosol generation device 100 or a separate controller in connected to the main controller, and the user input means 204 can be various user input means 204 also integrated into the aerosol generation device 100. The combination of the controller 202 and the one or more user input means 204 forms the authentication unit 200.

Figure 3 shows a block diagram of an exemplary authorisation unit comprising the controller 202 and various user input means 204. In examples, the user input means 204 can comprise one or more of a fingerprint scan module 204-1 , a password module 204-2, a facial recognition module 204-3, a button sensor module 204-4, a motion sensor module 204-5, and/or a body impedance measurement module 204-6.

In more detail, the fingerprint scan module 204-1 can be implemented using a fingerprint scanner or sensor integrated into the body of the aerosol generation device 100. In the example of the fingerprint scan module 204-1 , the user input can comprise a scan of a fingerprint or thumbprint of the operator of the aerosol generation device 100.

The password module 204-2 can be implemented using an interface such as a touchscreen, or physical keypad, integrated into the body of the aerosol generation device 100. In the example of the password module 204-2, the user input can comprise a password, passcode, passphrase or the like.

The facial recognition module 204-3 can be implemented using a camera or face scanner integrated into the body of the aerosol generation device 100. In the example of the facial recognition module 204-3, the user input can comprise a facial recognition scan of the operator’s face providing facial biometrics.

The button sensor module 204-4 can be implemented using a button integrated into the body of the aerosol generation device 100, with the button sensor module 204-4 arranged to detect when the button is actuated. The button may be a depressible button, a capacitive button, a touchscreen interface button, or any other suitable type of button. In the example of the button sensor module 204-4, the user input can comprise a number of button actuations, and/or a time between button actuations, and/or a force of button actuation.

The motion sensor module 204-5 can be implemented using an accelerometer integrated into the aerosol generation device 100. The accelerometer may be a 2D accelerometer configured to detect movement of the aerosol generation device 100 in two dimensions. Alternatively, the accelerometer may be a 3D accelerometer configured to detect movement of the aerosol generation device 100 in three dimensions. In the example of the motion sensor module 204-5, the user input can comprise characteristic movements, or micro-movements, of the aerosol generation device 100 when held by the operator.

The body impendence measurement module can be implemented using a body impedance measurement circuit integrated into the aerosol generation device 100. For example, two or more body impedance measurement electrodes may be arranged into the aerosol generation device 100, and configured to measure the body impedance of the operator using bioelectrical impedance analysis. In the example of the body impedance measurement module 204-6, the user input can comprise a body impedance measurement of the operator as measured using bioelectrical impedance analysis. Any of the aforementioned user input means 204 can be used as the one or more user input means 204 in the user authentication processes subsequently described with reference to Figures 4 to 8. It is noted that the authentication unit 200 need not comprise each of the aforementioned user input means 204, and need not be limited to only these specific user input means 204. Any suitable type of user input means 204 can be used in the authentication processes described with reference to Figures 4 to 8. For example, suitable types of user input means can be any type of biometric or knowledge-based identification technology suitable to be integrated into an aerosol generation device 100.

Figure 4 presents a process flow executed by the controller 202 in a user authentication process.

At step S402 a first user input and a second user input are detected at the one or more user authentication input means 204. The first user input is of a first type, and the second user input is of a second different type. The two different types of user input can be different types of user input detected at different user input means 204, or different types of user input detected at the same user input means 204. For example, the first user input may be a fingerprint scan detected at the fingerprint scan module 204-1 , and the second user input may be a facial recognition scan detected at the facial recognition module 204-3. In another example, the first user input may be a number of button actuations detected at the button sensor module 204-4, and the second user input may be a time between the button actuations detected at the button sensor module 204-4.

The controller 202 can be configured to detect the first user input in a predetermined time period defined by the first type of input, and to detect the second user input within the predetermined time period defined by the first type of input. For example, when detecting a continuous user input, such as movement detection with the motion sensor module 204-5, a time period for detecting the continuous user input can be defined based upon the time period required for a fixed time user input, such as entering a password or scanning a fingerprint. In this way, both the continuous user inputs and fixed time user inputs are detectable contemporaneously and the detection for both can be completed at the same time. The detected user inputs can be stored in memory associated with the controller 202. This storing can either take place when the detection is complete, or as a running update as the user inputs are detected.

The operator of the device 100 can initiate the authentication process. In an example, step S402 can be initiated in response to the detection by a user input means 204 that an operator of the device 100 is attempting to provide a user input. In another example, step S402 can be initiated in response to an operator of the device 100 selecting a heater initiation button in an attempt to begin an aerosolisation session.

At step S404-1 a first authentication score for the first user input is determined. The first authentication score is based upon a comparison of the first user input to corresponding first predetermined authentication data.

At step S404-2 a second authentication score for the second user input is determined. The second authentication score is based upon a comparison of the second user input to corresponding second predetermined authentication data.

The first authentication data and the second authentication data are exemplary reference versions, or reference inputs, of the user inputs against which the first user input and the second user input are compared. The authentication data is stored in memory accessible by the controller 202. The reference versions of the user inputs are pre-stored versions of the user inputs, tailored to the specifics of the operator (for example, a reference fingerprint of the operator, or a password set by the operator). These reference versions can be stored in memory accessible by the controller 202.

An authentication score can be determined by comparing the user input to the corresponding exemplary reference version or reference user input. The closeness of the match between the detected user input and the reference version determines the authentication score. The authentication score is indicative of the likelihood of an authorised operator of the device having provided the user input. In an example, an authentication score for a user input may be determined based upon a scale of 0 to 10. For example, a perfect or exact match between the user input and the reference version may be given a maximum authentication score, such as 10. A complete mismatch between the user input and the reference version may be given a minimum authentication score, such as 0. A partial match may be given an intermediate authentication score, such as 5. A near-perfect match may be given an upper intermediate authentication score, such as 7.5. A slight match may be given a lower intermediate authentication score, such as 2.5. Whilst the exemplary numbers 0, 2.5, 5, 7.5 and 10 are used, the authentication score could be any number between 0 and 10 depending on the degree of closeness or matching of the user input to the reference version. It will be understood, however, that the 0 to 10 scale is for exemplary purposes and other suitable scoring systems can be used. The scoring system should be consistent for all user input means 204 implemented in the aerosol generation device 100.

Matches between the detected user input and the reference user input that are neither perfect nor a complete mismatch can have authentication scores graded on a scale between the perfect match and the complete mismatch. The relationship between the degree of matching and the authentication score may be linear in that as the degree of matching between the detected user input and the reference user input decreases, the authentication score linearly decreases. In other examples, the relationship between the degree of matching and the authentication score may be non-linear; for example, the authentication score may exponentially decrease as the degree of matching between the detected user input and the reference user input decreases.

The authentication scores may be stored in one or more look-up tables with the corresponding degrees of matching between the user input and the reference version. These look-up tables can be stored in memory accessible by the controller 202.

In the example of the user input being a fingerprint detected at the fingerprint scan module 204-1 , an authentication score may be determined based upon how closely the detected scan of the fingerprint (or thumbprint) of the operator matches a reference fingerprint (or thumbprint) stored in memory accessible by the controller 202.

In the example of the user input being a password (or, passcode or passphrase) detected at the password module 204-2 an authentication score may be determined based upon how closely the input password matches the reference password stored in memory accessible by the controller 202. As the number of discrepancies between the input password and the reference password increase, the authentication score can decrease. Some discrepancies may affect the authentication score to a greater extent than others. For example, an incorrect letter, number or symbol may decrease the authentication score by a greater amount than the incorrect use of uppercase or lowercase for a correct letter.

In the example of the user input being a facial recognition scan detected at the facial recognition module 204-3 an authentication score may be determined based upon how closely the detected facial recognition scan matches a reference facial recognition scan stored in memory accessible by the controller 202.

In the example of the user input being a number of button actuations detected, a time between button actuations, and/or a force of button actuation at the button sensor module 204-4 an authentication score may be determined based upon how closely the detected number of button actuations, and/or a time between button actuations, and/or a force of button actuation matches a reference number of button actuations, a reference time between button actuations and/or a reference force of button actuation stored in memory accessible by the controller 202. As the discrepancy between detected number of actuations / time between actuations / force of actuation, and the reference number of actuations / time between actuations / force of actuation increases, the authentication score decreases.

In the example of the user input being the motion of the device 100 detected at the motion sensor module 204-5 an authentication score may be determined based upon how closely the detected characteristic movements, or micro movements, of the aerosol generation device 100 when held by the operator match reference movements stored in memory accessible by the controller 202. In the example of the user input being a measurement of body impedance detected at the body impedance measurement module 204-6 an authentication score may be determined based upon how closely detected body impedance measurement matches a reference body impedance measurement stored in memory accessible by the controller 202.

Another type of user input can be based upon a timer that registers the timing in which the user input is detected. In other words, one type of user input can be the speed at which another type of user input is entered. For example, inputting a password can provide two user inputs, the first being the password itself, and the second being the speed at which it was entered (or the amount of time taken for it to be entered). A faster entry of a user input such as a password is indicative of an authorised operator who routinely enters the user input. A fast entry can, however, also increase the likelihood of errors. This ‘speed of entry’ user input can provide a higher authentication score to balance the increased potential of an error in the other user input. That is, if a password is entered quickly, but with a minor error, the authentication score determined based upon the speed of entry can contribute to balancing the authentication score determined based upon the accuracy of the password.

The determined authentication scores can be stored in memory accessible by the controller.

At step S406 an overall authentication score is determined. The overall authentication score is based upon a combination of the first authentication score and the second authentication score. The overall score can be determined by adding the first authentication score and the second authentication score. For example, if the first authentication score is 5 and the second authentication score is 7, the overall authentication score would be 12. The overall authentication score can be stored in memory accessible by the controller.

At step S408, the controller 202 controls the user authentication unit 200 to perform a first action when the overall authentication score is determined meet a predetermined requirement. Before the user authentication process begins, the aerosol generation device 100 can be in a locked state in which the operation of the device 100 for an aerosolisation session is inhibited. The first action can comprise unlocking the aerosol generation device 100 so that an aerosolisation session can be performed. For example, unlocking the aerosol generation device 100 can comprise removing a restriction applied to the initiation of the heater (the restriction inhibiting the heater from being initiated) so that pressing a heater initiation button causes the heater to be initiated to heat the aerosolisable or vaporisable product to generate an aerosol or vapour. The first action can also comprise indicating, through a visual indicator such as a light emitting diode or display screen integrated into the device 100, or through an audio indicator such as a speaker integrated into the device 100, that the authentication has been successful and the device 100 has been unlocked.

The overall authentication score meets the predetermined requirement when the overall authentication score is determined to be indicative of an authorised user having provided the user inputs. More specifically, the overall authentication score is determined to be indicative of an authorised user having provided the user inputs when the overall authentication score is greater than or equal to a threshold authentication score.

In an example, the threshold authentication score may be 10. In this way, if the operator enters a user input that constitutes a perfect match to the reference version, the device 100 will be unlocked. If the operator enters two non-perfect, but near perfect or partially matching user inputs, and the overall authentication scores are equal to or in excess of 10, the device 100 will be unlocked. For example, if the first authentication score is 5 and the second authentication score is 7.5, the determination of the overall authentication score of 12.5 will cause the controller 202 to control the authentication unit 200 to unlock the aerosol generation device 100.

Returning the types of user input described with reference to Figure 3 and step S402 of Figure 4, different types of user input can have different security levels associated with them. For example, a fingerprint scan can be more secure than a number of button actuations. The types of user input at the user authentication means can be split into two categories based upon the security level associated with them: absolute user input types and non-absolute user input types.

Absolute input types are types of user input that can provide an authentication score high enough to meet the predetermined threshold authentication score alone. That is, if a type of user input can by itself meet a requisite security level to unlock the device by itself, the maximum authentication score should at least meet the threshold authentication score.

Non-absolute input types are types of user input that cannot, even if perfectly matching the reference input, provide an authentication score high enough to meet the predetermined threshold authentication score alone. That is, if a type of user input cannot by itself meet a requisite security level to unlock the device by itself, the maximum authentication score should be lower than the threshold authentication score.

In the example of the threshold being 10, an absolute input source can provide an authentication score of 10 or more, whereas a non-absolute input source can only provide an authentication score of less than 10. As such, an absolute input type can unlock the device 100 when sufficiently matching the reference input. On the other hand, a combination of user inputs of the non-absolute input types are required to unlock the device 100, or a partially matching absolute input type (with an authentication score of less than threshold, e.g. less than 10) in combination with a non-absolute input type (with an authentication score high enough to reach the threshold when combined with the partially matching absolute input type).

In an example, a number of button actuations may be a non-absolute input type considered less secure that a fingerprint scan. As such, the maximum authentication score for a number of button actuations, even if perfectly matching the reference, may be less than the threshold authentication score (for example less than 10). On the other hand, a perfect match between a detected fingerprint and a reference fingerprint provides a higher level of security and therefore can provide an authentication score that meets the threshold hold (for example greater than or equal to 10). In this way, a perfect match or near-perfect match for user inputs with a high security level can cause the device 100 to be unlocked regardless of the second user input. For user inputs of a lower security level, for which a perfect match of one input alone cannot provide an authentication score meeting the threshold, multiple user inputs can be combined to reach or exceed the threshold to unlock the device 100.

An example of an absolute input type can be a password. Biometric inputs, such as fingerprint scans, movement detection, and facial recognition scans can also be absolute input types if the input means with which they are input are of sufficient quality. That is, a lower quality detector may not be able to detect an input of high enough quality to provide the security needed for an absolute input. It follows that a non-absolute input type can be a biometric input detected by such a lower quality detector. Another example of a non-absolute input type can be the timing at which an input is received; the user input means can be associated with an internal clock of the device, and when a user input is received at an expected use time it can be considered a non-absolute user input that contributes an authentication score to the overall authentication score.

When determining the overall authentication score, the authentication scores of different types of user input can be weighted. More reliable input types (that is input types with a higher security level) can be given a higher weighting than less reliable input types. Input types of a higher security level can be input types that are more difficult to fraudulently imitate. Input types of a higher security level can also be input types recorded at higher quality biometric detectors that produce higher quality input detection. Higher quality input detection means that the user input can be more closely evaluated against the reference input, thereby improving the security level. The weighting factor can be included before the addition of the authentication scores, making the evaluation simpler to process.

In other examples, the threshold authentication score can be higher than an authentication score that any one user input type alone can provide; in this way, more than one positive user input (i.e. a user input that provides an authentication score greater than zero) is always required even if one of said user inputs provides a perfect match to the respective reference. This ensures a high level of security in the authentication process.

When the overall authentication score does not meet the predetermined requirement (for example when the overall authentication score is not equal to or in excess of the threshold authentication score), the controller 202 can control the user authentication unit 200 to perform a second action. The second action can comprise not unlocking the device 100 for an aerosolisation session. The second action can also comprise indicating, through a visual indicator such as a light emitting diode or display screen integrated into the device 100, or through an audio indicator such as a speaker integrated into the device 100, that the authentication has failed and the device 100 has not been unlocked.

For example, if the first authentication score is 25, and the second authentication score is 50, the overall authentication score would be less than a threshold authentication score of 100 and would therefore not cause the controller 202 to control the authentication unit 200 to unlock the aerosol generation device 100.

The overall authentication score can be continually compared to the threshold authentication score as it is determined based upon a continued detection of user inputs; alternatively, the overall authentication score can be compared to the threshold authentication once, when the determination of the overall authentication score is complete.

In the example of Figure 4, two user inputs are specified in that two user inputs are detected, with authentication scores determined for each, and the overall authentication score being based upon the combined authentication scores associated with the two user inputs. The process can however use n user inputs of different types, wherein n is greater than or equal to two, with authentication scores determined for each of the n user inputs, and the overall authentication score being based upon the combination of the n authentication scores associated with the n user inputs. The authentication process described with reference to Figure 4 can also be realised in a number of specific implementations, described with reference to Figures 5 to 8.

Figure 5 depicts an example of a process flow for an implementation of the user authentication process described with reference to Figure 4 in which the user inputs are detected at the same time, and the determination of the respective authentication scores are then determined at the same time.

At step S501 the user authentication process is initiated.

At steps S502-1 and S502-2 the first user input and the second user input are detected at the one or more user input means 204 by the controller 202. In some examples there can be n user inputs of different types, wherein n is greater than or equal to 2, as represented by step S502-n. At steps S502-1 , S502-2 ... S502- n the first user input, second user input and nth user input are detected concurrently or substantially concurrently at the one or more user input means 204 by the controller 202. The user inputs can be detected in the manners described with reference to Figure 3 and step S402 of Figure 4.

In some examples, an input period in which the user inputs are detected is defined by a period of time required to detect one of the user inputs. That is, one of the user inputs has a specific time period in which the input is detected, and the completion of this time defines the end of the time period for detecting the one or more other user inputs. For example, a specific time period can be required for a fingerprint scanner to sufficiently scan a fingerprint. During this time period, a motion detector can record movement data. The endpoint of the recording of the movement data can be defined by the completion of the fingerprint scan. In another example, where the first input type is a number of button presses, and the second input type is the time between button presses, the end of the period for recording the second input type is defined by the completion of the first input type. The user inputs can be stored in temporary memory until all of the requisite user inputs have been detected. When the collection of each user input is complete, the process can proceed to determining the authentication scores.

At step S504-1 the first authentication score is determined for the first user input by the controller 202, and at step S504-2 the second authentication score is determined for the second user input by the controller 202. In the case of n user inputs, the nth authentication score for the nth user input is determined at S504-n by the controller 202. That is, respective authentication scores are determined for each of the first to the nth user inputs. The respective authentication scores are determined concurrently or substantially concurrently by the controller 202 after each of the user inputs have been detected. The authentication scores can be determined in the manners described with reference to steps S404-1 and S404-2 of Figure 4.

The determination of the authentication scores for each of the user inputs can begin at the same time, and each authentication score can be stored in memory associated with the controller 202 when determined. When each of the requisite authentication scores are determined, the process can continue to determine the overall authentication score.

At step S506 the overall authentication score is determined by the controller 202 based upon the combination of the first authentication score and the second authentication score. For n authentication scores, the overall authentication score is based upon the combination of the n authentication scores. The overall authentication score can be determined in the manners described with reference to step S406 of Figure 4.

At step S508 it is determined by controller 202 whether the overall authentication score meets the predetermined requirement. That is, it is determined by the controller 202 whether the overall authentication score meets or exceeds the threshold authentication score. When the overall authentication score meets the predetermined requirement, the process proceeds to step S510 and the controller 202 controls the user authentication unit 200 to perform a first action. The first action can correspond to that described with reference to step S408 of Figure 4.

When the overall authentication score does not meet the predetermined requirement, the process proceeds to step S512 and the controller 202 controls the user authentication unit 200 to perform a second action (or not perform the first action). The second action can correspond to that described with reference to Figure 4.

In an example according to the implementation of the process of Figure 5, the first user input type can be a number of button presses, and the second user input type can be the timing between the button presses. This can be augmented by a third user input type such as the detection of movement by a motion sensor whilst the button presses are being recorded. The number of button presses, the timing between the button presses and movement data alone each may not be of a sufficient security level to provide an authentication score meeting the threshold (that is, each may be a non-absolute user input type). When combined, however, these non-absolute user input types can provide a combined authentication score that meets or exceeds the threshold authentication score. In this way, user input types of a lower security level can be combined to provide an overall higher security level.

Figure 6 depicts an example of a process flow for an implementation of the user authentication process described with reference to Figure 4 in which the first user input is received and the first authentication score is determined. When the first authentication score meets a preliminary predetermined requirement, the first action is performed. When the first authentication score does not meet the preliminary predetermined requirement, the second user input is detected and the second authentication score is determined. The overall authentication score is then determined based upon the combination of the first authentication score and the second authentication score. At step S602, the controller 202 is configured to detect the first user input. The first user input can be detected in the manners described with reference to Figure 3 and step S402 of Figure 4.

At step S604, the controller 202 is configured to determine the first authentication score for the first user input.

At step S606, the controller 202 is configured to control the user authentication unit 200 to perform the first action when determining that the first authentication score meets a preliminary predetermined requirement.

The preliminary predetermined requirement can be a preliminary threshold authentication score. In an example, the preliminary threshold authentication score can be equal to the threshold authentication score described with reference to Figure 4. Alternatively, the preliminary threshold authentication score can be higher or lower than the authentication score. The first action can correspond to that described with reference to step S408 of Figure 4.

In this example, the first user input may be of an absolute input type in order to be able to meet the threshold alone.

At step S608, when the controller 202 determines that the first authentication score does not meet the preliminary predetermined requirement, the controller 202 is configured to detect the second user input. The second user input can be detected in the manners described with reference to Figure 3 and step S402 of Figure 4.

At step S610, the controller 202 is configured to determine the second authentication score for the second user input.

In the user authentication process implementation of Figure 6, the first and second authentication scores can be determined for the first and second user inputs in the manners described with reference to steps S404-1 and S404-2 of Figure 4. At step S612, the controller 202 is configured to determine the overall authentication score based upon the combination the first authentication score and the second authentication score. The overall authentication score can be determined in the manners described with reference to step S406 of Figure 4.

At step S614, the controller 202 is configured to control the user authentication unit 200 to perform the first action when the overall authentication score is determined to meet a predetermined requirement (that is, when the overall authentication score meets or exceeds the threshold authentication score). The first action can correspond to that described with reference to step S408 of Figure 4. When the overall authentication score does not meet the predetermined requirement, the controller 202 controls the user authentication unit 200 to perform a second action. The second action can correspond to that described with reference to Figure 4.

In the example of Figure 6, two user inputs are specified in that two user inputs are detected, with authentication scores determined for each, and the overall authentication score being based upon the combined authentication scores associated with the two user inputs. The process can however use n user inputs of different types, wherein n is greater than or equal to two, with authentication scores determined for each of the n user inputs, and the overall authentication score being based upon the combination of the n authentication scores associated with the n user inputs. That is, if the combination of the first authentication score and the second authentication score does not meet the predetermined requirement, a third user input may be detected, and a third authentication score may be determined. The overall authentication score can then be determined based upon the first, second and third authentications scores. This can be repeated for n user inputs.

The authentication process described with reference to Figure 6 can be beneficial in that if the first user input type is an absolute user input type, and it is entered with sufficient accuracy to provide a first authentication score that meets the preliminary predetermined requirement, only one user input needs to be detected. This can limit power consumption in the authentication process, and can also decrease the time required for the authentication process.

The authentication process described with reference to Figure 6 is also beneficial when the first user input is not an absolute input type, or when it does not provide an authentication score that meets the threshold authentication score. As multiple user input means 204 do not operate simultaneously, but instead sequentially, the sequential operation of the user input means 204 can limit power consumption.

Figure 7 depicts an example of a process flow for an implementation of the user authentication process described with reference to Figure 4 in which the first user input is received and the first authentication score is determined. When the first authentication score meets a preliminary predetermined requirement, the first action is performed. When the first authentication score does not meet the preliminary predetermined requirement the second user input and a third user input are detected at the same time, and the determination of the second authentication score and a third authentication score are then determined at the same time. The overall authentication score is then determined based upon the combination of the first user authentication score, the second user authentication score and the third user authentication score.

At step S702, the controller 202 is configured to detect the first user input. The first user input can be detected in the manners described with reference to Figure 3 and step S402 of Figure 4.

At step S704, the controller 202 is configured to determine the first authentication score for the first user input.

At step S706, the controller 202 is configured to control the user authentication unit 200 to perform the first action when determining that the first authentication score meets a preliminary predetermined requirement

In a similar manner to that described with reference to Figure 6, the preliminary predetermined requirement can be a preliminary threshold authentication score. In an example, the preliminary threshold authentication score can be equal to the threshold authentication score described with reference to Figure 4. Alternatively, the preliminary threshold authentication score can be higher or lower than the authentication score. The first action can correspond to that described with reference to step S408 of Figure 4.

At step S708, when the controller 202 determines that the first authentication score does not meet the preliminary predetermined requirement, the controller 202 is configured to detect the second user input and a third user input, wherein the third user input is of a third type of input. The third user input can be any type of user input different to the first user input and the second user input. This can include, but is not limited to, any of the user inputs described with reference to Figure 3 and steps S402, S404-1 and S404-2 of Figure 4.

The second user input and the third user input can be detected in the manners described with reference to Figure 3 and step S402 of Figure 4. The second user input and the third user input can be detected in a user input detection period. The user input detection period, for detecting the second user input and the third user input, can be triggered following the determination that the first authentication score does not meet the preliminary predetermined requirement. If the second user input and the third user input are not both detected in the user input detection period, the authentication process fails. Alternatively, if one of the second user input or the third user input is not detected in the user input detection period, the process proceeds with only one of the second or third user inputs, and an authentication score is not calculated for the absent user input. The second user input and the third user input can be detected concurrently or substantially concurrently in the user input detection period.

At step S710, the controller 202 is configured to determine the second authentication score for the second user input and a third authentication score for the third user input. In the user authentication process implementation of Figure 7, the first, second and third authentication scores can be determined for the first, second and third user inputs in the manners described with reference to steps S404-1 and S404-2 of Figure 4 (but for three user inputs rather than two).

At step S712, the controller 202 is configured to determine the overall authentication score wherein the overall authentication score is based upon the combination the first authentication score, the second authentication score and the third authentication score. The overall authentication score can be determined in the manners described with reference to step S406 of Figure 4.

At step S714, the controller 202 is configured to control the user authentication unit 200 to perform the first action when the overall authentication score is determined to meet a predetermined requirement (that is, when the overall authentication score meets or exceeds the threshold authentication score). The first action can correspond to that described with reference to step S408 of Figure 4. When the overall authentication score does not meet the predetermined requirement, the controller 202 controls the user authentication unit 200 to perform a second action. The second action can correspond to that described with reference to Figure 4.

In an alternative, at steps S708 and S710, n user inputs of different types can be detected in the user input detection period, and n respective authentication scores can be determined, wherein n is greater than or equal to 2.

The authentication process described with reference to Figure 7 can be beneficial in that it allows for flexibility in the ordering and combination of user input detections, and as such can be tailored to limit power consumption, or minimise the processing time for the authentication process.

Figure 8 depicts an example of a process flow for an implementation of the user authentication process described with reference to Figure 4 in which the first user input is detected in the a first time period, and the second user input is detected in a second time period overlapping the first time period. At step S802, the controller 202 is configured to detect the first user input in a first time period. The first user input can be detected in the manners described with reference to Figure 3 and step S402 of Figure 4.

At step S804, the controller 202 is configured to detect the second user input in a second time period overlapping the first time period. The second user input can be detected in the manners described with reference to Figure 3 and step S402 of Figure 4.

The second time period can overlap the first time period by starting before/after the first time period starts and/or finishing after/before the first time period finishes.

At step S806, the controller 202 is configured to determine the first authentication score for the first user input, stop detecting the second user input, and control the user authentication unit 200 to perform the first action, when determining the first authentication score meets a preliminary predetermined requirement.

In this way, the controller 202 need not continue to detect the second user input, or determine a second authentication score, if the first user input provides an authentication score that is sufficient to unlock the aerosol generation device 100. This can reduce processing overheads and reduce power consumption. It can also expedite the user authentication process, thereby improving the user experience without reducing device 100 security.

In a similar manner to that described with reference to Figures 6 and 7, the preliminary predetermined requirement can be a preliminary threshold authentication score. In an example, the preliminary threshold authentication score can be equal to the threshold authentication score described with reference to Figure 4. Alternatively, the preliminary threshold authentication score can be higher or lower than the authentication score. The first action can correspond to that described with reference to step S408 of Figure 4. At step S808, when the controller 202 determines that the first authentication score does not meet the preliminary predetermined requirement, the controller 202 is configured to determine the second authentication score for the second user input, and determine the overall authentication score based upon the combination of the first authentication score and the second authentication score. That is, when the first authentication score does not meet the preliminary predetermined requirement, the controller does not prematurely stop detecting the second user input.

In the user authentication process implementation of Figure 8, the first and second authentication scores can be determined for the first and second user inputs in the manners described with reference to steps S404-1 and S404-2 of Figure 4. The overall authentication score can be determined in the manners described with reference to step S406 of Figure 4.

At step S810, the controller 202 is configured to control the user authentication unit 200 to perform the first action when the overall authentication score is determined to meet a predetermined requirement (that is, when the overall authentication score meets or exceeds the threshold authentication score). The first action can correspond to that described with reference to step S408 of Figure 4. When the overall authentication score does not meet the predetermined requirement, the controller 202 controls the user authentication unit 200 to perform a second action. The second action can correspond to that described with reference to Figure 4.

The authentication process described with reference to Figure 8 can be beneficial in that the authentication score for the fastest user input (i.e. the first user input) to be detected is determined first. When this first authentication score meets or exceeds the threshold authentication score the detection of the second user input can be terminated thereby providing a faster authentication process and saving battery power. When the authentication score of the fastest user input does not meet the threshold authentication score, the detection of the second user input can be completed and the second authentication score can be determined. The second authentication score is added to the first user authentication score so as to dynamically recalculate the overall authentication score, and the overall authentication score can increase. This can result in moving the overall authentication score over the threshold to unlock the device. In this way, the speed of the authentication process can be improved without negatively impacting the likelihood of an authorised operator successfully unlocking the device 100.

In some examples, the authentication process described with reference to Figure 8 can use n user inputs of different types (where n is greater than or equal to 2), detected in n overlapping time periods. Step S808 can be repeated for each of the n user inputs, incrementally increasing the overall authentication score, until the overall authentication score meets the threshold.

The processing steps described herein carried out by the controller 202 may be stored in a non-transitory computer-readable medium, or storage, associated with the controller 202. A computer-readable medium can include non-volatile media and volatile media. Volatile media can include semiconductor memories and dynamic memories, amongst others. Non-volatile media can include optical disks and magnetic disks, amongst others.

It will be readily understood to the skilled person that the preceding embodiments in the foregoing description are not limiting; features of each embodiment may be incorporated into the other embodiments as appropriate.

Claims

1. An aerosol generation device user authentication unit, the user authentication unit comprising a controller and one or more user authentication input means configured to detect a plurality of types of user input, wherein the controller is configured to: detect a first user input and a second user input at the one or more user authentication input means, wherein the first user input is of a first type of input and the second user input is of a second type of input; determine a first authentication score for the first user input, wherein the first authentication score is based upon a comparison of the first user input to corresponding first predetermined authentication data; determine a second authentication score for the second user input, wherein the second authentication score is based upon a comparison of the second user input to corresponding second predetermined authentication data; determine an overall authentication score, wherein the overall authentication score is based upon a combination of the first authentication score and the second authentication score; and control the user authentication unit to perform a first action when the overall authentication score is determined to meet a predetermined requirement.

2. The aerosol generation device user authentication unit of claim 1 , wherein the first type of input and the second type of input are different types of input.

3. The aerosol generation device user authentication unit of claim 1 or claim 2, wherein the overall authentication score is determined to meet the predetermined requirement when the overall authentication score is determined to be indicative of an authorised user having provided the user inputs.

4. The aerosol generation device user authentication unit of claim 3, wherein the overall authentication score is determined to be indicative of an authorised user having provided the user inputs when the overall authentication score is greater than or equal to a threshold authentication score.

5. The aerosol generation device user authentication unit of any preceding claim, wherein the controller is configured to detect the first user input and the second user input concurrently.

6. The aerosol generation device user authentication unit of claim 5, wherein the controller is configured to detect the first user input in a predetermined time period defined by the first type of input, and to detect the second user input within the predetermined time period defined by the first type of input.

7. The aerosol generation device user authentication unit of any one of claims 1 to 4, wherein the controller is configured to: detect the first user input; determine the first authentication score for the first user input; control the user authentication unit to perform the first action when determining that the first authentication score meets a preliminary predetermined requirement; detect the second user input when determining that the first authentication score does not meet the preliminary predetermined requirement; determine the second authentication score for the second user input; and determine the overall authentication score wherein the overall authentication score is based upon the combination the first authentication score and the second authentication score.

8. The aerosol generation device user authentication unit of any one of claims 1 to 4, wherein the controller is configured to: detect the first user input; determine the first authentication score for the first user input; control the user authentication unit to perform the first action when determining that the first authentication score meets a preliminary predetermined requirement; detect the second user input and a third user input, wherein the third user input is of a third type of input, in a user input detection period when determining that the first authentication score of the first user input does not meet the preliminary predetermined requirement; determine the second authentication score for the second user input and a third authentication score for the third user input, wherein the third authentication score is based upon a comparison of the third user input to corresponding third predetermined authentication data; and determine the overall authentication score based upon the combination of the first authentication score, and the second authentication score, and the third authentication score.

9. The aerosol generation device user authentication unit of any one of claims 1 to 4, wherein the controller is configured to: detect the first user input in a first time period; detect the second user input in a second time period overlapping the first time period; determine the first authentication score for the first user input, stop detecting the second user input, and control the user authentication unit to perform the first action, when determining the first authentication score meets a preliminary predetermined requirement; and determine the second authentication score for the second user input, and determine the overall authentication score based upon the combination of the first authentication score and the second authentication score when determining the first authentication score does not meet the preliminary predetermined requirement.

10. The aerosol generation device user authentication unit of any one of claims 7 to 9, wherein the first authentication score is determined to meet the preliminary predetermined requirement when the first authentication score is determined to be indicative of an authorised user having provided the first user input, and to not meet the preliminary predetermined requirement when the first authentication score is determined to not be indicative of an authorised user having provided the first user input.

11. The aerosol generation device user authentication unit of any preceding claim, wherein the first action comprises unlocking the aerosol generation device.

12. The aerosol generation device user authentication unit of any preceding claim, wherein the one or more user authentication input means comprises at least one of: a button sensor module, wherein the type of user input comprises a number of button actuations, and/or a time between button actuations, and/or a force of a button actuation; a fingerprint scan module, wherein the type of user input comprises a scan of a fingerprint of the user by a fingerprint sensor; a body impedance measurement module, wherein the type of user input comprises a measurement of body impedance of the user by the body impedance measurement scanner; a password module, wherein the type of user input comprises an input password received by the password module; a motion sensor module, wherein the type of user input comprises device motion detected by a motion sensor; or a facial recognition module, wherein the type of user input comprises a facial recognition scan of the user by a facial recognition scanner.

13. An aerosol generation device comprising the aerosol generation device user authentication unit of any preceding claim.

14. An aerosol generation device user authentication method performed at a user authentication unit of an aerosol generation device, the method comprising: detecting a first user input and a second user input at one or more user authentication input means configured to detect a plurality of types of user input, wherein the first user input is of a first type of input and the second user input is of a second type of input; determining a first authentication score for the first user input, wherein the first authentication score is based upon a comparison of the first user input to corresponding first predetermined authentication data; determining a second authentication score for the second user input, wherein the second authentication score is based upon a comparison of the second user input to corresponding second predetermined authentication data; determining an overall authentication score, wherein the overall authentication score is based upon a combination of the first authentication score and the second authentication score; and controlling the user authentication unit to perform a first action when the overall authentication score is determined to meet a predetermined requirement.

15. A non-transitory computer-readable medium storing instructions thereon which when executed by one or more processors cause the one or more processors to control an aerosol generation device user authentication unit, wherein the instructions cause the one or more processors to perform steps comprising: detecting a first user input and a second user input at one or more user authentication input means configured to detect a plurality of types of user input, wherein the first user input is of a first type of input and the second user input is of a second type of input; determining a first authentication score for the first user input, wherein the first authentication score is based upon a comparison of the first user input to corresponding first predetermined authentication data; determining a second authentication score for the second user input, wherein the second authentication score is based upon a comparison of the second user input to corresponding second predetermined authentication data; determining an overall authentication score, wherein the overall authentication score is based upon a combination of the first authentication score and the second authentication score; and controlling the user authentication unit to perform a first action when the overall authentication score is determined to meet a predetermined requirement.